last executing test programs: 1m25.467988003s ago: executing program 3 (id=97): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xd) r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x48090) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x8, 0x7}]}, 0x10) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x1, 0xe1}, 0x8) sendmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0xc010) close_range(r1, 0xffffffffffffffff, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x83, 0x4, 0x0, @multicast1, @private=0xa010102}}}}) mkdir(&(0x7f00000002c0)='./file0\x00', 0xe2) socket(0x5, 0x803, 0x0) unshare(0x0) 1m25.288881693s ago: executing program 3 (id=99): prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x80d5) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x4, 0x7, 0x6, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xa}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x10}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xfffffff7]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xb}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x4000004) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) writev(r3, &(0x7f0000000480)=[{&(0x7f0000000380)="78df2b5f618654d836233d59a19adf9739618696106e6f22ac0b1d5cc874681b252d50d2c442e9df7f0ab0eeb1fb95bf62a3ebb6469b3c9b2f56e593a007db8b5a992427e5121bebc62e254210f1d2a92be58c13b788c0e644b6198ac57e82eba8e2785522ae9f504a21c0a6f929a25654fbec1ae206b2d80388b78d0fbd6d1b67cdf2781300aabac4d5e0e69bcd5f79c462ed79b8f43cbfbacaae275d208250bd0dccc186f62f17054fd58aab329a14c7ba53234119282e0e9a31e9d74881f08aa75a668c16a529b0d079b51903e82766e9e37f78f27a07f4febaee", 0xdc}], 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r1, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x100}, 0x4000000) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r4, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4050) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sendto$inet6(r3, &(0x7f0000000780)="7f7d6382d2dad7678c128e4385b113d36af71c21a8ab863862e9f8b15a2e2b74a879d1820ed078702b0ca30c6476bf9c26aed618b6abe61fd294709cd80ec57f54a3835c27205687d12caab9268ba2fd58cfe636d26e2e97129f44f2c2", 0x5d, 0x800, &(0x7f0000000800)={0xa, 0x4e24, 0x81, @local, 0x7}, 0x1c) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, 0x0, 0x510, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 1m25.260990405s ago: executing program 3 (id=100): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}, 0x700}], 0x1, 0x0) 1m25.260478926s ago: executing program 3 (id=101): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="330000000400000000000000000000000100000000000000ff7f00000000eeff0b"], 0x33) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r1 = socket(0x10, 0x1, 0x1) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000001900010000000000fbdbdf250a010900100012800400f88008001e0000000000140004"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8, @ANYBLOB="05"], 0x0) 1m23.942234312s ago: executing program 3 (id=111): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e22000fff0058000b480400945f64009400050038925a01000000000000008000f0fffeffe809eaff00fff5dd000000100001000b080800418e224e0004fcff", 0x58}], 0x1) 1m23.876281786s ago: executing program 3 (id=113): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) (async, rerun: 64) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) (rerun: 64) write$vga_arbiter(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='lock '], 0x9) (async) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket$tipc(0x1e, 0x4, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000100)="09000000e700140000007e7bfbf788a83baa9900d6f18f8e950088a800008100", 0x20, 0x24000801, &(0x7f0000000300)={0x11, 0x8100, r7, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000040000100fcff07"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (async, rerun: 32) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c76657273696f6e3d3970323030302c00bb1b5a242c1afd2a5a16a5e4652c6b1c0c6224ae"]) (async) write$P9_RVERSION(r10, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r9], 0x15) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xa0001, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r13, 0x4018aee3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r15, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmsg$unix(r14, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18}, 0xc800) (async) setsockopt$sock_int(r15, 0x1, 0x2a, &(0x7f0000000000), 0x4) (async) recvmmsg(r15, &(0x7f0000001140), 0x74e, 0x0, 0x0) 1m8.855278856s ago: executing program 32 (id=113): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) (async, rerun: 64) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) (rerun: 64) write$vga_arbiter(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='lock '], 0x9) (async) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket$tipc(0x1e, 0x4, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000100)="09000000e700140000007e7bfbf788a83baa9900d6f18f8e950088a800008100", 0x20, 0x24000801, &(0x7f0000000300)={0x11, 0x8100, r7, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000040000100fcff07"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (async, rerun: 32) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c76657273696f6e3d3970323030302c00bb1b5a242c1afd2a5a16a5e4652c6b1c0c6224ae"]) (async) write$P9_RVERSION(r10, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r9], 0x15) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xa0001, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r13, 0x4018aee3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r15, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmsg$unix(r14, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18}, 0xc800) (async) setsockopt$sock_int(r15, 0x1, 0x2a, &(0x7f0000000000), 0x4) (async) recvmmsg(r15, &(0x7f0000001140), 0x74e, 0x0, 0x0) 1.903590358s ago: executing program 0 (id=1144): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10) listen(r0, 0xfffffffe) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x42180, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, 0x0) 1.804346854s ago: executing program 0 (id=1145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001000810000000000008000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) keyctl$unlink(0x9, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)={0x16c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x84, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xd}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASK={0xa4, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x23}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e031800dd5c980128854d"], 0xffdd) syz_open_dev$usbfs(&(0x7f0000000000), 0x4ebe, 0x6100) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000500)=@ethtool_eeprom={0xb, 0x0, 0x200, 0x1, "f7"}}) 1.779191535s ago: executing program 0 (id=1146): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002500)={0x38, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10000007}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x81}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.762547517s ago: executing program 0 (id=1147): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="b805000000b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f00d0", 0x49}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x40000000) 1.676393922s ago: executing program 0 (id=1148): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x1100}, 0x1, 0x7}, 0x0) 1.588331997s ago: executing program 0 (id=1150): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_usb_connect(0x3, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="13010000965d06403e131508667e6e00e47de9cecaae01000000000904000001ff872800090505038000000000"], 0x0) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000000), 0x0, &(0x7f00000006c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}, {@redirect_dir_follow}]}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) r3 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r3, 0x0, 0x0, &(0x7f0000000040)=""/63, &(0x7f0000000740)=0x33) ioctl$TCSETSF(0xffffffffffffffff, 0x5457, &(0x7f0000000380)={0x0, 0x629, 0xffffffff, 0x0, 0x7, 'zX\x00'}) timerfd_create(0x4, 0x80000) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000140), 0xffffffffffffffff) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000002c0)={{0x77359400}, {0x77359400}}, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x0, 0x4, 0xfffffc03, 0xfd4, 0x10, "54d208457f0b00000002000000000000000080"}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'syzkaller1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000ac0)={'syztnl0\x00', r4, 0x20, 0x80, 0xfffffff4, 0x1, {{0xf, 0x4, 0x0, 0x4, 0x3c, 0x68, 0x0, 0xd, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@rr={0x7, 0x3, 0x9a}, @generic={0x86, 0x6, "3075b3e5"}, @end, @lsrr={0x83, 0x1b, 0xf5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, @broadcast]}, @noop]}}}}}) sendto$packet(r2, &(0x7f0000000280)="0b032200e0ff25000200475400f6a13bb10000a88800080048039af91afecffa4a254873bcb3746dd39e5914ee29a64967eb3910ca3bce7561313d", 0x3b, 0x40001, &(0x7f0000000080)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x80800) r7 = socket$inet6(0xa, 0x2, 0xffff7fff) getsockopt$inet6_int(r7, 0x29, 0x33, 0x0, &(0x7f0000000c80)) sendmsg(r6, &(0x7f0000000300)={&(0x7f0000000200)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000440)="c0aea10a15e3c45d703a433cf75d657f4d2d4b4023107593d637cd785af9252cb622506e7ae58f65d0d3fd870ef4b172d7ce8d0d2fa768d6a9b9f392535db68aab5dc14b22e25147c6b345fcf8da271ff3ac19a2b9d1c71c2c2c12aa9c3042e0038fe1c53a198de1d070ac653047a337f0f3", 0x72}, {&(0x7f00000005c0)="194c702541b25f0b448e91edd48fddbd4544d890ce371ad1b62494e98a0658add1109dee18c69d18571f99d4d88c60c63722135c10b7c3c8abbcf06f3d5b9729a6acc672e2fdc0e35e8297b9c7728228e7096d02fc376a5adeb3ef347ae6d3e7d1f2413c4d5957c981422e305ad434763217f5312917bf50583a20633e95f4e330a6c47783f7dfc9548801c58bf3698b922beb06a2dd40e2c5239462c77f4aaa8dfabc7c7290fd5a74291ce8157596f4c83fcf8ddd6581ba68a5babfbbb5e6d71976", 0xc2}, {&(0x7f00000004c0)="3e03a5155c0edd86e4362bf2dafa4ad60e30a9fd7da6a88066de1c869dd845612df9eeb8245cbedc7b28558e0762e1242ef90008f5e958087fd63981749c4b17461ad6ae1d5df16898af7145e4adc7618ee282529b0ac2b04035fa197cd521da343e3fd177f1bef3111e6984cfe34b7225adf994f051a96516dfd75beb8daca31ff2782dc0953dd805d89989c576f8ad356fd47253c3a84474e160c27cd769a5c12707689d480148398cab30777d4bfdf27b7571550c6ab64379675fd3", 0xbd}, {&(0x7f0000000940)="7b8967a78ee5860fd075ad2a3a1d9248e8cc331c5d48ae8aecc6bcca43352397fe23e2a7f91b5af0ad009008cb2ab6071710210c14aec537a56bbf7d326b6f463d6e7ea3d244759253cab60533941e35452b6eef53c72506ad6a9f8f2ac9058d6dd0e58fd06ec26e0f9899098653a982e7e1c234faa6c4c4bdb2222a38b21fdfd205d4943509bc9d6081a286f8987f702087ffa01267789aafbb001157f198dff566c0904e", 0xa5}, {&(0x7f0000000a00)="12d88dbb5709f398cfea738351177d5dae6913dc0615d199badc950e117b4188d0d970ca6d0a924f9bed3d1ca99704a12abcfe21802156cfca6f1499d8b60f45ea55edfb4b703e544a8a7cc1e0e40e12899d24565438718a0a1d9e39ca22de9aaf9d88f22535ab0ba977f9bcc9e64570489f540e8821f52b7e76c856da1b8d66bbf4e13f39dd4768", 0x88}, {&(0x7f0000000780)="174b60428967d62d1866f06b9dd895caef30a0fb0f5d1dc2dd3c75f4e08b2b51f9643dbcfe59084f3a1c65b0897885c7f2e6faeab8aa0c41b46304419737223227a59b0ca5a0bf93dd2bfc87d207a1e75dbbcd6595119a0bd3940a2ae4f7170ab08973", 0x63}], 0x6, &(0x7f00000018c0)=ANY=[@ANYRES32=r5], 0x630}, 0xc880) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') ioctl$FUSE_DEV_IOC_BACKING_CLOSE(0xffffffffffffffff, 0x4004e502, &(0x7f0000000180)=0xfffffffd) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_open_procfs(0x0, &(0x7f0000000340)='cmdline\x00') r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000016440)={0x2020}, 0x2020) 805.815162ms ago: executing program 4 (id=1171): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x200000f, 0x20031, 0xffffffffffffffff, 0x43bc7000) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80221, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x59, 0xe0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000640)=@vmx={0x103, 0x0, 0x2080, {0xe000, 0xfec00000, {0x3}, 0x0, 0x7}, {"d07ee511000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000810b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000057ae00", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a586500cb1ac4aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xe, 0x80, 0x6, 0x3, 0xb819, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x2, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x8002, 0xb, 0x3, 0x8001, 0x4c74, 0x80000000, 0x800242, 0x2, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0xffff, 0x12f, 0xfffffffb, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x1, 0x1000, 0xfffffffc, 0x0, 0x4, 0x7, 0x5, 0x2f, 0xe, 0x1000312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x40008000, 0x9, 0x273d, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x8, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0xa, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x5, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x4, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x40003, 0x0, 0x3, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x0, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x18000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x7, 0xffffffff, 0x7ffffffe, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x7, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x9, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000000)={@local, @multicast1, @broadcast}, 0xc) 646.164372ms ago: executing program 1 (id=1176): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8841}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 579.099796ms ago: executing program 4 (id=1177): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf39}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001b00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x18e0, r2, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x2b8, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x87}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2d}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x86}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2f}]}, {0x26c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x258, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff4, 0x81, 0x6, 0x5, 0x7, 0x6, 0xfffc]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf9, 0x8, 0x3, 0x3, 0x8, 0x0, 0xf5e, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x7, 0x8, 0x3, 0x8, 0x6, 0x2]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1, 0x6c, 0x6c, 0x30, 0x6c, 0x48, 0x60, 0x24, 0x4, 0x1, 0x5, 0x1, 0x60, 0x0, 0x60, 0x12, 0x0, 0x2, 0x4, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xfffc, 0x2, 0x3dc9, 0x800, 0xb, 0x3f24, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0xb, 0x5, 0x48, 0x12, 0x16, 0x1b]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0x5}, {0x4}, {0x5, 0x8}, {0x7, 0x4}, {0x0, 0x7}, {}, {0x2, 0x2}, {0x0, 0x1}, {0x1, 0x2}, {0x5, 0x5}, {0x0, 0x7}, {0x2, 0x9}, {0x7, 0x7}, {0x2, 0x8}, {0x6, 0x6}]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x9}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6, 0x36, 0x2, 0x60, 0x4e, 0x2, 0x1b, 0x4, 0x6, 0x24, 0x24, 0x60, 0x6c, 0x2, 0xb, 0x12]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x24, 0xb, 0x60, 0x707d44fc42cc5189, 0xb, 0x48, 0x3, 0x7, 0x3, 0x6, 0x5, 0x1, 0x3, 0x60, 0x24, 0x9, 0x9, 0x18, 0x48, 0x18, 0x1, 0xc, 0x1, 0x3, 0x9]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x16, 0xc, 0x3]}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x3, 0x2}, {0x0, 0x5}, {0x1, 0x3}, {0x3, 0x9}, {0x1, 0x7}, {0x6, 0x6}, {0x1, 0x3}, {0x0, 0x2}, {0x3, 0x5}, {0x0, 0xa}, {0x1, 0x4}, {0x2}, {0x3, 0x3}, {0x3, 0x5}, {0x2, 0x7}, {0x1, 0x5}, {0x0, 0x6}, {0x2, 0x2}, {0x0, 0x8}, {0x7, 0xa}, {0x1, 0x5}, {0x0, 0x2}, {0x3, 0xa}, {0x6, 0xa}, {0x3, 0x8}, {0x0, 0x4}, {0x0, 0x6}, {0x4, 0x9}, {0x6, 0x8}, {0x1, 0x2}, {0x7, 0x7}, {0x1, 0x4}, {0x4, 0x8}, {0x0, 0x2}, {0x4, 0x1}, {0x7, 0x7}, {0x5, 0xa}, {0x6, 0x1}, {0x7, 0x4}, {}, {0x2, 0x4}, {0x1, 0x3}, {0x4, 0x7}, {0x1, 0x2}, {0x6, 0x5}, {0x1, 0x8}, {}, {0x1, 0x1}, {0x6, 0x6}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x1}, {0x3, 0xa}, {0x3, 0x7}, {0x1, 0x3}, {0x6, 0x1}, {0x0, 0x5}]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x10, 0x80, 0x4348, 0x138, 0x7, 0x10, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1, 0x36, 0x1f, 0x4, 0x36, 0x2, 0x18, 0x4, 0x6c, 0x30, 0x4, 0xb, 0x16, 0x7b, 0x12, 0x0, 0x6e, 0x12, 0xb, 0x24, 0x24, 0xc, 0x24, 0x24, 0x12, 0xb, 0x12, 0x5, 0x30, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xca, 0x4, 0x37, 0x0, 0x7, 0x291, 0x4, 0xe7e0]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1}, {0x7, 0x3}, {0x0, 0x7}, {0x7, 0x9}, {0x3, 0x8}, {0x2, 0x9}, {0x6, 0x1}, {0x6, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x730, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x120, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x8}, {0x1, 0x3}, {0x3, 0x4}, {0x4}, {0x4, 0x5}, {0x0, 0x1}, {0x5, 0x5}, {0x2, 0x5}, {0x1, 0x7}, {0x5, 0x4}, {0x0, 0x3}, {0x1}, {0x4, 0xa}, {0x6, 0x4}, {0x1, 0x5}, {0x2}, {0x1, 0x1}, {0x2, 0xa}, {0x0, 0x6}, {0x6, 0x8}, {0x0, 0x6}, {0x2, 0x4}, {0x2, 0x6}, {0x6}, {0x1, 0x7}, {0x0, 0x9}, {0x5, 0x7}, {0x1, 0x8}, {0x3, 0x5}, {0x1, 0x7}, {0x3, 0x4}, {0x3, 0x6}, {0x1, 0x4}, {}, {0x0, 0x8}, {0x0, 0x6}, {0x7, 0x2}, {0x5, 0x6}, {0x5, 0x8}, {0x0, 0x2}, {0x1, 0x9}, {0x1, 0x7}, {0x4, 0x3}, {0x5, 0x2}, {0x3, 0xf}, {0x2, 0x3}, {0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7dd, 0x9, 0x0, 0x7e, 0x9, 0x8, 0x5, 0x915]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x4, 0xfff, 0x7, 0x8, 0x6, 0x5, 0xcbf6]}}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x4, 0x7, 0x4, 0x1, 0x3d2, 0x10]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0xfff, 0x4, 0x6, 0x8001, 0x0, 0xa3c]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8000, 0x2, 0x9, 0x2d28, 0x5, 0x55, 0x5]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x6, 0x6}, {0x7, 0x9}, {0x1}, {0x7, 0xa}, {0x0, 0x1}, {0x6, 0x8}, {}, {0x2, 0x1}, {0x0, 0x8}, {0x1, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xff25, 0xcd, 0x1, 0x9f3, 0xb71, 0x0, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x30, 0x5, 0x24, 0x36, 0xc, 0x5, 0x6c, 0x36, 0x24, 0x4, 0x1b, 0x2, 0x4, 0x5, 0x48, 0x30, 0x12, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x101, 0x1, 0xffff, 0x8e, 0x3b7, 0x4]}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x2ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2e0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x1, 0x3, 0x0, 0x3, 0x1, 0xfff]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x7, 0x9}, {0x5, 0x5}, {0x7, 0x6}, {0x6, 0x9}, {0x2, 0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x5}, {0x1, 0x5}, {0x7, 0x7}, {0x3, 0x2}, {0x6}, {0x7, 0xa}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0xa}, {0x0, 0xa}, {0x7, 0x9}, {0x1, 0x4}, {0x3, 0x1}, {0x2, 0x4}, {0x2}, {0x0, 0x9}, {0x6, 0x6}, {}, {0x0, 0x6}, {0x5, 0x9}, {0x3}, {0x6, 0x1}, {0x4, 0x3}, {0x3, 0x6}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x16, 0x9, 0x6, 0x30, 0x12, 0x5, 0x12, 0xc, 0x48, 0x3, 0x6e, 0x4, 0x15, 0x30, 0x16, 0x12, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0xc8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x1, 0xa}, {0x4, 0x7}, {0x1}, {0x6, 0x1}, {0x0, 0xa}, {0x6, 0x2}, {0x6, 0xa}, {0x4, 0x4}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x1}, {0x5, 0x4}, {0x1, 0x18}, {}, {0x5, 0x1}, {0x1, 0x6}, {0x3, 0x8}, {0x4, 0x7}, {0x4, 0x2}, {0x5, 0x2}, {0x0, 0x5}, {0x1, 0x7}, {0x2, 0x8}, {0x1, 0x8}, {0x1}, {0x1, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x5, 0xa}, {0x5, 0xa}, {}, {0x1, 0x1}, {0x4, 0x2}]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x7, 0x1}, {0x0, 0x2}, {0x6}, {0x1, 0x2}, {0x1, 0x6}, {}, {0x6, 0xa}, {0x2, 0x8}, {0x6, 0x9}, {0x2, 0x9}, {0x4}, {0x1, 0x2}, {0x0, 0x8}, {0x1, 0x8}, {0x3, 0x9}, {0x7, 0x6}, {0x5, 0x6}, {0x4, 0x8}, {0x1, 0x7}, {0x1, 0x8}, {0x6, 0x7}, {0x7, 0x6}, {0x7, 0x7}, {0x5, 0x8}, {0x2, 0x9}, {0x0, 0x1}, {0x6, 0x4}, {0x4, 0xa}, {0x0, 0x8}, {0x3, 0x1}, {0x3, 0x4}, {}, {0x2, 0x4}, {0x5, 0x1}, {0x1, 0x6}, {0x0, 0x8}, {0x1, 0x4}, {0x5, 0x7}, {0x6, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x5}, {0x5, 0x4}, {0x3, 0x8}, {0x3, 0x9}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0x3}, {0x4, 0x6}, {0x4, 0xa}, {0x5, 0x2}, {0x7}, {0x3, 0x8}, {0x4, 0x4}, {0x6, 0x7}, {0x0, 0x8}, {0x6, 0x1}, {0x5, 0x1}, {0x5, 0x8}, {0x1, 0x4}, {0x3, 0x9}, {0x4, 0x9}, {0x1}, {0x2, 0xa}, {0x5, 0xa}, {0x0, 0x2}, {0x5}, {0x1, 0x6}, {0x6, 0x1}, {0x6, 0x5}, {0x2, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0xa}, {0x7, 0x8}, {0x4, 0x9}, {0x7, 0x8}, {0x6, 0x8}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x4f2, 0xc, 0xcbd, 0x7, 0x7, 0x3ff, 0x3]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x1, 0x2}, {0x5, 0x4}, {0x0, 0x6}, {0x4, 0x4}, {0x0, 0x1}, {0x1, 0x7}, {0x3, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x5, 0x5}, {0x7, 0x5}, {0x0, 0x7}, {0x1, 0x2}, {0x4, 0xa}, {0x7, 0x8}, {0x0, 0x2}, {0x2}, {0x7, 0x3}, {0x1, 0x2}, {0x6, 0x5}, {0x3, 0x1}, {0x4, 0x5}, {0x2, 0x4}, {0x0, 0x6}, {0x6, 0x8}]}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x8da, 0x7fff, 0x1fa1, 0x7, 0x0, 0x646]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x4, 0x6}, {0x5, 0x9}, {}, {0x1, 0x9}, {0x1, 0x2}, {0x5, 0x6}, {0x3, 0x2}, {0x1, 0x2}, {0x3, 0x6}, {0x2, 0x6}, {0x7, 0x9}]}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x4, 0x12, 0x2, 0x12, 0x18, 0x6c, 0x1, 0x24, 0xb, 0x6, 0x4, 0x6, 0x1, 0x30, 0x2, 0x3, 0x4, 0x36, 0x1b]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x9, 0x7, 0x2e9, 0x7, 0x6, 0xe79, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0xfff8, 0x28a6, 0x2, 0x6d6, 0x2, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8000, 0x1000, 0x2, 0x5, 0x9, 0x6, 0x81]}}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x2, 0x8, 0x2, 0x1, 0x0, 0x4]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x3, 0x5}, {0x1, 0x2}, {0x6, 0x8}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x9}, {0x5, 0x8}, {0x6, 0x1}, {0x4, 0x3}, {}, {0x2}, {0x2, 0x6}, {0x2, 0x5}, {}, {0x7, 0xa}, {0x5, 0x8}, {0x0, 0x9}, {0x1, 0x8}, {0x6, 0x1}, {0x7, 0x3}, {0x0, 0x8}, {0x5}, {0x6, 0x6}, {0x0, 0x7}, {0x2, 0x6}, {0x1, 0x3}, {0x3, 0x1}, {0x6, 0x2}, {0x0, 0x2}, {0x2, 0x2}, {0x0, 0x8}, {0x4, 0x7}, {0x2, 0xa}, {0x7, 0x2}, {0x2, 0xa}, {0x1, 0x4}, {0x5, 0x9}, {0x7, 0x2}, {0x4}, {0x0, 0x7}, {0x6, 0x4}, {0x4}, {0x3, 0x3}, {0x2, 0x5}, {0x4}, {0x2, 0x3}, {0x6, 0x3}, {0x0, 0x8}, {0x6, 0x6}, {0x2, 0x8}, {0x2, 0x7}, {0x6, 0xa}, {0x2, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x7, 0x8}, {0x4}, {0x4, 0x8}, {0x0, 0x1}, {0x5, 0x6}, {0x0, 0x7}, {0x6, 0x9}, {0x4, 0x5}, {0x0, 0x8}, {0x2, 0x7}, {}, {0x4, 0x7}, {0x2, 0x9}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x18, 0x5, 0x16, 0x48, 0x16, 0x6, 0xc, 0x30, 0x60, 0x30, 0x3, 0x30, 0x30, 0xb, 0x1, 0x24]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x24, 0x12, 0x1b, 0xb, 0x36, 0x0, 0x1b, 0x2, 0x48, 0x2, 0x48, 0x1b, 0x24, 0xc, 0x2, 0x18, 0xb, 0x4, 0x18, 0x1b, 0x6c, 0x1, 0x4, 0x36, 0x1, 0x5, 0x4, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8b03, 0x6, 0x40, 0x6, 0x6, 0x7, 0x1]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x5, 0x6}, {0x0, 0x9}, {0x2, 0x1}, {0x1}, {0x6, 0x9}, {0x7, 0x3}, {0x3, 0x6}, {0x1, 0x6}, {0x4, 0x9}, {0x2, 0x2}, {0x5, 0x6}, {0x7, 0x3}, {0x2, 0x8}, {0x6, 0x8}, {0x2, 0x2}]}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbe}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xec}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x15}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x98}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x25c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x16}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x238, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6, 0x30, 0x48, 0x4, 0x5, 0xc, 0x36, 0x9, 0x6, 0x16, 0x48, 0x6c, 0xb, 0x4, 0x9, 0x1, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0x9, 0x0, 0x40, 0x7, 0x10, 0x3a]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4b34, 0x9, 0x7ff, 0xc0, 0xff81, 0x7fff, 0x80]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x4, 0x5}, {0x3, 0xa}, {0x0, 0x5}, {0x6, 0x8}, {0x2, 0x4}, {0x2, 0x9}, {0x3, 0x5}, {0x3, 0xa}, {0x4}, {0x5, 0xa}, {0x4, 0x9}, {0x0, 0x1}, {0x5, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xe69, 0x800, 0x3, 0x1000, 0x2, 0x1, 0x1000]}}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0x3, 0x8001, 0x400, 0x5, 0x8, 0x4]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x7}, {0x7, 0xa}, {0x6, 0x5}, {0x3, 0x3}, {0x7, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe5, 0x5, 0xab8a, 0x7ff, 0x3, 0xa4, 0x4, 0x9]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x5, 0x7}, {0x4}, {0x3, 0x9}, {0x2, 0x5}, {0x3, 0x2}, {0x0, 0x4}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0xa}, {0x7, 0x1}, {0x2, 0x7}, {0x5}, {0x3, 0x6}, {0x0, 0x1}, {0x7, 0x8}, {0x3, 0x3}, {0x7, 0x3}, {0x4, 0x1}, {}, {0x7, 0xa}, {0x6, 0x4}, {0x7, 0x6}, {0x5, 0x7}, {0x4}, {0x1, 0x4}, {0x1, 0x6}, {0x3, 0xa}, {0x4, 0x3}, {0x1, 0x9}, {0x2, 0x6}, {0x3, 0x5}, {0x2, 0xa}, {0x5, 0x6}, {0x1, 0x6}, {0x0, 0x3}, {0x2, 0xa}, {0x0, 0xa}, {0x1}, {0x2, 0x3}, {0x6, 0x6}, {0x3, 0x5}, {0x1, 0x9}, {0x7}, {0x3, 0x1}, {0x0, 0x5}, {0x5, 0xa}, {0x7, 0xa}, {0x0, 0x6}, {0x1, 0x9}, {0x4, 0x5}, {0x1, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x7, 0x3}, {0x0, 0x1}, {0x0, 0x2}, {0x7, 0x4}, {0x0, 0x6}, {0x7, 0x5}, {0x4, 0x2}, {0x4, 0x6}, {0x7}, {0x2, 0x6}, {0x0, 0x6}, {0x3, 0x1}, {0x4, 0x6}, {0x6, 0x9}, {0x4, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1}, {0x4, 0x5}, {0x3, 0x9}, {0x3, 0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x1, 0x17}, {0x0, 0x2}, {0x5, 0x2}]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x36, 0x16, 0x4, 0x18, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x5, 0x6, 0x9, 0x5988, 0x600, 0xe3, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xb, 0x20, 0x9, 0x3, 0x4, 0x1, 0x1, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x3, 0x1, 0x6, 0x4, 0x2, 0x7, 0x1000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1a, 0x9, 0x3, 0x16, 0x30, 0xc, 0x4, 0xc, 0x30, 0x2, 0x30, 0x12, 0x36, 0x0, 0x32, 0x36, 0x1, 0x6c, 0x60, 0x30, 0x60, 0x1b, 0x4, 0xc, 0x24, 0x16, 0x18, 0x3]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf400, 0x4, 0x5, 0x4, 0xfff, 0x8d1, 0x4, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x1ff, 0x1, 0xc, 0x4, 0x3, 0x2]}}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0xfffe, 0x7fff, 0x0, 0x8, 0x8001, 0x3ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0xff01, 0x5, 0x101, 0x901, 0x2, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x401, 0x6, 0x8, 0x4, 0x6, 0x7ce, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xef, 0x9, 0xf1c2, 0x9, 0x2d0, 0x0, 0x1]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x18, 0x9, 0x5, 0x6c, 0x4, 0x24, 0x1b, 0x6c, 0x4, 0x24]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x458, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x85}]}, {0x3e8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3b4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x1, 0x1, 0x4, 0x9, 0x1798, 0x293f]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x30, 0xb, 0xb, 0x16, 0x48, 0x24, 0x2, 0x24, 0x48, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x55b2, 0x0, 0x7ef1, 0x3e, 0x0, 0x2]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0x6}, {0x1, 0x2}, {0x2, 0x2}, {0x3}, {0x3}, {0x6, 0x2}, {0x6, 0x6}, {0x1, 0x9}, {0x1, 0x2}, {0x6, 0x1}, {0x1, 0x2}, {0x1, 0x1}, {0x7, 0x1}, {0x2, 0xa}, {0x6, 0x6}, {0x2, 0x2}, {0x2, 0x4}, {0x7, 0x7}, {0x4, 0x6}, {0x1, 0x8}, {0x3, 0xa}, {0x1, 0x3}, {0x7, 0x6}, {0x1, 0x5}, {0x4, 0x1}, {0x4, 0x2}, {0x4, 0xa}, {0x1, 0x6}, {0x0, 0x4}, {0x1, 0x8}, {0x2, 0x7}, {0x4}, {0x0, 0x1}, {0x4, 0x9}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x4, 0x3}, {0x6, 0x2}, {}, {0x1, 0x7}, {0x7, 0x2}, {0x7, 0x1}, {0x1}, {0x3, 0x5}, {0x4, 0x8}, {0x7, 0x3}, {0x5, 0x7}, {0x1, 0x7}, {0x2, 0x2}, {0x2, 0x1}, {0x3, 0x8}, {0x1, 0xa}, {0x2, 0x6}, {0x5}, {0x3, 0x6}, {0x6, 0xa}, {0x1, 0x5}, {0x2, 0x1}, {0x3, 0x9}, {0x3, 0x7}, {0x1, 0x8}, {0x1, 0x7}, {0x4, 0xa}, {0x3, 0x2}, {0x5, 0x7}, {0x2, 0xa}, {0x7, 0x4}, {0x2, 0x3}, {0x1, 0x8}, {0x5, 0x4}, {0x3, 0xa}, {0x3, 0x2}, {0x5, 0x8}, {0x1, 0x5}, {0x3, 0x6}, {0x2, 0x4}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x5}, {0x6, 0x5}, {0x4, 0x8}, {0x1, 0x7}, {0x6, 0x2}, {0x5, 0x1}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x6, 0x3}, {0x7, 0x2}, {0x2, 0x2}, {0x4, 0x1}, {0x7, 0x3}, {0x6, 0x6}, {0x7, 0xa}, {0x0, 0x2}, {0x5, 0x5}, {}, {0x0, 0x9}, {0x3, 0xa}, {0x2, 0x1}, {0x5, 0x3}, {0x1, 0x8}, {0x1, 0x3}, {0x2, 0x3}, {0x1}, {0x5, 0xa}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x4}, {0x5, 0x1}, {0x5, 0x9}, {0x4, 0x6}, {0x6, 0x3}, {0x3, 0x3}, {0x2, 0xa}, {0x3, 0x5}, {0x4, 0x3}, {0x0, 0x5}, {0x3, 0xa}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x2, 0x24, 0x2, 0xc, 0x4, 0x16, 0x24, 0x24, 0x24, 0x60, 0x16, 0x2, 0x24, 0x30, 0x30, 0x48, 0x37, 0x24, 0x60, 0x12, 0x6, 0x48, 0x48, 0x16, 0x60, 0xb, 0x18, 0x24, 0x6c, 0x48, 0x6c]}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x6, 0x7}, {0x4, 0x3}, {0x5, 0x4}, {0x2, 0x8}, {0x1, 0x6}, {0x2, 0x2}, {0x4, 0x7}, {0x0, 0x5}, {0x7, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x6, 0x4}, {0x4, 0xa}, {}, {0x3, 0x4}, {}, {}, {0x7, 0x8}, {0x0, 0x8}, {0x6, 0xa}, {0x6, 0x2}, {0x1, 0xa}, {0x2, 0x2}, {0x4, 0x1}, {0x3, 0x2}, {0x6, 0x2}, {0x2, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x1, 0x2}, {0x7, 0x9}, {0x6, 0x2}, {0x1, 0x5}, {0x6, 0x7}, {0x6, 0x5}, {0x2, 0x3}, {0x6, 0x7}, {0x4, 0x7}, {0x3, 0x4}, {0x1, 0x3}, {0x4, 0x3}, {0x3, 0x5}, {0x1}, {0x7, 0x8}, {0x7, 0x4}, {0x7, 0xa}, {0x0, 0x3}, {0x7, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x5, 0x8, 0x8001, 0x8, 0x7ff, 0x6, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x9, 0x30, 0x3, 0x1, 0x2, 0x1b, 0x60, 0x18, 0x12, 0x4, 0x12, 0x24, 0x9c633d9d05fa4c8c, 0x1, 0x3, 0x1b, 0x0, 0xb, 0x43, 0x12]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x9}, {0x2, 0x9}, {0x4, 0x6}, {0x4, 0x6}, {0x4, 0x4}, {0x3, 0x6}, {0x0, 0x3}, {0x1, 0x8}, {0x7, 0x2}, {0x6}, {0x1, 0xa}, {0x2, 0x2}, {0x1, 0xa}, {0x2, 0x2}, {0x4, 0x1}, {0x5, 0xa}, {0x4, 0x3}, {0x0, 0x3}, {0x4}, {0x3, 0x1}, {0x0, 0x9}, {0x2, 0x2}, {0x4, 0x6}, {0x3, 0x3}, {}, {0x2, 0x8}, {0x4, 0x6}, {0x7, 0x6}, {0x6, 0xa}, {0x7, 0x3}, {0x3, 0x4}, {}, {0x0, 0x9}, {0x3, 0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x7}, {0x7, 0x9}, {0x1, 0xa}, {0x3, 0x2}, {0x7, 0x6}, {0x1, 0x3}, {0x6, 0x5}, {0x6, 0x1}, {0x6, 0x8}, {0x2, 0xa}]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1, 0x2}, {0x4, 0x3}, {0x5, 0x2}, {0x4, 0x2}, {0x3, 0x7}, {0x0, 0x7}, {0x2, 0x1}, {0x7, 0x4}, {0x1, 0xa}]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x7, 0x7}, {0x3, 0x4}, {0x7, 0x8}, {0x2, 0x2}, {0x7, 0x9}, {0x6}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x2}, {0x3, 0x4}, {0x3, 0x3}, {0x7, 0x4}, {0x5, 0x2}, {0x2, 0xa}, {0x4}, {0x1, 0x9}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x6}, {0x5, 0x9}, {0x7, 0x4}, {0x7}, {0x1, 0xa}, {0x0, 0x2}, {0x0, 0x3}, {0x0, 0x8}, {0x6, 0x1}, {0x2, 0x9}, {0x6, 0x4}, {0x6, 0x1}, {0x0, 0x2}, {0x0, 0x2}, {0x4, 0x2}, {0x1, 0xa}, {0x6, 0x3}, {0x2, 0x5}, {0x2}, {0x3, 0x8}, {0x0, 0x2}, {}, {0x1, 0x6}, {0x3, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x0, 0x5, 0x401, 0xc, 0x6, 0x10]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x5, 0x1ff, 0xfd5d, 0x8, 0x81, 0x0, 0x4]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x34d, 0x5, 0x9b39, 0x6, 0xffff, 0x9, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x401, 0x3, 0x565, 0xf, 0x4, 0x2]}}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x6}, {0x2, 0x6}, {0x3, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0x2}, {0x5, 0x2}, {0x2, 0x5}, {0x2, 0x7}, {0x3, 0x4}, {0x3, 0x7}, {0x0, 0x4}, {0x2}, {0x3, 0x4}, {0x3, 0x7}, {0x2, 0x8}, {0x0, 0x4}, {0x7, 0x8}, {0x5, 0x8}, {0x6, 0x9}, {0x0, 0x9}, {0x4, 0x5}, {0x6, 0x4}, {0x0, 0x1}, {0x5, 0xa}, {0x2, 0x1}, {0x5, 0x8}, {0x1, 0x1}, {0x2, 0x8}, {0x6, 0x3}, {0x4, 0x4}, {0x5, 0x9}, {0x6, 0x6}, {0x4, 0x9}, {0x0, 0x7}, {0x7}, {0x7, 0x4}, {0x6, 0x3}, {0x6, 0x9}, {0x4, 0x4}, {0x0, 0x6}, {0x4, 0x4}, {0x5, 0x5}, {0x1, 0x1}, {0x4, 0x6}, {0x4, 0x4}, {0x3}, {0x0, 0x2}]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb7a, 0xb06e, 0x0, 0xa, 0xe2, 0x7f, 0x7ff, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x1}, {0x2, 0x1}, {0x3, 0x9}, {0x4, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x1, 0xa7e, 0x5, 0xff, 0x5, 0x5, 0xfffe]}}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0xc, 0x1, 0x2, 0x1b, 0x0, 0x1b, 0x48, 0x6c, 0x24, 0x6c]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x0, 0x9}, {0x7, 0x6}, {0x1, 0x4}, {0x0, 0xa}, {0x3, 0x7}, {0x5, 0xa}, {0x7, 0x3}, {0x7, 0x4}, {0x5, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x0, 0x7}, {0x3, 0x1}, {0x1, 0x3}, {0x5, 0x4}, {0x5, 0xa}, {0x0, 0x1}, {0x6, 0x1}, {0x0, 0x7}, {0x1, 0x2}, {0x6, 0x6}, {0x6}, {0x0, 0x5}, {0x3, 0x5}, {0x4, 0xa}, {0x2, 0x8}, {0x6, 0x9}, {0x6, 0x1}, {0x0, 0x6}, {0x6, 0x1}, {0x6, 0x4}, {0x3, 0x5}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x16, 0x24, 0x5, 0x3, 0x6, 0x1b, 0x6, 0x2, 0x1, 0x3, 0x3, 0x9, 0x30, 0x30, 0x12, 0x36]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x24, 0x30, 0x12, 0x48, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x2b, 0x9, 0x2, 0x9, 0x97a, 0x9, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x5, 0x3}, {0x3, 0x7}, {0x5, 0x6}, {0x7}, {0x2, 0x4}, {0x6}, {}, {0x0, 0xa}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x9}, {0x5, 0x5}, {0x5, 0x2}, {0x1, 0x7}, {0x3}, {0x6, 0xa}, {0x4, 0x7}, {0x0, 0x1}, {0x3, 0x7}, {0x0, 0xa}, {0x0, 0x2}, {0x1, 0x5}, {0x0, 0x9}, {0x2, 0x8}, {0x2, 0x4}, {0x5, 0x4}, {0x1, 0x8}, {0x3, 0x9}, {0x6, 0x2}, {0x5, 0x4}, {0x1, 0xa}, {0x0, 0x5}, {0x1, 0x5}, {0x7, 0xa}, {0x4, 0x1}, {0x6, 0x7}, {0x5, 0x4}, {0x0, 0x3}, {0x3, 0x7}, {0x4, 0x6}, {0x1}, {0x7, 0x5}, {0x4}, {0x0, 0x2}, {0x0, 0x2}, {0x4, 0x2}, {0x6, 0x9}, {0x1, 0x4}, {0x4, 0x8}, {0x2, 0x3}]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffff80}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x24c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x22c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6689, 0x9, 0x5168, 0x8001, 0x1, 0x401, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0xa0, 0xbb2d, 0x40, 0x0, 0x1, 0xfffc, 0x144]}}]}, @NL80211_BAND_60GHZ={0x108, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x40, 0x2, [{0x3, 0x2}, {0x1, 0x2}, {0x4, 0x9}, {0x3, 0x6}, {0x0, 0x3}, {0x3, 0x1}, {}, {0x0, 0x2}, {0x6, 0x7}, {0x1, 0x3}, {0x1, 0x5}, {0x3, 0x5}, {0x7, 0xa}, {0x7, 0x9}, {0x2, 0x4}, {0x5, 0x2}, {0x2, 0xa}, {0x6, 0x8}, {0x4}, {0x1, 0x1}, {0x1, 0x3}, {0x0, 0x7}, {0x0, 0x7}, {0x4, 0x6}, {0x4, 0x3}, {0x4}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x1}, {0x5, 0x9}, {0x3}, {0x1, 0x8}, {0x2, 0x6}, {0x3, 0x3}, {0x2, 0xa}, {0x6, 0x1}, {0x6, 0x1}, {0x6}, {0x2, 0x8}, {0x2, 0x9}, {0x1, 0x6}, {0x6, 0x9}, {0x4, 0xa}, {0x6, 0x2}, {0x4, 0x4}, {0x0, 0x6}, {0x5}, {0x3, 0xa}, {0x7, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x2}, {0x6, 0x3}, {0x3}, {0x7, 0x2}, {0x0, 0x4}, {0x4, 0x2}, {0x4, 0x9}, {0x3, 0x8}, {0x4, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x9, 0x2, 0x8, 0x0, 0x1, 0x8000, 0xe]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x1}, {0x7}, {0x4}, {0x2, 0x2}, {0x2, 0x5}, {0x4}, {0x7, 0x5}, {0x1}, {0x7}, {0x7, 0x9}, {0x7, 0x8}, {0x4, 0x6}, {0x7}, {0x5, 0x9}, {0x1, 0x7}, {0x4}, {0x6, 0x4}, {0x3, 0x9}, {0x7, 0x9}, {0x0, 0x4}, {0x5, 0x9}, {0x7, 0x1}, {0x1, 0x7}, {0x1, 0x4}, {0x5, 0x6}, {0x7}, {0x5}, {0x0, 0x5}, {0x0, 0x8}, {0x6, 0x6}, {0x2, 0x1}, {0x0, 0x7}, {0x3, 0x3}, {0x6, 0x7}, {0x7, 0x3}, {0x3, 0x1}, {0x0, 0x9}, {0x0, 0x2}, {0x7, 0x5}, {0x7, 0x5}, {0x6, 0x7}, {0x2, 0x3}, {0x5, 0x7}, {0x6, 0x7}, {0x6, 0x9}, {0x4, 0x3}, {0x4, 0x5}, {0x2, 0x6}, {0x5, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7ff, 0x3, 0x0, 0x4, 0x4, 0xfbf3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe472, 0xb, 0x9, 0x7, 0xc4e9, 0xc35, 0x8e, 0x19]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xce4f, 0x6cb, 0x5, 0x25, 0x6, 0x400, 0xfff7]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x5, 0xa}, {0x0, 0x1}, {0x0, 0x4}, {0x7, 0x3}, {0x0, 0x7}, {0x0, 0x3}, {0x2, 0xa}, {0x1, 0x8}, {0x5, 0x5}, {0x1}, {0x6, 0x8}, {0x7, 0x6}, {0x0, 0x1}, {0x0, 0x5}, {0x4, 0x2}, {0x1, 0x7}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x30, 0x36, 0x30, 0x36, 0x4, 0x0, 0x16, 0x4, 0x6c, 0x12, 0x18, 0x5, 0x12, 0xc, 0x5, 0x30, 0x6c, 0x1b, 0xb, 0x1b, 0x18, 0x9, 0x6c, 0x24, 0x3]}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x1}, {0x5, 0x9}, {0x0, 0x3}, {0x1, 0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x2, 0x2}, {0x2, 0x2}, {0x5, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x0, 0x3}, {0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0xa}, {0x5, 0x6}, {0x5, 0x1}, {0x4, 0x3}, {0x1}, {0x7, 0x4}, {0x2}, {0x1, 0x1}, {0x6, 0x2}, {0x1, 0x3}, {0x6, 0x9}, {0x7, 0xa}, {0x5, 0x4}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0x4}, {0x7, 0x8}, {0x4, 0x4}, {0x7, 0x9}, {0x5, 0x2}, {0x4, 0x8}, {0x6, 0x2}, {0x7, 0x1}, {0x6, 0x4}, {0x2, 0x7}, {0x3, 0x5}, {0x5}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0x6, 0x3, 0x8, 0x3, 0x25c4, 0xe07, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xc000, 0x101, 0x9, 0x8, 0x800, 0x401, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x3}, {0x5, 0x2}, {0x2, 0x2}, {0x2, 0x5}, {0x1, 0x7}, {0x1, 0x1}, {}, {0x7, 0x8}, {0x1, 0x2}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x6}, {0x1}, {0x0, 0x1}, {0x6, 0x9}, {0x0, 0x9}, {0x1, 0x9}, {0x5, 0x7}, {0x0, 0x9}, {0x0, 0x1}, {0x0, 0xa}, {0x7, 0x2}, {0x1, 0x7}, {}, {0x6, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}]}]}, @NL80211_ATTR_TID_CONFIG={0x330, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x53}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x94}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3e}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xef}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb2}]}, {0x248, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x230, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x2, 0x3, 0xcd, 0x6, 0x6a05]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x9, 0x7fa8, 0xf69, 0x4, 0x7, 0x7]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x401, 0x2, 0x7ff, 0x8, 0x8, 0x10, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x9, 0x60, 0x6c, 0x11, 0xc, 0x6c, 0x60, 0x4, 0x2, 0x4, 0x16, 0x0, 0x3, 0x60, 0xc, 0x6c, 0xb, 0x60, 0x30, 0x12, 0x18, 0x59, 0x6, 0x5]}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1b, 0xb, 0x16, 0x2, 0x12, 0x6, 0xc, 0x3, 0x60, 0xb, 0x3, 0x1b, 0x2d, 0xc, 0x60, 0x6, 0x24, 0x60, 0x30, 0x36, 0x6c, 0x6, 0x48, 0x2, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0xd, 0x6, 0xe9, 0xfffc, 0x100, 0x400, 0x7]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6c, 0x0, 0x36, 0x30, 0x36, 0x65, 0x3, 0x2, 0x1b, 0x48, 0x4, 0x3, 0x36, 0x48, 0x0, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xdb21, 0x60cd, 0xf312, 0x4, 0xfff8, 0x6, 0x8001]}}]}, @NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x1, 0x6f88, 0x2, 0x2, 0x0, 0x9, 0xea6]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x5, 0x1}, {0x1, 0x7}, {0x0, 0x9}, {0x3, 0x4}, {0x7, 0x4}, {0x4, 0x3}, {0x1, 0xa}, {0x0, 0x7}, {0x5, 0x6}, {0x5, 0x7}, {0x6, 0x4}, {0x4}, {0x6, 0x9}, {0x2, 0xa}, {0x0, 0x7}, {0x4, 0x2}, {0x3, 0x5}, {0x3, 0x1}, {0x7, 0x2}, {0x4, 0x4}, {0x1, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x0, 0x100, 0x1, 0x4, 0x9, 0x7ff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xb, 0x60, 0x9, 0x36, 0x9, 0xb, 0x35, 0x6c, 0x4, 0x36, 0x48, 0x1b, 0x24, 0x4, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0xac, 0x0, 0x9, 0x1, 0x4, 0xc, 0xab2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x43, 0x1, 0x3, 0x2, 0x6, 0x1]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x9, 0x12, 0x1, 0x5, 0x2, 0x4, 0x6c, 0x18, 0x9, 0x60, 0x30, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xa, 0x401, 0x401, 0x9, 0x7, 0xf, 0x8]}}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x2, 0x1b, 0x4, 0x3, 0x6, 0x1, 0x4, 0x1b, 0x16, 0x35, 0x12, 0x9, 0x12, 0x5, 0x30, 0x12, 0xb, 0x5, 0x16, 0x12, 0x9, 0x2, 0x3, 0x12, 0xc, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9a87, 0xffff, 0x2, 0x6, 0xc9, 0x10, 0x0, 0xf61]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x9, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x73, 0x9, 0xfc01, 0x5, 0x7, 0xff, 0xe]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x16, 0xb, 0x1, 0x6c, 0x36, 0x2, 0x16, 0x1b]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x7, 0x9}, {0x2, 0x5}, {0x2, 0x6}, {0x1, 0x8}, {}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x3}, {0x4, 0x7}, {0x2, 0x9}, {0x5, 0x4}, {0x2, 0x7}, {0x0, 0x2}, {0x5, 0x3}, {0x3, 0x7}, {0x5, 0x7}, {0x2, 0x8}, {0x3, 0x1}, {0x5, 0x2}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xf, 0xca, 0x0, 0x3092, 0x8001, 0x9, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x85}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x50c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000000000000001}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x4bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0xf814, 0xe5a9, 0x6d, 0xfa05, 0x2, 0x0, 0x9c]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x57cd, 0x6, 0x7, 0x7f, 0x75f, 0x57, 0xc]}}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x100, 0x6, 0x9, 0x2, 0x1, 0x2, 0x7fff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0x800, 0x2, 0x4f, 0x5, 0x4, 0xc]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xc, 0x9, 0x200, 0x2, 0x3, 0xe52, 0x6]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x7}, {0x6, 0x7}, {0x1, 0x3}, {0x0, 0x4}, {0x1, 0x4}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x5, 0x7}, {0x7, 0x3}, {0x6, 0x9}, {0x1, 0x3}, {0x5, 0x2}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x2, 0x2}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x8}, {0x4, 0x1}, {0x5}, {0x7, 0x5}, {0x1, 0x7}]}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x0, 0x3}, {0x3, 0xa}, {0x3, 0x2}, {0x1, 0x7}, {0x4, 0x1}, {0x7, 0x7}, {0x0, 0x5}, {0x5, 0x1}, {0x1, 0x5}, {}, {0x3, 0x7}, {0x2}, {0x0, 0x8}, {0x5, 0x6}, {0x6, 0x8}, {0x3, 0x1}, {0x2, 0x3}, {}, {0x7, 0x6}, {0x3}, {}, {0x0, 0x6}, {0x0, 0x8}, {0x0, 0xa}, {0x2, 0x4}, {0x4, 0xa}, {0x1, 0x4}, {0x1}, {0x4, 0x3}, {0x3}, {0x3, 0x2}, {0x3, 0x4}, {0x5, 0x6}, {0x1, 0x1}, {0x2, 0x2}, {0x2, 0x1}, {0x6, 0x4}, {0x6, 0x1}, {0x7, 0x1}, {0x4, 0x7}, {0x4, 0x2}, {0x0, 0xa}, {0x3, 0x8}, {0x2, 0xa}, {0x4, 0x5}, {0x6, 0x7}, {0x6, 0x9}, {0x7, 0x8}, {0x3, 0x9}, {0x5, 0x8}, {0x7, 0x3}, {0x3, 0x5}, {0x0, 0x6}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0x7}, {0x4, 0xa}, {0x4}, {0x5, 0x4}, {0x6, 0x5}, {0x6, 0x8}, {0x7, 0x2}, {0x5, 0x9}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x1, 0x4}, {0x4, 0x7}, {0x6, 0xa}, {0x6, 0x2}, {0x3, 0x7}, {0x7, 0x8}, {0x0, 0x5}, {0x1, 0x1}, {0x1, 0x7}, {0x6, 0x3}, {0x7, 0x3}, {0x5, 0x7}, {0x4, 0x1}, {0x7, 0x1}, {0x3, 0x9}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x5}, {0x6}, {0x0, 0xa}, {0x1, 0x5}, {0x2, 0x2}, {0x0, 0x7}, {0x7, 0x6}, {0x0, 0x8}, {0x3, 0x5}, {0x1, 0x7}, {0x2, 0x3}, {0x5, 0x5}, {0x3, 0x4}, {0x0, 0xa}, {0x4, 0x7}, {0x4, 0x2}, {0x3, 0x4}, {0x2, 0x1}, {0x3, 0x9}, {0x1}, {0x2, 0x5}, {0x6, 0x4}, {0x0, 0x1}, {0x3, 0xa}, {0x1, 0x7}, {0x6}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x4}, {0x0, 0x9}, {0x7, 0x8}, {0x3, 0x7}, {0x5, 0x3}, {0x1, 0xa}, {0x7, 0x9}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0xa}, {0x5, 0xa}, {0x0, 0x3}, {0x6, 0x5}, {0x4}]}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x60, 0xb, 0xb, 0x6, 0x2, 0x0, 0x1b, 0xc, 0x0, 0x12, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xfffa, 0x5, 0x1, 0xff80, 0x3, 0x6, 0x4]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x6, 0x36, 0xb, 0x56, 0x36, 0x1, 0x4, 0x16, 0x12, 0x16, 0x18, 0xb, 0xc]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x36, 0x2, 0x1, 0x18, 0x12, 0x7a, 0x30, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x80, 0xffff, 0x7, 0x8001, 0x8001, 0x2, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x1}, {0x6, 0x2}, {0x1, 0x2}, {0x1}, {0x4, 0x7}, {0x6, 0x8}, {0x2, 0x9}, {0x1, 0x4}, {0x1, 0x4}, {0x6, 0x6}, {0x1, 0x3}, {0x1, 0x9}, {0x7, 0x2}, {0x1, 0x9}, {0x5, 0x2}, {0x1, 0xa}, {0x4, 0x6}, {0x6, 0x9}, {0x7, 0x7}, {0x7, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x8}, {0x6, 0x1}, {0x4, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2d0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1056, 0x26b5, 0x8, 0x9, 0x0, 0x3, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x92, 0x400, 0x3, 0x9, 0x1ff, 0x0, 0x7, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x5, 0x9, 0x7, 0x3, 0x8, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x5, 0x60, 0xfef, 0x8, 0x9, 0x6]}}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x6, 0x3}, {0x7, 0x7}, {0x7, 0x8}, {0x1, 0xa}, {0x0, 0xa}, {0x5, 0x8}, {0x2, 0x1}, {0x7, 0x5}, {0x3, 0x1}, {0x4, 0x3}, {0x4, 0x8}, {0x3, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0xdb6adbd7936e95ab, 0xc, 0x36, 0xb402ff7939cc02d1, 0x48, 0x2, 0xd584751d5b4ed2c7, 0x48, 0x6c, 0xc, 0x6]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x60, 0x36, 0x3, 0xb, 0x3, 0x6c, 0xc, 0x4, 0x16, 0x48, 0x24, 0x36, 0x4, 0x5, 0x18, 0x5, 0x48, 0xb, 0x549c5eb47dbd0f12, 0x2, 0x16, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x401, 0xc11, 0x2, 0x1dda, 0x3, 0xfffc, 0x7380]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc7e, 0x4bac, 0xb2b, 0x9880, 0x8, 0x9, 0x0, 0x800]}}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x6, 0x6000, 0x1, 0x8, 0x8, 0xe037, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x4, 0x9}, {0x1, 0x8}, {0x3, 0x3}, {0x5, 0xa}, {0x3, 0x3}, {0x3}, {0x0, 0x6}, {0x7, 0x9}, {0x7, 0x5}, {0x5, 0x5}, {0x4, 0x1}, {0x2, 0x2}, {0x0, 0x8}, {0x2, 0x2}, {0x1, 0x5}, {0x6}, {0x0, 0x8}, {0x2, 0x8}, {0x1, 0x9}, {0x0, 0x5}, {0x5, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x0, 0x9}, {0x5, 0x8}, {0x6, 0x6}, {0x1, 0x7}, {0x1, 0x4}, {0x2, 0x6}, {0x1, 0x2}, {0x1, 0x9}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x3, 0x1}, {0x3, 0x9}, {}, {0x1}, {0x3, 0x7}, {0x5, 0x7}, {0x7, 0x4}, {0x7, 0x1}, {0x4, 0x7}, {0x4, 0x9}, {0x0, 0x3}, {0x7, 0x4}, {0x1, 0x8}, {0x3, 0x9}, {0x6, 0xa}, {0x1}, {0x3}, {0x2, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xfff5, 0x24e, 0x200, 0x21d2, 0x1, 0x5, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x6, 0x5, 0x5, 0x48, 0xfff, 0x24, 0x101]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0xc, 0x0, 0xebe42dbb17ab3bb3, 0x4, 0x6, 0x2, 0x5, 0x5, 0x16]}]}, @NL80211_BAND_5GHZ={0xf0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0x3}, {0x6, 0x7}, {0x4, 0x5}, {0x2, 0x8}, {0x1, 0x9}, {0x0, 0x4}, {0x4, 0x3}, {0x3, 0xa}, {0x0, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x1, 0x5}, {0x5, 0x4}, {0x1, 0x2}, {0x3, 0x6}, {0x4, 0x7}, {0x1, 0x4}, {0x4, 0x5}, {0x0, 0x9}, {0x4, 0x1}, {0x2, 0x6}, {0x1, 0x2}, {0x2, 0xa}, {0x1, 0x6}, {0x5, 0x3}, {0x4, 0x1}, {0x7, 0x2}, {0x0, 0x3}, {0x4, 0x7}, {0x4, 0x3}, {0x0, 0x5}, {0x1, 0x5}, {0x4, 0x3}, {0x6, 0x1}, {0x3, 0x1}, {0x0, 0x7}, {0x1, 0x5}, {0x7, 0x3}, {0x3, 0x9}, {0x6, 0x6}, {0x1, 0x8}, {0x2, 0x4}, {0x5, 0x9}, {0x1, 0x1}, {0x2, 0x2}, {0x3, 0x5}, {0x1, 0x9}, {0x0, 0x5}, {0x0, 0x7}, {0x1, 0x7}, {0x1, 0x2}, {0x2, 0x3}, {0x1, 0x9}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9, 0x4, 0x7fff, 0x6, 0x0, 0x5, 0x8]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x3, 0x2}, {0x7, 0x9}, {0x1, 0x8}, {0x3}, {0x1, 0x1}, {0x5, 0x7}, {0x1, 0x7}, {0x0, 0xa}, {0x6, 0x1}, {0x3, 0x1}, {0x0, 0xa}, {0x1, 0x6}, {0x4, 0x2}, {0x3, 0x3}, {0x2, 0x2}, {0x2, 0x11}, {0x6, 0x5}, {0x4, 0x5}, {0x4, 0x7}, {0x4, 0xa}, {0x4, 0x5}, {0x1, 0x3}, {0x2, 0xa}, {0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x7, 0x1}, {0x7, 0x4}, {0x7, 0xe}, {0x2, 0x5}, {0x6, 0x4}, {0x3}, {0x4, 0x7}, {0x0, 0x4}, {0x1, 0x3}, {0x1, 0x9}, {0x0, 0x1}, {0x1}, {0x7, 0x4}, {0x1}, {0x0, 0x13}, {0x4, 0x1}, {0x1, 0xa}, {0x2, 0x4}, {0x6, 0x6}, {0x5, 0x6}, {0x7, 0x3}, {0x7, 0xa}, {0x0, 0x1}, {0x4}, {0x1, 0x6}, {0x4, 0x4}, {0x0, 0x7}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x1}, {0x0, 0x9}, {0x1, 0x2}, {0x4, 0x8}, {0x0, 0x4}, {0x5, 0x4}, {0x4, 0x3}, {0x4, 0x4}, {0x0, 0x9}, {0x2, 0x2}, {0x4, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x6, 0x8}, {0x6, 0x2}, {0x0, 0xa}, {0x4, 0x6}, {0x1, 0x6}, {0x1, 0x5}, {0x0, 0x6}, {0x0, 0x3}, {0x0, 0x4}, {0x3, 0xa}, {0x1, 0x8}, {0x6, 0x9}, {0x6, 0x1}, {0x3, 0x2}, {0x6, 0x5}, {0x7, 0x9}, {0x1, 0x3}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x4}, {0x5, 0x5}, {0x4}, {0x7}, {0x0, 0x7}, {0x7, 0x4}, {0x2}, {0x5, 0x3}, {0x2, 0x7}, {0x5, 0x1}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x1, 0x7, 0x3ff, 0x4, 0x0, 0x3, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x2f1, 0x7, 0x8, 0x1, 0x1000, 0x48]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0x18e0}}, 0x400c004) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001b80), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001bc0)={0x150, r3, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x150}, 0x1, 0x0, 0x0, 0x40000}, 0x24000040) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e00), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x20100}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x68, r4, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x9, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x48005}, 0x4044800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x74, 0x1, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x489d}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x60, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000801}, 0x1) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002440)={&(0x7f0000002200)={0x238, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9498}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa758}]}, @TIPC_NLA_NODE={0x34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6c}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x16, 0x3, "bbe53ae396ec48307a3442c0d02734a4b9db"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @private2, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @local, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x591dd440, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}}}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x4008085}, 0x4040054) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000002680)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002640)={&(0x7f0000002500)={0x140, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc782}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}]}, 0x140}}, 0xc4) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002700), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000029c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002980)={&(0x7f0000002740)={0x23c, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x400}, @ETHTOOL_A_EEE_MODES_OURS={0x1b0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xff, 0x5, "e729bf2a4c2550620ca3c5df2764f3236ee0165ba2d37e37837979ec9e1106897304c2efdcaf561e0b77bdf92e2f1b1e3b74b493b27b46f65d5d6f30e95905750597cff6467b284ec50640cf85dcc9f20061093069f9340037a3b818be90cd2148e4a6a7f3a2e74d2b453e0eb49d3eb06c252d6b98a325d91b2f77c5e5f2c51b5630448ba5269c80adb0c8fc3d0348bd9525d14e50adcf9691455bbf64a910e44e55ffcec74cfbe675e966adba2b8506de161550c624f7cbb4c9b9568aa508efd5aa0d1205b39a31b6aca1804b69d03f9ebf7e505192194d2d4a9ea70bd48c15b81c827a0f9f4e7c94d552ed70a5f3d82121659d2b0f452f20a0a1"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x9c, 0x5, "6dd1b34f99931a0505a6895efd641d2052eb07a84a2bc08febece3c1425d6fefbc7cfc6becfa45be144b3215e1f64a488feb6ece7d63abb78ac479b7866f9b434adff4c0151128c6ca29e4febd26eb567f8bbacf40f6e222df932273258775f55f9fef91b4f451459cd6ef1e7eb1b0e2ef89bdf22912c992871a269a2fe2da90f911c150f638df9614fcefefcc6d461f6e64544e5c269848"}]}, @ETHTOOL_A_EEE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4000100}, 0x20008cd1) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000002a40), r0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000002d00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002a80)={0x240, r8, 0x4, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x21c, 0x8, 0x0, 0x1, [{0x218, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010101}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0f15fd79ae1bf0c6e1f02d77768968985485ffdfb006951fc4a4ede96dc30f5a"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xfff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, @WGPEER_A_ALLOWEDIPS={0x154, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x4008801}, 0xad18d316c5637456) r9 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000002d40), &(0x7f0000002dc0)=0x60) r10 = accept$nfc_llcp(r9, 0x0, &(0x7f0000002e00)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002e80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000002f40)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x40, r2, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x2f3e, 0x30}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffffffd}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7ff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xf2d}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000010) r12 = syz_genetlink_get_family_id$team(&(0x7f0000002fc0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000003000)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000003040)={@broadcast, @remote, 0x0}, &(0x7f0000003080)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000030c0)={'pim6reg\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000003100)={0x11, 0x0, 0x0}, &(0x7f0000003140)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000003180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000003480)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003440)={&(0x7f00000031c0)={0x25c, r12, 0x100, 0x8, 0x25dfdbfe, {}, [{{0x8, 0x1, r13}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r17}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0xa, 0x85, 0x5}, {0x3, 0x0, 0x8, 0x94}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) 578.724006ms ago: executing program 1 (id=1178): accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f000038e000/0x4000)=nil, 0x4000}) 553.344457ms ago: executing program 2 (id=1180): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x2) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0x2, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1d"}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xe, 0x80, 0x6, 0x3, 0xb819, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x2, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x8002, 0xb, 0x3, 0x8001, 0x4c74, 0x80000000, 0x800242, 0x2, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x1, 0x1000, 0xfffffffc, 0x0, 0x4, 0x7, 0x5, 0x2f, 0xe, 0x1000312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x40008000, 0x9, 0x273d, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x8, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x5, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x4, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x40003, 0x0, 0x3, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x7, 0xffffffff, 0x7ffffffe, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x7, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x9, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 522.563929ms ago: executing program 2 (id=1181): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x68, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}, 0x1, 0x1c000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 521.939499ms ago: executing program 1 (id=1182): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002500)={0xd8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x54, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x60, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10000007}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x81}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 492.679531ms ago: executing program 2 (id=1183): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e22000fff0058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd000000030001000b080800418e224e0004fcff", 0x58}], 0x1) 491.939691ms ago: executing program 1 (id=1184): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000031c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="976b640868"]}]}, 0x24}], 0x1}, 0xcc000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x20000010) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) (async) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, 'Y?\x00', "acba234db1dc7f00000040008000", "129c9707", "02000032c100"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1) (async) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r1, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) (async) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r2) syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') 448.196303ms ago: executing program 4 (id=1185): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002500)={0xe0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x54, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x60, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10000007}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 447.913583ms ago: executing program 1 (id=1186): socket(0x2, 0x2, 0x1) r0 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x5c000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 447.708644ms ago: executing program 2 (id=1187): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8841}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 440.111844ms ago: executing program 4 (id=1188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000100081000000000000800000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) keyctl$unlink(0x9, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)={0x16c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x84, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xd}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASK={0xa4, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x23}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e031800dd5c980128854d"], 0xffdd) syz_open_dev$usbfs(&(0x7f0000000000), 0x4ebe, 0x6100) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000500)=@ethtool_eeprom={0xb, 0x0, 0x200, 0x1, "f7"}}) 408.661966ms ago: executing program 1 (id=1189): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x2) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0x2, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1d"}) openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xe, 0x80, 0x6, 0x3, 0xb819, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x2, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x8002, 0xb, 0x3, 0x8001, 0x4c74, 0x80000000, 0x800242, 0x2, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x1, 0x1000, 0xfffffffc, 0x0, 0x4, 0x7, 0x5, 0x2f, 0xe, 0x1000312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x40008000, 0x9, 0x273d, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x8, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x5, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x4, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x40003, 0x0, 0x3, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x7, 0xffffffff, 0x7ffffffe, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x7, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x9, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 378.931968ms ago: executing program 2 (id=1190): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r3, 0x0, 0x4, 0xfe, 0x100, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, @empty, 0x8000, 0x0, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000180)={'ip6tnl0\x00', r4, 0x0, 0x5, 0x64, 0x7, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x0, 0x7800, 0xfffffffe}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = dup2(r7, r5) ioctl$KVM_HAS_DEVICE_ATTR(r8, 0x4018aee3, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000680), 0x2010800, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x237, 0x6, 0x12, 0x6, 0x2}) 316.674541ms ago: executing program 4 (id=1191): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f000038e000/0x4000)=nil, 0x4000}) 122.688722ms ago: executing program 4 (id=1192): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_usb_connect(0x1, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@rand_addr=' \x01\x00', @in=@broadcast, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x80000000, 0x0, 0x2d9}, 0x0, 0x6e6bc0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3502, 0x0, 0x2, 0x1, 0x1ff, 0x7c08, 0x8928}, {{@in6=@loopback, 0x4d5, 0x32}, 0x2, @in6=@local, 0x34ff, 0x4, 0x2, 0x40, 0xea, 0x6, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0xff}, 0x2, @in=@empty, 0x34ff, 0x2, 0x3, 0x2, 0x6, 0x8c6f, 0x33}, {{@in=@rand_addr=0x64010102, 0x4d6, 0xff}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3503, 0x0, 0x1, 0x6, 0x5, 0x0, 0x80000000}, {{@in=@remote, 0x4d5, 0xff}, 0x2, @in6=@loopback, 0x3505, 0x4, 0x0, 0xe, 0x3, 0x3, 0x10}, {{@in6=@local, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010102, 0x34ff, 0x2, 0x1, 0x8, 0xd, 0xc000000, 0x4}]}]}, 0x23c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) syz_usb_connect(0x1, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@rand_addr=' \x01\x00', @in=@broadcast, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x80000000, 0x0, 0x2d9}, 0x0, 0x6e6bc0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3502, 0x0, 0x2, 0x1, 0x1ff, 0x7c08, 0x8928}, {{@in6=@loopback, 0x4d5, 0x32}, 0x2, @in6=@local, 0x34ff, 0x4, 0x2, 0x40, 0xea, 0x6, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0xff}, 0x2, @in=@empty, 0x34ff, 0x2, 0x3, 0x2, 0x6, 0x8c6f, 0x33}, {{@in=@rand_addr=0x64010102, 0x4d6, 0xff}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3503, 0x0, 0x1, 0x6, 0x5, 0x0, 0x80000000}, {{@in=@remote, 0x4d5, 0xff}, 0x2, @in6=@loopback, 0x3505, 0x4, 0x0, 0xe, 0x3, 0x3, 0x10}, {{@in6=@local, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010102, 0x34ff, 0x2, 0x1, 0x8, 0xd, 0xc000000, 0x4}]}]}, 0x23c}}, 0x0) (async) 0s ago: executing program 2 (id=1193): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002500)={0xd8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x54, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x60, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10000007}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x81}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): 6][ T1534] overlay: Unknown parameter 'permit_directio' [ 67.991209][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 67.999250][ T45] usb 5-1: not running at top speed; connect to a high speed hub [ 68.011379][ T45] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.028191][ T45] usb 5-1: config 1 interface 0 has no altsetting 0 [ 68.040566][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 68.049700][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.058164][ T45] usb 5-1: Manufacturer: 탈ᖩ쒸阡翀⎇碭밨񦅡 [ 68.064119][ T1529] Invalid argument reading file caps for ./file0 [ 68.065572][ T45] usb 5-1: SerialNumber: syz [ 68.073568][ T1529] netlink: 104 bytes leftover after parsing attributes in process `syz.0.465'. [ 68.128234][ T1541] netlink: 'syz.0.470': attribute type 27 has an invalid length. [ 68.286162][ T1510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.295412][ T1510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.304732][ T1510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.314684][ T1510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.324336][ T1510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.332972][ T1510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.344583][ T45] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 68.358105][ T45] usb 5-1: USB disconnect, device number 9 [ 68.365546][ T45] usblp0: removed [ 69.100090][ T1564] netlink: 'syz.0.480': attribute type 27 has an invalid length. [ 69.160568][ T1566] FAULT_INJECTION: forcing a failure. [ 69.160568][ T1566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.173678][ T1566] CPU: 1 UID: 0 PID: 1566 Comm: syz.0.481 Not tainted syzkaller #0 e538f3f6a543b135812147031d083fd1f2699041 [ 69.173705][ T1566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 69.173722][ T1566] Call Trace: [ 69.173726][ T1566] [ 69.173731][ T1566] __dump_stack+0x21/0x30 [ 69.173752][ T1566] dump_stack_lvl+0x140/0x1c0 [ 69.173769][ T1566] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.173786][ T1566] ? check_stack_object+0x12b/0x150 [ 69.173810][ T1566] dump_stack+0x19/0x20 [ 69.173826][ T1566] should_fail_ex+0x3d7/0x530 [ 69.173841][ T1566] should_fail+0xf/0x20 [ 69.173853][ T1566] should_fail_usercopy+0x1e/0x30 [ 69.173867][ T1566] _copy_to_user+0x24/0xa0 [ 69.173884][ T1566] simple_read_from_buffer+0xed/0x160 [ 69.173906][ T1566] proc_fail_nth_read+0x1aa/0x220 [ 69.173920][ T1566] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 69.173933][ T1566] ? bpf_lsm_file_permission+0xd/0x20 [ 69.173946][ T1566] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 69.173959][ T1566] vfs_read+0x289/0xcb0 [ 69.173975][ T1566] ? __cfi_vfs_read+0x10/0x10 [ 69.173989][ T1566] ? __kasan_check_write+0x18/0x20 [ 69.174006][ T1566] ? mutex_lock+0x97/0x1d0 [ 69.174019][ T1566] ? __cfi_mutex_lock+0x10/0x10 [ 69.174032][ T1566] ? __fget_files+0x2c5/0x340 [ 69.174052][ T1566] ksys_read+0x145/0x260 [ 69.174066][ T1566] ? xfd_validate_state+0x68/0x140 [ 69.174083][ T1566] ? __cfi_ksys_read+0x10/0x10 [ 69.174099][ T1566] ? __kasan_check_write+0x18/0x20 [ 69.174113][ T1566] ? fpregs_restore_userregs+0x11c/0x260 [ 69.174128][ T1566] __x64_sys_read+0x7f/0x90 [ 69.174143][ T1566] x64_sys_call+0x2638/0x2ee0 [ 69.174161][ T1566] do_syscall_64+0x57/0xf0 [ 69.174180][ T1566] ? clear_bhb_loop+0x50/0xa0 [ 69.174199][ T1566] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.174217][ T1566] RIP: 0033:0x7fa60c15b78e [ 69.174228][ T1566] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 69.174240][ T1566] RSP: 002b:00007fa60d070fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 69.174255][ T1566] RAX: ffffffffffffffda RBX: 00007fa60d0716c0 RCX: 00007fa60c15b78e [ 69.174265][ T1566] RDX: 000000000000000f RSI: 00007fa60d0710a0 RDI: 0000000000000003 [ 69.174273][ T1566] RBP: 00007fa60d071090 R08: 0000000000000000 R09: 0000000000000000 [ 69.174281][ T1566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.174289][ T1566] R13: 00007fa60c416038 R14: 00007fa60c415fa0 R15: 00007fff27b29178 [ 69.174301][ T1566] [ 69.229937][ T363] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 69.489966][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 69.489981][ T36] audit: type=1400 audit(1770487764.796:288): avc: denied { setcheckreqprot } for pid=1577 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 69.526610][ T36] audit: type=1326 audit(1770487764.826:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1580 comm="syz.2.487" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb69959aeb9 code=0x0 [ 69.599856][ T363] usb 5-1: Using ep0 maxpacket: 32 [ 69.606222][ T363] usb 5-1: too many endpoints for config 0 interface 0 altsetting 3: 62, using maximum allowed: 30 [ 69.617926][ T363] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 62 [ 69.631216][ T363] usb 5-1: config 0 interface 0 has no altsetting 0 [ 69.637968][ T363] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 69.650246][ T363] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.663658][ T363] usb 5-1: config 0 descriptor?? [ 69.757202][ T1591] netlink: 'syz.0.490': attribute type 27 has an invalid length. [ 69.817559][ T1602] FAULT_INJECTION: forcing a failure. [ 69.817559][ T1602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.830878][ T1602] CPU: 1 UID: 0 PID: 1602 Comm: syz.0.494 Not tainted syzkaller #0 e538f3f6a543b135812147031d083fd1f2699041 [ 69.830912][ T1602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 69.830926][ T1602] Call Trace: [ 69.830934][ T1602] [ 69.830942][ T1602] __dump_stack+0x21/0x30 [ 69.830976][ T1602] dump_stack_lvl+0x140/0x1c0 [ 69.831002][ T1602] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.831030][ T1602] ? check_stack_object+0x81/0x150 [ 69.831055][ T1602] ? __virt_addr_valid+0x2a6/0x380 [ 69.831078][ T1602] dump_stack+0x19/0x20 [ 69.831103][ T1602] should_fail_ex+0x3d7/0x530 [ 69.831127][ T1602] should_fail+0xf/0x20 [ 69.831147][ T1602] should_fail_usercopy+0x1e/0x30 [ 69.831171][ T1602] _copy_from_user+0x20/0xa0 [ 69.831199][ T1602] do_sys_poll+0x2c8/0x1240 [ 69.831224][ T1602] ? poll_select_finish+0x640/0x640 [ 69.831245][ T1602] ? is_bpf_text_address+0x17b/0x1a0 [ 69.831272][ T1602] ? kernel_text_address+0xa9/0xe0 [ 69.831309][ T1602] ? __kasan_check_write+0x18/0x20 [ 69.831335][ T1602] ? proc_fail_nth_write+0x184/0x220 [ 69.831358][ T1602] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 69.831386][ T1602] ? set_user_sigmask+0xce/0x1c0 [ 69.831411][ T1602] ? __cfi_set_user_sigmask+0x10/0x10 [ 69.831437][ T1602] ? mutex_unlock+0x90/0x240 [ 69.831460][ T1602] ? __cfi_mutex_unlock+0x10/0x10 [ 69.831482][ T1602] ? __fget_files+0x2c5/0x340 [ 69.831521][ T1602] __se_sys_ppoll+0x20a/0x2b0 [ 69.831540][ T1602] ? fput+0x1a4/0x240 [ 69.831559][ T1602] ? __x64_sys_ppoll+0xf0/0xf0 [ 69.831578][ T1602] ? __cfi_ksys_write+0x10/0x10 [ 69.831606][ T1602] __x64_sys_ppoll+0xc3/0xf0 [ 69.831626][ T1602] x64_sys_call+0xd20/0x2ee0 [ 69.831656][ T1602] do_syscall_64+0x57/0xf0 [ 69.831686][ T1602] ? clear_bhb_loop+0x50/0xa0 [ 69.831717][ T1602] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.831748][ T1602] RIP: 0033:0x7fa60c19aeb9 [ 69.831765][ T1602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.831784][ T1602] RSP: 002b:00007fa60d071028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 69.831808][ T1602] RAX: ffffffffffffffda RBX: 00007fa60c415fa0 RCX: 00007fa60c19aeb9 [ 69.831824][ T1602] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 69.831839][ T1602] RBP: 00007fa60d071090 R08: 0000000000000000 R09: 0000000000000000 [ 69.831853][ T1602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.831866][ T1602] R13: 00007fa60c416038 R14: 00007fa60c415fa0 R15: 00007fff27b29178 [ 69.831901][ T1602] [ 70.115672][ T36] audit: type=1400 audit(1770487765.416:290): avc: denied { mount } for pid=1605 comm="syz.0.495" name="/" dev="overlay" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 70.271766][ T1619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 70.292268][ T36] audit: type=1400 audit(1770487765.600:291): avc: denied { write } for pid=1620 comm="syz.0.502" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 70.316117][ T36] audit: type=1400 audit(1770487765.600:292): avc: denied { setopt } for pid=1620 comm="syz.0.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.336482][ T36] audit: type=1400 audit(1770487765.600:293): avc: denied { bind } for pid=1620 comm="syz.0.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.589810][ T62] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 70.670948][ T1635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'. [ 70.680767][ T1635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'. [ 70.689596][ T1635] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 70.740077][ T62] usb 1-1: Using ep0 maxpacket: 8 [ 70.749165][ T62] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 70.759893][ T62] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 70.774590][ T62] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 70.783978][ T62] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.792434][ T62] usb 1-1: Product: syz [ 70.796727][ T62] usb 1-1: Manufacturer: syz [ 70.801622][ T62] usb 1-1: SerialNumber: syz [ 70.807354][ T62] usb 1-1: config 0 descriptor?? [ 70.828640][ T36] audit: type=1326 audit(2000000000.340:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1646 comm="syz.1.513" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe22679aeb9 code=0x0 [ 71.052111][ T1625] kvm: pic: level sensitive irq not supported [ 71.081628][ T62] usb 1-1: USB disconnect, device number 17 [ 71.639812][ T62] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 71.791026][ T62] usb 3-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 71.800155][ T62] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.808784][ T62] usb 3-1: config 0 descriptor?? [ 71.839847][ T45] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 71.989821][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 71.996161][ T45] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 72.004550][ T45] usb 1-1: config 0 has no interface number 0 [ 72.010687][ T45] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 72.020666][ T45] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 72.032812][ T363] usbhid 5-1:0.0: can't add hid device: -71 [ 72.033266][ T45] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 72.048093][ T363] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 72.050078][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.064040][ T45] usb 1-1: Product: syz [ 72.068223][ T45] usb 1-1: Manufacturer: syz [ 72.072872][ T45] usb 1-1: SerialNumber: syz [ 72.079927][ T363] usb 5-1: USB disconnect, device number 10 [ 72.094061][ T45] usb 1-1: config 0 descriptor?? [ 72.099401][ T1653] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 72.120524][ T1653] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 72.225036][ T62] usbhid 3-1:0.0: can't add hid device: -71 [ 72.231062][ T62] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 72.245690][ T62] usb 3-1: USB disconnect, device number 19 [ 72.260321][ T1670] netlink: 'syz.4.522': attribute type 8 has an invalid length. [ 72.328528][ T1653] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 72.336048][ T1653] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 72.365864][ T36] audit: type=1400 audit(2000000001.880:295): avc: denied { watch watch_reads } for pid=1674 comm="syz.1.524" path="/175/file0" dev="tmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 72.604325][ T1698] netlink: 'syz.1.534': attribute type 8 has an invalid length. [ 72.742829][ T1702] overlayfs: workdir and upperdir must be separate subtrees [ 72.751868][ T1702] tipc: Started in network mode [ 72.757247][ T1653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.758883][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 72.770980][ T1653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.773046][ T1702] tipc: Node identity ac14140f, cluster identity 4711 [ 72.786676][ T1702] tipc: New replicast peer: 255.255.255.255 [ 72.793067][ T1702] tipc: Enabled bearer , priority 10 [ 72.839370][ T36] audit: type=1400 audit(2000000002.347:296): avc: denied { connect } for pid=1705 comm="syz.2.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.859337][ T36] audit: type=1400 audit(2000000002.357:297): avc: denied { bind } for pid=1705 comm="syz.2.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.012514][ T1722] netlink: 'syz.2.543': attribute type 8 has an invalid length. [ 73.230387][ T1728] tipc: New replicast peer: 100.1.1.2 [ 73.344603][ T1744] veth0_virt_wifi: entered allmulticast mode [ 73.365891][ T1743] veth0_virt_wifi: left allmulticast mode [ 73.799833][ T31] tipc: Node number set to 2886997007 [ 74.479834][ T31] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 74.650913][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.661607][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.671845][ T31] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 74.688696][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 74.701583][ T31] usb 5-1: SerialNumber: syz [ 74.741819][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 74.741836][ T36] audit: type=1400 audit(2000000004.257:303): avc: denied { module_load } for pid=1792 comm="syz.2.573" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=14578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 74.769898][ T373] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.781906][ T45] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 74.811082][ T1796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 74.827391][ T45] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 74.858073][ T1802] netlink: 'syz.1.577': attribute type 4 has an invalid length. [ 74.865885][ T45] asix 1-1:0.251: probe with driver asix failed with error -71 [ 74.884793][ T45] usb 1-1: USB disconnect, device number 18 [ 74.912570][ T31] usb 5-1: 0:2 : does not exist [ 74.919640][ T31] usb 5-1: USB disconnect, device number 11 [ 75.000633][ T1812] netlink: 28 bytes leftover after parsing attributes in process `syz.0.581'. [ 75.197936][ T1818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.582'. [ 75.349842][ T45] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 75.489841][ T45] usb 1-1: device descriptor read/64, error -71 [ 75.583388][ T36] audit: type=1326 audit(2000000005.101:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1829 comm="syz.4.587" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f893519aeb9 code=0x0 [ 75.749850][ T45] usb 1-1: device descriptor read/64, error -71 [ 75.856792][ T1846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'. [ 75.866186][ T36] audit: type=1400 audit(2000000005.381:305): avc: denied { setopt } for pid=1845 comm="syz.2.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.885800][ T36] audit: type=1400 audit(2000000005.381:306): avc: denied { write } for pid=1845 comm="syz.2.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.905310][ T36] audit: type=1400 audit(2000000005.381:307): avc: denied { read } for pid=1845 comm="syz.2.594" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.925268][ T36] audit: type=1400 audit(2000000005.381:308): avc: denied { map } for pid=1845 comm="syz.2.594" path="socket:[15938]" dev="sockfs" ino=15938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.948237][ T36] audit: type=1400 audit(2000000005.381:309): avc: denied { read accept } for pid=1845 comm="syz.2.594" path="socket:[15938]" dev="sockfs" ino=15938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 76.029833][ T45] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 76.159857][ T45] usb 1-1: device descriptor read/64, error -71 [ 76.209844][ T364] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 76.359817][ T364] usb 3-1: Using ep0 maxpacket: 16 [ 76.366087][ T364] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 76.374346][ T364] usb 3-1: config 0 has no interface number 0 [ 76.381191][ T364] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 76.391205][ T364] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 76.402661][ T364] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 76.409889][ T45] usb 1-1: device descriptor read/64, error -71 [ 76.411889][ T364] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.426419][ T364] usb 3-1: Product: syz [ 76.430807][ T364] usb 3-1: Manufacturer: syz [ 76.435421][ T364] usb 3-1: SerialNumber: syz [ 76.440942][ T364] usb 3-1: config 0 descriptor?? [ 76.446194][ T1850] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 76.453437][ T1850] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 76.520280][ T45] usb usb1-port1: attempt power cycle [ 76.666162][ T1850] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 76.692758][ T1850] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 76.718296][ T1859] netlink: 'syz.1.600': attribute type 4 has an invalid length. [ 76.726720][ T1859] netlink: 3649 bytes leftover after parsing attributes in process `syz.1.600'. [ 76.859886][ T45] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 76.890852][ T45] usb 1-1: device descriptor read/8, error -71 [ 77.031154][ T45] usb 1-1: device descriptor read/8, error -71 [ 77.140877][ T1850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.148056][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.156022][ T1850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.309877][ T45] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 77.324790][ T36] audit: type=1326 audit(2000000006.833:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1871 comm="syz.4.605" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f893519aeb9 code=0x0 [ 77.351097][ T45] usb 1-1: device descriptor read/8, error -71 [ 77.481009][ T45] usb 1-1: device descriptor read/8, error -71 [ 77.589988][ T45] usb usb1-port1: unable to enumerate USB device [ 77.795424][ T1886] netlink: 'syz.1.611': attribute type 8 has an invalid length. [ 78.197390][ T1894] netlink: 'syz.4.615': attribute type 4 has an invalid length. [ 78.303809][ T1901] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 78.413877][ T36] audit: type=1326 audit(2000000007.923:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1908 comm="syz.1.623" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe22679aeb9 code=0x0 [ 78.509171][ T36] audit: type=1400 audit(2000000008.013:312): avc: denied { getopt } for pid=1912 comm="syz.4.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.539809][ T565] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 78.709843][ T565] usb 1-1: Using ep0 maxpacket: 32 [ 78.716309][ T565] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 78.724911][ T565] usb 1-1: config 0 has no interface number 0 [ 78.731378][ T565] usb 1-1: config 0 interface 184 has no altsetting 0 [ 78.740031][ T565] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 78.749358][ T565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.757551][ T565] usb 1-1: Product: syz [ 78.762018][ T565] usb 1-1: Manufacturer: syz [ 78.766692][ T565] usb 1-1: SerialNumber: syz [ 78.775835][ T565] usb 1-1: config 0 descriptor?? [ 78.784321][ T565] smsc75xx v1.0.0 [ 78.859824][ T363] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 78.994402][ T363] usb 5-1: device descriptor read/64, error -71 [ 79.054213][ T565] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 79.065712][ T565] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 79.075431][ T565] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 79.085796][ T565] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 79.097627][ T565] usb 1-1: USB disconnect, device number 23 [ 79.169820][ T863] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.169833][ T373] Bluetooth: hci0: command 0x1003 tx timeout [ 79.183499][ T364] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 79.194792][ T364] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 79.206825][ T364] asix 3-1:0.251: probe with driver asix failed with error -71 [ 79.215874][ T364] usb 3-1: USB disconnect, device number 20 [ 79.249839][ T363] usb 5-1: device descriptor read/64, error -71 [ 79.489860][ T363] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 79.589859][ T364] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 79.619852][ T363] usb 5-1: device descriptor read/64, error -71 [ 79.739842][ T364] usb 3-1: Using ep0 maxpacket: 8 [ 79.746129][ T364] usb 3-1: config 0 interface 0 has no altsetting 0 [ 79.752886][ T364] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 79.761997][ T364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.770692][ T364] usb 3-1: config 0 descriptor?? [ 79.859814][ T363] usb 5-1: device descriptor read/64, error -71 [ 79.979928][ T363] usb usb5-port1: attempt power cycle [ 80.189063][ T364] petalynx 0003:18B1:0037.0006: hidraw0: USB HID v0.05 Device [HID 18b1:0037] on usb-dummy_hcd.2-1/input0 [ 80.314978][ T1941] netlink: 37 bytes leftover after parsing attributes in process `syz.1.635'. [ 80.323987][ T363] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 80.341779][ T1943] netlink: 'syz.1.636': attribute type 2 has an invalid length. [ 80.355732][ T363] usb 5-1: device descriptor read/8, error -71 [ 80.364279][ T36] audit: type=1326 audit(2000000009.873:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1944 comm="syz.1.637" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe22679aeb9 code=0x0 [ 80.388396][ T364] usb 3-1: USB disconnect, device number 21 [ 80.493929][ T363] usb 5-1: device descriptor read/8, error -71 [ 80.508890][ T36] audit: type=1400 audit(2000000010.023:314): avc: denied { getattr } for pid=1949 comm="syz.0.639" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 80.539328][ T36] audit: type=1400 audit(2000000010.053:315): avc: denied { remount } for pid=1949 comm="syz.0.639" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 80.739954][ T363] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 80.760858][ T363] usb 5-1: device descriptor read/8, error -71 [ 80.799853][ T31] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 80.890842][ T363] usb 5-1: device descriptor read/8, error -71 [ 80.962719][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 80.971927][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.980966][ T31] usb 1-1: config 0 descriptor?? [ 81.002300][ T363] usb usb5-port1: unable to enumerate USB device [ 81.024424][ T1958] fuse: Unknown parameter 'f Yr045#ͩM) 8cȌN@]l@~eǯqˈSY>}ZN.ϾJN}jJ_*' [ 81.038071][ T36] audit: type=1400 audit(2000000010.543:316): avc: denied { ioctl } for pid=1957 comm="syz.2.643" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 81.391117][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 81.397282][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 81.405110][ T565] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 81.413660][ T31] usb 1-1: USB disconnect, device number 24 [ 81.549905][ T565] usb 3-1: device descriptor read/64, error -71 [ 81.676051][ T1973] kvm: kvm [1972]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 81.743270][ T36] audit: type=1400 audit(2000000011.253:317): avc: denied { setattr } for pid=1981 comm="syz.4.654" name="RAWv6" dev="sockfs" ino=16369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.789859][ T565] usb 3-1: device descriptor read/64, error -71 [ 81.807133][ T1989] : renamed from vlan0 (while UP) [ 81.813678][ T36] audit: type=1326 audit(2000000011.323:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1990 comm="syz.4.657" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f893519aeb9 code=0x0 [ 81.935097][ T1997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'. [ 82.021037][ T1999] netlink: 104 bytes leftover after parsing attributes in process `syz.1.661'. [ 82.030104][ T565] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 82.147103][ T2012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.667'. [ 82.156176][ T31] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 82.164052][ T565] usb 3-1: device descriptor read/64, error -71 [ 82.191347][ T2016] netlink: 'syz.1.669': attribute type 2 has an invalid length. [ 82.321044][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 82.327750][ T31] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 82.336848][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.345958][ T31] usb 1-1: config 0 descriptor?? [ 82.409866][ T565] usb 3-1: device descriptor read/64, error -71 [ 82.519901][ T565] usb usb3-port1: attempt power cycle [ 82.756536][ T31] playstation 0003:054C:09CC.0007: hidraw0: USB HID v0.00 Device [HID 054c:09cc] on usb-dummy_hcd.0-1/input0 [ 82.859862][ T565] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 82.890984][ T565] usb 3-1: device descriptor read/8, error -71 [ 82.956885][ T31] playstation 0003:054C:09CC.0007: Failed to retrieve feature with reportID 18: -71 [ 82.968527][ T31] playstation 0003:054C:09CC.0007: Failed to retrieve DualShock4 pairing info: -71 [ 82.978163][ T31] playstation 0003:054C:09CC.0007: Failed to get MAC address from DualShock4 [ 82.987274][ T31] playstation 0003:054C:09CC.0007: Failed to create dualshock4. [ 82.997088][ T31] playstation 0003:054C:09CC.0007: probe with driver playstation failed with error -71 [ 83.012490][ T31] usb 1-1: USB disconnect, device number 25 [ 83.021471][ T565] usb 3-1: device descriptor read/8, error -71 [ 83.120099][ T2034] netlink: 'syz.1.676': attribute type 4 has an invalid length. [ 83.271527][ T565] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 83.300823][ T565] usb 3-1: device descriptor read/8, error -71 [ 83.431001][ T565] usb 3-1: device descriptor read/8, error -71 [ 83.539937][ T565] usb usb3-port1: unable to enumerate USB device [ 83.615636][ T2050] netlink: 'syz.4.682': attribute type 8 has an invalid length. [ 83.672582][ T2057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.685'. [ 83.688849][ T2058] fuse: Bad value for 'fd' [ 83.693434][ T2058] fuse: Bad value for 'fd' [ 83.805098][ T2071] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=2071 comm=syz.1.691 [ 83.822328][ T2075] FAULT_INJECTION: forcing a failure. [ 83.822328][ T2075] name failslab, interval 1, probability 0, space 0, times 0 [ 83.822842][ T2074] netlink: 'syz.0.692': attribute type 8 has an invalid length. [ 83.846771][ T2075] CPU: 1 UID: 0 PID: 2075 Comm: syz.4.690 Not tainted syzkaller #0 e538f3f6a543b135812147031d083fd1f2699041 [ 83.846802][ T2075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 83.846816][ T2075] Call Trace: [ 83.846822][ T2075] [ 83.846830][ T2075] __dump_stack+0x21/0x30 [ 83.846861][ T2075] dump_stack_lvl+0x140/0x1c0 [ 83.846886][ T2075] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.846910][ T2075] ? __kasan_check_write+0x18/0x20 [ 83.846934][ T2075] ? proc_fail_nth_write+0x184/0x220 [ 83.846955][ T2075] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 83.846975][ T2075] dump_stack+0x19/0x20 [ 83.846998][ T2075] should_fail_ex+0x3d7/0x530 [ 83.847020][ T2075] should_failslab+0xac/0x100 [ 83.847047][ T2075] kmem_cache_alloc_noprof+0x42/0x410 [ 83.847071][ T2075] ? getname_flags+0xc5/0x700 [ 83.847098][ T2075] getname_flags+0xc5/0x700 [ 83.847120][ T2075] ? __cfi_mutex_unlock+0x10/0x10 [ 83.847142][ T2075] getname+0x1b/0x30 [ 83.847165][ T2075] do_sys_openat2+0xda/0x1d0 [ 83.847184][ T2075] ? fput+0x1a4/0x240 [ 83.847201][ T2075] ? do_sys_open+0x100/0x100 [ 83.847219][ T2075] ? ksys_write+0x1f3/0x260 [ 83.847242][ T2075] ? __cfi_ksys_write+0x10/0x10 [ 83.847266][ T2075] __x64_sys_openat+0x13a/0x170 [ 83.847288][ T2075] x64_sys_call+0xe69/0x2ee0 [ 83.847315][ T2075] do_syscall_64+0x57/0xf0 [ 83.847343][ T2075] ? clear_bhb_loop+0x50/0xa0 [ 83.847370][ T2075] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 83.847396][ T2075] RIP: 0033:0x7f893515b78e [ 83.847413][ T2075] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 83.847431][ T2075] RSP: 002b:00007f8936059b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 83.847459][ T2075] RAX: ffffffffffffffda RBX: 00007f893605a6c0 RCX: 00007f893515b78e [ 83.847474][ T2075] RDX: 0000000000160301 RSI: 00007f8936059c00 RDI: ffffffffffffff9c [ 83.847489][ T2075] RBP: 00007f8936059c00 R08: 0000000000000000 R09: 0000000000000000 [ 83.847502][ T2075] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 83.847515][ T2075] R13: 00007f8935416038 R14: 00007f8935415fa0 R15: 00007ffdf999a738 [ 83.847533][ T2075] [ 84.116325][ T329] tipc: Subscription rejected, illegal request [ 84.164481][ T36] audit: type=1326 audit(2000000013.663:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2087 comm="syz.1.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22679aeb9 code=0x7ffc0000 [ 84.234923][ T36] audit: type=1326 audit(2000000013.663:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2087 comm="syz.1.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22679aeb9 code=0x7ffc0000 [ 84.298268][ T36] audit: type=1326 audit(2000000013.663:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2087 comm="syz.1.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe22675b78e code=0x7ffc0000 [ 84.329860][ T565] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 84.341877][ T36] audit: type=1326 audit(2000000013.663:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2087 comm="syz.1.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe22675b78e code=0x7ffc0000 [ 84.490131][ T565] usb 1-1: Using ep0 maxpacket: 16 [ 84.506641][ T565] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.517784][ T565] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.529841][ T363] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 84.537972][ T565] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 84.555834][ T565] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.575020][ T565] usb 1-1: config 0 descriptor?? [ 84.621903][ T2100] netlink: 104 bytes leftover after parsing attributes in process `syz.2.703'. [ 84.692639][ T363] usb 5-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 84.702555][ T363] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.708849][ T2107] fuse: Bad value for 'fd' [ 84.712971][ T363] usb 5-1: config 0 descriptor?? [ 84.909837][ T1938] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 84.996316][ T565] hid-multitouch 0003:1FD2:6007.0008: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 85.060791][ T1938] usb 3-1: config index 0 descriptor too short (expected 45, got 43) [ 85.069006][ T1938] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 85.079208][ T1938] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.093448][ T1938] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 85.102559][ T1938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.110606][ T1938] usb 3-1: Product: syz [ 85.114772][ T1938] usb 3-1: Manufacturer: syz [ 85.119365][ T1938] usb 3-1: SerialNumber: syz [ 85.126052][ T1938] rtl8150 3-1:1.0: couldn't find required endpoints [ 85.134593][ T1938] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 85.142876][ T363] usbhid 5-1:0.0: can't add hid device: -71 [ 85.148822][ T363] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 85.158945][ T363] usb 5-1: USB disconnect, device number 16 [ 85.361932][ T363] usb 3-1: USB disconnect, device number 26 [ 85.647301][ T2127] netlink: 'syz.4.713': attribute type 8 has an invalid length. [ 85.914144][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 85.914161][ T36] audit: type=1400 audit(2000000015.423:338): avc: denied { setopt } for pid=2137 comm="syz.2.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 86.007471][ T36] audit: type=1400 audit(2000000015.513:339): avc: denied { accept } for pid=2141 comm="syz.2.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.338344][ T2151] netlink: 'syz.1.723': attribute type 8 has an invalid length. [ 86.439908][ T565] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 86.591244][ T565] usb 3-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 86.600437][ T565] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.609351][ T565] usb 3-1: config 0 descriptor?? [ 86.713834][ T36] audit: type=1400 audit(2000000016.223:340): avc: denied { create } for pid=2162 comm="syz.4.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 86.965933][ T363] usb 1-1: USB disconnect, device number 26 [ 87.004350][ T2172] netlink: 'syz.1.733': attribute type 8 has an invalid length. [ 87.020189][ T565] usbhid 3-1:0.0: can't add hid device: -71 [ 87.026378][ T565] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 87.038951][ T565] usb 3-1: USB disconnect, device number 27 [ 87.064014][ T2177] tipc: Started in network mode [ 87.069037][ T2177] tipc: Node identity 0eff171f7042, cluster identity 4711 [ 87.076454][ T2177] tipc: Enabled bearer , priority 8 [ 87.209637][ T2179] FAULT_INJECTION: forcing a failure. [ 87.209637][ T2179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.223203][ T2179] CPU: 0 UID: 0 PID: 2179 Comm: syz.4.735 Not tainted syzkaller #0 e538f3f6a543b135812147031d083fd1f2699041 [ 87.223234][ T2179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 87.223246][ T2179] Call Trace: [ 87.223253][ T2179] [ 87.223259][ T2179] __dump_stack+0x21/0x30 [ 87.223288][ T2179] dump_stack_lvl+0x140/0x1c0 [ 87.223311][ T2179] ? __cfi_dump_stack_lvl+0x10/0x10 [ 87.223335][ T2179] dump_stack+0x19/0x20 [ 87.223357][ T2179] should_fail_ex+0x3d7/0x530 [ 87.223378][ T2179] should_fail+0xf/0x20 [ 87.223395][ T2179] should_fail_usercopy+0x1e/0x30 [ 87.223415][ T2179] strncpy_from_user+0x29/0x270 [ 87.223435][ T2179] getname_flags+0x101/0x700 [ 87.223458][ T2179] ? __cfi_mutex_unlock+0x10/0x10 [ 87.223479][ T2179] getname+0x1b/0x30 [ 87.223500][ T2179] do_sys_openat2+0xda/0x1d0 [ 87.223518][ T2179] ? fput+0x1a4/0x240 [ 87.223534][ T2179] ? do_sys_open+0x100/0x100 [ 87.223550][ T2179] ? ksys_write+0x1f3/0x260 [ 87.223573][ T2179] ? __cfi_ksys_write+0x10/0x10 [ 87.223596][ T2179] __x64_sys_openat+0x13a/0x170 [ 87.223616][ T2179] x64_sys_call+0xe69/0x2ee0 [ 87.223640][ T2179] do_syscall_64+0x57/0xf0 [ 87.223678][ T2179] ? clear_bhb_loop+0x50/0xa0 [ 87.223703][ T2179] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 87.223727][ T2179] RIP: 0033:0x7f893515b78e [ 87.223743][ T2179] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 87.223759][ T2179] RSP: 002b:00007f8936059b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 87.223778][ T2179] RAX: ffffffffffffffda RBX: 00007f893605a6c0 RCX: 00007f893515b78e [ 87.223792][ T2179] RDX: 0000000000160301 RSI: 00007f8936059c00 RDI: ffffffffffffff9c [ 87.223804][ T2179] RBP: 00007f8936059c00 R08: 0000000000000000 R09: 0000000000000000 [ 87.223817][ T2179] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 87.223830][ T2179] R13: 00007f8935416038 R14: 00007f8935415fa0 R15: 00007ffdf999a738 [ 87.223849][ T2179] [ 87.703181][ T329] bridge_slave_1: left allmulticast mode [ 87.709031][ T329] bridge_slave_1: left promiscuous mode [ 87.715093][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.723035][ T329] bridge_slave_0: left allmulticast mode [ 87.728767][ T329] bridge_slave_0: left promiscuous mode [ 87.734662][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.843339][ T329] veth1_macvtap: left promiscuous mode [ 87.848954][ T329] veth0_vlan: left promiscuous mode [ 87.888812][ T2190] netlink: 104 bytes leftover after parsing attributes in process `syz.1.741'. [ 87.898589][ T565] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 88.015594][ T2194] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.022825][ T2194] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.029947][ T2194] bridge_slave_0: entered allmulticast mode [ 88.036457][ T2194] bridge_slave_0: entered promiscuous mode [ 88.045764][ T2194] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.052928][ T2194] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.061175][ T565] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.068402][ T2194] bridge_slave_1: entered allmulticast mode [ 88.072972][ T565] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.080143][ T2194] bridge_slave_1: entered promiscuous mode [ 88.088617][ T565] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.106736][ T565] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.115979][ T565] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.126544][ T31] tipc: Node number set to 2126321439 [ 88.139533][ T2203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.745'. [ 88.150105][ T36] audit: type=1400 audit(2000000017.643:341): avc: denied { mount } for pid=2201 comm="syz.1.745" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 88.156273][ T565] usb 3-1: config 0 descriptor?? [ 88.237304][ T2194] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.244428][ T2194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.251773][ T2194] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.258820][ T2194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.286149][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.293686][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.304362][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.311446][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.321014][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.328078][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.354858][ T2194] veth0_vlan: entered promiscuous mode [ 88.368959][ T2194] veth1_macvtap: entered promiscuous mode [ 88.388812][ T36] audit: type=1400 audit(2000000017.893:342): avc: denied { mount } for pid=2194 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 88.398020][ T2187] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2187 comm=syz.2.739 [ 88.489848][ T31] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 88.642568][ T36] audit: type=1400 audit(2000000018.153:343): avc: denied { setopt } for pid=2228 comm="syz.4.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.642970][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 88.676905][ T565] plantronics 0003:047F:FFFF.0009: item fetching failed at offset 3/15 [ 88.682702][ T36] audit: type=1400 audit(2000000018.183:344): avc: denied { ioctl } for pid=2228 comm="syz.4.752" path="socket:[17268]" dev="sockfs" ino=17268 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.707102][ T565] plantronics 0003:047F:FFFF.0009: parse failed [ 88.716263][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.724387][ T565] plantronics 0003:047F:FFFF.0009: probe with driver plantronics failed with error -22 [ 88.729629][ T2231] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 88.752060][ T31] usb 1-1: config 0 descriptor?? [ 88.764623][ T36] audit: type=1400 audit(2000000018.243:345): avc: denied { mount } for pid=2230 comm="syz.4.753" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 88.788068][ T36] audit: type=1400 audit(2000000018.243:346): avc: denied { mounton } for pid=2230 comm="syz.4.753" path="/5/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 88.853842][ T36] audit: type=1400 audit(2000000018.353:347): avc: denied { unmount } for pid=2194 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 88.878966][ T2237] netlink: 'syz.4.756': attribute type 8 has an invalid length. [ 88.934313][ T1938] usb 3-1: USB disconnect, device number 28 [ 88.954809][ T2235] overlayfs: failed to clone upperpath [ 89.164777][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 89.179866][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 89.188035][ T2257] netlink: 168 bytes leftover after parsing attributes in process `syz.1.765'. [ 89.198256][ T31] usb 1-1: USB disconnect, device number 27 [ 89.204242][ T565] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 89.253608][ T2260] netlink: 'syz.1.766': attribute type 8 has an invalid length. [ 89.326742][ T2263] SELinux: Context is not valid (left unmapped). [ 89.361018][ T565] usb 5-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 89.370193][ T565] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.378884][ T565] usb 5-1: config 0 descriptor?? [ 89.709842][ T31] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 89.715810][ T2277] syz.0.773: attempt to access beyond end of device [ 89.715810][ T2277] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 89.731112][ T2277] FAT-fs (loop0): unable to read boot sector [ 89.737555][ T2277] syz.0.773: attempt to access beyond end of device [ 89.737555][ T2277] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 89.751299][ T2277] FAT-fs (loop0): unable to read boot sector [ 89.788953][ T2243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.798320][ T2243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.818422][ T565] logitech-djreceiver 0003:046D:C534.000A: unknown main item tag 0x0 [ 89.826729][ T565] logitech-djreceiver 0003:046D:C534.000A: unknown main item tag 0x0 [ 89.834924][ T565] logitech-djreceiver 0003:046D:C534.000A: unknown main item tag 0x0 [ 89.843224][ T565] logitech-djreceiver 0003:046D:C534.000A: unknown main item tag 0x0 [ 89.851435][ T565] logitech-djreceiver 0003:046D:C534.000A: unknown main item tag 0x0 [ 89.859586][ T565] logitech-djreceiver 0003:046D:C534.000A: unknown main item tag 0x0 [ 89.870934][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.881091][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.895424][ T31] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 89.904509][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.912543][ T31] usb 3-1: Product: syz [ 89.916713][ T31] usb 3-1: Manufacturer: syz [ 89.921336][ T31] usb 3-1: SerialNumber: syz [ 89.926840][ T31] usb 3-1: config 0 descriptor?? [ 89.933157][ T31] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 90.015792][ T31] usb 5-1: USB disconnect, device number 17 [ 90.136660][ T1938] usb 3-1: USB disconnect, device number 29 [ 90.532221][ T2299] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 90.542344][ T2299] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 90.777900][ T2317] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only [ 90.894342][ T2324] FAULT_INJECTION: forcing a failure. [ 90.894342][ T2324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.907508][ T2324] CPU: 0 UID: 0 PID: 2324 Comm: syz.4.792 Not tainted syzkaller #0 e538f3f6a543b135812147031d083fd1f2699041 [ 90.907545][ T2324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 90.907558][ T2324] Call Trace: [ 90.907566][ T2324] [ 90.907575][ T2324] __dump_stack+0x21/0x30 [ 90.907609][ T2324] dump_stack_lvl+0x140/0x1c0 [ 90.907636][ T2324] ? __cfi_dump_stack_lvl+0x10/0x10 [ 90.907662][ T2324] ? __kasan_check_write+0x18/0x20 [ 90.907688][ T2324] ? kvm_arch_vcpu_load+0x683/0x8f0 [ 90.907718][ T2324] dump_stack+0x19/0x20 [ 90.907743][ T2324] should_fail_ex+0x3d7/0x530 [ 90.907767][ T2324] should_fail+0xf/0x20 [ 90.907787][ T2324] should_fail_usercopy+0x1e/0x30 [ 90.907811][ T2324] _copy_from_user+0x20/0xa0 [ 90.907839][ T2324] kvm_arch_vcpu_ioctl+0x62d/0x2d90 [ 90.907876][ T2324] ? avc_has_perm+0x155/0x240 [ 90.907902][ T2324] ? __cfi_avc_has_perm+0x10/0x10 [ 90.907927][ T2324] ? kasan_save_alloc_info+0x40/0x50 [ 90.907950][ T2324] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 90.907984][ T2324] ? selinux_file_open+0x46c/0x630 [ 90.908007][ T2324] ? __cfi_selinux_file_open+0x10/0x10 [ 90.908035][ T2324] ? is_bpf_text_address+0x17b/0x1a0 [ 90.908061][ T2324] ? kernel_text_address+0xa9/0xe0 [ 90.908087][ T2324] ? __kernel_text_address+0x11/0x40 [ 90.908111][ T2324] ? __asan_set_shadow_00+0x12/0x20 [ 90.908132][ T2324] ? do_vfs_ioctl+0x182d/0x2010 [ 90.908163][ T2324] ? arch_stack_walk+0x10a/0x170 [ 90.908192][ T2324] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 90.908224][ T2324] ? _parse_integer_limit+0x195/0x1e0 [ 90.908245][ T2324] ? _parse_integer+0x2e/0x40 [ 90.908264][ T2324] ? kstrtoull+0x13b/0x1e0 [ 90.908284][ T2324] ? kstrtouint+0x78/0xf0 [ 90.908303][ T2324] ? ioctl_has_perm+0x1bc/0x500 [ 90.908325][ T2324] ? __asan_memcpy+0x5a/0x80 [ 90.908351][ T2324] ? ioctl_has_perm+0x408/0x500 [ 90.908374][ T2324] ? has_cap_mac_admin+0xd0/0xd0 [ 90.908395][ T2324] ? __kasan_check_write+0x18/0x20 [ 90.908419][ T2324] ? mutex_lock_killable+0x97/0x1d0 [ 90.908443][ T2324] ? __cfi_mutex_lock_killable+0x10/0x10 [ 90.908467][ T2324] ? proc_fail_nth_write+0x184/0x220 [ 90.908488][ T2324] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 90.908511][ T2324] kvm_vcpu_ioctl+0x7da/0x1000 [ 90.908543][ T2324] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 90.908571][ T2324] ? __cfi_vfs_write+0x10/0x10 [ 90.908597][ T2324] ? __kasan_check_write+0x18/0x20 [ 90.908622][ T2324] ? mutex_unlock+0x90/0x240 [ 90.908643][ T2324] ? __cfi_mutex_unlock+0x10/0x10 [ 90.908665][ T2324] ? __fget_files+0x2c5/0x340 [ 90.908694][ T2324] ? __fget_files+0x2c5/0x340 [ 90.908723][ T2324] ? bpf_lsm_file_ioctl+0xd/0x20 [ 90.908743][ T2324] ? security_file_ioctl+0x3e/0x110 [ 90.908763][ T2324] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 90.908791][ T2324] __se_sys_ioctl+0x132/0x1b0 [ 90.908822][ T2324] __x64_sys_ioctl+0x7f/0xa0 [ 90.908858][ T2324] x64_sys_call+0x1878/0x2ee0 [ 90.908888][ T2324] do_syscall_64+0x57/0xf0 [ 90.908917][ T2324] ? clear_bhb_loop+0x50/0xa0 [ 90.908947][ T2324] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 90.908975][ T2324] RIP: 0033:0x7f327bf9aeb9 [ 90.908993][ T2324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.909011][ T2324] RSP: 002b:00007f327cef2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.909034][ T2324] RAX: ffffffffffffffda RBX: 00007f327c215fa0 RCX: 00007f327bf9aeb9 [ 90.909051][ T2324] RDX: 0000200000000380 RSI: 000000004008ae90 RDI: 0000000000000005 [ 90.909066][ T2324] RBP: 00007f327cef2090 R08: 0000000000000000 R09: 0000000000000000 [ 90.909080][ T2324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.909093][ T2324] R13: 00007f327c216038 R14: 00007f327c215fa0 R15: 00007fff63c93d78 [ 90.909113][ T2324] [ 91.358193][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 91.358211][ T36] audit: type=1400 audit(2000000020.863:354): avc: denied { setattr } for pid=2329 comm="syz.4.795" name="PACKET" dev="sockfs" ino=18484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.535175][ T36] audit: type=1326 audit(2000000021.043:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2338 comm="syz.0.799" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa60c19aeb9 code=0x0 [ 91.709823][ T31] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 91.751873][ T565] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 91.869813][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 91.876064][ T31] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 91.884285][ T31] usb 5-1: config 0 has no interface number 0 [ 91.890425][ T565] usb 3-1: device descriptor read/64, error -71 [ 91.897015][ T31] usb 5-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 8.d0 [ 91.906162][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.915201][ T31] usb 5-1: config 0 descriptor?? [ 91.921925][ T31] usb 5-1: NDI device with a latency value of 1 [ 92.122136][ T31] ftdi_sio 5-1:0.255: FTDI USB Serial Device converter detected [ 92.130153][ T565] usb 3-1: device descriptor read/64, error -71 [ 92.136779][ T31] ftdi_sio ttyUSB0: unknown device type: 0x8d0 [ 92.144680][ T31] usb 5-1: USB disconnect, device number 18 [ 92.151455][ T31] ftdi_sio 5-1:0.255: device disconnected [ 92.216847][ T2352] netlink: 'syz.1.803': attribute type 8 has an invalid length. [ 92.238914][ T2354] netlink: 72 bytes leftover after parsing attributes in process `syz.1.804'. [ 92.248465][ T36] audit: type=1326 audit(2000000021.753:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2353 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22679aeb9 code=0x7ffc0000 [ 92.271883][ T36] audit: type=1326 audit(2000000021.753:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2353 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22679aeb9 code=0x7ffc0000 [ 92.372149][ T565] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 92.510391][ T565] usb 3-1: device descriptor read/64, error -71 [ 92.587367][ T36] audit: type=1400 audit(2000000022.093:358): avc: denied { listen } for pid=2355 comm="syz.0.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.649257][ T36] audit: type=1326 audit(2000000022.153:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2360 comm="syz.4.807" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f327bf9aeb9 code=0x0 [ 92.681389][ T2363] FAULT_INJECTION: forcing a failure. [ 92.681389][ T2363] name failslab, interval 1, probability 0, space 0, times 0 [ 92.694129][ T2363] CPU: 0 UID: 0 PID: 2363 Comm: syz.0.806 Not tainted syzkaller #0 e538f3f6a543b135812147031d083fd1f2699041 [ 92.694157][ T2363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 92.694170][ T2363] Call Trace: [ 92.694175][ T2363] [ 92.694182][ T2363] __dump_stack+0x21/0x30 [ 92.694210][ T2363] dump_stack_lvl+0x140/0x1c0 [ 92.694233][ T2363] ? __cfi_dump_stack_lvl+0x10/0x10 [ 92.694257][ T2363] dump_stack+0x19/0x20 [ 92.694278][ T2363] should_fail_ex+0x3d7/0x530 [ 92.694298][ T2363] should_failslab+0xac/0x100 [ 92.694326][ T2363] kmem_cache_alloc_noprof+0x42/0x410 [ 92.694343][ T2363] ? security_file_alloc+0x49/0x220 [ 92.694355][ T2363] ? kasan_save_alloc_info+0x40/0x50 [ 92.694369][ T2363] security_file_alloc+0x49/0x220 [ 92.694388][ T2363] init_file+0x9e/0x210 [ 92.694407][ T2363] alloc_empty_file+0xd9/0x270 [ 92.694427][ T2363] path_openat+0xfe/0x34f0 [ 92.694447][ T2363] ? stack_depot_save_flags+0x38/0x800 [ 92.694463][ T2363] ? kasan_save_track+0x3e/0x80 [ 92.694480][ T2363] ? kasan_save_alloc_info+0x40/0x50 [ 92.694494][ T2363] ? __kasan_slab_alloc+0x73/0x90 [ 92.694512][ T2363] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 92.694528][ T2363] ? getname+0x1b/0x30 [ 92.694543][ T2363] ? do_sys_openat2+0xda/0x1d0 [ 92.694555][ T2363] ? __x64_sys_openat+0x13a/0x170 [ 92.694568][ T2363] ? x64_sys_call+0xe69/0x2ee0 [ 92.694586][ T2363] ? do_syscall_64+0x57/0xf0 [ 92.694605][ T2363] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 92.694625][ T2363] ? do_filp_open+0x440/0x440 [ 92.694646][ T2363] do_filp_open+0x1f5/0x440 [ 92.694666][ T2363] ? __cfi_do_filp_open+0x10/0x10 [ 92.694688][ T2363] ? alloc_fd+0x4e6/0x5a0 [ 92.694705][ T2363] do_sys_openat2+0x134/0x1d0 [ 92.694718][ T2363] ? fput+0x1a4/0x240 [ 92.694728][ T2363] ? do_sys_open+0x100/0x100 [ 92.694740][ T2363] ? ksys_write+0x1f3/0x260 [ 92.694755][ T2363] ? __cfi_ksys_write+0x10/0x10 [ 92.694772][ T2363] __x64_sys_openat+0x13a/0x170 [ 92.694785][ T2363] x64_sys_call+0xe69/0x2ee0 [ 92.694803][ T2363] do_syscall_64+0x57/0xf0 [ 92.694821][ T2363] ? clear_bhb_loop+0x50/0xa0 [ 92.694839][ T2363] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 92.694856][ T2363] RIP: 0033:0x7fa60c15b78e [ 92.694868][ T2363] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 92.694879][ T2363] RSP: 002b:00007fa60d070b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 92.694894][ T2363] RAX: ffffffffffffffda RBX: 00007fa60d0716c0 RCX: 00007fa60c15b78e [ 92.694904][ T2363] RDX: 0000000000160301 RSI: 00007fa60d070c00 RDI: ffffffffffffff9c [ 92.694914][ T2363] RBP: 00007fa60d070c00 R08: 0000000000000000 R09: 0000000000000000 [ 92.694922][ T2363] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 92.694931][ T2363] R13: 00007fa60c416038 R14: 00007fa60c415fa0 R15: 00007fff27b29178 [ 92.694943][ T2363] [ 92.989958][ T565] usb 3-1: device descriptor read/64, error -71 [ 93.030917][ T2370] netlink: 'syz.1.810': attribute type 4 has an invalid length. [ 93.099903][ T565] usb usb3-port1: attempt power cycle [ 93.249889][ T31] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 93.401090][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 93.410294][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.418991][ T31] usb 1-1: config 0 descriptor?? [ 93.439801][ T565] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 93.460890][ T565] usb 3-1: device descriptor read/8, error -71 [ 93.522588][ T2377] netlink: 'syz.4.813': attribute type 8 has an invalid length. [ 93.590918][ T565] usb 3-1: device descriptor read/8, error -71 [ 93.658126][ T2384] process '/newroot/300/file0' started with executable stack [ 93.694938][ T36] audit: type=1326 audit(2000000023.203:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2388 comm="syz.1.818" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe22679aeb9 code=0x0 [ 93.743177][ T36] audit: type=1326 audit(2000000023.253:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2390 comm="syz.4.819" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f327bf9aeb9 code=0x0 [ 93.828441][ T31] magicmouse 0003:05AC:0324.000B: unknown main item tag 0x0 [ 93.835906][ T31] magicmouse 0003:05AC:0324.000B: unknown main item tag 0x0 [ 93.843280][ T565] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 93.850930][ T31] magicmouse 0003:05AC:0324.000B: unknown main item tag 0x0 [ 93.858258][ T31] magicmouse 0003:05AC:0324.000B: unknown main item tag 0x0 [ 93.869382][ T31] magicmouse 0003:05AC:0324.000B: unknown main item tag 0x0 [ 93.876774][ T31] magicmouse 0003:05AC:0324.000B: unknown main item tag 0x0 [ 93.885615][ T565] usb 3-1: device descriptor read/8, error -71 [ 93.894232][ T31] magicmouse 0003:05AC:0324.000B: unknown main item tag 0x0 [ 93.902440][ T31] magicmouse 0003:05AC:0324.000B: hidraw0: USB HID v10.00 Device [HID 05ac:0324] on usb-dummy_hcd.0-1/input0 [ 94.021421][ T565] usb 3-1: device descriptor read/8, error -71 [ 94.028756][ T9] usb 1-1: USB disconnect, device number 28 [ 94.129945][ T565] usb usb3-port1: unable to enumerate USB device [ 94.556430][ T36] audit: type=1326 audit(2000000024.063:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2398 comm="syz.1.821" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe22679aeb9 code=0x0 [ 94.599340][ T2403] netlink: 'syz.4.823': attribute type 8 has an invalid length. [ 94.620206][ T36] audit: type=1400 audit(2000000024.133:363): avc: denied { map } for pid=2406 comm="syz.4.824" path="socket:[18607]" dev="sockfs" ino=18607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.644971][ T2407] netlink: 'syz.4.824': attribute type 4 has an invalid length. [ 94.654138][ T2408] netlink: 'syz.4.824': attribute type 4 has an invalid length. [ 94.662055][ T2408] netlink: 'syz.4.824': attribute type 4 has an invalid length. [ 94.670909][ T2407] netlink: 'syz.4.824': attribute type 4 has an invalid length. [ 94.799859][ T363] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 94.939847][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 94.951431][ T363] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 94.962363][ T363] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.973355][ T1938] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 94.980990][ T363] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.990857][ T363] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 95.004865][ T363] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 95.014031][ T363] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 95.022280][ T363] usb 1-1: Manufacturer: syz [ 95.028782][ T363] usb 1-1: config 0 descriptor?? [ 95.099848][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 95.106073][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.117101][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.126885][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 95.139827][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 95.148975][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.157831][ T9] usb 5-1: config 0 descriptor?? [ 95.162870][ T1938] usb 3-1: Using ep0 maxpacket: 16 [ 95.170374][ T1938] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.180800][ T1938] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.191242][ T1938] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.200364][ T1938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.208409][ T1938] usb 3-1: Product: syz [ 95.212632][ T1938] usb 3-1: Manufacturer: syz [ 95.217336][ T1938] usb 3-1: SerialNumber: syz [ 95.426178][ T1938] usb 3-1: 0:2 : does not exist [ 95.433074][ T1938] usb 3-1: USB disconnect, device number 34 [ 95.439607][ T2401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.450003][ T2401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.458227][ T413] udevd[413]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 95.474859][ T363] usbhid 1-1:0.0: can't add hid device: -71 [ 95.480870][ T363] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 95.490043][ T363] usb 1-1: USB disconnect, device number 29 [ 95.573674][ T9] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 95.584337][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 95.590766][ T9] HID 045e:07da: Invalid code 768 type 1 [ 95.596532][ T9] HID 045e:07da: Invalid code 769 type 1 [ 95.602223][ T9] HID 045e:07da: Invalid code 770 type 1 [ 95.607925][ T9] HID 045e:07da: Invalid code 771 type 1 [ 95.613764][ T9] HID 045e:07da: Invalid code 772 type 1 [ 95.619515][ T9] HID 045e:07da: Invalid code 773 type 1 [ 95.625426][ T9] HID 045e:07da: Invalid code 774 type 1 [ 95.631239][ T9] HID 045e:07da: Invalid code 775 type 1 [ 95.636885][ T9] HID 045e:07da: Invalid code 776 type 1 [ 95.649375][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000C/input/input8 [ 95.670282][ T9] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 95.776208][ T9] usb 5-1: USB disconnect, device number 19 [ 96.296598][ T2433] netlink: 'syz.4.833': attribute type 1 has an invalid length. [ 96.304432][ T2433] netlink: 'syz.4.833': attribute type 2 has an invalid length. [ 96.312271][ T31] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 96.433614][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 96.433631][ T36] audit: type=1400 audit(2000000025.943:366): avc: denied { mount } for pid=2442 comm="syz.4.837" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 96.446657][ T2443] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 96.480864][ T31] usb 3-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 96.490012][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.498627][ T31] usb 3-1: config 0 descriptor?? [ 96.709809][ T565] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 96.860819][ T565] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.871089][ T565] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.880818][ T565] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 96.890037][ T565] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 96.898166][ T565] usb 5-1: SerialNumber: syz [ 96.907986][ T31] magicmouse 0003:05AC:0324.000D: unknown main item tag 0x0 [ 96.917212][ T31] magicmouse 0003:05AC:0324.000D: unknown main item tag 0x0 [ 96.924622][ T31] magicmouse 0003:05AC:0324.000D: unknown main item tag 0x0 [ 96.932032][ T31] magicmouse 0003:05AC:0324.000D: unknown main item tag 0x0 [ 96.939370][ T31] magicmouse 0003:05AC:0324.000D: unknown main item tag 0x0 [ 96.947060][ T31] magicmouse 0003:05AC:0324.000D: unknown main item tag 0x0 [ 96.954415][ T36] audit: type=1400 audit(2000000026.463:367): avc: denied { bind } for pid=2449 comm="syz.1.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.973541][ T31] magicmouse 0003:05AC:0324.000D: unknown main item tag 0x0 [ 96.981925][ T31] magicmouse 0003:05AC:0324.000D: hidraw0: USB HID v10.00 Device [HID 05ac:0324] on usb-dummy_hcd.2-1/input0 [ 96.997307][ T36] audit: type=1400 audit(2000000026.493:368): avc: denied { read } for pid=2449 comm="syz.1.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.036949][ T36] audit: type=1400 audit(2000000026.543:369): avc: denied { map } for pid=2454 comm="syz.1.842" path="socket:[18760]" dev="sockfs" ino=18760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 97.069865][ T412] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 97.109050][ T2443] overlayfs: failed to look up (tracing) for ino (-66) [ 97.109464][ T31] usb 3-1: USB disconnect, device number 35 [ 97.122895][ T565] usb 5-1: 0:2 : does not exist [ 97.133153][ T565] usb 5-1: USB disconnect, device number 20 [ 97.144189][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 97.219921][ T412] usb 1-1: Using ep0 maxpacket: 16 [ 97.226217][ T412] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.236456][ T412] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.246731][ T412] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.255847][ T412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.264048][ T412] usb 1-1: Product: syz [ 97.268206][ T412] usb 1-1: Manufacturer: syz [ 97.272835][ T412] usb 1-1: SerialNumber: syz [ 97.481848][ T412] usb 1-1: 0:2 : does not exist [ 97.488433][ T412] usb 1-1: USB disconnect, device number 30 [ 97.499777][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 97.605222][ T36] audit: type=1326 audit(2000000027.113:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2462 comm="syz.1.846" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe22679aeb9 code=0x0 [ 97.650771][ T36] audit: type=1400 audit(2000000027.163:371): avc: denied { unmount } for pid=2194 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 97.909832][ T565] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 98.100224][ T565] usb 3-1: Using ep0 maxpacket: 16 [ 98.110939][ T565] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 98.119845][ T565] usb 3-1: config 0 has no interface number 0 [ 98.131202][ T565] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 98.149872][ T565] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 98.166813][ T565] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 98.176182][ T565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.190909][ T565] usb 3-1: Product: syz [ 98.198451][ T565] usb 3-1: Manufacturer: syz [ 98.205252][ T565] usb 3-1: SerialNumber: syz [ 98.214897][ T565] usb 3-1: config 0 descriptor?? [ 98.224504][ T2465] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 98.231963][ T2465] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 98.442097][ T2465] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 98.449465][ T2465] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 98.679819][ T412] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 98.776537][ T2496] usb usb8: usbfs: process 2496 (syz.4.861) did not claim interface 0 before use [ 98.839793][ T412] usb 1-1: Using ep0 maxpacket: 32 [ 98.845977][ T412] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 98.854406][ T412] usb 1-1: config 0 has no interface number 0 [ 98.860872][ T412] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 98.871100][ T412] usb 1-1: config 0 interface 196 has no altsetting 0 [ 98.871377][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 98.880407][ T412] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 98.893364][ T412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.901440][ T412] usb 1-1: Product: syz [ 98.905625][ T412] usb 1-1: Manufacturer: syz [ 98.910265][ T412] usb 1-1: SerialNumber: syz [ 98.915488][ T412] usb 1-1: config 0 descriptor?? [ 98.920775][ T2479] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 99.017897][ T36] audit: type=1326 audit(2000000028.532:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2500 comm="syz.1.863" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe22679aeb9 code=0x0 [ 99.135704][ T412] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 99.143884][ T412] ipheth 1-1:0.196: probe with driver ipheth failed with error -71 [ 99.155251][ T412] usb 1-1: USB disconnect, device number 31 [ 99.228289][ T36] audit: type=1400 audit(2000000028.742:373): avc: denied { setcheckreqprot } for pid=2506 comm="syz.0.864" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 99.229319][ T2507] netlink: 104 bytes leftover after parsing attributes in process `syz.0.864'. [ 99.299997][ T2510] FAULT_INJECTION: forcing a failure. [ 99.299997][ T2510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.313264][ T2510] CPU: 1 UID: 0 PID: 2510 Comm: syz.0.865 Not tainted syzkaller #0 e538f3f6a543b135812147031d083fd1f2699041 [ 99.313291][ T2510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 99.313304][ T2510] Call Trace: [ 99.313310][ T2510] [ 99.313317][ T2510] __dump_stack+0x21/0x30 [ 99.313345][ T2510] dump_stack_lvl+0x140/0x1c0 [ 99.313368][ T2510] ? __cfi_dump_stack_lvl+0x10/0x10 [ 99.313397][ T2510] ? check_stack_object+0x12b/0x150 [ 99.313425][ T2510] dump_stack+0x19/0x20 [ 99.313441][ T2510] should_fail_ex+0x3d7/0x530 [ 99.313457][ T2510] should_fail+0xf/0x20 [ 99.313470][ T2510] should_fail_usercopy+0x1e/0x30 [ 99.313486][ T2510] _copy_to_user+0x24/0xa0 [ 99.313504][ T2510] simple_read_from_buffer+0xed/0x160 [ 99.313527][ T2510] proc_fail_nth_read+0x1aa/0x220 [ 99.313542][ T2510] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 99.313556][ T2510] ? bpf_lsm_file_permission+0xd/0x20 [ 99.313570][ T2510] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 99.313602][ T2510] vfs_read+0x289/0xcb0 [ 99.313626][ T2510] ? __cfi_vfs_read+0x10/0x10 [ 99.313649][ T2510] ? __kasan_check_write+0x18/0x20 [ 99.313672][ T2510] ? mutex_lock+0x97/0x1d0 [ 99.313695][ T2510] ? __cfi_mutex_lock+0x10/0x10 [ 99.313708][ T2510] ? __fget_files+0x2c5/0x340 [ 99.313730][ T2510] ksys_read+0x145/0x260 [ 99.313746][ T2510] ? __cfi_ksys_read+0x10/0x10 [ 99.313763][ T2510] ? __kasan_check_read+0x15/0x20 [ 99.313780][ T2510] __x64_sys_read+0x7f/0x90 [ 99.313796][ T2510] x64_sys_call+0x2638/0x2ee0 [ 99.313815][ T2510] do_syscall_64+0x57/0xf0 [ 99.313835][ T2510] ? clear_bhb_loop+0x50/0xa0 [ 99.313856][ T2510] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.313875][ T2510] RIP: 0033:0x7fa60c15b78e [ 99.313887][ T2510] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 99.313900][ T2510] RSP: 002b:00007fa60d070fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.313914][ T2510] RAX: ffffffffffffffda RBX: 00007fa60d0716c0 RCX: 00007fa60c15b78e [ 99.313925][ T2510] RDX: 000000000000000f RSI: 00007fa60d0710a0 RDI: 0000000000000004 [ 99.313935][ T2510] RBP: 00007fa60d071090 R08: 0000000000000000 R09: 0000000000000000 [ 99.313944][ T2510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.313952][ T2510] R13: 00007fa60c416038 R14: 00007fa60c415fa0 R15: 00007fff27b29178 [ 99.313971][ T2510] [ 99.564790][ T2512] netlink: 104 bytes leftover after parsing attributes in process `syz.0.866'. [ 99.629413][ T2514] netlink: 'syz.4.867': attribute type 4 has an invalid length. [ 99.809843][ T412] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 99.864033][ T2522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 99.960772][ T412] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.970622][ T412] usb 1-1: New USB device found, idVendor=046d, idProduct=2b14, bcdDevice= 0.00 [ 99.979699][ T412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.979974][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 99.995877][ T412] usb 1-1: config 0 descriptor?? [ 100.140935][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 100.150111][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.159173][ T9] usb 5-1: config 0 descriptor?? [ 100.405941][ T412] hid-generic 0003:046D:2B14.000E: hidraw0: USB HID v0.01 Device [HID 046d:2b14] on usb-dummy_hcd.0-1/input0 [ 100.520788][ T2533] netlink: 'syz.1.876': attribute type 8 has an invalid length. [ 100.604714][ T412] usb 1-1: USB disconnect, device number 32 [ 100.769097][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 100.778121][ T2542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.880'. [ 100.778123][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 100.782004][ T9] usb 5-1: USB disconnect, device number 21 [ 100.929847][ T373] Bluetooth: hci0: command 0x1003 tx timeout [ 100.935933][ T863] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 100.944998][ T565] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 100.955236][ T565] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 100.967285][ T565] asix 3-1:0.251: probe with driver asix failed with error -71 [ 100.975871][ T565] usb 3-1: USB disconnect, device number 36 [ 101.056131][ T36] audit: type=1400 audit(2000000030.568:374): avc: denied { write } for pid=2549 comm="syz.2.884" name="mcfilter" dev="proc" ino=4026532588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 101.122984][ T2556] netlink: 'syz.0.886': attribute type 8 has an invalid length. [ 101.342697][ T2576] netlink: 'syz.1.896': attribute type 8 has an invalid length. [ 101.372393][ T2580] netlink: 'syz.1.898': attribute type 4 has an invalid length. [ 101.439854][ T565] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 101.559865][ T412] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 101.599829][ T565] usb 3-1: Using ep0 maxpacket: 16 [ 101.605983][ T565] usb 3-1: config index 0 descriptor too short (expected 64967, got 165) [ 101.614650][ T565] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.624780][ T565] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.635269][ T565] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.644361][ T565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.652473][ T565] usb 3-1: Product: syz [ 101.656652][ T565] usb 3-1: Manufacturer: syz [ 101.661328][ T565] usb 3-1: SerialNumber: syz [ 101.709796][ T412] usb 5-1: Using ep0 maxpacket: 32 [ 101.715987][ T412] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.726911][ T412] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.737983][ T412] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 101.750882][ T412] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 101.759952][ T412] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.768782][ T412] usb 5-1: config 0 descriptor?? [ 101.879615][ T565] usb 3-1: 0:2 : does not exist [ 101.886450][ T565] usb 3-1: USB disconnect, device number 37 [ 101.896538][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 101.909942][ T45] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 101.983864][ T2600] netlink: 'syz.1.906': attribute type 8 has an invalid length. [ 102.029443][ T36] audit: type=1400 audit(2000000031.538:375): avc: denied { shutdown } for pid=2605 comm="syz.1.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.069803][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 102.075925][ T45] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 102.084322][ T45] usb 1-1: config 0 has no interface number 0 [ 102.090468][ T45] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 102.100430][ T45] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 102.112041][ T45] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 102.121146][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.129143][ T45] usb 1-1: Product: syz [ 102.133366][ T45] usb 1-1: Manufacturer: syz [ 102.137980][ T45] usb 1-1: SerialNumber: syz [ 102.143376][ T45] usb 1-1: config 0 descriptor?? [ 102.148674][ T2597] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 102.156035][ T2597] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 102.177981][ T412] hid (null): report_id 2868290997 is invalid [ 102.184144][ T412] hid (null): unknown global tag 0xc [ 102.189517][ T412] hid (null): unknown global tag 0x1f [ 102.198809][ T412] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.000F/input/input9 [ 102.213630][ T412] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.000F/input/input10 [ 102.230298][ T412] kye 0003:0458:5011.000F: input,hiddev96,hidraw0: USB HID v0.06 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 102.363882][ T2597] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 102.371139][ T2597] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 102.380644][ T10] usb 5-1: USB disconnect, device number 22 [ 102.783392][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 102.817282][ T2622] netlink: 'syz.2.916': attribute type 8 has an invalid length. [ 102.870919][ T2628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.919'. [ 102.879952][ T2629] netlink: 268 bytes leftover after parsing attributes in process `syz.2.919'. [ 102.913461][ T2633] netlink: 104 bytes leftover after parsing attributes in process `syz.4.921'. [ 103.259823][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 103.419820][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 103.430552][ T9] usb 5-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 103.440822][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 103.449854][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 103.458912][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.467710][ T9] usb 5-1: config 0 descriptor?? [ 103.479966][ T565] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 103.639808][ T565] usb 3-1: Using ep0 maxpacket: 16 [ 103.646040][ T565] usb 3-1: config index 0 descriptor too short (expected 64967, got 165) [ 103.654720][ T565] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.664867][ T565] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.675146][ T565] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.684285][ T565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.692316][ T565] usb 3-1: Product: syz [ 103.696518][ T565] usb 3-1: Manufacturer: syz [ 103.701195][ T565] usb 3-1: SerialNumber: syz [ 103.910498][ T565] usb 3-1: 0:2 : does not exist [ 103.919597][ T565] usb 3-1: USB disconnect, device number 38 [ 103.929698][ T413] udevd[413]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 104.025361][ T36] audit: type=1400 audit(2000000033.542:376): avc: denied { ioctl } for pid=2637 comm="syz.4.924" path="socket:[20193]" dev="sockfs" ino=20193 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 104.026820][ T2648] random: crng reseeded on system resumption [ 104.052324][ T36] audit: type=1400 audit(2000000033.542:377): avc: denied { write } for pid=2637 comm="syz.4.924" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 104.475807][ T36] audit: type=1400 audit(2000000033.992:378): avc: denied { getopt } for pid=2650 comm="syz.2.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 104.510334][ T2654] FAULT_INJECTION: forcing a failure. [ 104.510334][ T2654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.523521][ T2654] CPU: 0 UID: 0 PID: 2654 Comm: syz.2.928 Not tainted syzkaller #0 e538f3f6a543b135812147031d083fd1f2699041 [ 104.523549][ T2654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 104.523563][ T2654] Call Trace: [ 104.523570][ T2654] [ 104.523578][ T2654] __dump_stack+0x21/0x30 [ 104.523609][ T2654] dump_stack_lvl+0x140/0x1c0 [ 104.523632][ T2654] ? __cfi_dump_stack_lvl+0x10/0x10 [ 104.523660][ T2654] ? _parse_integer+0x2e/0x40 [ 104.523674][ T2654] ? kstrtoull+0x13b/0x1e0 [ 104.523686][ T2654] dump_stack+0x19/0x20 [ 104.523702][ T2654] should_fail_ex+0x3d7/0x530 [ 104.523738][ T2654] should_fail+0xf/0x20 [ 104.523755][ T2654] should_fail_usercopy+0x1e/0x30 [ 104.523777][ T2654] _copy_from_user+0x20/0xa0 [ 104.523805][ T2654] ___sys_sendmsg+0x1c7/0x370 [ 104.523825][ T2654] ? __sys_sendmsg+0x2a0/0x2a0 [ 104.523844][ T2654] ? proc_fail_nth_write+0x184/0x220 [ 104.523873][ T2654] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 104.523901][ T2654] __x64_sys_sendmsg+0x1fb/0x2d0 [ 104.523927][ T2654] ? fput+0x1a4/0x240 [ 104.523948][ T2654] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 104.523968][ T2654] ? ksys_write+0x1f3/0x260 [ 104.523986][ T2654] ? __kasan_check_read+0x15/0x20 [ 104.524004][ T2654] x64_sys_call+0x2a4c/0x2ee0 [ 104.524042][ T2654] do_syscall_64+0x57/0xf0 [ 104.524069][ T2654] ? clear_bhb_loop+0x50/0xa0 [ 104.524100][ T2654] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 104.524119][ T2654] RIP: 0033:0x7fb69959aeb9 [ 104.524142][ T2654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.524154][ T2654] RSP: 002b:00007fb69a4f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.524187][ T2654] RAX: ffffffffffffffda RBX: 00007fb699815fa0 RCX: 00007fb69959aeb9 [ 104.524200][ T2654] RDX: 0000000000004800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 104.524212][ T2654] RBP: 00007fb69a4f2090 R08: 0000000000000000 R09: 0000000000000000 [ 104.524223][ T2654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.524233][ T2654] R13: 00007fb699816038 R14: 00007fb699815fa0 R15: 00007ffe217b5348 [ 104.524253][ T2654] [ 104.749669][ T2656] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=2656 comm=syz.2.929 [ 104.814265][ T2657] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=28 sclass=netlink_audit_socket pid=2657 comm=syz.2.929 [ 104.849881][ T373] Bluetooth: hci0: command 0x1003 tx timeout [ 104.849883][ T863] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.918651][ T45] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 104.943867][ T45] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 104.966050][ T45] asix 1-1:0.251: probe with driver asix failed with error -71 [ 104.976024][ T45] usb 1-1: USB disconnect, device number 33 [ 105.209988][ T565] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 105.269817][ T45] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 105.359806][ T565] usb 3-1: Using ep0 maxpacket: 16 [ 105.366063][ T565] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.376394][ T565] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.386925][ T565] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.396116][ T565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.404289][ T565] usb 3-1: Product: syz [ 105.408518][ T565] usb 3-1: Manufacturer: syz [ 105.413143][ T565] usb 3-1: SerialNumber: syz [ 105.421864][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 105.429472][ T45] usb 1-1: can't read configurations, error -61 [ 105.559825][ T45] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 105.621236][ T565] usb 3-1: 0:2 : does not exist [ 105.628187][ T565] usb 3-1: USB disconnect, device number 39 [ 105.639259][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 105.711432][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 105.719125][ T45] usb 1-1: can't read configurations, error -61 [ 105.726600][ T45] usb usb1-port1: attempt power cycle [ 106.025040][ T10] usb 5-1: USB disconnect, device number 23 [ 106.069862][ T45] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 106.091727][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 106.099409][ T45] usb 1-1: can't read configurations, error -61 [ 106.185081][ T2682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.938'. [ 106.229843][ T45] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 106.251526][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 106.259199][ T45] usb 1-1: can't read configurations, error -61 [ 106.265885][ T45] usb usb1-port1: unable to enumerate USB device [ 106.290024][ T2684] overlayfs: missing 'lowerdir' [ 106.296265][ T2684] netlink: 'syz.4.939': attribute type 8 has an invalid length. [ 106.304082][ T2684] netlink: 40 bytes leftover after parsing attributes in process `syz.4.939'. [ 106.399826][ T363] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 106.551001][ T363] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 106.562096][ T363] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.574957][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 106.582623][ T363] usb 3-1: config 0 interface 0 has no altsetting 0 [ 106.589277][ T363] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 106.598485][ T363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.607544][ T363] usb 3-1: config 0 descriptor?? [ 106.739819][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 106.746261][ T9] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 106.754654][ T9] usb 5-1: config 0 has no interface number 0 [ 106.760824][ T9] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 106.770784][ T9] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 106.782333][ T9] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 106.791465][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.799464][ T9] usb 5-1: Product: syz [ 106.803669][ T9] usb 5-1: Manufacturer: syz [ 106.808297][ T9] usb 5-1: SerialNumber: syz [ 106.814128][ T9] usb 5-1: config 0 descriptor?? [ 106.819431][ T2686] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 106.826682][ T2686] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 107.015173][ T363] pyra 0003:1E7D:2C24.0010: ignoring exceeding usage max [ 107.025271][ T363] pyra 0003:1E7D:2C24.0010: hidraw0: USB HID v0.07 Device [HID 1e7d:2c24] on usb-dummy_hcd.2-1/input0 [ 107.039445][ T2686] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 107.046696][ T2686] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 107.374354][ T2680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.383041][ T2680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.458311][ T9] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 107.468730][ T9] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 107.480797][ T9] asix 5-1:0.251: probe with driver asix failed with error -71 [ 107.489553][ T9] usb 5-1: USB disconnect, device number 24 [ 107.984840][ T2694] netlink: 'syz.4.942': attribute type 8 has an invalid length. [ 108.369979][ T45] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 108.519837][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 108.526172][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.536337][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.547151][ T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.549908][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 108.556236][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.571825][ T45] usb 1-1: Product: syz [ 108.576017][ T45] usb 1-1: Manufacturer: syz [ 108.580667][ T45] usb 1-1: SerialNumber: syz [ 108.709818][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 108.716097][ T10] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 108.724374][ T10] usb 5-1: config 0 has no interface number 0 [ 108.730573][ T10] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 108.740545][ T10] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 108.752242][ T10] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 108.761434][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.769496][ T10] usb 5-1: Product: syz [ 108.773784][ T10] usb 5-1: Manufacturer: syz [ 108.778426][ T10] usb 5-1: SerialNumber: syz [ 108.784164][ T10] usb 5-1: config 0 descriptor?? [ 108.789488][ T2711] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 108.796772][ T2711] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 108.805522][ T45] usb 1-1: 0:2 : does not exist [ 108.812334][ T45] usb 1-1: USB disconnect, device number 38 [ 108.825566][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 109.008797][ T2711] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 109.016163][ T2711] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 109.055513][ T36] audit: type=1400 audit(2000000038.568:379): avc: denied { accept } for pid=2718 comm="syz.1.954" path="socket:[20522]" dev="sockfs" ino=20522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 109.165847][ T363] pyra 0003:1E7D:2C24.0010: couldn't init struct pyra_device [ 109.177834][ T363] pyra 0003:1E7D:2C24.0010: couldn't install mouse [ 109.192989][ T363] pyra 0003:1E7D:2C24.0010: probe with driver pyra failed with error -71 [ 109.210559][ T363] usb 3-1: USB disconnect, device number 40 [ 109.227568][ T2736] overlayfs: failed to clone upperpath [ 109.344871][ T2745] netlink: 'syz.1.964': attribute type 13 has an invalid length. [ 109.364003][ T2745] erspan0: refused to change device tx_queue_len [ 109.429568][ T10] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 109.452534][ T10] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 109.474753][ T10] asix 5-1:0.251: probe with driver asix failed with error -71 [ 109.490358][ T10] usb 5-1: USB disconnect, device number 25 [ 109.698918][ T2763] netlink: 164 bytes leftover after parsing attributes in process `syz.2.972'. [ 109.740645][ T2766] syzkaller1: entered promiscuous mode [ 109.746207][ T2766] syzkaller1: entered allmulticast mode [ 110.339828][ T412] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 110.389835][ T10] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 110.499817][ T412] usb 5-1: Using ep0 maxpacket: 16 [ 110.506179][ T412] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 110.514575][ T412] usb 5-1: config 0 has no interface number 0 [ 110.520815][ T412] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 110.530836][ T412] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 110.542461][ T412] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 110.551654][ T412] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.553576][ T10] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 110.559667][ T412] usb 5-1: Product: syz [ 110.559684][ T412] usb 5-1: Manufacturer: syz [ 110.559699][ T412] usb 5-1: SerialNumber: syz [ 110.570829][ T10] usb 3-1: config 7 interface 1 has no altsetting 0 [ 110.591583][ T412] usb 5-1: config 0 descriptor?? [ 110.592071][ T10] usb 3-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 110.597284][ T2797] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 110.612860][ T2797] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 110.619954][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.620014][ T10] usb 3-1: Product: syz [ 110.634153][ T10] usb 3-1: Manufacturer: syz [ 110.638860][ T10] usb 3-1: SerialNumber: syz [ 110.644325][ T36] audit: type=1326 audit(2000000040.160:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2811 comm="syz.1.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22679aeb9 code=0x7ffc0000 [ 110.663040][ T10] usb 3-1: selecting invalid altsetting 0 [ 110.668873][ T36] audit: type=1326 audit(2000000040.160:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2811 comm="syz.1.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22679aeb9 code=0x7ffc0000 [ 110.680550][ T10] rndis_host 3-1:7.0: probe with driver rndis_host failed with error -22 [ 110.698142][ T36] audit: type=1326 audit(2000000040.160:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2811 comm="syz.1.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22679aeb9 code=0x7ffc0000 [ 110.728493][ T36] audit: type=1326 audit(2000000040.160:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2811 comm="syz.1.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe22679aeb9 code=0x7ffc0000 [ 110.752001][ T36] audit: type=1326 audit(2000000040.160:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2811 comm="syz.1.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22679aeb9 code=0x7ffc0000 [ 110.775338][ T36] audit: type=1326 audit(2000000040.160:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2811 comm="syz.1.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22679aeb9 code=0x7ffc0000 [ 110.798867][ T36] audit: type=1326 audit(2000000040.160:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2811 comm="syz.1.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22679aeb9 code=0x7ffc0000 [ 110.822127][ T36] audit: type=1326 audit(2000000040.160:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2811 comm="syz.1.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22679aeb9 code=0x7ffc0000 [ 110.835636][ T2797] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 110.845636][ T36] audit: type=1326 audit(2000000040.160:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2811 comm="syz.1.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe22679aeb9 code=0x7ffc0000 [ 110.867215][ T2797] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 110.884496][ T10] usb 3-1: USB disconnect, device number 41 [ 111.288554][ T412] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 111.299191][ T412] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 111.311278][ T412] asix 5-1:0.251: probe with driver asix failed with error -71 [ 111.319967][ T412] usb 5-1: USB disconnect, device number 26 [ 111.484456][ T2832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1002'. [ 111.518915][ T2837] netlink: 'syz.2.1004': attribute type 8 has an invalid length. [ 111.740305][ T2852] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1010'. [ 112.029813][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 112.079813][ T412] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 112.165198][ T2862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1014'. [ 112.182194][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 112.191370][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.204946][ T10] usb 3-1: config 0 descriptor?? [ 112.209942][ T412] usb 5-1: device descriptor read/64, error -71 [ 112.420306][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 112.426339][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 112.435105][ T10] usb 3-1: USB disconnect, device number 42 [ 112.459822][ T412] usb 5-1: device descriptor read/64, error -71 [ 112.639890][ T364] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 112.699834][ T412] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 112.799960][ T364] usb 1-1: Using ep0 maxpacket: 16 [ 112.807030][ T364] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 112.815272][ T364] usb 1-1: config 0 has no interface number 0 [ 112.826354][ T364] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 112.836348][ T364] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 112.840192][ T412] usb 5-1: device descriptor read/64, error -71 [ 112.850349][ T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 112.861913][ T364] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 112.871240][ T364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.879400][ T364] usb 1-1: Product: syz [ 112.883896][ T364] usb 1-1: Manufacturer: syz [ 112.888551][ T364] usb 1-1: SerialNumber: syz [ 112.893840][ T364] usb 1-1: config 0 descriptor?? [ 112.899113][ T2874] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 112.906324][ T2874] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 112.999806][ T10] usb 3-1: device descriptor read/64, error -71 [ 113.089862][ T412] usb 5-1: device descriptor read/64, error -71 [ 113.114274][ T2874] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 113.121550][ T2874] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 113.199926][ T412] usb usb5-port1: attempt power cycle [ 113.239802][ T10] usb 3-1: device descriptor read/64, error -71 [ 113.479823][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 113.533396][ T364] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 113.539983][ T412] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 113.544646][ T364] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 113.563382][ T364] asix 1-1:0.251: probe with driver asix failed with error -71 [ 113.571154][ T412] usb 5-1: device descriptor read/8, error -71 [ 113.573825][ T364] usb 1-1: USB disconnect, device number 39 [ 113.619834][ T10] usb 3-1: device descriptor read/64, error -71 [ 113.701170][ T412] usb 5-1: device descriptor read/8, error -71 [ 113.859813][ T10] usb 3-1: device descriptor read/64, error -71 [ 113.939854][ T412] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 113.961010][ T412] usb 5-1: device descriptor read/8, error -71 [ 113.969928][ T10] usb usb3-port1: attempt power cycle [ 114.056124][ T2909] netlink: 'syz.0.1035': attribute type 8 has an invalid length. [ 114.090897][ T412] usb 5-1: device descriptor read/8, error -71 [ 114.199915][ T412] usb usb5-port1: unable to enumerate USB device [ 114.309813][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 114.331027][ T10] usb 3-1: device descriptor read/8, error -71 [ 114.460972][ T10] usb 3-1: device descriptor read/8, error -71 [ 114.695750][ T36] kauditd_printk_skb: 533 callbacks suppressed [ 114.695766][ T36] audit: type=1400 audit(2000000044.213:922): avc: denied { ioctl } for pid=2920 comm="syz.1.1040" path="socket:[21051]" dev="sockfs" ino=21051 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.700226][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 114.717287][ T36] audit: type=1400 audit(2000000044.233:923): avc: denied { getopt } for pid=2920 comm="syz.1.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.729506][ T2921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1040'. [ 114.763635][ T10] usb 3-1: device descriptor read/8, error -71 [ 114.901296][ T10] usb 3-1: device descriptor read/8, error -71 [ 115.010924][ T10] usb usb3-port1: unable to enumerate USB device [ 115.045053][ T36] audit: type=1400 audit(2000000044.563:924): avc: denied { create } for pid=2949 comm="syz.0.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 115.105405][ T2963] EXT4-fs: dax option not supported [ 115.112152][ T2963] overlayfs: invalid origin (0000) [ 115.118288][ T36] audit: type=1400 audit(2000000044.633:925): avc: denied { map } for pid=2962 comm="syz.4.1057" path="socket:[21171]" dev="sockfs" ino=21171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 115.349816][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 115.399824][ T364] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 115.500974][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.511194][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 115.520110][ T10] usb 3-1: config 1 has no interface number 0 [ 115.526250][ T10] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.537223][ T10] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 115.546394][ T10] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 115.559806][ T364] usb 5-1: Using ep0 maxpacket: 16 [ 115.565786][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.575719][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.583784][ T10] usb 3-1: Product: syz [ 115.588090][ T10] usb 3-1: Manufacturer: syz [ 115.592761][ T10] usb 3-1: SerialNumber: syz [ 115.597434][ T364] usb 5-1: unable to get BOS descriptor or descriptor too short [ 115.606932][ T364] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 1024 [ 115.617291][ T364] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 115.627075][ T364] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.639975][ T364] usb 5-1: config 1 interface 0 has no altsetting 0 [ 115.648074][ T364] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.657198][ T364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.665235][ T364] usb 5-1: Product: syz [ 115.669823][ T364] usb 5-1: Manufacturer: syz [ 115.674445][ T364] usb 5-1: SerialNumber: syz [ 115.687851][ T2967] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 115.695102][ T2967] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 115.718303][ T36] audit: type=1400 audit(2000000045.233:926): avc: denied { setattr } for pid=2972 comm="syz.1.1061" name="NETLINK" dev="sockfs" ino=21190 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 115.821300][ T36] audit: type=1400 audit(2000000045.343:927): avc: denied { accept } for pid=2980 comm="syz.1.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 115.960760][ T364] usb 5-1: bad CDC descriptors [ 115.967374][ T364] usb 5-1: USB disconnect, device number 31 [ 116.086441][ T2989] SELinux: Context ϧ-):E2٭ؾ)đJu36ޢ{@m[ is not valid (left unmapped). [ 116.098134][ T2989] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1068'. [ 116.107370][ T2989] tipc: Invalid UDP bearer configuration [ 116.107407][ T2989] tipc: Enabling of bearer rejected, failed to enable media [ 116.209525][ T10] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 116.217983][ T10] cdc_ncm 3-1:1.1: bind() failure [ 116.224633][ T10] usb 3-1: USB disconnect, device number 47 [ 116.359873][ T1938] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 116.509927][ T1938] usb 1-1: Using ep0 maxpacket: 8 [ 116.516218][ T1938] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 116.524661][ T1938] usb 1-1: config 0 has no interface number 0 [ 116.532555][ T1938] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 116.541875][ T1938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.550076][ T1938] usb 1-1: Product: syz [ 116.554441][ T1938] usb 1-1: Manufacturer: syz [ 116.559313][ T1938] usb 1-1: SerialNumber: syz [ 116.568621][ T1938] usb 1-1: config 0 descriptor?? [ 116.834696][ T3002] netlink: 'syz.2.1074': attribute type 8 has an invalid length. [ 116.859567][ T3006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3006 comm=syz.2.1075 [ 117.009892][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 117.123462][ T3016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=3016 comm=syz.2.1080 [ 117.169825][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 117.176730][ T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 117.188157][ T10] usb 5-1: config 0 has no interface number 0 [ 117.196120][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 117.205459][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.213806][ T10] usb 5-1: Product: syz [ 117.218370][ T10] usb 5-1: Manufacturer: syz [ 117.224409][ T10] usb 5-1: SerialNumber: syz [ 117.230080][ T10] usb 5-1: config 0 descriptor?? [ 117.236622][ T10] smsc95xx v2.0.0 [ 117.381173][ T3026] syz.1.1085 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 117.589845][ T330] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 117.739827][ T330] usb 3-1: Using ep0 maxpacket: 16 [ 117.746542][ T330] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 117.754165][ T330] usb 3-1: can't read configurations, error -61 [ 117.889895][ T330] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 117.947314][ T3037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1090'. [ 117.986477][ T3041] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1092'. [ 118.038296][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 118.049283][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 118.059839][ T330] usb 3-1: Using ep0 maxpacket: 16 [ 118.066603][ T330] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 118.074396][ T330] usb 3-1: can't read configurations, error -61 [ 118.080897][ T330] usb usb3-port1: attempt power cycle [ 118.419840][ T330] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 118.440221][ T330] usb 3-1: Using ep0 maxpacket: 16 [ 118.446924][ T330] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 118.454797][ T330] usb 3-1: can't read configurations, error -61 [ 118.589838][ T330] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 118.610900][ T330] usb 3-1: Using ep0 maxpacket: 16 [ 118.617786][ T330] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 118.625838][ T330] usb 3-1: can't read configurations, error -61 [ 118.632451][ T330] usb usb3-port1: unable to enumerate USB device [ 118.709276][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 118.720806][ T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 118.730022][ T10] usb 5-1: USB disconnect, device number 32 [ 118.851172][ T3051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3051 comm=syz.1.1096 [ 119.044402][ T1938] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 119.051213][ T1938] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized! [ 119.063530][ T1938] usb 1-1: USB disconnect, device number 40 [ 119.107629][ T36] audit: type=1400 audit(2000000048.623:928): avc: denied { remount } for pid=3064 comm="syz.0.1102" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 119.189810][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 119.361038][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.371331][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.381230][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 119.390620][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 119.398644][ T10] usb 5-1: SerialNumber: syz [ 119.549880][ T1938] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 119.605887][ T10] usb 5-1: 0:2 : does not exist [ 119.610930][ T10] usb 5-1: unit 5 not found! [ 119.618569][ T10] usb 5-1: USB disconnect, device number 33 [ 119.628361][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 119.700963][ T1938] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.712030][ T1938] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.724888][ T1938] usb 1-1: config 0 interface 0 has no altsetting 0 [ 119.731566][ T1938] usb 1-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 119.740783][ T1938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.749480][ T1938] usb 1-1: config 0 descriptor?? [ 120.157778][ T1938] betop 0003:8380:1850.0011: unknown main item tag 0x1 [ 120.165636][ T1938] betop 0003:8380:1850.0011: hidraw0: USB HID v0.00 Device [HID 8380:1850] on usb-dummy_hcd.0-1/input0 [ 120.170423][ T3087] FAULT_INJECTION: forcing a failure. [ 120.170423][ T3087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.177362][ T1938] betop 0003:8380:1850.0011: no inputs found [ 120.194391][ T3087] CPU: 1 UID: 0 PID: 3087 Comm: syz.4.1112 Not tainted syzkaller #0 e538f3f6a543b135812147031d083fd1f2699041 [ 120.194473][ T3087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 120.194506][ T3087] Call Trace: [ 120.194528][ T3087] [ 120.194550][ T3087] __dump_stack+0x21/0x30 [ 120.194635][ T3087] dump_stack_lvl+0x140/0x1c0 [ 120.194703][ T3087] ? __cfi_dump_stack_lvl+0x10/0x10 [ 120.194764][ T3087] ? __cfi_walk_page_range_mm+0x10/0x10 [ 120.194820][ T3087] dump_stack+0x19/0x20 [ 120.194872][ T3087] should_fail_ex+0x3d7/0x530 [ 120.194919][ T3087] should_fail+0xf/0x20 [ 120.194964][ T3087] should_fail_usercopy+0x1e/0x30 [ 120.195017][ T3087] _copy_to_user+0x24/0xa0 [ 120.195067][ T3087] do_pagemap_cmd+0xbb1/0xd10 [ 120.195119][ T3087] ? __cfi_do_pagemap_cmd+0x10/0x10 [ 120.195178][ T3087] ? bpf_lsm_file_ioctl+0xd/0x20 [ 120.195221][ T3087] ? security_file_ioctl+0x3e/0x110 [ 120.195266][ T3087] ? __cfi_do_pagemap_cmd+0x10/0x10 [ 120.195304][ T3087] __se_sys_ioctl+0x132/0x1b0 [ 120.195393][ T3087] __x64_sys_ioctl+0x7f/0xa0 [ 120.195462][ T3087] x64_sys_call+0x1878/0x2ee0 [ 120.195528][ T3087] do_syscall_64+0x57/0xf0 [ 120.195600][ T3087] ? clear_bhb_loop+0x50/0xa0 [ 120.195661][ T3087] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 120.195733][ T3087] RIP: 0033:0x7f327bf9aeb9 [ 120.195765][ T3087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.195829][ T3087] RSP: 002b:00007f327cef2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.195891][ T3087] RAX: ffffffffffffffda RBX: 00007f327c215fa0 RCX: 00007f327bf9aeb9 [ 120.195930][ T3087] RDX: 0000200000000100 RSI: 00000000c0606610 RDI: 0000000000000004 [ 120.195966][ T3087] RBP: 00007f327cef2090 R08: 0000000000000000 R09: 0000000000000000 [ 120.195990][ T3087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.196025][ T3087] R13: 00007f327c216038 R14: 00007f327c215fa0 R15: 00007fff63c93d78 [ 120.196060][ T3087] [ 120.426761][ T3096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1116'. [ 120.454586][ T3073] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.467150][ T1938] usb 1-1: USB disconnect, device number 41 [ 120.789817][ T330] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 120.939815][ T330] usb 3-1: Using ep0 maxpacket: 16 [ 120.946119][ T330] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 120.954492][ T330] usb 3-1: config 0 has no interface number 0 [ 120.960740][ T330] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 120.970743][ T330] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 120.982261][ T330] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 120.991406][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.999460][ T330] usb 3-1: Product: syz [ 121.003830][ T330] usb 3-1: Manufacturer: syz [ 121.008499][ T330] usb 3-1: SerialNumber: syz [ 121.014136][ T330] usb 3-1: config 0 descriptor?? [ 121.021100][ T3099] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 121.028325][ T3099] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 121.164016][ T3118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1126'. [ 121.238992][ T3099] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 121.253974][ T3124] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1129'. [ 121.258813][ T3099] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 121.278915][ T36] audit: type=1400 audit(2000000050.793:929): avc: denied { setattr } for pid=3123 comm="syz.4.1129" name="file0" dev="overlay" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 121.437945][ T3138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1135'. [ 121.533260][ T3143] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1137'. [ 121.705862][ T330] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 121.716049][ T330] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 121.728038][ T330] asix 3-1:0.251: probe with driver asix failed with error -71 [ 121.739292][ T330] usb 3-1: USB disconnect, device number 52 [ 122.067626][ T3160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1145'. [ 122.239731][ T3168] option changes via remount are deprecated (pid=3167 comm=syz.2.1149) [ 122.249916][ T36] audit: type=1400 audit(2000000051.756:930): avc: denied { bind } for pid=3167 comm="syz.2.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.291764][ T36] audit: type=1400 audit(2000000051.756:931): avc: denied { associate } for pid=3167 comm="syz.2.1149" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 122.424497][ T3180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1155'. [ 122.489858][ T330] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 122.521822][ T3189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1159'. [ 122.529929][ T45] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 122.620924][ T3184] netlink: 'syz.4.1157': attribute type 11 has an invalid length. [ 122.628943][ T3193] netlink: 'syz.4.1157': attribute type 11 has an invalid length. [ 122.637149][ T3184] 9pnet_fd: Insufficient options for proto=fd [ 122.643726][ T3193] 9pnet_fd: Insufficient options for proto=fd [ 122.660973][ T330] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 122.669473][ T330] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 122.679959][ T330] usb 3-1: config 220 has no interface number 2 [ 122.686349][ T330] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 122.699672][ T330] usb 3-1: config 220 interface 0 has no altsetting 0 [ 122.706566][ T330] usb 3-1: config 220 interface 76 has no altsetting 0 [ 122.713595][ T330] usb 3-1: config 220 interface 1 has no altsetting 0 [ 122.713684][ T45] usb 1-1: too many configurations: 125, using maximum allowed: 8 [ 122.732381][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 122.740184][ T330] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 122.744933][ T3195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=3195 comm=syz.4.1161 [ 122.749235][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.769832][ T45] usb 1-1: can't read configurations, error -61 [ 122.776340][ T330] usb 3-1: Product: syz [ 122.780548][ T330] usb 3-1: Manufacturer: syz [ 122.785171][ T330] usb 3-1: SerialNumber: syz [ 122.899822][ T45] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 123.002888][ T330] usb 3-1: selecting invalid altsetting 0 [ 123.008803][ T330] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 123.015470][ T330] usb 3-1: No valid video chain found. [ 123.025483][ T330] usb 3-1: USB disconnect, device number 53 [ 123.050188][ T45] usb 1-1: too many configurations: 125, using maximum allowed: 8 [ 123.068597][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 123.076345][ T45] usb 1-1: can't read configurations, error -61 [ 123.086591][ T45] usb usb1-port1: attempt power cycle [ 123.227462][ T3228] __nla_validate_parse: 1 callbacks suppressed [ 123.227483][ T3228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1174'. [ 123.429960][ T45] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 123.455418][ T45] usb 1-1: too many configurations: 125, using maximum allowed: 8 [ 123.473660][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 123.490466][ T45] usb 1-1: can't read configurations, error -61 [ 123.505956][ T3266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1188'. [ 123.629820][ T45] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 123.661539][ T45] usb 1-1: too many configurations: 125, using maximum allowed: 8 [ 123.670538][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 123.678203][ T45] usb 1-1: can't read configurations, error -61 [ 123.704925][ T45] usb usb1-port1: unable to enumerate USB device [ 123.864824][ T292] ------------[ cut here ]------------ [ 123.870479][ T292] WARNING: CPU: 1 PID: 292 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 123.879847][ T292] Modules linked in: [ 123.883803][ T292] CPU: 1 UID: 0 PID: 292 Comm: syz-executor Not tainted syzkaller #0 e538f3f6a543b135812147031d083fd1f2699041 [ 123.895488][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 123.905623][ T292] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 123.911335][ T292] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 5e 8b 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0c 33 59 03 cc e8 f6 bf 3f ff <0f> 0b e9 3e ff ff ff e8 ea bf 3f ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 123.931016][ T292] RSP: 0018:ffffc9000b69fb48 EFLAGS: 00010293 [ 123.937126][ T292] RAX: ffffffff8247dd1a RBX: 0000000000000000 RCX: ffff88812fcd5f00 [ 123.945171][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.953182][ T292] RBP: ffffc9000b69fb70 R08: ffff88812159fabf R09: 1ffff110242b3f57 [ 123.961230][ T292] R10: dffffc0000000000 R11: ffffed10242b3f58 R12: 0000000000000000 [ 123.969227][ T292] R13: dffffc0000000000 R14: ffff88812159fa20 R15: ffff8881107d2dd0 [ 123.977538][ T292] FS: 000055557aa75500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 123.986593][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.993241][ T292] CR2: 00007ffe217b3f60 CR3: 00000001016fa000 CR4: 00000000003526b0 [ 124.001266][ T292] Call Trace: [ 124.004576][ T292] [ 124.007536][ T292] ovl_do_remove+0x81b/0xda0 [ 124.012176][ T292] ? ovl_set_redirect+0x780/0x780 [ 124.017222][ T292] ? down_write+0xee/0x2b0 [ 124.021706][ T292] ? __cfi_down_write+0x10/0x10 [ 124.026596][ T292] ovl_rmdir+0x1e/0x30 [ 124.030742][ T292] vfs_rmdir+0x3e3/0x560 [ 124.035041][ T292] incfs_kill_sb+0x109/0x230 [ 124.039665][ T292] deactivate_locked_super+0xd5/0x2a0 [ 124.045131][ T292] deactivate_super+0xb8/0xe0 [ 124.049867][ T292] cleanup_mnt+0x406/0x4a0 [ 124.054318][ T292] __cleanup_mnt+0x1d/0x40 [ 124.058764][ T292] task_work_run+0x1e5/0x260 [ 124.059903][ T1938] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 124.063472][ T292] ? __cfi_task_work_run+0x10/0x10 [ 124.076042][ T292] ? __x64_sys_umount+0x12e/0x180 [ 124.081139][ T292] ? __cfi___x64_sys_umount+0x10/0x10 [ 124.086550][ T292] ? __kasan_check_read+0x15/0x20 [ 124.091654][ T292] resume_user_mode_work+0x35/0x50 [ 124.096801][ T292] syscall_exit_to_user_mode+0x63/0xb0 [ 124.102327][ T292] do_syscall_64+0x63/0xf0 [ 124.106788][ T292] ? clear_bhb_loop+0x50/0xa0 [ 124.111548][ T292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 124.117481][ T292] RIP: 0033:0x7fb69959c117 [ 124.121948][ T292] Code: a2 c7 05 7c c4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 124.141630][ T292] RSP: 002b:00007ffe217b45b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 124.150114][ T292] RAX: 0000000000000000 RBX: 00007fb69960471f RCX: 00007fb69959c117 [ 124.158116][ T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe217b4670 [ 124.166161][ T292] RBP: 00007ffe217b4670 R08: 00007ffe217b5670 R09: 00000000ffffffff [ 124.174185][ T292] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe217b5700 [ 124.182319][ T292] R13: 00007fb69960471f R14: 000000000001e32a R15: 00007ffe217b5740 [ 124.190345][ T292] [ 124.193382][ T292] ---[ end trace 0000000000000000 ]--- [ 124.199366][ T292] ------------[ cut here ]------------ [ 124.204932][ T292] WARNING: CPU: 0 PID: 292 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 124.214312][ T292] Modules linked in: [ 124.218224][ T292] CPU: 0 UID: 0 PID: 292 Comm: syz-executor Tainted: G W syzkaller #0 e538f3f6a543b135812147031d083fd1f2699041 [ 124.231384][ T292] Tainted: [W]=WARN [ 124.235202][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 124.245288][ T292] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 124.250998][ T292] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 5e 8b 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0c 33 59 03 cc e8 f6 bf 3f ff <0f> 0b e9 3e ff ff ff e8 ea bf 3f ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 124.270678][ T292] RSP: 0018:ffffc9000b69fb48 EFLAGS: 00010293 [ 124.276770][ T292] RAX: ffffffff8247dd1a RBX: 0000000000000000 RCX: ffff88812fcd5f00 [ 124.284770][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.292806][ T292] RBP: ffffc9000b69fb70 R08: ffff88812159fabf R09: 1ffff110242b3f57 [ 124.300851][ T292] R10: dffffc0000000000 R11: ffffed10242b3f58 R12: 0000000000000000 [ 124.308855][ T292] R13: dffffc0000000000 R14: ffff88812159fa20 R15: ffff8881107d2dd0 [ 124.316897][ T292] FS: 000055557aa75500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 124.325873][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.332533][ T292] CR2: 00007f327bf840c0 CR3: 00000001016fa000 CR4: 00000000003526b0 [ 124.340543][ T292] Call Trace: [ 124.343842][ T292] [ 124.346827][ T292] ovl_do_remove+0x81b/0xda0 [ 124.351493][ T292] ? ovl_set_redirect+0x780/0x780 [ 124.356547][ T292] ? down_write+0xee/0x2b0 [ 124.361040][ T292] ? __cfi_down_write+0x10/0x10 [ 124.365929][ T292] ovl_rmdir+0x1e/0x30 [ 124.370090][ T292] vfs_rmdir+0x3e3/0x560 [ 124.374351][ T292] incfs_kill_sb+0x1a0/0x230 [ 124.378958][ T292] deactivate_locked_super+0xd5/0x2a0 [ 124.384366][ T292] deactivate_super+0xb8/0xe0 [ 124.389110][ T292] cleanup_mnt+0x406/0x4a0 [ 124.393574][ T292] __cleanup_mnt+0x1d/0x40 [ 124.398018][ T292] task_work_run+0x1e5/0x260 [ 124.402641][ T292] ? __cfi_task_work_run+0x10/0x10 [ 124.407762][ T292] ? __x64_sys_umount+0x12e/0x180 [ 124.412840][ T292] ? __cfi___x64_sys_umount+0x10/0x10 [ 124.418226][ T292] ? __kasan_check_read+0x15/0x20 [ 124.423286][ T292] resume_user_mode_work+0x35/0x50 [ 124.428419][ T292] syscall_exit_to_user_mode+0x63/0xb0 [ 124.433907][ T292] do_syscall_64+0x63/0xf0 [ 124.438351][ T292] ? clear_bhb_loop+0x50/0xa0 [ 124.443090][ T292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 124.449027][ T292] RIP: 0033:0x7fb69959c117 [ 124.453486][ T292] Code: a2 c7 05 7c c4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 124.473177][ T292] RSP: 002b:00007ffe217b45b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 124.481650][ T292] RAX: 0000000000000000 RBX: 00007fb69960471f RCX: 00007fb69959c117 [ 124.489642][ T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe217b4670 [ 124.497661][ T292] RBP: 00007ffe217b4670 R08: 00007ffe217b5670 R09: 00000000ffffffff [ 124.505687][ T292] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe217b5700 [ 124.513710][ T292] R13: 00007fb69960471f R14: 000000000001e32a R15: 00007ffe217b5740 [ 124.521728][ T292] [ 124.524768][ T292] ---[ end trace 0000000000000000 ]--- [ 124.551235][ T1938] usb 5-1: unable to get BOS descriptor or descriptor too short [ 124.559677][ T1938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.570738][ T1938] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 124.585848][ T1938] usb 5-1: string descriptor 0 read error: -22 [ 124.592085][ T1938] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 124.601140][ T1938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.609822][ T1938] usb 5-1: config 0 descriptor?? [ 124.619135][ T1938] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 124.628009][ T413] udevd[413]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 124.816521][ T3281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.825109][ T3281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.838584][ T1938] usb 5-1: USB disconnect, device number 34