last executing test programs: 6.765772464s ago: executing program 3 (id=141): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @uid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_usb_connect_ath9k(0x3, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x394, [{{0x9, 0x2, 0xfffffffffffffc3f}}]}}, 0x7fe782539b0b) 5.300904243s ago: executing program 3 (id=158): request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='(&@#\x00', 0xfffffffffffffffe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000580)=0x100e77, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0xfffd, 0x8000000, @loopback, 0x3}, 0x1c) recvmmsg(r2, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x83}], 0x1, 0x10000, 0x0) syz_usb_connect(0x6, 0x249, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x7, 0x6, 0xfffa}, 0x1b, [0x1, 0xc95a, 0xffffffef, 0x9, 0x5, 0x2, 0x8, 0x7f, 0x40006, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff02, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x4000009, 0x4001, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x1, 0x71, 0x2, 0x6, 0x7, 0x2, 0x5, 0x40, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x4, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432ea, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0x10, 0x312, 0x78, 0xea4, 0x0, 0x44, 0x4, 0x8000, 0x9, 0x3fe, 0x400401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x6, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x5, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x23ff02a1, 0x2], [0xf, 0x80, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x3, 0x4, 0x1, 0x40000008, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x404f47, 0x8, 0x4, 0x8001, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x40, 0xb, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0xfffffffd, 0xffff, 0x0, 0x8, 0x1c, 0x3, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x3, 0x61e, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x8, 0x7fff, 0xffff, 0x2, 0x2, 0x5, 0x9, 0x2, 0x14c, 0x60a7, 0x6, 0xffffff1c, 0xffffffff, 0x80000003, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x2, 0x80000001, 0x1, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x25, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000800)={0x10, 0x0, [{0xdddd1000, 0xc0, &(0x7f00000001c0)=""/192}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0x2f, 0x0, &(0x7f0000000300)=0x700) epoll_create1(0x80000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xc7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1, 0x0, 0x60000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f00000002c0)={0x80000000, {0x30, 0x40004, 0x9, 0xcc, 0x7fc}}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_int(r8, 0x6, 0xa, &(0x7f0000000140)=0x4, 0x4) sendmsg$netlink(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[], 0x1c}], 0x1}, 0x4c8c0) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.604544729s ago: executing program 1 (id=173): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote}}}}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x4, 0x2, 0xfec00000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x20, 0xffffffff, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffe, 0x0, 0x4, 0x0, 0x0, @empty, @empty}}}}) (async, rerun: 32) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 32) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) (async, rerun: 32) r5 = eventfd(0x8) (rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async, rerun: 32) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) (rerun: 32) r6 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f00000002c0)={0x20}, 0x0) read$eventfd(r5, &(0x7f0000000540), 0x8) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000001800)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x582, 0xa3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x4, 0x50, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf6f4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x80, 0xe, 0x43, {0x7, 0x25, 0x1, 0x4, 0x7a, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x0, 0x40, {0x7, 0x25, 0x1, 0xc, 0xea, 0xffc3}}}}}}}}]}}, 0x0) 2.714081629s ago: executing program 1 (id=180): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) lsm_set_self_attr(0x65, &(0x7f0000000240)=ANY=[@ANYBLOB="6bdeb100bcfb0900000000000000950000030000200800"/32], 0x20, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x421, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288231}, 0x200048c4) socket$nl_xfrm(0x10, 0x3, 0x6) 2.463010287s ago: executing program 1 (id=183): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000380)="e44225d05f2f07f8d1664896a39f873992563cff7ca642", 0x17, 0x9, 0x0, 0x1, r0}, 0x0) ftruncate(r0, 0x4) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121542, 0x60) 2.449460468s ago: executing program 0 (id=184): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80701, 0x0) (async) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, 0x0) 2.389572779s ago: executing program 0 (id=185): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) 2.327204722s ago: executing program 0 (id=186): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) (async) socket$inet6(0xa, 0x3, 0x5) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x2}, 0x1c) 2.315462832s ago: executing program 0 (id=187): r0 = userfaultfd(0x80000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e25, 0x0, @empty}, 0x1c) listen(r6, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x7ffffe, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r7, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0xffffffffffffffff) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9}) pipe2$9p(&(0x7f00000001c0), 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x3b00, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000036c0)=ANY=[@ANYBLOB="bc010027", @ANYRES16=r10, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) r11 = dup(r4) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$evdev(r11, &(0x7f0000000040)=[{{}, 0x5, 0x6}], 0x18) 2.283299653s ago: executing program 0 (id=188): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x269, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x3, 0xfc, {0x9, 0x21, 0xff7f, 0x45, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_io_uring_setup(0x2274, &(0x7f0000000040)={0x0, 0x7df4, 0x100, 0x1, 0xd2}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000000)) syz_io_uring_setup(0x18e7, &(0x7f0000000140)={0x0, 0x8e7a, 0x20, 0x2, 0x306, 0x0, r1}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000000)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_usb_connect$midi(0x4, 0x52, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x582, 0x2f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x2, 0xc0, 0xa5, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x7, [@midi_out_jack={0x11, 0x24, 0x3, 0x1, 0x8, 0x5, [{0xfc, 0x1}, {0x81, 0xfe}, {0x4, 0x6}, {0x2, 0x3}, {0x5, 0x80}], 0x2}], [{{0x9, 0x5, 0xd, 0x0, 0x20, 0x5, 0x9, 0x4, {0x14, 0x25, 0x1, 0x10, "055d07a64d554694a18a9a368531fab6"}}}]}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x8, 0x8, 0x5, 0x20, 0x5}, 0x27, &(0x7f0000000140)={0x5, 0xf, 0x27, 0x6, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x123, 0xd, 0x75, 0x0, 0xe6}, @wireless={0xb, 0x10, 0x1, 0x2, 0x41, 0x9, 0x7, 0x0, 0x10}, @ptm_cap={0x3}]}, 0x4, [{0x8, &(0x7f0000000180)=@string={0x8, 0x3, "a722afd36998"}}, {0x85, &(0x7f00000001c0)=@string={0x85, 0x3, "75de1c99e7ee6e15fc9d1931e3c58cd9a40b44a52337bd2ce6c53a70b592fb57ceec0f321465707b78baaebe19d735d81a8e3d37d76f2c3683a1e9984e8e1c22e70fd5ee590b3b8dadf5f7cfb5a434672a33176331545daac7c40c4a0454028a368e097caee31145774445c0d27f75c8643c3fc8b3ca33ec6d718241fcf2d924ae2ee3"}}, {0xc1, &(0x7f0000000300)=@string={0xc1, 0x3, "47e302264cc90c4bbd4b2b65c09b6322635225e6bbd1be440ff11d863621c122a7e2eeafeea27a7847b48e1c07583345e72260822fbf458e780427b9d735d03964ecb28ff10fff9ed5ae00f5064954d2c9fa004d1c8808f9cfc8436b6fff2a5c3432a763d139f877e4c2d05ad84669dd4ca707bfd3734592a7a38a56bb73ee1398f11268b29878273ab97d3fc03fa487794d94af64ca5c24a5d4a11e212b7d3addbbd05858db83795ee4824d8d5644c18bdb769fd059c126549651b40a1d4b"}}, {0x36, &(0x7f0000000280)=@string={0x36, 0x3, "221a98053de0516c99140ac6c54f3cf90663045a4de4fca4b9b991f8d0ce0a3157936bc4e94e29f3640287ab16cc84958823b7e3"}}]}) syz_usb_control_io$uac1(r2, &(0x7f00000005c0)={0x14, &(0x7f0000000480)={0x20, 0xa, 0xe8, {0xe8, 0x7, "eafeb65ae175296147ac5a4cdd98ef1800fe5b54be8251c8f87347fef1de90678c9428676ffc288250793db1fe78ae45980598e6d94bee15a4e0f46df7149b59c2970c0b0e4e7eae58249e52bff9855eeca4ba08810e49349531687219afcb4a69140fe7377dadaf8c5604bc84de18a0c9af7ef205808f233f96a7a19ed57d285e26ea7075692c52aeeb0f301a602b298f2cca8517232ba5669c53f91455ec61feb51466792612e7170822d175b25cb71c0940fe87cfba056a56989000e2b9a03691c46d7659e3fba9de9d1fb3bf6d05810278dcc2ed552aea289034f2f0414adcf14f25b793"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000600)={0x60, 0x12, 0x97, "537de797a615ad64ff680ca1e03436f6394307d66df816ece0c17710b05349545b061c828e9bcd4c76d23480e80d1570a66edeb341e954d0ef05153ab877f9633984534ace2f1196ba191c25f7cdb4b21253ef1174cb77656f5b9dea5f45f94fc61d5aa7f40405547577633636026c2a36b7ca252c9c5207cf4b7013fb1ff8fdf466156503bee384251fa5c58e545d2e604e5d27f91d61"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000780)={0x20, 0x81, 0x3, "23c157"}, &(0x7f00000007c0)={0x20, 0x82, 0x1, "12"}, &(0x7f0000000800)={0x20, 0x83, 0x2, "e321"}, &(0x7f0000000840)={0x20, 0x84, 0x1, 'F'}, &(0x7f0000000880)={0x20, 0x85, 0x3, "e78ca6"}}) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) 2.227539245s ago: executing program 3 (id=190): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xc) ioctl$TIOCEXCL(r0, 0x540c) (async) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x8000, 0x100) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000100)={{r1}, 0x0, 0x8, @inherit={0x88, &(0x7f0000000040)={0x1, 0x8, 0x5, 0xffffffff, {0xb, 0x8, 0x2, 0x4, 0x9e62}, [0x81, 0xfff, 0x8, 0x7, 0x3ff, 0x81, 0x0, 0x80000000]}}, @name="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"}) (async) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000001100)={0x0, 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001180), r1) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001240)={'syztnl0\x00', &(0x7f00000011c0)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x3, 0xf2f4, 0x5, @loopback, @local, 0x10, 0x10, 0x6, 0x8}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000001340)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000420}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x78, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x78}}, 0x440c1) r5 = syz_genetlink_get_family_id$team(&(0x7f00000013c0), r2) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001480)={'ip6tnl0\x00', &(0x7f0000001400)={'ip6gre0\x00', r4, 0x4, 0x1, 0x81, 0xbf, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x1, 0x8, 0x2, 0x800}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001540)={'syztnl0\x00', &(0x7f00000014c0)={'tunl0\x00', 0x0, 0x80, 0x8000, 0x800, 0x4000, {{0xa, 0x4, 0x3, 0x3d, 0x28, 0x67, 0x0, 0x0, 0x2d, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@end, @noop, @generic={0x82, 0xb, "377113c81b416e45df"}, @ra={0x94, 0x4, 0xfffd}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001bc0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001b80)={&(0x7f00000015c0)={0x5a4, r5, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe0}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r6}, {0x1ec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r4}, {0x288, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xfff, 0x9, 0x0, 0x520}, {0x8, 0xf8, 0x2, 0x5}, {0x8, 0x7, 0x2, 0x8}, {0x9, 0x6, 0x4b, 0x9}, {0x1, 0x3, 0x0, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x68}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5a4}, 0x1, 0x0, 0x0, 0x24000840}, 0x4) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000002980)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x84040}, 0xc, &(0x7f0000002940)={&(0x7f0000001c40)={0xcc8, 0x0, 0x322, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xcf8d, 0x80}}}}, [@NL80211_ATTR_TID_CONFIG={0x2ec, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x38, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x1d, 0x9, 0x3, 0x6, 0x5, 0xf5b4, 0xfff9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x39}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcf}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x218, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x20c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x9}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0x4, 0x9, 0x73, 0xc, 0x12, 0x60, 0x48, 0x9, 0x2, 0x5, 0xb, 0x2, 0x23, 0x7d, 0x2, 0x5]}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x2, 0x6a96, 0xa, 0x9, 0x8, 0x3ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x61, 0x8001, 0x5, 0x2, 0x4, 0xf, 0x7]}}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x30, 0x48, 0x24, 0x4, 0x12, 0xc, 0x4, 0x2, 0x16, 0xc, 0x1, 0x18, 0x3, 0x3a, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x2, 0x3}, {0x4, 0x1}, {0x1, 0x5}, {0x6, 0x5}, {0x3, 0x4}, {0x4, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x4}, {0x3, 0x8}, {0x3, 0x2}, {0x2, 0x5}, {0x2, 0x3}, {0x0, 0xa}, {0x6, 0x2}, {0x2}, {}, {0x3}, {0x0, 0x9}, {0x1, 0x1}, {0x7, 0x8}, {0x2, 0x3}, {0x5, 0x2}, {0x0, 0x5}, {0x5, 0x3}, {0x7, 0x4}, {0x5, 0x9}, {0x5, 0x7}, {0x3, 0x5}, {0x5, 0x8}, {0x5, 0xa}, {0x2, 0x9}, {0x6, 0x3}, {0x3, 0x8}, {0x6, 0x5}, {0x0, 0x4}, {0x7, 0x2}, {0x0, 0x5}, {0x4, 0x5}, {0x7}, {0x5, 0x9}, {0x1, 0x4}, {0x2, 0x3}, {0x0, 0x10}, {0x3, 0xa}, {0x0, 0x2}, {0x1, 0x2}, {0x1, 0x1}, {0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x2ad7, 0x1, 0x9, 0x5, 0xcd, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x21, 0x1000, 0x2, 0xf045, 0x38b1, 0x7, 0x263, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x3, 0x81cb, 0x835, 0x2, 0x3, 0x6]}}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x2}, {0x7, 0x8}, {0x4, 0x2}, {0x1, 0x5}, {0x0, 0x3}, {0x5, 0xa}, {0x1, 0x2}, {0x3, 0x1}, {0x4, 0x2}, {0x7, 0x2}, {0x3, 0xa}, {0x0, 0x1}, {0x7, 0x6}, {0x7, 0xa}, {0x6, 0x5}, {0x3, 0x1}, {0x1, 0x3}, {0x6, 0x5}, {0x4}, {0x3, 0x7}, {0x0, 0x8}, {0x7, 0x8}, {0x3, 0x2}, {0x7}, {0x1, 0xa}, {0x0, 0x1}, {0x6, 0x1}, {0x4, 0x6}, {0x2, 0x3}, {0x3, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x1, 0x7}, {0x1, 0x5}, {0x5, 0x5}, {0x3, 0x3}, {0x6, 0x7}, {0x7, 0x4}, {0x3, 0x9}, {0x6, 0xa}, {0x2, 0x4}, {0x2, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6, 0x2, 0x60, 0x30, 0x12, 0x1, 0x1, 0x36, 0x3, 0x18, 0x6, 0x36, 0x1b, 0x1]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20a6, 0x401, 0x8, 0x400, 0x9, 0x5, 0xa, 0x6a4f]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x7, 0x9}, {0x2}, {0x5, 0x7}, {0x5, 0x3}, {0x6, 0x6}, {0x0, 0x3}, {0x3, 0xa}, {0x7, 0x2}, {0x2, 0x2}, {0x7, 0x2}, {0x0, 0x3}, {0x4, 0x7}, {0x3, 0x8}, {0x5, 0xa}, {0x5, 0x7}, {0x6, 0xa}, {0x1, 0x2}, {0x6, 0x4}, {0x6, 0xa}, {0x3, 0xa}, {0x0, 0x3}, {0x2}, {0x5, 0x4}, {0x4, 0x7}, {0x4, 0x2}, {0x0, 0x9}, {0x0, 0xa}, {0x3, 0x5}, {0x1, 0x3}, {0x1}, {0x5, 0x5}, {0x7, 0x7}, {0x6, 0x8}, {0x5}, {0x6, 0x3}, {0x5, 0xa}, {0x5, 0x5}, {0x5, 0x4}, {0x1, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x2, 0x8}, {0x3, 0x5}, {0x5, 0x7}, {0x7, 0x1}, {0x2, 0x5}, {0x2, 0x5}, {0x0, 0x4}, {0x1, 0x2}, {0x0, 0x4}, {0x3, 0x7}, {0x1, 0xa}, {0x1, 0x1}, {0x5}, {0x1, 0x2}, {0x2, 0x1}, {0x2}, {0x1}, {0x1, 0x7}, {0x0, 0x9}, {0x1}, {0x0, 0x7}, {0x0, 0x6}, {0x0, 0x4}, {0x0, 0x4}, {0x4, 0x2}, {0x5, 0x5}, {0x7, 0x8}, {0x5}, {0x4, 0x9}, {0x6, 0x5}, {0x5, 0x1}, {0x1}, {0x3, 0x3}, {0x0, 0x3}, {0x0, 0x1}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x6, 0x9}, {0x7, 0x4}, {0x7}, {0x6, 0x4}, {0x7, 0x6}, {0x4, 0x4}, {0x6, 0x5}, {0x5, 0x8}, {0x3, 0x9}, {0x6, 0x6}, {0x3, 0x8}, {0x4, 0x8}, {0x4, 0x1}, {0x4, 0x3}, {0x4, 0x9}, {0x0, 0x4}, {0x0, 0xa}, {0x2, 0x2}, {0x1, 0xa}, {0x0, 0x4}, {0x4, 0x2}, {0x1, 0x3}, {0x4, 0x3}, {0x1, 0x8}, {0x1, 0x1}, {0x0, 0x3}, {0x1, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdc}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x43f}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe3}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x564, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x284, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x65}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x244, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x51, 0x2, [{0x4, 0x3}, {0x0, 0x4}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x2}, {0x7, 0x9}, {0x5, 0x6}, {0x1, 0x1}, {0x1, 0x2}, {0x0, 0x3}, {0x4, 0xa}, {0x5, 0x6}, {0x1, 0x2}, {0x3}, {0x6, 0x5}, {0x6}, {0x1, 0x8}, {0x4, 0x4}, {0x0, 0x3}, {0x0, 0x1}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x6, 0xa}, {0x7, 0x2}, {0x5, 0x6}, {0x7, 0xa}, {0x7, 0x4}, {0x1, 0x4}, {0x7, 0x5}, {0x6, 0x8}, {0x0, 0x9}, {0x2, 0x8}, {0x2, 0x2}, {0x2, 0x3}, {0x6, 0x6}, {0x4, 0x6}, {0x3, 0x6}, {0x5, 0x3}, {0x1, 0x7}, {0x6}, {0x7, 0x5}, {0x7, 0x7}, {0x7, 0x1}, {0x6, 0x1}, {0x0, 0x4}, {0x6, 0x5}, {0x5, 0x6}, {0x0, 0x9}, {0x0, 0x2}, {0x5, 0x6}, {0x5, 0x6}, {0x4, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x6, 0x7}, {0x1, 0xa}, {0x4, 0x8}, {0x6, 0x5}, {0x6, 0x8}, {0x1, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x9}, {0x4, 0xa}, {0x7, 0x1}, {}, {0x4, 0x7}, {0x2, 0x1}, {0x2}, {0x1, 0x5}, {0x0, 0x3}, {0x4, 0x5}, {0x1, 0x5}, {}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x2, 0x8001, 0x10, 0x4, 0xfffd, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xd75, 0xebe2, 0x0, 0x7, 0x2, 0x6, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5e, 0xba67, 0x9, 0x8, 0x0, 0x2, 0x9, 0xafe]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xb, 0x16, 0x24, 0x4, 0x6, 0x9, 0x48, 0x48, 0x6c, 0x30, 0x1b, 0xb, 0x5, 0x48, 0x18]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x4, 0x1b, 0x12]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x3, 0xff, 0x8, 0x2, 0x6, 0x3, 0x7f]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1, 0x1, 0x1, 0x48, 0x18, 0x6c]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8, 0x0, 0x1ff, 0x9, 0x3, 0xb, 0xabb]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x2}, {0x4, 0x3}, {0x5}, {0x7, 0xa}, {0x2, 0x8}, {0x2, 0x9}, {0x1, 0x4}, {0x6, 0x7}, {0x4, 0x3}, {0x3, 0x4}, {}, {0x1}, {0x3, 0x7}, {0x4, 0x4}, {0x4, 0x6}, {0x7, 0x5}, {0x4, 0x7}, {0x2, 0x4}, {0x7, 0x2}, {0x4}, {0x1, 0x5}, {0x4, 0x9}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x2}, {0x6, 0x1}, {0x3, 0x9}, {0x1, 0x5}, {0x3, 0x7}, {0x3, 0x8}, {0x1, 0x4}, {0x1, 0x5}, {0x0, 0x3}, {0x2, 0x3}, {0x7, 0x1}, {0x2, 0x8}, {0x4, 0x5}, {0x0, 0x1}, {}, {0x4, 0xa}, {0x2, 0x4}, {0x4, 0x8}, {0x5, 0x7}, {0x0, 0x3}, {0x7, 0x3}]}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x12, 0x1b, 0x4, 0x1b, 0x24, 0x1, 0x6, 0x32, 0x16, 0xb, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x7, 0xfff8, 0xfffb, 0xea3, 0xf, 0x3]}}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x3, 0xc, 0x1b, 0x9, 0x3, 0x18, 0x18, 0x6c, 0xb, 0xc, 0x30, 0x30, 0x4, 0x18]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4a, 0x2, 0x18, 0x30, 0x48, 0x16, 0x30, 0x3, 0xc, 0x6, 0x12, 0x76, 0xc, 0x4, 0x1]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x4, 0x12, 0x30, 0xb, 0x1, 0x60, 0x69, 0x6c, 0x48, 0x9, 0x18, 0x60, 0x12, 0x12, 0x9, 0x36, 0x24, 0x1b, 0x67, 0x3, 0x9, 0xb, 0x1, 0xc, 0x16, 0x29, 0x60, 0x0, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x3, 0x5, 0x1, 0x8, 0x0, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x2b8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x29c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x30, 0x1, 0x12, 0x2, 0x16, 0x0, 0x4, 0x24, 0x1, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xd, 0x7, 0x2, 0x0, 0x3, 0x2, 0x8]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x1}, {0x4, 0x4}, {0x5, 0x5}, {0x2, 0xa}, {0x1, 0x4}, {0x0, 0x2}, {0x7, 0x2}, {0x6, 0x8}, {0x1, 0x1}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0x12, 0x9, 0x24, 0x24, 0x1b, 0xb, 0x30, 0x4, 0x36]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{}, {0x6, 0x8}, {0x2, 0x4}, {0x1, 0x2}, {0x1}, {0x2, 0x9}, {0x0, 0x4}, {0x1, 0x7}, {0x2, 0x9}, {0x4, 0x5}, {0x2, 0x4}, {0x7, 0x7}, {0x6, 0x7}, {0x0, 0x1}, {0x4, 0x3}, {0x3, 0xa}, {0x7}, {0x2, 0x5}, {0x0, 0x5}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0x5}, {0x3, 0x1}, {0x3, 0xa}]}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd1, 0x6, 0x467, 0x90, 0x3cd, 0x5, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x5, 0x0, 0x75, 0x9]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x7, 0x6}, {0x4}, {0x4, 0x1}, {0x2, 0xa}, {0x7}, {0x7, 0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x5, 0x3}, {0x7, 0x8}, {0x3, 0x3}, {0x4, 0x7}, {0x5, 0x6}, {0x6, 0x6}, {0x4, 0x9}, {0x3, 0xa}, {0x3, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x4, 0xa}, {}, {0x3, 0x5}, {0x2, 0x2}, {0x6, 0x7}, {0x6, 0x2}, {0x3, 0x4}, {0x3, 0x8}, {0x2, 0x5}, {0x7, 0x7}, {0x5, 0x6}, {0x0, 0x2}, {0x1, 0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x5}, {0x7, 0x6}, {0x0, 0x3}, {0x5, 0x5}, {0x1, 0x4}, {0x0, 0x6}, {0x4}, {0x7, 0x8}, {0x1, 0xa}, {0x6}, {0x1, 0x5}, {0x4, 0x4}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x8}, {0x5}, {0x7, 0xa}, {0x2, 0x4}, {0x4, 0x5}, {0x2, 0xa}, {0x3, 0x8}, {0x3, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x6, 0x9}, {0x3, 0x2}, {0x6}, {0x0, 0x9}, {0x0, 0x4}, {0x1, 0x2}, {0x7, 0x3}, {0x1, 0x3}, {0x1}, {0x1, 0xa}, {0x3, 0x9}, {0x0, 0x4}, {0x6, 0x9}, {0x2, 0x1}, {0x3, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x0, 0x0, 0x4, 0x8, 0x0, 0x3, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x400, 0xd8d, 0x3, 0xc, 0x1000, 0x0, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x401, 0x800, 0xa4, 0x2, 0x800, 0x6, 0x7ff]}}]}, @NL80211_BAND_5GHZ={0x10c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x24, 0x1b, 0x2, 0x18, 0x6c, 0x18, 0x68, 0x5e, 0x18, 0xb, 0x1, 0x9, 0x16, 0x1b, 0x4, 0xc, 0x4, 0x1f, 0x2f, 0x3, 0x24, 0x3, 0x4, 0x30]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x6, 0x8}, {0x6, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb47, 0x871, 0xfff8, 0x4, 0x6, 0xfbff, 0x6c6, 0x9356]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0x6}, {0x6, 0x8}, {0x0, 0x9}, {0x3, 0x6}, {0x0, 0x5}, {0x2, 0x1}, {0x6, 0xa}, {0x7, 0x6}, {0x3, 0x7}, {0x0, 0x6}, {0x0, 0x6}, {0x2, 0x6}, {0x0, 0x1}, {0x6, 0x7}, {0x7, 0x4}, {0x1, 0x1}, {0x2, 0x5}, {0x5, 0xa}, {0x3, 0x6}, {0x2, 0x3}, {0x3, 0x9}, {0x1, 0x8}, {0x2, 0xa}, {0x1, 0x1}, {0x6, 0x1}, {0x0, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8, 0xa5dd, 0xc, 0xa, 0x195, 0x9f, 0x9b]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x5, 0x5}, {0x6, 0x7}, {0x2, 0x3}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x6}, {0x0, 0x4}, {0x2, 0x6}, {0x7, 0x2}, {0x6, 0x5}, {0x0, 0x7}, {0x6, 0x9}, {0x2, 0x4}, {0x4, 0x6}, {0x5, 0x2}, {0x3}, {0x7, 0x3}, {0x1, 0x7}, {0x4}, {0x2}, {0x1, 0x9}, {0x6, 0x1}, {0x6}, {0x2, 0x9}, {0x7, 0x3}, {0x0, 0x5}, {0x1, 0x6}, {0x5, 0x8}, {0x4, 0x4}, {0x6, 0x5}, {0x5, 0x9}, {0x1, 0x4}, {0x4, 0x7}, {0x3, 0x9}, {0x4}, {0x6, 0x4}, {0x0, 0x3}, {0x5, 0x4}, {0x0, 0x8}, {0x3, 0x3}, {0x5, 0x4}, {0x3, 0x6}, {0x0, 0xa}, {0x7, 0x9}, {0x3, 0x7}, {0x7, 0xa}, {0x5, 0x7}, {0x0, 0x8}, {0x0, 0x4}, {0x6, 0x3}, {0x4, 0x8}, {0x5, 0x9}, {0x1, 0x3}, {0x1, 0xa}, {0x2, 0x4}, {0x0, 0x3}, {0x1, 0x1}, {0x7, 0x3}, {0x3, 0x6}, {0x0, 0x2}, {0x6, 0x3}, {0x1, 0xa}, {0x0, 0x5}, {0x4, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x1, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x8}, {0x2, 0x4}, {0x5, 0x5}, {0x3, 0x9}, {0x6, 0x5}, {0x5}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x9}, {0x5, 0xa}, {0x3, 0x3}, {0x6, 0x8}, {0x4, 0x8}, {0x5, 0x9}, {0x3}, {0x7, 0x9}, {0x7, 0xa}, {0x3, 0x5}, {0x6, 0x6}, {0x6, 0x3}, {0x6, 0x1}, {0x3}, {0x6, 0x3}, {0x0, 0x4}, {0x1, 0x5}, {0x1, 0x9}, {0x0, 0x8}, {0x6, 0x8}, {0x2, 0x9}, {0x3, 0xa}, {0x7, 0x8}, {0x5, 0x3}, {0x6, 0x7}, {0x7, 0x9}, {0x0, 0x3}, {0x5}, {0x6, 0x5}, {0x3, 0x4}, {0x7, 0x7}, {0x6, 0x8}, {0x7, 0x1}, {0x3, 0x7}, {0x3, 0x3}, {0x6, 0x1}, {0x6, 0x7}, {0x0, 0x2}, {0x5, 0x9}, {0x1, 0x8}, {0x7, 0x6}, {0x6, 0x4}, {0x1, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x3, 0x8}, {0x2, 0x9}, {0x1, 0x1}, {0x5, 0x5}, {0x1, 0x5}, {0x7, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x3}, {0x2, 0x3}, {0x3, 0x8}, {0x3, 0x3}, {0x2}, {0x7, 0xa}, {0x5, 0x4}, {0x1, 0x1}, {0x4, 0x3}, {0x2, 0x1}, {0x0, 0xa}, {0x6, 0x6}, {0x1}, {0x2, 0x7}, {0x5, 0x4}, {0x2, 0xa}, {0x5}, {0x1, 0x3}, {0x7, 0x6}, {0x4, 0x8}, {0x2, 0x5}, {0x7, 0x1}, {0x7, 0x2}, {0x0, 0x8}, {0x0, 0x8}, {0x4}, {0x3, 0x8}, {0x1, 0x1}, {0x5, 0x7}, {0x6, 0xa}, {0x0, 0x3}, {0x5, 0x1}, {0x2, 0x6}, {0x5, 0x3}, {0x7, 0xa}, {0x6, 0x4}, {0x1, 0x7}, {0x5}, {0x3, 0x6}, {0x5, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x3a4, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xae}]}, {0xe0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xc8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x401, 0x0, 0x80, 0x1, 0x9, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x5, 0x8}, {0x6, 0xa}, {0x5, 0x1}, {0x0, 0x5}, {0x7, 0x6}, {0x4, 0x4}, {0x4, 0x6}, {0x2, 0x5}, {0x2, 0x2}, {0x0, 0x5}, {0x1, 0x2}, {0x4, 0x9}, {0x0, 0x5}, {0x1, 0x7}, {0x1, 0x5}, {0x7, 0x2}, {0x7, 0x1}, {0x5, 0x4}, {0x4, 0x4}, {0x6, 0x8}, {0x7, 0x7}, {0x0, 0x4}, {0x4, 0x6}, {0x5, 0x3}, {0x4, 0x4}, {0x0, 0x8}, {0x7, 0x2}, {0x6}, {0x4, 0x5}, {0x5, 0x6}, {}, {0x7, 0x4}, {0x1, 0x6}, {0x4, 0x7}, {0x7, 0x2}, {0x5, 0x8}, {0x7, 0x3}, {0x5, 0x9}, {0x1}, {0x7, 0x9}, {0x6, 0x9}, {0x0, 0x6}, {0x5, 0x5}, {0x3, 0x1}, {0x0, 0x8}, {0x3, 0x8}, {0x6, 0x5}, {0x3, 0x7}, {0x5, 0x4}, {0x3, 0x6}, {0x5, 0x2}, {0x5, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x6, 0x2, 0x201, 0xfffa, 0x7f, 0x894]}}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x0, 0x1}, {0x4, 0x8}, {0x1, 0x8}, {0x2, 0x1}, {0x4, 0x9}, {0x3}, {0x5, 0x9}, {0x6, 0x6}, {0x2, 0x6}, {0x0, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x0, 0x1}, {0x7, 0x1}, {0x7, 0x6}, {0x6, 0x4}, {0x7, 0x8}, {0x2, 0x8}, {0x6, 0x3}, {0x3, 0x1}, {0x6, 0x1}, {0x5, 0x5}, {0x7, 0x4}, {0x4, 0x5}, {0x1, 0x6}, {0x1, 0x1}, {0x6, 0xa}, {0x3, 0x4}, {0x3, 0x7}, {0x0, 0x5}, {0x2, 0x3}, {0x4, 0xa}, {0x7, 0x6}, {0x1, 0x7}, {0x1, 0x6}, {0x0, 0x7}, {0x7, 0x8}, {0x7, 0x4}, {0x0, 0x2}, {0x6, 0x5}, {0x5}, {0x1, 0x8}, {0x1, 0x8}, {0x7, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0x6, 0xae21, 0x3, 0x6, 0x1, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x45f, 0x0, 0x5, 0x4, 0x5, 0xb, 0x1]}}]}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x98}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x62}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x71a7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe5}]}, {0x1c0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x170, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x30, 0x1b, 0x30, 0x30, 0x3, 0x36, 0x1b, 0x48, 0x4, 0x4d, 0xd, 0x9, 0x1, 0x24, 0x16, 0x60, 0x4, 0x24, 0x12]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x4, 0x30, 0x6c, 0x23, 0xc, 0x2]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x9, 0x6, 0x30, 0xc, 0x0, 0x34, 0x5, 0x24, 0x5, 0x48, 0xc, 0x1, 0x6c, 0x60, 0x3, 0x16]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x12, 0xc, 0x6, 0x9, 0x36, 0x48, 0x2, 0x1, 0x6, 0x36, 0x2, 0x2, 0x9, 0x16, 0x1, 0x31, 0x5, 0x12, 0x60, 0x1b, 0xc, 0x48, 0x3, 0x36, 0x3, 0x18, 0x18, 0x60, 0x0, 0x3e]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x2, 0x5}, {0x2, 0x5}, {0x6}, {0x3, 0x9}, {0x7, 0x7}, {0x7, 0xa}, {0x2, 0x9}, {0x3, 0x1}, {0x1, 0x4}, {0x4, 0x1}, {0x7, 0x8}, {0x2, 0x5}, {0x4, 0x1}, {0x6, 0x9}, {0x4, 0x9}, {0x1, 0x2}, {0x4, 0x2}, {0x0, 0x4}, {0x0, 0x6}, {0x2, 0x1}, {0x5, 0x3}, {0x5, 0x8}, {0x5, 0xa}, {0x1, 0x8}, {0x6, 0x1}, {0x6}, {0x7, 0x8}, {0x5, 0x4}, {0x5}, {0x7, 0x7}, {0x0, 0x5}, {0x0, 0x8}, {0x5, 0x3}, {0x5, 0x8}, {0x4, 0x2}, {0x6, 0x5}, {0x4, 0x9}, {0x7, 0xa}, {0x3, 0x7}, {0x4, 0x4}, {0x2, 0x9}, {0x3, 0x9}, {0x7, 0x9}, {0x5, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0xff, 0x8, 0x101, 0xfc93, 0x5, 0x3]}}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0xc6, 0x7, 0x1, 0x7, 0x6, 0x7, 0x3]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x4, 0x5}, {0x6, 0x9}, {0x2, 0x6}, {0x5}, {0x5}, {0x5, 0x2}, {0x4, 0x4}, {0x6, 0xa}, {0x5, 0xa}, {0x5, 0x1}, {0x2}, {0x6, 0x8}, {0x4, 0x6}, {0x3, 0x2}, {0x7, 0x2}, {0x5, 0x1}, {0x4, 0x7}, {0x6, 0x2}, {0x1, 0x8}, {0x7, 0x6}, {0x0, 0x2}, {0x5, 0x8}, {0x1, 0xa}, {0x3, 0x1}, {0x7, 0x6}, {0x4}, {0x4}, {0x5, 0x7}, {0x3, 0x8}, {0x2, 0xa}, {0x0, 0x2}, {0x5}, {0x5, 0x5}, {}, {0x7}, {0x3, 0xa}, {0x6, 0x4}, {0x3}, {0x0, 0x4}, {0x2, 0x9}, {0x7, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0x4}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x4}, {0x4, 0x2}, {0x2, 0xa}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x0, 0x7}, {0x5, 0x7}, {0x3, 0xa}, {}, {0x7, 0x9}, {0x4}, {0x2, 0x1}, {0x2, 0x4}, {0x3, 0x3}, {0x1, 0xa}, {0x5, 0x1}, {0x0, 0x3}, {0x1, 0x9}, {0x1, 0x9}, {0x4, 0x6}, {0x0, 0x6}, {0x5, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x5}, {0x1, 0x5}, {0x7, 0x2}, {0x7, 0x2}, {0x1, 0x3}, {0x4, 0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x7, 0x2}, {0x2, 0x4}, {0x6, 0x7}, {0x5, 0x2}, {0x4, 0x7}, {0x1, 0x8}, {0x1, 0x3}, {0x5, 0x5}, {0x0, 0x6}, {0x5, 0xa}, {0x1, 0x1}, {0x6, 0x2}, {0x2, 0x7}, {0x0, 0x3}, {0x6, 0x5}, {0x4, 0x8}, {0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3dd}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9d}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x90}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x94, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x88, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x70, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x9}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x24, 0x9, 0x6, 0x48, 0xb, 0x60, 0x48, 0x6c, 0x3, 0x1b, 0xc, 0xc, 0x24, 0x1, 0x24, 0x5, 0x2, 0x36, 0xb, 0x0, 0x30, 0x36, 0x2, 0x2, 0x6, 0x48, 0x5]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x67, 0x6c, 0x4, 0xc, 0x60, 0x24, 0x24, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xf66b, 0x3, 0x8, 0x2, 0x1, 0xf, 0x728]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}]}]}, 0xcc8}, 0x1, 0x0, 0x0, 0x884}, 0x20000045) (async) pipe(&(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000002a00)) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000002b80)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)={0x60, r11, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x56}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x70}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x37}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x44}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x5}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x7eaa}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x9c}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x5a}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x44060051) (async) fstat(r2, &(0x7f0000002bc0)) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000002c40)) (async) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000002dc0)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x14001a30}, 0xc, &(0x7f0000002d80)={&(0x7f0000002cc0)={0xa8, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc106}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfb}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0xa8}}, 0x4000001) (async) r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000002e00)='./file0\x00', 0x40, 0x10) openat2(r12, &(0x7f0000002e40)='./file0\x00', &(0x7f0000002e80)={0x4000, 0xd, 0x14}, 0x18) (async) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r10, 0x54a6) (async) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000002fc0)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f00)={0x64, r11, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x65}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_REG_RULES={0x20, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x444}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xf}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x64}}, 0x4c000) (async) lsetxattr$security_evm(&(0x7f0000003000)='./file0\x00', &(0x7f0000003040), &(0x7f0000003080)=@v1={0x2, "3a4f036e9645"}, 0x7, 0x0) (async) recvmmsg$unix(r10, &(0x7f0000006740)=[{{&(0x7f00000030c0), 0x6e, &(0x7f00000032c0)=[{&(0x7f0000003140)=""/167, 0xa7}, {&(0x7f0000003200)=""/179, 0xb3}], 0x2, &(0x7f0000003300)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000003340), 0x6e, &(0x7f0000003700)=[{&(0x7f00000033c0)=""/37, 0x25}, {&(0x7f0000003400)=""/173, 0xad}, {&(0x7f00000034c0)=""/174, 0xae}, {&(0x7f0000003580)=""/126, 0x7e}, {&(0x7f0000003600)=""/247, 0xf7}], 0x5, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000005b00)=[{&(0x7f00000038c0)=""/39, 0x27}, {&(0x7f0000003900)=""/39, 0x27}, {&(0x7f0000003940)=""/117, 0x75}, {&(0x7f00000039c0)=""/164, 0xa4}, {&(0x7f0000003a80)=""/64, 0x40}, {&(0x7f0000003ac0)=""/4096, 0x1000}, {&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f0000005ac0)=""/33, 0x21}], 0x8, &(0x7f0000005b80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000005c00)=@abs, 0x6e, &(0x7f0000005e00)=[{&(0x7f0000005c80)=""/140, 0x8c}, {&(0x7f0000005d40)=""/179, 0xb3}], 0x2, &(0x7f0000005e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f00000061c0)=[{&(0x7f0000005f80)=""/109, 0x6d}, {&(0x7f0000006000)=""/172, 0xac}, {&(0x7f00000060c0)=""/207, 0xcf}], 0x3, &(0x7f0000006200)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000006280)=[{&(0x7f0000006240)=""/46, 0x2e}], 0x1, &(0x7f00000062c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000006340)=@abs, 0x6e, &(0x7f00000065c0)=[{&(0x7f00000063c0)}, {&(0x7f0000006400)=""/243, 0xf3}, {&(0x7f0000006500)=""/177, 0xb1}], 0x3, &(0x7f0000006600)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}], 0x7, 0x0, &(0x7f0000006900)={0x77359400}) fsync(0xffffffffffffffff) 2.194712007s ago: executing program 3 (id=191): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) close(0x3) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x150}, 0x20008040) r2 = socket$inet6(0xa, 0x3, 0x0) getsockopt$inet6_mreq(r2, 0x88, 0xe, 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) 2.131869448s ago: executing program 3 (id=192): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x204) unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000040)={0x8080000, 0xeeee8000, 0x22, 0xee, 0x9a}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000100)={0x0, 0xd000, 0x3}) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x624a81, 0x0) 1.998596913s ago: executing program 3 (id=194): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x0}) utimensat(r0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)={{0x0, 0x2710}, {r1, r2/1000+60000}}, 0x0) (async) utimensat(r0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)={{0x0, 0x2710}, {r1, r2/1000+60000}}, 0x0) 1.18290896s ago: executing program 1 (id=202): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) syz_usb_connect$midi(0x3, 0x59, &(0x7f0000003140)=ANY=[@ANYBLOB="12011003000000208205560441000102030109024700010102400709040000020103004a09240300ff018108090724010600070006240200015309050600000409fcc00425010009050a03ff03059d0e09250112"], &(0x7f0000003500)={0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$xdp(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="067d8b3f73ce645d10fb71d8a32dceac232cf3bdd139f9bc01f567c23bb565af33ba7ccf5359c935250fba2d4141a02c4161597183c0deac572adc7c10bc4cfacdc99dabb12901bac49506fc14602a6e4204bdbce7f82b9eb9d2fdfceadc6ac05b86ee6d56", 0x65}], 0x1, 0x0, 0x0, 0x4000000}, 0x1) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000280)='./bus\x00') keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0xfe, 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x82) getdents64(r3, &(0x7f0000000400)=""/4096, 0xc00) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x93) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint={0x9, 0xdf}}]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r8 = openat$incfs(r7, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r8, 0xc058671e, &(0x7f00000000c0)) 1.174794151s ago: executing program 2 (id=203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000102010100000000000000000300010408001540000000031c000f8008000240000140fffff80008000140002000010000000000"], 0x38}}, 0x24004011) socket$netlink(0x10, 0x3, 0x7) syz_io_uring_setup(0x68c2, &(0x7f0000000080)={0x0, 0x877a, 0x6040, 0x0, 0x30b}, &(0x7f0000000000)=0x0, &(0x7f0000000100), &(0x7f0000000140)) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000018, 0x4000010, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r1, r2) close(0x3) timer_create(0x3, 0x0, &(0x7f0000000340)=0x0) timer_settime(r3, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100000841011c7772fe6912"], 0x0) 600.90282ms ago: executing program 2 (id=204): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x4, 0x0, 0x0, @adapter={0xfffffffffffffffb, 0x5, 0x1000, 0x3, 0x7}}]}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x2e, 0x21, 0x0, 0x0, {0x19}}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000006ec0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000007180)=""/199, 0xc7}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000000180)}], 0x3, &(0x7f0000000200)=""/199, 0xc7}, 0x401}, {{&(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000380)=""/182, 0xb6}], 0x1, &(0x7f0000000480)=""/63, 0x3f}, 0x5}, {{&(0x7f00000004c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)=""/151, 0x97}, {&(0x7f0000000600)=""/44, 0x2c}], 0x2}, 0x80000000}, {{&(0x7f0000000680)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000700)=""/187, 0xbb}, {&(0x7f00000007c0)=""/229, 0xe5}, {&(0x7f00000008c0)=""/193, 0xc1}, {&(0x7f00000009c0)=""/233, 0xe9}, {&(0x7f0000000ac0)=""/205, 0xcd}, {&(0x7f0000000bc0)=""/153, 0x99}], 0x6, &(0x7f0000000d00)=""/144, 0x90}, 0x800}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000dc0)=""/192, 0xc0}], 0x1}}, {{0x0, 0x0, &(0x7f0000003140)}, 0x3ff}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f00000031c0)=""/61, 0x3d}], 0x1, &(0x7f0000003240)=""/218, 0xda}, 0x6}, {{&(0x7f0000003340)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000003680)=[{&(0x7f00000033c0)=""/100, 0x64}, {&(0x7f0000003440)=""/79, 0x4f}, {&(0x7f00000034c0)=""/45, 0x2d}, {&(0x7f0000003500)=""/239, 0xef}, {&(0x7f0000003600)=""/80, 0x50}], 0x5, &(0x7f0000000080)=""/113, 0x71}, 0x9}, {{&(0x7f0000003780)=@nl=@unspec, 0x80, &(0x7f00000048c0)=[{&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000003700)=""/46, 0x2e}, {&(0x7f0000004840)=""/110, 0x6e}], 0x3}, 0x4}, {{&(0x7f0000004900)=@xdp, 0x80, &(0x7f0000006dc0)=[{&(0x7f0000004980)=""/116, 0x74}, {&(0x7f0000004a00)=""/233, 0xe9}, {&(0x7f0000004b00)=""/35, 0x23}, {&(0x7f0000004b40)=""/1, 0x1}, {&(0x7f0000004b80)=""/102, 0x66}, {&(0x7f0000004c00)=""/148, 0x94}, {&(0x7f0000004cc0)=""/4096, 0x1000}, {&(0x7f0000005cc0)=""/4096, 0x1000}, {&(0x7f0000006cc0)=""/1, 0x1}, {&(0x7f0000006d00)=""/148, 0x94}], 0xa, &(0x7f0000006e80)=""/62, 0x3e}, 0x80000000}], 0xa, 0x40012023, &(0x7f0000007140)={0x0, 0x989680}) r5 = accept4(r3, &(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, &(0x7f0000000180)=0x80, 0x80800) fsync(r5) 593.530049ms ago: executing program 0 (id=205): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x1c, 0x18, 0x229, 0x0, 0x0, {0xa, 0x0, 0x3f}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x8}]}, 0x1c}}, 0x20010000) pwritev(r3, &(0x7f00000004c0)=[{&(0x7f0000000040)="524a5629722736e51b942679d8ef6667363c62061d786c682704f35773d23ef830fe0bba0bcef0913954e1cb02bd2a7d9c977536975531", 0x37}, {&(0x7f00000001c0)="e5981175ce352026363de10171452598abcb8edf04bc4aff5931cb6b6619427d6e0133a0bef36d69ccd9b39090b09a41db8720aa16c53d0118e3677e9e6d51de2cef1a605170f3232ea1e25002614a3c2d6a837649cdb46be3225cc1cb0338131843433eed83b55786754abf2e0eefbe967603e2dc533e20df7d0c0883ab6ba7a2b474e45af0b0db3684c73b479a0e282452c6898a17dd3d33bb9d68b8b47e3ed0a929660ce355774be1e1", 0xab}, {&(0x7f0000000280)="f09fbdd1586b39dfd839eb17a0c8e1edb5d4013426e4aa0d706bd9b82e5692bbcda9c0e622147e294686c980aff6f9b2eed0bdcedad388be7a73674f2a384fbc3add863bf8de193023cf8696f3450a9fd4724e9f1c961162041fabf62d8c19ec3943a2698061ca0dc8ddd45471d9bd1b690bda43e7fdc70a0bda133f321d5451e30499798682fca422", 0x89}, {&(0x7f0000000340)="5b446b3489af3f93fc2123c69f268fefc9924ebccbe4ef5a4ecf037830b21396f079b27fc9188ceadc0731f22229026c1e4865a50e417649d3ab01941eecfeb147ca77ab968bba832f29be28df657010d0c786be63b46df55d552225cc38d89160ee4a537aba8b1b", 0x68}, {&(0x7f00000003c0)="debfa638c228326db6b17c36e98def9db49736635db33e9f59ff4a1d5db37087d4388dd179ad7d3d14d71031f19a98531de44520bb16eb70ed95ca8a07863fbf6a69929f3fcfdec857320cce3d39a4da899b7404b1638928d51740efebdd14043322d9d0876cac08d6b0094613c45cacc58725eb22f88c57e5bd985a07579b991c581f07467ca8bfd9af9085b3324d65fd476de030b89e867b55d75b0c4bc47a2da32dab3d374cd5a5886b7b4150269ebf5e145d2745fbfbed67b17c00cf1c04239f66f0f49862bed81874e41bcae0c47bf27b5aced88562a8237d43a9ea", 0xde}], 0x5, 0x3, 0xfffffff7) 544.963852ms ago: executing program 2 (id=206): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @empty, 0xfffd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0xa}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x81, 0xffffffffffffff7f}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x80000001, 0x7e, 0xa, 0x1, 0x0, 0x3, 0x12, 0x0, 0x6, 0x1, 0x7, 0x4, 0x4, 0x100000000001, 0x4], 0x1000, 0x4fb40}) ioctl$KVM_RUN(r4, 0xae80, 0x0) personality(0x580000b) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f0000000140)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(r6, 0x0, 0x23, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x6, 0x8001, 0xb, 0xd, 0x6, 0xffffffffffffffff}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) sched_setscheduler(r8, 0x6, &(0x7f0000000040)=0xe2) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x8044}, 0x880) 476.903094ms ago: executing program 2 (id=207): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x2, 0x2, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x4800000, @local, 0x6}, 0x1c) io_setup(0x6, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f00000001c0)="e44225d05f2f6f094c144896a39f873992563cff7ca6421831f54a7a1b2d9e7848680100000069feb75231dd8e6ead3584352f452daefe95c8d88400"/73, 0x49, 0x9, 0x0, 0x1}, 0x0) ftruncate(r0, 0x4) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121542, 0x60) 420.263576ms ago: executing program 2 (id=208): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000100), 0x4000078, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) syz_usb_connect$uac3(0x0, 0xa7, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004063070320400001020301090295000301ffc010080b0002010130070904000000010130000a2401103100120d000013240304020600000005"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) 0s ago: executing program 1 (id=209): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x891f, &(0x7f00000003c0)={'ip6tnl0\x00', 0x0}) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x800c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x9, 0x0, 0x2, {0x8, 0xb, 0x0, 0x1, 0x1, 0x9, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x20, 0x5, 0x9, 0xfc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x4, 0x5, {0x8, 0x25, 0x1, 0x80, 0x0, 0x1, 0x8f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0x8, 0x5, {0x8, 0x25, 0x1, 0x80, 0x0, 0xfe, 0x2}}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): T36] audit: type=1400 audit(1774830083.280:62): avc: denied { rlimitinh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.735839][ T36] audit: type=1400 audit(1774830083.280:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. [ 23.271607][ T36] audit: type=1400 audit(1774830090.830:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.272857][ T282] cgroup: Unknown subsys name 'net' [ 23.294280][ T36] audit: type=1400 audit(1774830090.830:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.321811][ T36] audit: type=1400 audit(1774830090.860:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.321999][ T282] cgroup: Unknown subsys name 'devices' [ 23.489140][ T282] cgroup: Unknown subsys name 'hugetlb' [ 23.494757][ T282] cgroup: Unknown subsys name 'rlimit' [ 23.648338][ T36] audit: type=1400 audit(1774830091.210:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.672042][ T36] audit: type=1400 audit(1774830091.210:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.681017][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.696998][ T36] audit: type=1400 audit(1774830091.210:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.728835][ T36] audit: type=1400 audit(1774830091.260:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.754550][ T36] audit: type=1400 audit(1774830091.260:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.780815][ T36] audit: type=1400 audit(1774830091.310:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.781047][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.806306][ T36] audit: type=1400 audit(1774830091.310:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.661216][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.668386][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.675441][ T292] bridge_slave_0: entered allmulticast mode [ 24.681848][ T292] bridge_slave_0: entered promiscuous mode [ 24.688229][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.695279][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.702405][ T290] bridge_slave_0: entered allmulticast mode [ 24.708705][ T290] bridge_slave_0: entered promiscuous mode [ 24.717885][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.724933][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.732021][ T292] bridge_slave_1: entered allmulticast mode [ 24.738360][ T292] bridge_slave_1: entered promiscuous mode [ 24.747465][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.754511][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.761643][ T290] bridge_slave_1: entered allmulticast mode [ 24.767964][ T290] bridge_slave_1: entered promiscuous mode [ 24.773944][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.781135][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.788254][ T291] bridge_slave_0: entered allmulticast mode [ 24.794443][ T291] bridge_slave_0: entered promiscuous mode [ 24.804193][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.811329][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.818517][ T291] bridge_slave_1: entered allmulticast mode [ 24.824707][ T291] bridge_slave_1: entered promiscuous mode [ 24.884525][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.891657][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.898886][ T289] bridge_slave_0: entered allmulticast mode [ 24.905097][ T289] bridge_slave_0: entered promiscuous mode [ 24.914476][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.921568][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.928700][ T289] bridge_slave_1: entered allmulticast mode [ 24.934880][ T289] bridge_slave_1: entered promiscuous mode [ 25.069539][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.076612][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.083922][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.090980][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.099852][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.107024][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.114301][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.121356][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.130019][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.137080][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.144423][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.151475][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.186178][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.193279][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.200600][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.207746][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.233226][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.240780][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.248399][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.255920][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.263262][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.270932][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.278473][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.285676][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.310684][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.317761][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.325585][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.332997][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.341583][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.348664][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.369563][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.376605][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.384325][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.391401][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.400585][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.407738][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.427291][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.434400][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.450042][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.457118][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.493292][ T292] veth0_vlan: entered promiscuous mode [ 25.513965][ T292] veth1_macvtap: entered promiscuous mode [ 25.529527][ T290] veth0_vlan: entered promiscuous mode [ 25.538467][ T291] veth0_vlan: entered promiscuous mode [ 25.560658][ T290] veth1_macvtap: entered promiscuous mode [ 25.572880][ T289] veth0_vlan: entered promiscuous mode [ 25.590562][ T291] veth1_macvtap: entered promiscuous mode [ 25.628757][ T289] veth1_macvtap: entered promiscuous mode [ 25.640054][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.839552][ T340] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.935280][ T351] veth1_macvtap: left promiscuous mode [ 25.944490][ T351] macsec0: entered allmulticast mode [ 25.954834][ T351] veth1_macvtap: entered promiscuous mode [ 25.961249][ T351] veth1_macvtap: entered allmulticast mode [ 25.967297][ T351] macsec0: left allmulticast mode [ 25.972353][ T351] veth1_macvtap: left allmulticast mode [ 26.166840][ T31] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 26.187004][ T307] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.316756][ T31] usb 4-1: Invalid ep0 maxpacket: 16 [ 26.336755][ T307] usb 1-1: Using ep0 maxpacket: 32 [ 26.343335][ T307] usb 1-1: unable to get BOS descriptor or descriptor too short [ 26.351957][ T307] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 26.360638][ T307] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 26.370966][ T307] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 26.380066][ T307] usb 1-1: config 128 has no interface number 0 [ 26.386354][ T307] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 26.397722][ T307] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 26.408478][ T307] usb 1-1: config 128 interface 127 has no altsetting 0 [ 26.419274][ T307] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 26.428429][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.436447][ T307] usb 1-1: Product: 膿⪬஛姱쌞è¨âœ”㈞氩⟵ᚙ鯀䋶顂èœë°¥êŒá…Šà£¥â™‘鶵仪貘먱ㄳ㸻畩슉볱å…ã¡î‰™îŠ¤ [ 26.449839][ T307] usb 1-1: Manufacturer: ж [ 26.454389][ T307] usb 1-1: SerialNumber: syz [ 26.466821][ T31] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 26.626751][ T31] usb 4-1: Invalid ep0 maxpacket: 16 [ 26.632324][ T31] usb usb4-port1: attempt power cycle [ 26.671930][ T307] usb 1-1: USB disconnect, device number 2 [ 26.684496][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.917591][ T366] loop6: detected capacity change from 0 to 7 [ 26.924448][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 26.933649][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 26.942556][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 26.951726][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 26.959644][ T318] loop6: unable to read partition table [ 26.974737][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 26.983928][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 26.991934][ T31] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 26.992163][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 27.008507][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 27.016339][ T366] loop6: unable to read partition table [ 27.016502][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.022491][ T366] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 27.029807][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 27.042266][ T31] usb 4-1: Invalid ep0 maxpacket: 16 [ 27.051024][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 27.064661][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 27.073851][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 27.082017][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 27.091503][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 27.099664][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 27.108927][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 27.117166][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 27.126394][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 27.196793][ T31] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 27.216827][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 27.217499][ T31] usb 4-1: Invalid ep0 maxpacket: 16 [ 27.223916][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 107, changing to 7 [ 27.227736][ T31] usb usb4-port1: unable to enumerate USB device [ 27.238741][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 7 [ 27.257957][ T9] usb 2-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 27.267543][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.275625][ T9] usb 2-1: Product: 豆㩭꤇橋p㉫⑥⿪訋凤ä’衎縃崕粆꫑篴쉅í—초䚑屷讴笡⭢ኢ⸵潻볻楤褛蛶앭ꫴà»ì„¡â¢æ§¦è‹©è¬‘ï…쿋ꄲ૦Ɣ暆甂䘨éˆæ¹çƒµêœšåµ˜á¨¤ë ¡å¥¸çªŸâ‰Žæ¡´í“ºè„’힮瀱邥훩辄屢Փ㲿䤇ë£ã®†æ°•ç²˜éŠ”諣㻴ë¢ì§‡àª‚璟猴Ý諂쪚ｅ⥇ã–硤쑳ì”▲誌랲꣡⣖瘟ሃ穸祥죉샠쎠笋䪙虤ᥔǡ銃⋠[ 27.311458][ T9] usb 2-1: Manufacturer: 鑷㠦함ᴴ嚺棟冎뷜á–귫昂îŒå‘”漗纄癨î‚ê¥ìº³ìšŸé§¡ï–Ÿè¿®é†–ⶢîžéª©ã¾˜á¼µæ‚ºã²”녷栯薂é åƒ¯ã‘¹ï²¸î˜³â™±åª„ëµà®ŒîŒ•â²¹î§ í›¡ç„»ë™’匀ﳛﯜ姹쨸컴턡袔垡礼å”㺥醘磞ㄾ惜Üåˆæœ”í†€ä†´å¤ [ 27.335646][ T9] usb 2-1: SerialNumber: Ѓ [ 27.397293][ T370] Zero length message leads to an empty skb [ 27.546502][ T9] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 27.556486][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 27.569454][ T9] usb 2-1: USB disconnect, device number 2 [ 27.581848][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.746786][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.896828][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 27.903118][ T31] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.914242][ T31] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.924076][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 27.930754][ T31] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 27.939847][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.948475][ T31] usb 1-1: config 0 descriptor?? [ 28.087131][ T389] ======================================================= [ 28.087131][ T389] WARNING: The mand mount option has been deprecated and [ 28.087131][ T389] and is ignored by this kernel. Remove the mand [ 28.087131][ T389] option from the mount to silence this warning. [ 28.087131][ T389] ======================================================= [ 28.359647][ T31] hid (null): report_id 0 is invalid [ 28.562656][ T379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'. [ 28.572873][ T36] kauditd_printk_skb: 70 callbacks suppressed [ 28.572913][ T36] audit: type=1400 audit(1774830096.130:144): avc: denied { write } for pid=378 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 28.573086][ T9] usb 1-1: USB disconnect, device number 3 [ 28.606319][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 28.899796][ T36] audit: type=1400 audit(1774830096.460:145): avc: denied { bind } for pid=399 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.944667][ T408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 28.967470][ T36] audit: type=1400 audit(1774830096.530:146): avc: denied { create } for pid=409 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 28.986781][ T36] audit: type=1400 audit(1774830096.530:147): avc: denied { setopt } for pid=409 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 29.005985][ T36] audit: type=1400 audit(1774830096.530:148): avc: denied { bind } for pid=409 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 29.071564][ T416] loop2: detected capacity change from 0 to 7 [ 29.125548][ T36] audit: type=1400 audit(1774830096.680:149): avc: denied { ioctl } for pid=417 comm="syz.0.33" path="socket:[4242]" dev="sockfs" ino=4242 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.127139][ T418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.156835][ T36] audit: type=1400 audit(1774830096.680:150): avc: denied { bind } for pid=417 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.159674][ T418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.199843][ T36] audit: type=1400 audit(1774830096.760:151): avc: denied { setopt } for pid=420 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 29.219351][ T36] audit: type=1400 audit(1774830096.760:152): avc: denied { bind } for pid=420 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 29.240756][ T423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=375 sclass=netlink_route_socket pid=423 comm=syz.1.35 [ 29.286974][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 29.356793][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.436742][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 29.443606][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 29.456989][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0048, bcdDevice= 0.40 [ 29.466147][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.474559][ T9] usb 4-1: Product: syz [ 29.478938][ T9] usb 4-1: Manufacturer: 䗎꣦仲殞冕⢸毚廳èŒîž¼å…¹ï³­æƒ¡å¶±à³·í‘ࡪ䨃北㣿둓嗜ì­Ø¸ì»»ç“¿ê¢¸ì‡¯å…´å£—罵ᣠå¿è»‰ê¹ä‚½á¬¹ç¹®á¶›äˆ«å»—é¾›ã·é¿ë㥙˂겉κﯡ훺撻鶘ᬵ뗚㘀哮⊢ﮚ鞲盵ﾴᓮ姭希팎䞀䩄﹟ɕã ä¶ã«™ã“¶ë³ìœµì¥žï½·çŽç«†à©¢ë™˜ì¤‰å ¸ížºä§±é¤¨ì­§æ±„岽ℱᴺæ¨à§¾ç€…᜾붉꓌짢蔃鼼罎íˆæˆè«¯î††ä—ㅳ童䨶 [ 29.512884][ T9] usb 4-1: SerialNumber: syz [ 29.528332][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 29.536989][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.547356][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 29.556342][ T10] usb 1-1: too many endpoints for config 1 interface 1 altsetting 227: 255, using maximum allowed: 30 [ 29.567544][ T10] usb 1-1: config 1 interface 1 altsetting 227 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 29.580879][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 29.592006][ T10] usb 1-1: config 1 interface 1 has no altsetting 0 [ 29.600968][ T10] usb 1-1: string descriptor 0 read error: -22 [ 29.607658][ T10] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 29.616941][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.721998][ T36] audit: type=1400 audit(1774830097.280:153): avc: denied { read } for pid=409 comm="syz.3.29" dev="nsfs" ino=4026532468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 30.027935][ T418] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.044293][ T10] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 30.056931][ T10] usb 1-1: USB disconnect, device number 4 [ 30.063260][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 30.080242][ T9] usb 4-1: USB disconnect, device number 6 [ 30.138820][ T424] kernel read not supported for file 42/net/vlan/config (pid: 424 comm: kworker/0:5) [ 30.558464][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.591919][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.599568][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.607051][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.614488][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.622052][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.629579][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.637238][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.644645][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.652346][ T396] Bluetooth: hci0: command 0x1003 tx timeout [ 30.658528][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 30.665393][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.677288][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.689037][ T460] netlink: 9 bytes leftover after parsing attributes in process `syz.2.46'. [ 30.698009][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.707078][ T460] gretap0: entered promiscuous mode [ 30.712510][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.720997][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.737860][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.746745][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.756665][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.756672][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 30.773301][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.783424][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.791628][ T460] netlink: 5 bytes leftover after parsing attributes in process `syz.2.46'. [ 30.796769][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.800816][ T460] 0ªî{X¹¦: renamed from gretap0 [ 30.810249][ T9] usb 2-1: config 0 descriptor?? [ 30.819068][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.819656][ T460] 0ªî{X¹¦: left promiscuous mode [ 30.832617][ T460] 0ªî{X¹¦: entered allmulticast mode [ 30.832802][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.839053][ T460] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 30.861759][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.869478][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.883838][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.914214][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.922590][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.930105][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.938101][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.945645][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.953254][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.961051][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.968938][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.976316][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.984274][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.991745][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 30.999865][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.007334][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.007689][ T468] tipc: Started in network mode [ 31.019676][ T468] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 31.019806][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.028586][ T468] tipc: Enabling of bearer rejected, failed to enable media [ 31.044962][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.054977][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.062548][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.074200][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.081826][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.089457][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.096931][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.104361][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.112510][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.120194][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.131780][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.139554][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.148769][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.156851][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.164363][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.172119][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.179931][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.188117][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.195713][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.204325][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.212794][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.220672][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.228329][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.235928][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.239917][ T9] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 31.250308][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.251382][ T9] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 31.268773][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.271925][ T9] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 31.283119][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.285252][ T9] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 31.297906][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.298131][ T9] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 31.312012][ T9] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 31.312141][ T454] overlay: filesystem on ./file0 not supported as upperdir [ 31.318904][ T9] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 31.340247][ T9] pyra 0003:1E7D:2CF6.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 31.586825][ T45] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 31.666774][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 31.739981][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 31.749580][ T45] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 31.762219][ T45] usb 4-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 31.773453][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.781532][ T45] usb 4-1: Product: syz [ 31.785802][ T45] usb 4-1: Manufacturer: syz [ 31.790459][ T45] usb 4-1: SerialNumber: syz [ 31.816819][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 31.823159][ T10] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.834251][ T10] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.844071][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 31.850871][ T10] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 31.860113][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.869355][ T10] usb 1-1: config 0 descriptor?? [ 32.000933][ T45] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 32.016848][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.043655][ T45] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 32.054968][ T45] usb 4-1: USB disconnect, device number 8 [ 32.065534][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.188060][ T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 32.198061][ T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 32.209642][ T31] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 32.218771][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.227014][ T31] usb 3-1: Product: syz [ 32.231323][ T31] usb 3-1: Manufacturer: syz [ 32.235936][ T31] usb 3-1: SerialNumber: syz [ 32.241440][ T31] usb 3-1: config 0 descriptor?? [ 32.246823][ T483] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 32.254146][ T483] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 32.462456][ T483] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 32.474811][ T9] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device [ 32.482318][ T9] pyra 0003:1E7D:2CF6.0002: couldn't install mouse [ 32.482340][ T483] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 32.490445][ T9] pyra 0003:1E7D:2CF6.0002: probe with driver pyra failed with error -71 [ 32.518984][ T488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'. [ 32.522409][ T9] usb 2-1: USB disconnect, device number 3 [ 32.534404][ T478] tipc: Started in network mode [ 32.551666][ T478] tipc: Node identity 84e, cluster identity 4711 [ 32.558402][ T478] tipc: Node number set to 2126 [ 32.566181][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 32.581047][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 32.590263][ T10] usb 1-1: USB disconnect, device number 5 [ 32.637806][ T501] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 32.654044][ T502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.663011][ T502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.886802][ T424] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 32.904491][ T31] Error reading MAC address [ 32.910894][ T31] usb 3-1: USB disconnect, device number 2 [ 33.001418][ T512] fuse: Bad value for 'fd' [ 33.036762][ T424] usb 4-1: Using ep0 maxpacket: 8 [ 33.043107][ T424] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 33.052111][ T424] usb 4-1: config 0 has no interface number 0 [ 33.064961][ T424] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 33.076382][ T424] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.095259][ T424] usb 4-1: Product: syz [ 33.100446][ T424] usb 4-1: Manufacturer: syz [ 33.105220][ T424] usb 4-1: SerialNumber: syz [ 33.115319][ T424] usb 4-1: config 0 descriptor?? [ 33.320677][ T543] netlink: 17 bytes leftover after parsing attributes in process `syz.1.70'. [ 33.332419][ T543] netlink: 'syz.1.70': attribute type 4 has an invalid length. [ 33.356820][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 33.375111][ T424] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 33.385782][ T424] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 33.400268][ T424] usb 4-1: USB disconnect, device number 9 [ 33.526816][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 33.533394][ T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 33.541693][ T9] usb 1-1: config 0 has no interface number 0 [ 33.549788][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 33.559078][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.567254][ T9] usb 1-1: Product: syz [ 33.571681][ T9] usb 1-1: Manufacturer: syz [ 33.576275][ T9] usb 1-1: SerialNumber: syz [ 33.581639][ T9] usb 1-1: config 0 descriptor?? [ 33.587497][ T9] smsc95xx v2.0.0 [ 33.626826][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 33.676816][ T380] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 33.778175][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 33.786420][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 33.787690][ T521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'. [ 33.795253][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 160, changing to 4 [ 33.814616][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 33.825876][ T10] usb 3-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 33.834947][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.843030][ T10] usb 3-1: Product: syz [ 33.847246][ T10] usb 3-1: Manufacturer: syz [ 33.851944][ T10] usb 3-1: SerialNumber: syz [ 33.857112][ T380] usb 2-1: config 162 has an invalid interface number: 79 but max is 1 [ 33.865366][ T380] usb 2-1: config 162 has an invalid interface number: 183 but max is 1 [ 33.874640][ T380] usb 2-1: config 162 has no interface number 0 [ 33.881076][ T380] usb 2-1: config 162 has no interface number 1 [ 33.887552][ T380] usb 2-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 33.900735][ T380] usb 2-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 33.911733][ T380] usb 2-1: config 162 interface 183 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 33.922797][ T380] usb 2-1: config 162 interface 183 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 33.933975][ T380] usb 2-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 33.945946][ T380] usb 2-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 33.957513][ T380] usb 2-1: config 162 interface 183 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 33.969125][ T380] usb 2-1: config 162 interface 183 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 33.979484][ T380] usb 2-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 33.992846][ T380] usb 2-1: config 162 interface 79 has no altsetting 0 [ 33.999758][ T380] usb 2-1: config 162 interface 183 has no altsetting 0 [ 34.008315][ T380] usb 2-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 34.017562][ T380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.025564][ T380] usb 2-1: Product: syz [ 34.029830][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 34.040568][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 34.049680][ T380] usb 2-1: Manufacturer: syz [ 34.054297][ T380] usb 2-1: SerialNumber: syz [ 34.206829][ T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 34.356764][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 34.363354][ T31] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.374423][ T31] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.384378][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 34.391135][ T31] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 34.400448][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.409498][ T31] usb 4-1: config 0 descriptor?? [ 34.619025][ T521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.620185][ T555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'. [ 34.628309][ T521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.650532][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 34.667511][ T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 34.678331][ T9] usb 1-1: USB disconnect, device number 6 [ 34.692739][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 34.692759][ T36] audit: type=1400 audit(1774830102.250:195): avc: denied { append } for pid=558 comm="syz.0.73" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 34.753038][ T36] audit: type=1400 audit(1774830102.310:196): avc: denied { ioctl } for pid=563 comm="syz.0.74" path="socket:[5280]" dev="sockfs" ino=5280 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.777284][ T36] audit: type=1400 audit(1774830102.310:197): avc: denied { connect } for pid=563 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.796853][ T36] audit: type=1400 audit(1774830102.310:198): avc: denied { write } for pid=563 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.836336][ T36] audit: type=1400 audit(1774830102.390:199): avc: denied { block_suspend } for pid=570 comm="syz.0.76" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.859732][ T36] audit: type=1400 audit(1774830102.390:200): avc: denied { setopt } for pid=570 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.899816][ T573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=573 comm=syz.0.77 [ 34.913677][ T36] audit: type=1400 audit(1774830102.470:201): avc: denied { mount } for pid=572 comm="syz.0.77" name="/" dev="ramfs" ino=5302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 34.937595][ T573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.77'. [ 34.947079][ T573] veth1_macvtap: left promiscuous mode [ 35.034379][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 35.041223][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 35.049354][ T36] audit: type=1400 audit(1774830102.600:202): avc: denied { create } for pid=577 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 35.070404][ T31] usb 4-1: USB disconnect, device number 10 [ 35.088088][ T36] audit: type=1400 audit(1774830102.600:203): avc: denied { mounton } for pid=577 comm="syz.3.78" path="/21/file0" dev="tmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 35.113718][ T581] fuse: Bad value for 'user_id' [ 35.118994][ T581] fuse: Bad value for 'user_id' [ 35.139602][ T583] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.235663][ T36] audit: type=1400 audit(1774830102.790:204): avc: denied { create } for pid=587 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 35.326779][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 35.466762][ T9] usb 1-1: device descriptor read/64, error -71 [ 35.716783][ T9] usb 1-1: device descriptor read/64, error -71 [ 35.956782][ T424] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 35.964546][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 36.096764][ T9] usb 1-1: device descriptor read/64, error -71 [ 36.119190][ T424] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.128358][ T424] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.136498][ T424] usb 4-1: Product: syz [ 36.140868][ T424] usb 4-1: Manufacturer: syz [ 36.145537][ T424] usb 4-1: SerialNumber: syz [ 36.203618][ T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 36.211392][ T10] usb 3-1: unit 4 not found! [ 36.222029][ T10] usb 3-1: USB disconnect, device number 3 [ 36.243189][ T547] udevd[547]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.289236][ T595] fuse: Bad value for 'rootmode' [ 36.295686][ T595] kvm: pic: level sensitive irq not supported [ 36.295726][ T595] kvm: pic: level sensitive irq not supported [ 36.336791][ T9] usb 1-1: device descriptor read/64, error -71 [ 36.360115][ T424] usb 4-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 36.369353][ T424] usb 4-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 36.377859][ T424] usb 4-1: 2:1 : sample bitwidth 129 in over sample bytes 2 [ 36.390113][ T424] usb 4-1: USB disconnect, device number 11 [ 36.441432][ T380] pl2303 2-1:162.79: required endpoints missing [ 36.449737][ T380] pl2303 2-1:162.183: pl2303 converter detected [ 36.464480][ T9] usb usb1-port1: attempt power cycle [ 36.470219][ T380] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 36.480451][ T380] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 36.492372][ T380] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 36.497894][ T600] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 36.501044][ T380] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 36.518177][ T380] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 36.528262][ T380] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 36.541406][ T380] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 36.555445][ T380] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 36.563960][ T380] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0000]: -71 [ 36.572658][ T380] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0001]: -71 [ 36.581599][ T380] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0002]: -71 [ 36.590966][ T380] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 36.602506][ T380] usb 2-1: USB disconnect, device number 4 [ 36.618897][ T380] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 36.629619][ T380] pl2303 2-1:162.183: device disconnected [ 36.701720][ T617] netlink: 28 bytes leftover after parsing attributes in process `syz.1.91'. [ 36.816843][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 36.838045][ T9] usb 1-1: device descriptor read/8, error -71 [ 36.968084][ T9] usb 1-1: device descriptor read/8, error -71 [ 37.017973][ T627] 9pnet: p9_errstr2errno: server reported unknown error ÿ [ 37.045381][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.116807][ T31] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 37.196816][ T307] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 37.216841][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 37.237879][ T9] usb 1-1: device descriptor read/8, error -71 [ 37.276836][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 37.285893][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 37.294104][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 37.302866][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.313034][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.323915][ T31] usb 2-1: string descriptor 0 read error: -22 [ 37.330258][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 37.339480][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.349498][ T31] usb 2-1: 0:2 : does not exist [ 37.356787][ T307] usb 4-1: Using ep0 maxpacket: 32 [ 37.363018][ T307] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 37.371429][ T307] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 37.380091][ T307] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 37.387856][ T9] usb 1-1: device descriptor read/8, error -71 [ 37.389188][ T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 37.404990][ T307] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 37.414675][ T45] usb 3-1: device descriptor read/64, error -71 [ 37.420975][ T307] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 37.434119][ T307] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 37.443213][ T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.452410][ T307] usb 4-1: config 0 descriptor?? [ 37.497011][ T9] usb usb1-port1: unable to enumerate USB device [ 37.659458][ T307] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 37.670344][ T45] usb 3-1: device descriptor read/64, error -71 [ 37.678256][ T307] usb 4-1: USB disconnect, device number 12 [ 37.685189][ T307] usblp0: removed [ 37.906784][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 37.956466][ T623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.965140][ T623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.046750][ T45] usb 3-1: device descriptor read/64, error -71 [ 38.096767][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 38.256852][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 38.263269][ T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 38.271678][ T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 38.280426][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 38.289470][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 38.296824][ T45] usb 3-1: device descriptor read/64, error -71 [ 38.299172][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 38.315268][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 38.328557][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 38.337643][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.346373][ T9] usb 4-1: config 0 descriptor?? [ 38.382436][ T31] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 38.393871][ T31] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 38.403619][ T31] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 38.411020][ T45] usb usb3-port1: attempt power cycle [ 38.427102][ T31] usb 2-1: USB disconnect, device number 5 [ 38.496769][ T424] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 38.552633][ T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 38.648245][ T424] usb 1-1: unable to get BOS descriptor or descriptor too short [ 38.656817][ T424] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 38.667962][ T424] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 38.681096][ T424] usb 1-1: string descriptor 0 read error: -22 [ 38.687359][ T424] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 38.696401][ T424] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.756787][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 38.765421][ T9] usb 4-1: USB disconnect, device number 13 [ 38.777921][ T9] usblp0: removed [ 38.778464][ T45] usb 3-1: device descriptor read/8, error -71 [ 38.900939][ T650] x_tables: duplicate underflow at hook 1 [ 38.919460][ T45] usb 3-1: device descriptor read/8, error -71 [ 39.046768][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 39.046877][ T396] Bluetooth: hci0: command 0x1003 tx timeout [ 39.156801][ T45] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 39.177845][ T45] usb 3-1: device descriptor read/8, error -71 [ 39.310729][ T424] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 39.320640][ T45] usb 3-1: device descriptor read/8, error -71 [ 39.349100][ T424] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 39.370785][ T424] usb 1-1: USB disconnect, device number 11 [ 39.381340][ T557] udevd[557]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.438410][ T45] usb usb3-port1: unable to enumerate USB device [ 39.838031][ T667] capability: warning: `syz.3.107' uses 32-bit capabilities (legacy support in use) [ 39.847840][ T668] overlay: ./bus is not a directory [ 39.958553][ T683] input: syz0 as /devices/virtual/input/input5 [ 39.969235][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 39.969268][ T36] audit: type=1400 audit(1774830107.530:222): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=517 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.002866][ T683] overlayfs: missing 'workdir' [ 40.008336][ T36] audit: type=1400 audit(1774830107.530:223): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=517 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.033394][ T36] audit: type=1400 audit(1774830107.530:224): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=517 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.054715][ T688] IPv6: A: Disabled Multicast RS [ 40.326935][ T307] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 40.336791][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 40.466833][ T45] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 40.476906][ T307] usb 1-1: Using ep0 maxpacket: 16 [ 40.483566][ T307] usb 1-1: unable to get BOS descriptor or descriptor too short [ 40.492200][ T307] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.497901][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.502468][ T307] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 40.513514][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.524241][ T307] usb 1-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 40.532381][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 40.541824][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.550620][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.558716][ T307] usb 1-1: Product: syz [ 40.570868][ T307] usb 1-1: Manufacturer: syz [ 40.570995][ T9] usb 2-1: config 0 descriptor?? [ 40.575487][ T307] usb 1-1: SerialNumber: syz [ 40.620411][ T45] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 40.627156][ T698] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=698 comm=syz.3.116 [ 40.629573][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.650777][ T45] usb 3-1: Product: syz [ 40.655190][ T45] usb 3-1: Manufacturer: syz [ 40.660074][ T45] usb 3-1: SerialNumber: syz [ 40.676640][ T700] netlink: 'syz.3.117': attribute type 13 has an invalid length. [ 40.785899][ T36] audit: type=1400 audit(1774830108.340:225): avc: denied { watch watch_reads } for pid=701 comm="syz.3.118" path="/36/file1" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.810360][ T36] audit: type=1400 audit(1774830108.370:226): avc: denied { connect } for pid=691 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.830660][ T704] sit0: entered promiscuous mode [ 40.837587][ T704] netlink: 'syz.3.119': attribute type 1 has an invalid length. [ 40.845368][ T704] netlink: 1 bytes leftover after parsing attributes in process `syz.3.119'. [ 40.878907][ T705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.888436][ T705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.910643][ T45] rtl8150 3-1:1.0: couldn't reset the device [ 40.916904][ T45] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 40.927472][ T45] usb 3-1: USB disconnect, device number 8 [ 41.187167][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 41.193336][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 41.206171][ T9] usb 2-1: USB disconnect, device number 6 [ 41.616767][ T360] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 41.646771][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 41.741599][ T36] audit: type=1400 audit(1774830109.300:227): avc: denied { append } for pid=710 comm="syz.1.122" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.776770][ T360] usb 4-1: Using ep0 maxpacket: 8 [ 41.783861][ T360] usb 4-1: config 1 interface 0 has no altsetting 0 [ 41.793310][ T360] usb 4-1: New USB device found, idVendor=044f, idProduct=b605, bcdDevice= 0.40 [ 41.802692][ T360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.806751][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 41.816942][ T9] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 41.822798][ T360] usb 4-1: Product: syz [ 41.825128][ T9] usb 3-1: config 0 has no interface number 1 [ 41.825160][ T9] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 41.829348][ T360] usb 4-1: Manufacturer: syz [ 41.837565][ T9] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 41.856650][ T360] usb 4-1: SerialNumber: syz [ 41.862955][ T9] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 41.878993][ T9] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 41.890988][ T9] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 41.904407][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 41.916259][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 41.926341][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 41.937967][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 41.947180][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.955319][ T9] usb 3-1: Product: syz [ 41.959744][ T9] usb 3-1: Manufacturer: syz [ 41.964367][ T9] usb 3-1: SerialNumber: syz [ 41.974754][ T9] usb 3-1: config 0 descriptor?? [ 41.980392][ T709] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 42.193128][ T36] audit: type=1400 audit(1774830109.750:228): avc: denied { ioctl } for pid=708 comm="syz.2.121" path="socket:[6046]" dev="sockfs" ino=6046 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.193377][ T709] netlink: 'syz.2.121': attribute type 8 has an invalid length. [ 42.483579][ T360] usbhid 4-1:1.0: can't add hid device: -71 [ 42.489782][ T360] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 42.499556][ T360] usb 4-1: USB disconnect, device number 14 [ 43.103790][ T307] usb 1-1: 0:2 : does not exist [ 43.113707][ T307] usb 1-1: USB disconnect, device number 12 [ 43.124939][ T9] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 43.129907][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.381961][ T36] audit: type=1400 audit(1774830118.940:229): avc: denied { relabelfrom } for pid=716 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 51.401912][ T36] audit: type=1400 audit(1774830118.940:230): avc: denied { relabelto } for pid=716 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 51.426515][ T36] audit: type=1400 audit(1774830118.940:231): avc: denied { connect } for pid=719 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 51.426940][ T723] syzkaller0: entered promiscuous mode [ 51.446832][ T36] audit: type=1400 audit(1774830118.940:232): avc: denied { ioctl } for pid=719 comm="syz.0.123" path="socket:[6076]" dev="sockfs" ino=6076 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 51.452958][ T723] syzkaller0: entered allmulticast mode [ 51.506218][ T723] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 51.523172][ T726] kvm: kvm [720]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 51.525616][ T731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.543474][ T731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.555473][ T731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.565240][ T731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.575697][ T731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.585121][ T731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.746757][ T360] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 51.903908][ T360] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.914180][ T360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.925169][ T360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.934945][ T360] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 51.944281][ T360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.953326][ T360] usb 4-1: config 0 descriptor?? [ 52.041680][ T734] tipc: New replicast peer: 255.0.0.255 [ 52.047489][ T734] tipc: Enabled bearer , priority 10 [ 52.108934][ T736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.119108][ T736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.141679][ T36] audit: type=1400 audit(1774830119.700:233): avc: denied { ioctl } for pid=740 comm="syz.2.130" path="socket:[6767]" dev="sockfs" ino=6767 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.289926][ T36] audit: type=1400 audit(1774830119.850:234): avc: denied { write } for pid=749 comm="syz.0.133" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 52.313528][ T752] netlink: 96 bytes leftover after parsing attributes in process `syz.2.132'. [ 52.354941][ T759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 52.364889][ T759] SELinux: failed to load policy [ 52.370173][ T36] audit: type=1400 audit(1774830119.920:235): avc: denied { load_policy } for pid=756 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 52.539126][ T723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.548919][ T723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.566667][ T723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.589928][ T764] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 52.606381][ T36] audit: type=1400 audit(1774830120.160:236): avc: denied { remount } for pid=762 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.615742][ T723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.641515][ T36] audit: type=1400 audit(1774830120.200:237): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 53.079603][ T360] usbhid 4-1:0.0: can't add hid device: -71 [ 53.088236][ T360] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 53.099989][ T360] usb 4-1: USB disconnect, device number 15 [ 53.275787][ T36] audit: type=1400 audit(1774830120.830:238): avc: denied { append } for pid=782 comm="syz.1.142" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.560779][ T804] SELinux: failed to load policy [ 53.568880][ T804] netlink: 72 bytes leftover after parsing attributes in process `syz.0.148'. [ 53.646789][ T307] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 53.756781][ T360] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 53.797217][ T307] usb 4-1: too many configurations: 148, using maximum allowed: 8 [ 53.805837][ T307] usb 4-1: config index 0 descriptor too short (expected 64575, got 68) [ 53.814405][ T307] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 53.824632][ T307] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 53.838264][ T307] usb 4-1: config index 1 descriptor too short (expected 64575, got 68) [ 53.846640][ T307] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 53.856824][ T307] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 53.870583][ T307] usb 4-1: config index 2 descriptor too short (expected 64575, got 68) [ 53.879164][ T307] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 53.889319][ T307] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 53.903056][ T307] usb 4-1: config index 3 descriptor too short (expected 64575, got 68) [ 53.911491][ T307] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 53.921655][ T307] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 53.935340][ T307] usb 4-1: config index 4 descriptor too short (expected 64575, got 68) [ 53.943819][ T307] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 53.954119][ T307] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 53.967180][ T360] usb 2-1: unable to get BOS descriptor or descriptor too short [ 53.975701][ T307] usb 4-1: config index 5 descriptor too short (expected 64575, got 68) [ 53.984113][ T307] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 53.994250][ T307] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 54.007997][ T307] usb 4-1: config index 6 descriptor too short (expected 64575, got 68) [ 54.016348][ T307] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 54.026533][ T307] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 54.039649][ T360] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 54.048740][ T360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.056793][ T360] usb 2-1: Product: syz [ 54.060956][ T360] usb 2-1: Manufacturer: syz [ 54.065533][ T360] usb 2-1: SerialNumber: syz [ 54.070605][ T307] usb 4-1: config index 7 descriptor too short (expected 64575, got 68) [ 54.079005][ T307] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 54.093438][ T307] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 54.116194][ T307] usb 4-1: string descriptor 0 read error: -71 [ 54.122513][ T307] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 54.137327][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.148404][ T307] usb 4-1: can't set config #1, error -71 [ 54.161865][ T307] usb 4-1: USB disconnect, device number 16 [ 54.294863][ T360] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 54.324109][ T360] usb 2-1: USB disconnect, device number 7 [ 54.340171][ T730] udevd[730]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.396903][ T824] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 54.396928][ T824] rust_binder: Read failure Err(EFAULT) in pid:120 [ 54.417379][ T824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.438231][ T824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.476809][ T45] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 54.608216][ T832] rust_binder: 127: no such ref 1 [ 54.613551][ T832] rust_binder: 831 RLIMIT_NICE not set [ 54.632409][ T45] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 54.663684][ T45] usb 1-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 54.679607][ T45] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 54.691004][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.705359][ T45] usb 1-1: invalid MIDI out EP 0 [ 54.718953][ T45] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 54.720770][ T809] udevd[809]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.887839][ T844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.896351][ T844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.908176][ T307] usb 1-1: USB disconnect, device number 13 [ 54.931398][ T843] 9pnet_fd: Insufficient options for proto=fd [ 54.937864][ T843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 54.957072][ T844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.965661][ T844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.981208][ T844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.998424][ T844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.999110][ T845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.067826][ T845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.306736][ T380] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 55.456770][ T380] usb 2-1: Using ep0 maxpacket: 8 [ 55.463299][ T380] usb 2-1: unable to get BOS descriptor or descriptor too short [ 55.479003][ T380] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 55.496780][ T380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.504780][ T380] usb 2-1: Product: syz [ 55.516796][ T380] usb 2-1: Manufacturer: syz [ 55.521467][ T380] usb 2-1: SerialNumber: syz [ 55.677522][ T857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.686900][ T307] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 55.686999][ T857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.724976][ T857] SELinux: failed to load policy [ 55.731341][ T857] netlink: 68 bytes leftover after parsing attributes in process `syz.2.167'. [ 55.741566][ T849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.751920][ T849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.768884][ T380] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 55.775872][ T380] usb 2-1: unit 8 not found! [ 55.786140][ T380] usb 2-1: USB disconnect, device number 8 [ 55.800377][ T730] udevd[730]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.836750][ T307] usb 1-1: Using ep0 maxpacket: 16 [ 55.843168][ T307] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.853880][ T307] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 14609, setting to 1024 [ 55.867170][ T307] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 55.877383][ T307] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 55.891908][ T307] usb 1-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 55.901299][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.909531][ T307] usb 1-1: Product: syz [ 55.913800][ T307] usb 1-1: Manufacturer: syz [ 55.918738][ T307] usb 1-1: SerialNumber: syz [ 55.925017][ T851] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 56.192113][ T307] usb 1-1: MIDIStreaming interface descriptor not found [ 56.203869][ T307] usb 1-1: USB disconnect, device number 14 [ 56.217096][ T809] udevd[809]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.278250][ T860] netlink: 'syz.2.168': attribute type 11 has an invalid length. [ 56.286032][ T860] netlink: 44 bytes leftover after parsing attributes in process `syz.2.168'. [ 56.299359][ T860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=860 comm=syz.2.168 [ 56.463006][ T882] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 56.504049][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 56.504070][ T36] audit: type=1400 audit(1774830124.060:264): avc: denied { map } for pid=887 comm="syz.2.176" path="socket:[8328]" dev="sockfs" ino=8328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.533982][ T36] audit: type=1400 audit(1774830124.090:265): avc: denied { read } for pid=887 comm="syz.2.176" path="socket:[8328]" dev="sockfs" ino=8328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.832741][ T891] syz.2.177: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 56.850992][ T891] CPU: 1 UID: 0 PID: 891 Comm: syz.2.177 Not tainted syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 56.851024][ T891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 56.851037][ T891] Call Trace: [ 56.851044][ T891] [ 56.851052][ T891] __dump_stack+0x21/0x30 [ 56.851085][ T891] dump_stack_lvl+0x140/0x1c0 [ 56.851112][ T891] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.851136][ T891] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 56.851178][ T891] dump_stack+0x19/0x20 [ 56.851204][ T891] warn_alloc+0x1e7/0x2c0 [ 56.851228][ T891] ? __cfi_warn_alloc+0x10/0x10 [ 56.851251][ T891] ? __get_vm_area_node+0x201/0x3d0 [ 56.851277][ T891] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.851305][ T891] ? xskq_create+0xdb/0x290 [ 56.851325][ T891] __vmalloc_node_range_noprof+0x6aa/0x1480 [ 56.851356][ T891] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 56.851383][ T891] ? kasan_save_alloc_info+0x40/0x50 [ 56.851409][ T891] ? __kasan_kmalloc+0x96/0xb0 [ 56.851429][ T891] ? __kmalloc_cache_noprof+0x23c/0x470 [ 56.851458][ T891] ? __count_memcg_events+0xdf/0x3b0 [ 56.851480][ T891] vmalloc_user_noprof+0x77/0x90 [ 56.851504][ T891] ? xskq_create+0xdb/0x290 [ 56.851525][ T891] xskq_create+0xdb/0x290 [ 56.851543][ T891] xsk_init_queue+0xb2/0x120 [ 56.851574][ T891] xsk_setsockopt+0x4e1/0x760 [ 56.851603][ T891] ? __cfi_xsk_setsockopt+0x10/0x10 [ 56.851632][ T891] ? _raw_spin_lock_irq+0x93/0x120 [ 56.851658][ T891] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 56.851684][ T891] ? __kasan_check_write+0x18/0x20 [ 56.851714][ T891] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 56.851743][ T891] ? security_socket_setsockopt+0x3d/0x100 [ 56.851767][ T891] ? __cfi_xsk_setsockopt+0x10/0x10 [ 56.851801][ T891] do_sock_setsockopt+0x27c/0x410 [ 56.851830][ T891] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 56.851857][ T891] __x64_sys_setsockopt+0x1b7/0x250 [ 56.851886][ T891] x64_sys_call+0x2adc/0x2ee0 [ 56.851913][ T891] do_syscall_64+0x57/0xf0 [ 56.851941][ T891] ? clear_bhb_loop+0x50/0xa0 [ 56.851969][ T891] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.851998][ T891] RIP: 0033:0x7f9ef739c819 [ 56.852016][ T891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.852033][ T891] RSP: 002b:00007f9ef8179028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 56.852059][ T891] RAX: ffffffffffffffda RBX: 00007f9ef7616090 RCX: 00007f9ef739c819 [ 56.852074][ T891] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 56.852087][ T891] RBP: 00007f9ef7432c91 R08: 0000000000000004 R09: 0000000000000000 [ 56.852101][ T891] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 56.852117][ T891] R13: 00007f9ef7616128 R14: 00007f9ef7616090 R15: 00007fff47ba7c98 [ 56.852134][ T891] [ 56.852192][ T891] Mem-Info: [ 57.138106][ T891] active_anon:22167 inactive_anon:2 isolated_anon:0 [ 57.138106][ T891] active_file:17540 inactive_file:2573 isolated_file:0 [ 57.138106][ T891] unevictable:0 dirty:28 writeback:0 [ 57.138106][ T891] slab_reclaimable:5520 slab_unreclaimable:71181 [ 57.138106][ T891] mapped:24189 shmem:16613 pagetables:744 [ 57.138106][ T891] sec_pagetables:6 bounce:0 [ 57.138106][ T891] kernel_misc_reclaimable:0 [ 57.138106][ T891] free:1489267 free_pcp:14305 free_cma:0 [ 57.183131][ T891] Node 0 active_anon:88668kB inactive_anon:8kB active_file:70160kB inactive_file:10292kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96756kB dirty:112kB writeback:0kB shmem:66452kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4552kB pagetables:2976kB sec_pagetables:24kB all_unreclaimable? no [ 57.215129][ T891] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963376kB mlocked:0kB bounce:0kB free_pcp:5212kB local_pcp:5144kB free_cma:0kB [ 57.245288][ T891] lowmem_reserve[]: 0 3921 3921 [ 57.250261][ T891] Normal free:3003632kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:88660kB inactive_anon:8kB active_file:70160kB inactive_file:10292kB unevictable:0kB writepending:112kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:47600kB local_pcp:5392kB free_cma:0kB [ 57.281633][ T891] lowmem_reserve[]: 0 0 0 [ 57.292782][ T891] DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 57.309109][ T891] Normal: 52*4kB (UME) 38*8kB (UE) 6*16kB (UE) 5*32kB (ME) 29*64kB (UME) 53*128kB (UME) 18*256kB (UME) 10*512kB (UME) 10*1024kB (UM) 6*2048kB (M) 723*4096kB (UM) = 3003072kB [ 57.328081][ T891] 36724 total pagecache pages [ 57.332778][ T891] 3 pages in swap cache [ 57.337116][ T891] Free swap = 124728kB [ 57.341280][ T891] Total swap = 124996kB [ 57.345738][ T891] 2097051 pages RAM [ 57.349988][ T891] 0 pages HighMem/MovableOnly [ 57.354677][ T891] 352241 pages reserved [ 57.358988][ T891] 0 pages cma reserved [ 57.365038][ T891] Memory allocations: [ 57.369201][ T891] 0 B 0 init/main.c:1477 func:do_initcalls [ 57.376516][ T891] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 57.384757][ T891] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 57.392591][ T891] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 57.400661][ T891] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 57.408691][ T891] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 57.417697][ T891] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 57.425609][ T891] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 57.433695][ T891] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 57.441726][ T891] 0 B 0 init/initramfs.c:101 func:find_link [ 57.507310][ T36] audit: type=1400 audit(1774830125.070:266): avc: denied { module_load } for pid=902 comm="syz.0.182" path="/sys/power/wakeup_count" dev="sysfs" ino=1464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 57.532587][ T904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 57.564761][ T36] audit: type=1400 audit(1774830125.120:267): avc: denied { append } for pid=911 comm="syz.0.184" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.589251][ T907] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1907526232 (3815052464 ns) > initial count (2359658686 ns). Using initial count to start timer. [ 57.653469][ T36] audit: type=1400 audit(1774830125.210:268): avc: denied { bind } for pid=916 comm="syz.0.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.755080][ T924] syzkaller0: entered promiscuous mode [ 57.760640][ T924] syzkaller0: entered allmulticast mode [ 57.776976][ T380] hid (null): global environment stack underflow [ 57.788718][ T380] hid-generic 0008:089E:0006.0003: ignoring exceeding usage max [ 57.814428][ T380] hid-generic 0008:089E:0006.0003: global environment stack underflow [ 57.839363][ T380] hid-generic 0008:089E:0006.0003: item 0 0 1 11 parsing failed [ 57.855834][ T380] hid-generic 0008:089E:0006.0003: probe with driver hid-generic failed with error -22 [ 57.889248][ T938] bridge0: entered promiscuous mode [ 57.895077][ T938] bridge0: entered allmulticast mode [ 57.916223][ T36] audit: type=1400 audit(1774830125.470:269): avc: denied { write } for pid=937 comm="syz.2.193" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.917073][ T938] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.947797][ T938] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 57.954414][ T938] rust_binder: Read failure Err(EFAULT) in pid:172 [ 57.963080][ T938] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:172 [ 57.970020][ T938] SELinux: Context system_u:object_r:sulogin_exec_t:s0 is not valid (left unmapped). [ 57.989006][ T593] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 58.008027][ T36] audit: type=1400 audit(1774830125.570:270): avc: denied { relabelto } for pid=937 comm="syz.2.193" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:sulogin_exec_t:s0" [ 58.065977][ T949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.066729][ T36] audit: type=1400 audit(1774830125.570:271): avc: denied { associate } for pid=937 comm="syz.2.193" name="kvm" dev="devtmpfs" ino=13 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:sulogin_exec_t:s0" [ 58.076996][ T949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.187780][ T593] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.200759][ T593] usb 1-1: config 1 interface 0 has no altsetting 0 [ 58.218431][ T593] usb 1-1: string descriptor 0 read error: -22 [ 58.224700][ T593] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.40 [ 58.233776][ T593] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.256828][ T307] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 58.396765][ T307] usb 4-1: device descriptor read/64, error -71 [ 58.448269][ T36] audit: type=1400 audit(1774830126.010:272): avc: denied { map } for pid=921 comm="syz.0.188" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 58.472432][ T36] audit: type=1400 audit(1774830126.010:273): avc: denied { read write } for pid=921 comm="syz.0.188" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 58.638248][ T307] usb 4-1: device descriptor read/64, error -71 [ 58.642156][ T957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.655441][ T957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.667158][ T959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.676122][ T959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.716582][ T593] magicmouse 0003:05AC:0269.0004: collection stack underflow [ 58.724065][ T593] magicmouse 0003:05AC:0269.0004: item 0 0 0 12 parsing failed [ 58.731839][ T593] magicmouse 0003:05AC:0269.0004: magicmouse hid parse failed [ 58.739355][ T593] magicmouse 0003:05AC:0269.0004: probe with driver magicmouse failed with error -22 [ 58.758535][ T962] capability: warning: `syz.2.201' uses deprecated v2 capabilities in a way that may be insecure [ 58.770199][ T962] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 58.770424][ T963] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 58.779766][ T962] overlayfs: failed to set uuid (60/file1, err=-13); falling back to uuid=null. [ 58.793871][ T963] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 58.834125][ T967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.842876][ T967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.886847][ T307] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 59.016776][ T307] usb 4-1: device descriptor read/64, error -71 [ 59.056788][ T45] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 59.207167][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 59.213949][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 59.222544][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 59.234866][ T45] usb 2-1: New USB device found, idVendor=0582, idProduct=0456, bcdDevice= 0.41 [ 59.243964][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.252002][ T45] usb 2-1: Product: syz [ 59.256161][ T45] usb 2-1: Manufacturer: syz [ 59.260814][ T307] usb 4-1: device descriptor read/64, error -71 [ 59.267117][ T45] usb 2-1: SerialNumber: syz [ 59.380884][ T307] usb usb4-port1: attempt power cycle [ 59.392853][ T593] usb 1-1: USB disconnect, device number 15 [ 59.496406][ T45] usb 2-1: MIDIStreaming interface descriptor not found [ 59.510960][ T45] usb 2-1: USB disconnect, device number 9 [ 59.526881][ T809] udevd[809]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.556904][ T976] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 59.705391][ T982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.726769][ T307] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 59.746923][ T982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.756588][ T307] usb 4-1: device descriptor read/8, error -71 [ 59.907837][ T307] usb 4-1: device descriptor read/8, error -71 [ 60.000992][ T290] ------------[ cut here ]------------ [ 60.006740][ T290] WARNING: CPU: 1 PID: 290 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 60.016417][ T290] Modules linked in: [ 60.020460][ T290] CPU: 1 UID: 0 PID: 290 Comm: syz-executor Not tainted syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 60.032326][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 60.042515][ T290] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 60.048203][ T290] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 de 75 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f6 48 3f ff <0f> 0b e9 3e ff ff ff e8 ea 48 3f ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 60.067982][ T290] RSP: 0018:ffffc9000b6efb48 EFLAGS: 00010293 [ 60.074090][ T290] RAX: ffffffff824861ba RBX: 0000000000000000 RCX: ffff88810a284c00 [ 60.082305][ T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.090334][ T290] RBP: ffffc9000b6efb70 R08: ffff88811b2de15f R09: 1ffff1102365bc2b [ 60.098376][ T290] R10: dffffc0000000000 R11: ffffed102365bc2c R12: 0000000000000000 [ 60.106545][ T290] R13: dffffc0000000000 R14: ffff88811b2de0c0 R15: ffff888112f70110 [ 60.114605][ T290] FS: 00005555775e5500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 60.123583][ T290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.130501][ T290] CR2: 0000555577600908 CR3: 000000011ffca000 CR4: 00000000003526b0 [ 60.138748][ T290] Call Trace: [ 60.142049][ T290] [ 60.145006][ T290] ovl_do_remove+0x81b/0xda0 [ 60.149682][ T290] ? ovl_set_redirect+0x780/0x780 [ 60.154734][ T290] ? down_write+0xee/0x2b0 [ 60.159214][ T290] ? __cfi_down_write+0x10/0x10 [ 60.164092][ T290] ovl_rmdir+0x1e/0x30 [ 60.168242][ T290] vfs_rmdir+0x3e3/0x560 [ 60.172609][ T290] incfs_kill_sb+0x109/0x230 [ 60.177277][ T290] deactivate_locked_super+0xd5/0x2a0 [ 60.182767][ T290] deactivate_super+0xb8/0xe0 [ 60.187510][ T290] cleanup_mnt+0x406/0x4a0 [ 60.191963][ T290] __cleanup_mnt+0x1d/0x40 [ 60.196401][ T290] task_work_run+0x1e5/0x260 [ 60.201064][ T290] ? __cfi_task_work_run+0x10/0x10 [ 60.206199][ T290] ? __x64_sys_umount+0x12e/0x180 [ 60.211353][ T290] ? __cfi___x64_sys_umount+0x10/0x10 [ 60.216780][ T290] resume_user_mode_work+0x35/0x50 [ 60.221927][ T290] syscall_exit_to_user_mode+0x63/0xb0 [ 60.227449][ T290] do_syscall_64+0x63/0xf0 [ 60.231898][ T290] ? clear_bhb_loop+0x50/0xa0 [ 60.236606][ T290] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.242570][ T290] RIP: 0033:0x7efd3059da57 [ 60.247130][ T290] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 60.266969][ T290] RSP: 002b:00007ffdb2532a08 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 60.275410][ T290] RAX: 0000000000000000 RBX: 00007efd30632048 RCX: 00007efd3059da57 [ 60.283460][ T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb2532ac0 [ 60.291492][ T290] RBP: 00007ffdb2532ac0 R08: 00007ffdb2533ac0 R09: 00000000ffffffff [ 60.299524][ T290] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffdb2533b50 [ 60.307548][ T290] R13: 00007efd30632048 R14: 000000000000e983 R15: 00007ffdb2533b90 [ 60.315630][ T290] [ 60.318697][ T290] ---[ end trace 0000000000000000 ]--- [ 60.324572][ T290] ------------[ cut here ]------------ [ 60.330123][ T290] WARNING: CPU: 0 PID: 290 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 60.339489][ T290] Modules linked in: [ 60.343410][ T290] CPU: 0 UID: 0 PID: 290 Comm: syz-executor Tainted: G W syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 60.356654][ T290] Tainted: [W]=WARN [ 60.360496][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 60.370603][ T290] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 60.376297][ T290] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 de 75 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f6 48 3f ff <0f> 0b e9 3e ff ff ff e8 ea 48 3f ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 60.395978][ T290] RSP: 0018:ffffc9000b6efb48 EFLAGS: 00010293 [ 60.402200][ T290] RAX: ffffffff824861ba RBX: 0000000000000000 RCX: ffff88810a284c00 [ 60.410229][ T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.418251][ T290] RBP: ffffc9000b6efb70 R08: ffff88811b2de15f R09: 1ffff1102365bc2b [ 60.426265][ T290] R10: dffffc0000000000 R11: ffffed102365bc2c R12: 0000000000000000 [ 60.434562][ T290] R13: dffffc0000000000 R14: ffff88811b2de0c0 R15: ffff888112f70110 [ 60.442603][ T290] FS: 00005555775e5500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 60.451765][ T290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.456765][ T307] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 60.458390][ T290] CR2: 0000000000000000 CR3: 000000011ffca000 CR4: 00000000003526b0 [ 60.474051][ T290] Call Trace: [ 60.477363][ T290] [ 60.480319][ T290] ovl_do_remove+0x81b/0xda0 [ 60.484909][ T290] ? ovl_set_redirect+0x780/0x780 [ 60.487883][ T307] usb 4-1: device descriptor read/8, error -71 [ 60.490083][ T290] ? down_write+0xee/0x2b0 [ 60.500571][ T290] ? __cfi_down_write+0x10/0x10 [ 60.505453][ T290] ovl_rmdir+0x1e/0x30 [ 60.509555][ T290] vfs_rmdir+0x3e3/0x560 [ 60.513904][ T290] incfs_kill_sb+0x1a0/0x230 [ 60.518531][ T290] deactivate_locked_super+0xd5/0x2a0 [ 60.524026][ T290] deactivate_super+0xb8/0xe0 [ 60.528748][ T290] cleanup_mnt+0x406/0x4a0 [ 60.533270][ T290] __cleanup_mnt+0x1d/0x40 [ 60.537708][ T290] task_work_run+0x1e5/0x260 [ 60.542321][ T290] ? __cfi_task_work_run+0x10/0x10 [ 60.547548][ T290] ? __x64_sys_umount+0x12e/0x180 [ 60.552708][ T290] ? __cfi___x64_sys_umount+0x10/0x10 [ 60.558208][ T290] resume_user_mode_work+0x35/0x50 [ 60.563430][ T290] syscall_exit_to_user_mode+0x63/0xb0 [ 60.568928][ T290] do_syscall_64+0x63/0xf0 [ 60.573368][ T290] ? clear_bhb_loop+0x50/0xa0 [ 60.578081][ T290] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.584005][ T290] RIP: 0033:0x7efd3059da57 [ 60.588443][ T290] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 60.608130][ T290] RSP: 002b:00007ffdb2532a08 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 60.616586][ T290] RAX: 0000000000000000 RBX: 00007efd30632048 RCX: 00007efd3059da57 [ 60.624592][ T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb2532ac0 [ 60.632606][ T290] RBP: 00007ffdb2532ac0 R08: 00007ffdb2533ac0 R09: 00000000ffffffff [ 60.637867][ T307] usb 4-1: device descriptor read/8, error -71 [ 60.640607][ T290] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffdb2533b50 [ 60.654746][ T290] R13: 00007efd30632048 R14: 000000000000e983 R15: 00007ffdb2533b90 [ 60.662839][ T290] [ 60.665860][ T290] ---[ end trace 0000000000000000 ]--- [ 60.756871][ T307] usb usb4-port1: unable to enumerate USB device [ 60.916780][ T45] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 61.066781][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 61.073637][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 61.082325][ T45] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 61.094661][ T45] usb 2-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 61.103856][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.111933][ T45] usb 2-1: Product: syz [ 61.116114][ T45] usb 2-1: Manufacturer: syz [ 61.120759][ T45] usb 2-1: SerialNumber: syz [ 61.350992][ T45] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 61.362046][ T45] usb 2-1: USB disconnect, device number 10 [ 61.367735][ T730] udevd[730]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory