last executing test programs: 2.22668995s ago: executing program 1 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./proc\x00', 0x161) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mount(0x0, &(0x7f00000008c0)='./proc\x00', &(0x7f0000000900)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000980)='10', 0x2) pipe2(&(0x7f00000009c0), 0x800) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2, 0x3e, 0xffffffeb, 0x200000294, 0x40, 0x0, 0x2, 0x8f2d, 0x38, 0x1, 0xfffe, 0x2, 0x5}, [{0x3, 0xf97, 0x8, 0xd, 0x0, 0x3, 0x6, 0x4}]}, 0x78) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000b80)='./file1\x00', 0x0, 0x0, 0x1000) 2.001036303s ago: executing program 1 (id=149): r0 = syz_usb_connect$cdc_ncm(0x4, 0x7a, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 32) prctl$PR_SET_FP_MODE(0x42, 0x0) (async, rerun: 32) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_RETRIEVE(r1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 1.678307126s ago: executing program 3 (id=155): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{}, {0x20, 'blkio.bfq.io_service_bytes_recursive\x00'}]}, 0x32) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) (async) setresuid(0x0, 0xee01, 0xffffffffffffffff) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.654825109s ago: executing program 3 (id=156): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2a) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./bus\x00', 0x11d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_on}]}) 1.653948158s ago: executing program 3 (id=157): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x958028, &(0x7f00000000c0)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="b805000000b9000001000f01d966b8d4008ed06766f20f11c936660f38800bb9800000c00f3235008000000f3067f343730226260f019a6e9700003e2e640f01f866ba2000edf4", 0x47}], 0x1, 0x2, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.440790481s ago: executing program 3 (id=158): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0xc, 0x0, 0xfec00000}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000780)={0x0, &(0x7f0000000c40)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x29, {0x0, "48b80000c0fe00000000488b18488b18f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x71}) r4 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xa1, "", [{{0x9, 0x4, 0x0, 0xf8, 0x2, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x4, 0x1, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x9, 0x7, 0x6}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0xfa, 0xe, 0x0, 0x10, 0x7f}, 0x10, &(0x7f0000000080)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x26, 0x35, 0x3, 0x0, 0x5}]}, 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3801}}]}) syz_usb_control_io$printer(r4, &(0x7f0000000240)={0x14, &(0x7f00000001c0)={0x0, 0x9, 0x1a, {0x1a, 0xa, "93c8b076b500f46bb36698c5e793f597e33cdbb4babc2c26"}}, &(0x7f0000000200)={0x0, 0x3, 0x31, @string={0x31, 0x3, "c9d2b0ba24665d866cbe6c26c5166338883a2d479fa80b5d796e3bac6aff590f45e5e292d7e7b9f8e61f2119a20deb"}}}, &(0x7f0000000480)={0x34, &(0x7f0000000280)={0x20, 0x18, 0x63, "a7d1475b1bd0678ac219906e25d5e3fad8c9b90f2a02fecc5b0770e580eeee58febfabe25999e89dc7b01297a587af14727a5774e4ffb24cbc62cff978b0c4694be36610d82f7e43aeff7738cde130b1a74587841e138c2c74a547084be5d2f97fdb8f"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380)={0x20, 0x0, 0x7a, {0x78, "030d14c6d7befac59104e136d7d3e080408fa647d48452b4b8925d354d76d6d082d8fd0c7f243d405ce8cd93ce32bdc85a74d2f775ef4da26d37732d0416de01a3f062026238298881caf911a5e447269ca6c7756697b5ec35adde12bbc60049aa7c5506c5cac7311ed55d46aee580e3d500034fadf4b339"}}, &(0x7f0000000400)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x7}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.440483011s ago: executing program 1 (id=159): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="64000000100001060000000000000000000000000000000000000000000000001000040000fe0000000000000000000024001200080001007665746818005f67140001000000000000000000000000000000004010000300766574685900000000000000", 0x64}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x40040cc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r1, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x2}, @broadcast, @from_mac}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000020000000000000b00033264756d6d7930000008001f0004320000180012000a00010064756d6d79"], 0x4c}], 0x1}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0xc2c02e4d8eb2a416, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000480)=0x78, 0x4) bind$inet(r4, &(0x7f00000004c0)={0x2, 0x4e23, @multicast1}, 0x10) r5 = fcntl$dupfd(r4, 0x406, r4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000500)={0x1, &(0x7f0000000540)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200047fd, &(0x7f0000000580)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r5, &(0x7f00000005c0)=ANY=[], 0x540) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r5) shutdown(r4, 0x1) r6 = openat$incfs(r3, &(0x7f0000000440)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x80106725, 0x0) pipe2(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$tun(r8, &(0x7f0000000740)={@val={0x0, 0x9300}, @void, @eth={@remote, @empty, @val={@val, {0x8100, 0x6, 0x1}}, {@mpls_uc={0x8847, {[], @ipv6=@gre_packet={0x6, 0x6, "e943ff", 0x44, 0x2f, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{}, {0x1, 0x0, 0x1, 0x1}, {0x1}, {0x8, 0x88be, 0x400004, {{0x1, 0x1, 0xe, 0x1, 0x0, 0x1, 0x1, 0x4}, 0x1, {0xffffffff}}}, {0x8, 0x22eb, 0x0, {{0x3, 0x2, 0x7, 0x2, 0x0, 0x2, 0x3, 0x63}, 0x2, {0x715, 0x1, 0x2, 0x13, 0x0, 0x0, 0x2, 0x0, 0x1}}}}}}}}}}}, 0x86) read$FUSE(r7, &(0x7f0000000800)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r9, 0x0, 0x20000000, 0x0) syz_usb_connect(0x0, 0x97, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000401e04103000010000000109028500020100803209040000000101000009240100013f0001010c24020101020002030000000c240202030d0002030000000c24020305060002030000000924050803010203000924030901010008"], 0x0) 1.221222554s ago: executing program 2 (id=160): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) 1.183755588s ago: executing program 2 (id=161): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) chmod(&(0x7f0000000000)='./cgroup\x00', 0x14) (async) chmod(&(0x7f0000000000)='./cgroup\x00', 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bind$802154_raw(r2, 0x0, 0x0) (async) bind$802154_raw(r2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x1c1842, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x1c1842, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/rcu_expedited', 0x169a82, 0x109) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) r5 = memfd_create(&(0x7f0000000480)='y\x105\xfb\xf7u\x83%:Ml\x9a\x9a\xb8\xe0>(\x13A-\x9a=\xb4r\xf1\x12y\xec;\x90\x06\x7f@\xf4\xe0\xc2\xb9x\xa4\x98S7\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Q\xcdO\xe3i\xbd\x01\x85\x0e\x19\xce\x82\xd52\x9e\x95\xa7xbh\xf6\xa4c\x8a\xa5,\xdd\x81Z\x04\xf5\xf9\xa1\xe1\xad\xc2`\xf15\xf2$\xf2\x1c\xb0\x87pI\xab.}W\xd3o\xd3n\x9d\xb3>r\x1c<\x1b\xa5\xe27\x9f\x10\xe5\\\x1d\xcd\x91i\xc4\xad\xeb\xe5h[\xf6_\xbeW\b1\x06V\x89\r\x19:S\xf4\x7f8\xcf\xe6\xe1Tl\x00{Z\xb1\x92?\xb2\xd8\xc0\xaf\x96\xff\xe4v\xe8\x04<\xa2\x91Y\xee\xd8Rr\xe1\xdb!Z\xda\x06\xd6\x02\xb4\xfb4\xbb;7\x94\xb6_\xda\x108\x86\xfa\x97\xc2,\x8c\xf4\xaf\xb9\xfd\x8d\xff(\xd3\xbc\xdf}:4\xb9\xa00?\xac\x86@\x87\xb9\x81\xeak\x8d\x8b>\x89I\x0e\xfa\xa7\x1c\xe9\xf1U\xfc=pm6\x10vk90\x99\x15\x96\xa3\xb8_\n\xd1K\xf7m\x1as\xbd\xc4\x19Q\xc2Ge\x0e$\xdd\xec\f:\\g\xc3RnC\xe4\xc1!\xae\xd9h\xa5\xe4K\xcf\xf3\xf7\xe5o\xae\xfa\xa8\xd90Kj\x12\xcd@W\xe5\xfat`\x83\xac\xc8\xc8\xf0\xf1)\xf6A\t\xdc\xbfQ\xa9\xaer\x1d\xa5fY\x9d{\xa6\xeb\xc0\v\\\xb5cv i\b\xfc\xb9\xaf\x1aA~2\xe7\xedj\x89\x1a\x9d\xef5n\x80\xbfu\xdbi\xc7\x9c\x17\xa7`\xf5\x01\xe1v\xb4\xd9\rn\xe1\x86A\x9b \'u\x05\xa6a3\x84z\x8e\xf1\xcd\xce\r\xf8Y3h\xd9\xed\xe8\xb5\x00\x8eCH\xf1\x00\xcfLo\x92y\xafg\xdf\xa8\x9e\xbb\xf0I5\xfb\x03\x18\xf0:\xff\xed\x02\x17\x84WSgi\xecJ\x82\xc9\xf3k\x8d\xf8\xfcE\xa9\xca\xafq\xe9\x9d^\xf2', 0x2) ftruncate(r5, 0xffff) (async) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x3) (async) fcntl$addseals(r5, 0x409, 0x3) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, 0x0) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000006c0)={r5, 0x0, 0x0, 0x1000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1842, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder0\x00', 0x2, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='.\x00', 0x121000, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES32=r8], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x20) (async) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000000c0)={0x10201, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="440f20c03505000000440f22c066b8c7008ee0d93e0f017e0066b8ff008ed0c4c2959c860a00000066baf80cb818c66f89ef66bafc0cb096ee0f01310fdcd666baf80cb830908a85ef66bafc0cec", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 831.991144ms ago: executing program 1 (id=165): lsm_get_self_attr(0x8868edce2fed839c, 0x0, &(0x7f00000001c0), 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x191) mkdirat(r0, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x400}) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (rerun: 64) close(r2) r3 = open(&(0x7f0000000440)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000480)={0xa0, 0x0, 0x0, {{0x4, 0x1, 0x200005, 0x6, 0x0, 0x2, {0x1, 0x17a, 0x40000000103, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0xa000, 0x4, 0xee00, 0x0, 0x403, 0x3}}, {0x0, 0x11}}}, 0xa0) (async) sendfile(r3, r3, &(0x7f0000000540)=0x2, 0x7f02) pidfd_send_signal(r3, 0x1c, &(0x7f0000000580)={0x1b, 0x4}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @link_local}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x118) r4 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@timestamp, @timestamp, @sack_perm, @sack_perm, @window={0x3, 0x9, 0x4}, @timestamp], 0x6) (async, rerun: 64) r5 = socket$inet6(0xa, 0x80002, 0x0) (rerun: 64) bind$inet6(r5, &(0x7f0000000600)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) r6 = socket$inet6(0xa, 0x80002, 0x0) (async) r7 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r7, &(0x7f0000000640)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x80ad}, 0x1c) (async, rerun: 64) bind$inet6(r6, &(0x7f0000000680)={0xa, 0xce20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (rerun: 64) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x1}, 0xffffffffffffff78) (async) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000700)=0x9, 0x4) (async) bind$inet6(r9, &(0x7f0000000740)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) (async, rerun: 32) r10 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) bind$inet6(r10, &(0x7f0000000780)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 732.242945ms ago: executing program 3 (id=167): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = fsopen(&(0x7f0000000280)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0xc0940, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x1c1002, 0x0) sendfile(r4, r3, 0x0, 0x7fffffff) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8402, 0x0) write$vga_arbiter(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='unlock i'], 0xb) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)={0x40, 0x16, 0x4, "50f87673"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 731.858654ms ago: executing program 0 (id=168): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x1440, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x70, 0x0, "", [{{0x9, 0x4, 0x0, 0xf4, 0x1, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x0, 0x71, 0x1, {0x22, 0xde0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0xf, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xf3, 0x2, 0x6}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0xa, 0x80, 0x8, 0x10, 0xff}, 0xed, &(0x7f0000000dc0)={0x5, 0xf, 0xed, 0x2, [@generic={0x54, 0x10, 0xa, "585e9dcd6c6b2317f8519f7bd6e64d3380dc11f6ec822a553b6e03fbfbf7552eee0ee847a8489a722294b2627890a6a78c18e7cc19a64d03710a1ffa2c537c537b8da31f81614936725736cd25dd713c3a"}, @generic={0x94, 0x10, 0x1, "fa6c91ee5695eb959c1de37828852fe6e0c1d8c4cab96a0f21392751a6061ec958603215586acbc73c87dbb67c1c7c24df23cdb0101ec529f5a158bfc50da37d404ffcd8f3f8271eb3ead614c1d2e5ab671f7811fe378458c24363af9f4a6cb77c8aca6700a726a18d135aaeffa5b631b9bd8f272c18c173c31568f7620b21bee2165b5ad06567b00bcb6e6c84c0db169b"}]}, 0x4, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x7d, &(0x7f0000000d00)=ANY=[@ANYBLOB="7d03a9f5a1b8023df78f6789ee70db4bb2dad2521a0e04af2c947feda3120e46d12c4eb810db8b0df1ce4810fb6e38aa02bd2b4a834d471fa5e0c9d70ef0f20f06b829427b6a1d6b1d1689d87a6bf0a9350ab8e716d2f72cc9651f9bf94d9dbf24c74b137fb13d45ea1ab8fa7129e1414f14d56e6dbd00"/131]}, {0xcf, &(0x7f0000000380)=@string={0xcf, 0x3, "64b0c0aae7d4cc47398fe7b758a367b908a0268c4331de51161095f989bd7789c014f47969c1bcc53de8ef9c18f6595d25689604e4cb5dd307b54b23e5a857d554af37570316e2e3832d5141385b6a133d07bb03f3114e77fb5f1e11c5d66a5f40d30cc303e62927074ccc0d298691956d34b192f65eb89c697165b4dd2ceb7d653211a48341840b80f0e3f26e2791a4f1fffeeaea51a34093b0a36be04a82a94e7e4317dbe83829dd8a6b0513f93cd44093b1be31640938f52c11f3f9d3ed868d9f015b6c53bb911becb6f324"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'macvlan1\x00', 0xfd2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x4, &(0x7f00000000c0)=[{0x45, 0x0, 0x2, 0x8}, {0x35, 0x1, 0x0, 0x7fffffff}, {0x2, 0x4}, {0x6, 0x2, 0x0, 0x1ff}]}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2840, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = syz_open_dev$hiddev(&(0x7f00000005c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r5, 0x81044804, 0x0) 731.577685ms ago: executing program 1 (id=169): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) 669.063971ms ago: executing program 1 (id=170): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="d62ba21fa5194c8a86b3ae28ec0987fafe7b66980d6ef9f063eeab5a94efa064a4369b0616dca79c19cb88ba40ada34444e206435d3b0c590d471c4b345b66d259bfb6380e6960e1b1673ccaf3c0a5b40823138395b1297d6c5c4e847b80b26ade9fb7d9b332c1989bd8c7ab1ed5a19d4c2753105b840b379be753640b1d2d56a962e26d650c69b94902920dd266b5657c296b111e107351edf186b5354643b147bf32a30e1246f4b264dccd64a9c7e2e66abfae2f1f42a9d73e1991067934ed44fb528fd6f6a786943a70ba24640fe7c8a67222f44a9c7651b143f0", 0xdc}, {&(0x7f0000000100)="14e80ed0078333b41716949a2c07b9d89a76dce070a16934e88400431dd4af08895e6ab573fe8a17c32efca411edb3d78756d07c7d7c3365ac81221951249ee495781b4476960a339441ccc4ea8abec606c394c7b03ac1537121551bb9a90bc27b8fe1b790809b79e87eb8ff79947671195834c94e178c43dfa2d20f6b397094d4ce8caf68cfdb5d6175aaec8a16709081a5a242467195e3a5ba2565d1eb529ecdbb699f0aec4930dbe282659ff37b4cb86609358dc61cbd6c04ca", 0xbb}, {&(0x7f00000001c0)="f1553f1f2df0f49cf62060ed511fbbde7d3ca406b2a7cbefc63d996f416897e64d28b11d32678b8252a43a471958da6c50a46c3d35e53c8a164c9806bbbf4bbd15b47db80ed3521e72e70418bd61bf259661a308a9e0ed62fbf7e7924ed033", 0x5f}, {&(0x7f0000000240)="b0e507490006f6d5204d43d4cfe2b9dacae01e03d242971610f6fa5298ad691693cc98af193c9eb9f7e27e2222da84160b545699469a3b4d042e7fe4519bbaaa502902be5a17222b0eeb248669e8c39578431490a90e09fcfa065f8f2ad379534745fa536f676316ca9251fafc75c06a924f3524bcd7c8ccc15020048079b7d534b740a959231932fc7042e0a67f8f96e2b0c2acfc45f9a33d22fecd9afb5a4ea5781c4243f627fd6fd44194074605a65d6232b186a5c6738dbc3bd59b3c90e71b44be8c5afdb15fd87136ec876c87ea74d97042c3108e8a3f219a7d64f799", 0xdf}, {&(0x7f0000000340)="20a24b49f3cf959a99c892b2727a31a6241ff16391c4d4f59f7397066848a8633b4dee00a9efaa4c6e1b35ddea45c61aa4b6791f48a0ac5e67d5db4816a71fc533add9c8e91dab4a67b477fcbc50de3a3fbba364d9150aa9266e18a49599fe1a255d1d7a4e536398c8abec0a7455212c0a7260c44c0aaf0f2f425a19f04cf4e2f8888f3325cc2bf7ab717cddab01a917c277d0a3cc1097edaca21f9b5a55e3ad94abbbc60a5d0d8d140b8e3f40bd98c87ff1e31b778b53518cfc8ab1410a25c367522d97bfe121f5227861116c74", 0xce}], 0x5, &(0x7f00000004c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @dstopts_2292={{0xd8, 0x29, 0x4, {0x89, 0x17, '\x00', [@pad1, @pad1, @ra={0x5, 0x2, 0x5a}, @ra={0x5, 0x2, 0x3}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}, @jumbo, @enc_lim={0x4, 0x1, 0x6c}, @calipso={0x7, 0x28, {0x2, 0x8, 0x8, 0x2, [0xfffffffffffffcbc, 0x3, 0x7, 0x9531]}}, @calipso={0x7, 0x58, {0x3, 0x14, 0xb5, 0xc, [0xb70b, 0x8, 0x4, 0x2, 0x54, 0x1, 0x443b, 0x10, 0xfffffffffffffe00, 0x8]}}]}}}, @dstopts={{0xc8, 0x29, 0x37, {0x5e, 0x15, '\x00', [@ra={0x5, 0x2, 0x937}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8e, 0x7, [0x7f, 0x0, 0x80, 0x6]}}, @calipso={0x7, 0x40, {0x1, 0xe, 0x81, 0x4, [0x7, 0x1ff, 0xcc, 0x997, 0x8000000000000001, 0x808000000000, 0x5]}}, @calipso={0x7, 0x20, {0x1, 0x6, 0x6, 0x6, [0xfffffffffffffffa, 0x4, 0x7]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xafc}, @calipso={0x7, 0x10, {0x0, 0x2, 0x4, 0x5, [0xb62e]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xddfc0000}}, @tclass={{0x14, 0x29, 0x43, 0x80000001}}, @dstopts_2292={{0x1c8, 0x29, 0x4, {0x1d, 0x35, '\x00', [@ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x47}, @calipso={0x7, 0x50, {0x3, 0x12, 0x7, 0x5, [0x100000000, 0x3, 0x10001, 0x80000000, 0x4, 0x80000001, 0x7, 0x9, 0x10000]}}, @calipso={0x7, 0x38, {0x1, 0xc, 0x6, 0x9, [0xee43, 0xfffffffffffffff9, 0x0, 0x9, 0x1, 0xa97]}}, @calipso={0x7, 0x18, {0x2, 0x4, 0x75, 0x1, [0x2, 0x8]}}, @generic={0x9, 0xf1, "45935b7a7de4c51abd55c9947ba63b518c15cb697f617aca48bf4bfba0a3762f5358692eca7295b06ebcb80c8009d173afe4ef33a340d4c30d94f417de9704b817c3c12d3f069f502667927ec1a9444958b3e8bb64f48a1bd814e656e4452d158b9eb0157cdf1458ed4e6a527f31c2c42bbdb5fb7c2edf9455b2605dbf8b950acbdc57226e96a2427746c8e7785e8d44e7288eb72e0b4609a7e2329f51ad66073759ce21df55f8aac20e19bbee42de0c82000bea34bda1672ad0f7b0a837685b8bdd4b4ff21640be879fd8818a6ab33078ff19d7784add577be2577dc7ca30280f5008ad5b3fd93433fd853e37c169ea79"}, @jumbo={0xc2, 0x4, 0x37}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8000}}, @rthdrdstopts={{0x90, 0x29, 0x37, {0x3a, 0xe, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x4}, @ra={0x5, 0x2, 0x1}, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x6, 0x53, "0f49145122c851422619ef07483db77584c0d0047f1deea13af252f8fb31cb9757f974f1c067b2fde230f6f4f6e65010ac2f4a5ef5d9dcac85214e8582f28c9d65bd5883b83dfd79c10c89f40826188568e57d"}, @ra={0x5, 0x2, 0x5}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x3a, 0x6, 0x1, 0xe, 0x0, [@remote, @private1, @private0]}}}], 0x4b8}}], 0x1, 0x0) (async, rerun: 32) close_range(r0, r0, 0x2) (async, rerun: 32) readv(r0, &(0x7f0000000cc0)=[{&(0x7f00000009c0)=""/241, 0xf1}, {&(0x7f0000000ac0)=""/80, 0x50}, {&(0x7f0000000b40)=""/231, 0xe7}, {&(0x7f0000000c40)=""/15, 0xf}, {&(0x7f0000000c80)=""/33, 0x21}], 0x5) (async) recvmmsg(r0, &(0x7f00000023c0)=[{{&(0x7f0000000d40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/170, 0xaa}, {&(0x7f0000001e80)=""/109, 0x6d}], 0x3}, 0x8}, {{&(0x7f0000001f40)=@hci, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001fc0)=""/226, 0xe2}, {&(0x7f00000020c0)=""/245, 0xf5}, {&(0x7f00000021c0)=""/193, 0xc1}], 0x3, &(0x7f0000002300)=""/184, 0xb8}, 0x4}], 0x2, 0x0, &(0x7f0000002440)) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000002480)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000002580)={'syztnl1\x00', &(0x7f0000002500)={'gretap0\x00', 0x0, 0x700, 0x8, 0x4, 0x7fff, {{0xf, 0x4, 0x2, 0x5, 0x3c, 0x64, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0x17, 0x7a, [@multicast2, @rand_addr=0x64010101, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x10, 0x5e, 0x0, 0x5, [0x7, 0xe, 0x1000]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000025c0)={@local, 0x2d, r2}) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000002600)=0x5) (async) r3 = syz_genetlink_get_family_id$team(&(0x7f0000002680), r1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000026c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000028c0)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002880)={&(0x7f0000002700)={0x158, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa7}}, {0x8, 0x6, r2}}}]}}]}, 0x158}}, 0x4000040) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002940), r1) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000002a40)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x4c, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040040}, 0x40) getsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000002a80), &(0x7f0000002ac0)=0x4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000002c00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b40)={0x68, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x40}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}]}, 0x68}}, 0x48051) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000002c40)={'batadv_slave_0\x00'}) (async, rerun: 64) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002d80)={0x0, &(0x7f0000002c80)=[@nested_amd_clgi={0x17f, 0x10}, @uexit={0x0, 0x18, 0x7af8}, @set_irq_handler={0xc8, 0x20, {0x54, 0x1}}, @code={0xa, 0x58, {"400f796e0e48b876f3b731b678c52d0f23d80f21f835400000500f23f8450f01c4f26436440f009a910000000f01ca0f01cb36410f01cfc463a17acb00430f01df66b863008ee0"}}, @nested_amd_vmload={0x182, 0x18}, @wrmsr={0x65, 0x20, {0x9f5}}], 0xd8}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000002dc0)={@dev={0xfe, 0x80, '\x00', 0x41}, 0x64, r4}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002e40), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000003180)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x400100}, 0xc, &(0x7f0000003140)={&(0x7f0000002e80)={0x2a4, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x104, 0x2, 0x0, 0x1, [{0x4}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x84, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xbc, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb4e0b594a66717cd}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x24048000}, 0x20040080) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000032c0)={'sit0\x00', &(0x7f0000003200)={'sit0\x00', r4, 0x8, 0x7, 0x0, 0x5f, {{0x21, 0x4, 0x0, 0x9, 0x84, 0x65, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@lsrr={0x83, 0xf, 0xcf, [@multicast2, @rand_addr=0x64010102, @remote]}, @noop, @end, @rr={0x7, 0x13, 0xa2, [@broadcast, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast]}, @timestamp_prespec={0x44, 0x1c, 0x4e, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0xc}, 0x1}, {@private=0xa010100, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}, @ssrr={0x89, 0x23, 0x71, [@remote, @broadcast, @multicast1, @multicast2, @remote, @multicast2, @empty, @broadcast]}, @end, @rr={0x7, 0x7, 0x95, [@remote]}, @end, @ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000003480)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003440)={&(0x7f0000003300)={0x104, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0xc1}, 0x2000) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000034c0), r9) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003540), r9) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000003680)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003640)={&(0x7f0000003580)={0x84, r10, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xe}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_REG_RULES={0x40, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x100}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x100}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r6, 0x40086e81, &(0x7f00000036c0)=0x8) (async) syz_clone(0x80008000, &(0x7f0000003700)="a1f808cefa21d004ef92f4720d6268", 0xf, &(0x7f0000003740), &(0x7f0000003780), &(0x7f00000037c0)) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000003900)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000038c0)={&(0x7f0000003880)={0x34, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 593.213119ms ago: executing program 2 (id=171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x5032}) r1 = socket$inet(0x2, 0x2, 0x0) poll(&(0x7f0000000100)=[{r0, 0x9081}], 0x1, 0x7) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='e\x00+\x88\xfe\xf7\x01') 571.996651ms ago: executing program 2 (id=172): ptrace$pokeuser(0x6, 0x0, 0x358, 0xfffffffffffffff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000280), 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f0000000300)='./bus\x00') mkdir(&(0x7f00000003c0)='./proc_mnt\x00', 0x1ff) 555.040493ms ago: executing program 2 (id=173): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x2800000, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000540)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000580)={0x10000014}) r3 = getpid() r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f00000005c0)={r1, r2, 0x500}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='d', 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000380)='./bus\x00', 0x13e) mount$incfs(&(0x7f00000003c0)='.\x00', &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0xc002, 0x0) chdir(&(0x7f0000000480)='./bus\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz1\x00', 0x1ff) write$P9_RSETATTR(r5, &(0x7f0000000500)={0x7, 0x1b, 0x2}, 0x7) syz_usb_connect(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000954c53400d051b01a46f0000000109022d00010000000009040000000202ff00052406100005240000000d2402"], 0x0) 192.665661ms ago: executing program 3 (id=174): r0 = syz_usb_connect$uac2(0x3, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x582, 0x10f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x3, 0xe0, 0x9, {0x8, 0xb, 0x1, 0x1, 0x1, 0xc, 0x20, 0x58}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xa3, 0x6, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xe, 0x2, 0x8, 0x0, 0x19}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x40, 0x1, 0x5, 0x8e}, @as_header={0x10, 0x24, 0x1, 0x6, 0x2, 0x0, 0x1002, 0x3, 0x5, 0x81}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0x1, 0x3, {0x8, 0x25, 0x1, 0x3, 0x3f, 0xab, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x80, 0x5, {0x8, 0x25, 0x1, 0x83, 0x3c, 0x8d, 0x3}}}}}}}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./tracing\x00', &(0x7f0000000540)='tracefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000580)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) syz_ublk_process_io(0x0, 0x0, 0x1, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) (async) syz_usb_control_io$uac2(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x30, 0xc6, {0xc6, 0x10, "26dbd3fc40a6a08e0972356fe7da49f023a5909e661403d2f790e4af4af73b1843d63a0f01ce63bb99ec1bc651e2d92e4515a0f35471640b0a73ea8a01d85c9e82d4fc32d8e4a5d73cfec472d4558fb19780af4aacbc5d1c495644993df38d474ebd5d36cd24c2befeda7ae3fe940c2f32696f1c5224887e00c6696ece54ceebc7c872b07b7ee5c04409efe81912f291bfdfebf57528f1c684e95183bfa50b711097d918fdf90e741186c2f994c91af7aa97616072e8c18e92f55d4cb5a750d9d7a9b4cb"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x807}}}, &(0x7f0000000440)={0x44, &(0x7f0000000240)={0x40, 0xe, 0x8, "d4b0db5f78634d41"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x58}, &(0x7f0000000300)={0x20, 0x81, 0x1, "a2"}, &(0x7f0000000340)={0x20, 0x82, 0x3, "59abc4"}, &(0x7f0000000380)={0x20, 0x83, 0x3, "f6b9c5"}, &(0x7f00000003c0)={0x20, 0x84, 0x2, "aaa3"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "347ec6"}}) 158.766134ms ago: executing program 0 (id=175): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x404, 0x0, 0x20, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) getpeername$packet(r0, 0x0, &(0x7f00000000c0)) r2 = socket$vsock_stream(0x28, 0x801, 0x0) setsockopt$sock_int(r2, 0x28, 0x12, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000100)={'netpci0\x00', &(0x7f0000000180)=@ethtool_channels={0x3d, 0x6, 0x7fff, 0x6, 0x2, 0x7, 0x0, 0x1, 0x1}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28380, 0x0) 144.411645ms ago: executing program 0 (id=176): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/4088, 0xff8}], 0x1}}, {{&(0x7f0000000180)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003780)=[{&(0x7f0000000200)=""/35, 0x23}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/98, 0x62}, {&(0x7f0000003540)=""/74, 0x4a}, {&(0x7f00000035c0)=""/131, 0x83}, {&(0x7f0000003680)=""/217, 0xd9}], 0x7, &(0x7f0000003800)=""/154, 0x9a}, 0x843e}], 0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000130001000001df25070000f616000000080000000bcd9cef8a51604e6555ef16da85f3af7478a9d712af64d96054b4475637f590028b43703adcfc9e44c94e23cd2be26b756c8b77962c9b901f604506677287d4207735c08399be6bcfff5f39384163ed0821cfe94ea8489d909b63fead1f93457ce5300386e5f5dd58a560fa87a25bf2ff9e4a377e48aa4b5a37f5296079268590e3474cbcfd3e7c5739270e71f380d245d49b6fe969c44cfe1591e81592d9c99d61e8a5f7bda73e8b2634ede19787f1d64eeb0435a2e2b8d75655a86cbad8bea844cea6497af99177f8c9d50418add0", @ANYRES32, @ANYBLOB="14000c80"], 0x34}], 0x1, 0x0, 0x0, 0x40c0}, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x143801, 0x0, 0x4}, 0x18) unlinkat(r2, &(0x7f0000000100)='./file0\x00', 0x0) 100.15367ms ago: executing program 0 (id=177): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2a) mount$overlay(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x8, &(0x7f0000000780)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_on}]}) 99.89679ms ago: executing program 0 (id=178): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) 41.126066ms ago: executing program 0 (id=179): r0 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89fe, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) r4 = eventfd(0xfffffdfe) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000200)={0x1, r4}) (async) readv(r4, &(0x7f0000000640)=[{&(0x7f0000000480)=""/228, 0xe4}, {&(0x7f0000000580)=""/156, 0x9c}], 0x2) (async) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000180)={0x0, 0x989680}, 0x0) (async) write(r2, &(0x7f0000000080)='7', 0x1) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010700000000000109022400015c81a077966c8296090300000029210000000122220009058103000096ebc7fa310000000000000060ddbc33147d18e5cd26df3244a210295a9ff6"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_012={0x2, 0x0, 0x9, '{|'}, @global=@item_4={0x3, 0x1, 0x8, '?\x00'}, @local=@item_012={0x2, 0x2, 0x4, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "eb212189"}, @main=@item_4={0x3, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "cdd2f361"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) (async) r6 = syz_open_dev$evdev(&(0x7f0000000380), 0x4, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000009, 0x204031, 0xffffffffffffffff, 0xec776000) (async) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f00000003c0)={0x0, 0x1, 0xb, 0x8, "2af15ef6983d2e9e4cea7f3567bf701fa00d6a39ad4b3eb72544d4c1ba33b030"}) write$P9_RFSYNC(r2, &(0x7f0000000100)={0x7, 0x33, 0x2}, 0x7) (async) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) (async) ioctl$UFFDIO_POISON(r1, 0xc020aa08, 0x0) 0s ago: executing program 2 (id=180): mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2200020, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}, {@access_user}], [{@smackfsroot={'smackfsroot', 0x3d, '}B'}}]}}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000004c0)={{'\x00', 0x2}, {}, 0x8, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)="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", 0x1c6, 0x0, &(0x7f0000000380)={0x2, 0x10a, {0x1, 0xc, 0x62, "e71aebf338d65251cc45bcb42cf0308a75d1fa84261557c8a8be6458dbc3da71237c7566947ec15f774fdfff5550b1497facf09a2c6fc1a854946636ffe6ed8d21c622b00bb720d18e97ab8f2b8c641f904340086226fcb316c078bb742b319e8e05", 0x9b, "51d552d2c47c8690c681cbe5cc708ef492f2050f5eb6d4e4127afe612d8494286e2f6b82aed07b87e019a4d277b303db63b1caf565ea8262e823392d302e0e70945ce8e0e6437d67a72fe9a180e22cb37fda5547910a4a1e05d90cc784b63e4e4082290d834fe60631675f8acac85b44b03f068edc1994ddf726ca3dd92a25adcd5fee28746cea65ee2252249d63c1d6d422caa8a4f9252feeb5a7"}, 0x22, "f6d7ffb94e0d93194f2b7b986a9ecb81cbb2b3e759448230eeb5fcf3bf1a228a9f1d"}, 0x138}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bfd000/0x400000)=nil) r1 = eventfd(0x6) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000540)={0x3ee, 0x54000, 0x44480e397752ba01, r1}) r2 = syz_usb_connect$uac1(0x911f84d8791a588b, 0xfd, &(0x7f0000000580)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x194f, 0x10c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xeb, 0x3, 0x1, 0x9b, 0xe0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x26}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x206, 0x4, 0x3, 0x1, 0x1, 0x1c}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x3, 'i'}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0x2, "b5139e168a"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x2, "a0"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x78, 0x5, 0xb, "04b9794bbbb9"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x7, 0x9, 0x4, "11"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xb, 0x3, 0x2, 0xb, "ddf28252e7"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x4, 0x80, {0x7, 0x25, 0x1, 0x4, 0xe0, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6b88, 0x4, 0x9, 0xa7}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x1, 0x6, 0x4, "0a1ad0b5b0c5"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x4, 0x0, 0x5, "7506", "55a395"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x51, 0x2, 0x8, 0x80, "aab360"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x2, 0x9, 0xc0}, @as_header={0x7, 0x24, 0x1, 0xff, 0x8, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x7f, 0x3, {0x7, 0x25, 0x1, 0x8, 0x0, 0x5190}}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x250, 0x5b, 0xd, 0x7f, 0x10, 0x4}, 0x149, &(0x7f00000006c0)={0x5, 0xf, 0x149, 0x4, [@generic={0x2e, 0x10, 0x2, "a415b29f02ca91e219b38c046fad9d9214d1ea0d25d5c9c083aa00f2763bec5fa0bff7f7c211c276e6be68"}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "bf90d0d4983e86ce2ae06088be7880dd"}, @generic={0xee, 0x10, 0xa, "c83d294bc1b00d1b38ce2ae37042abac0a771d5a5b7beaca32bb85db0ac69f100abe27bdf4a1f306a7779178aaef4158a52507bc69a879cbc435bd7acfca60473daa40dc08436b90ef0670a1ab2265bb5781b7776f3182588179d2a48a445bf7855f07ad6d30cb9a69b757b16624b23cc7cb200c6867d90c056cd9fcd9db84d582de1361d5d7253385b4c8e1e0e857ed2b03a1420255c00d2121fba113ac9a861ebd4f8bec0891e0086a0d7742d15727a14490d4707df4f6dde67daa4434d6e51aaddded5e49fe3db3256c010531d52c82063f400d9cc01e4acecc0713c40c0bc15be89681feb03b342a81"}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "e16af5beb801538df709f6f659d9b3af"}]}, 0x1, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x43f}}]}) mount$bind(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='./file1\x00', &(0x7f0000000940), 0x8, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000980)={@multicast1, 0x0, 0x0, 0x50, 0x0, [{@empty}, {@empty}, {@multicast1}, {@local}, {@loopback}]}}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000a40)={0x0, 0x50d0, 0x800, 0x2, 0x9c, 0x0, r1}, &(0x7f0000000ac0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7b81, 0x1000, 0x1, 0x227}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf5cb, 0x1000, 0x0, 0x15a}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x90b9, 0x200, 0x2, 0x167}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x14ad, 0x20, 0x3, 0x254}, 0xffffffffffffffff}], 0x4, &(0x7f0000001d40)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4, 0x6eb, 0x0, &(0x7f0000000d40)=@buf_4k="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"}}, &(0x7f0000001dc0)) mmap$IORING_OFF_SQ_RING(0x0, 0x20000000, 0x200000f, 0x12, r5, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000001fc0)={0x14, &(0x7f0000001e00)={0x20, 0xf, 0xbc, {0xbc, 0x7c, "582eb5af1d8bbce1127f29c1f1973287c595bcd1e4c6609d969fef201a75c0fdcd4726bdae89d37a91a5b926805f800e322b727f517540e6a071ed286a0ef25339b77ac76a227a197acdb5c000b6d04a2cd6adcc4568dfc43d1e6e0b42c8013e34dfe06d6cf31016567d7d76f7b34d38d89da361d29a662db81b5587129704c95800f3ec567bbfba6608612ea11aae63bb6754d50927f7fe17a0535209b9021d86d549c9b79c30baf4100bfe87b5fa563eeda0375943912089cf"}}, &(0x7f0000001f00)={0x0, 0x3, 0x8a, @string={0x8a, 0x3, "714e3996e96bdc1b358755a7f8bf597de14a0ecd0d896037e0bd05b60669f175346f6e4752ead1115fb0010900a462fd53e0c0c32a3d16574e7e6f04b5cf39a7738c10ad1e8dd33f6e6d7589f6fc07e6c5a286b660ef5d17642fb556dbdb52838e41313242c10674aaa18d02ea57e5a25d79d2e97bac9cd4d8c0e7308f8242d8c67e4273bf791cd8"}}}, &(0x7f0000002200)={0x44, &(0x7f0000002000)={0x40, 0x5, 0x12, "085f7716e7e4f1029256ed523aec7d49d7c1"}, &(0x7f0000002040)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002080)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000020c0)={0x20, 0x81, 0x3, "13efc8"}, &(0x7f0000002100)={0x20, 0x82, 0x1, "9e"}, &(0x7f0000002140)={0x20, 0x83, 0x2, 'c\f'}, &(0x7f0000002180)={0x20, 0x84, 0x2, "a9b4"}, &(0x7f00000021c0)={0x20, 0x85, 0x3, "0e5810"}}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000002fc0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002f80)={&(0x7f0000002300)={0xc48, r9, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x46}}}}, [@NL80211_ATTR_TX_RATES={0x1bc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x4, 0x8, 0x7, 0x1, 0x81, 0x87]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x4, 0x6}, {0x2, 0xa}, {0x6, 0x6}, {0x0, 0x6}, {0x6, 0x2}, {0x0, 0x5}, {0x2, 0x7}, {0x1}, {0x6, 0x5}, {0x5}, {0x6, 0x2}, {0x6}, {0x5}, {0x0, 0x8}, {0x1, 0x6}, {0x0, 0x4}, {0x2, 0x1}, {0x6, 0xa}]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x5}, {0x7, 0x1}, {0x3, 0x2}, {0x7, 0x6}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x1}, {0x7, 0x4}, {0x4, 0x5}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x2}, {0x1, 0x1}, {}, {0x7}, {0x3, 0x4}, {0x3, 0x1}, {0x6, 0x3}, {0x4, 0x7}, {0x1}, {0x4, 0xa}, {0x2, 0x5}, {0x4, 0x5}, {0x1, 0x2}, {0x3, 0x3}, {0x7, 0x7}, {0x1, 0x3}, {0x6, 0x9}, {0x3, 0x9}, {0x2, 0x9}, {0x5, 0x8}, {0x0, 0x7}, {}, {0x7, 0x1}, {0x0, 0x9}, {0x0, 0x1}, {0x7, 0x8}, {0x4, 0x9}, {0x2, 0x6}, {0x0, 0xa}, {0x1, 0x2}, {0x2, 0x8}, {0x5, 0x1}, {0x1, 0x6}, {0x4, 0x1}, {0x0, 0x5}, {0x5, 0x9}, {0x1, 0xa}, {0x1}, {0x5, 0xa}, {0x1, 0xa}, {0x5, 0x6}, {0x7, 0x8}, {0x2, 0x3}, {0x2, 0x2}, {0x5, 0xa}, {0x1, 0x9}, {0x7}, {0x6, 0x9}, {0x7, 0x1}, {0x4, 0x6}, {0x5, 0xa}, {0x0, 0x4}, {0x0, 0x7}, {0x2, 0x8}, {0x6, 0x2}, {0x4, 0x8}, {0x5, 0x2}, {0x3, 0x6}, {0x3, 0xa}, {0x6, 0x5}, {0x7, 0x7}, {0x7, 0x9}, {0x2, 0x8}, {0x2, 0x7}, {0x2}, {0x7, 0x8}, {0x0, 0x7}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x16, 0x6, 0x48, 0x3b, 0x30, 0x66, 0x48, 0x3]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x4, 0x4}, {0x4, 0x2}, {0x1, 0x8}, {0x6, 0x2}, {0x4}, {0x2, 0x9}, {0x0, 0x4}, {0x3, 0x9}, {0x3, 0x1}, {0x0, 0xa}, {0x1, 0xa}, {0x4, 0x4}, {0x6, 0x8}, {0x7, 0x1}, {0x0, 0x7}, {0x2, 0x8}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x3}, {0x6, 0xa}, {0x0, 0x7}, {0x2, 0x5}, {0x6, 0x5}, {0x2}, {0x6, 0x7}, {0x1, 0x3}, {0x2, 0x5}, {0x2, 0x4}, {0x3, 0xa}, {0x2, 0x1}, {0x4, 0x1}, {0x7, 0xa}, {0x7, 0xa}, {0x1, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x4, 0x4}, {0x5, 0x2}, {0x0, 0x6}, {0x3}, {0x4, 0x6}, {0x5, 0x7}, {0x7, 0x5}, {0x3, 0x2}, {}, {0x6, 0x6}, {0x2}, {0x2, 0x6}, {0x6}, {0x2, 0x5}, {0x0, 0x3}, {0x1, 0x5}, {0x3, 0x5}, {0x4}, {0x2, 0x1}, {0x5, 0x5}, {0x1, 0x5}, {0x5, 0x8}]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x200, 0x5, 0x3, 0x46, 0x7657, 0x7]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x0, 0x8}, {0x0, 0x9}, {0x7}, {0x4, 0x5}, {0x6, 0x7}, {0x2, 0xa}, {0x2, 0x3}, {0x3, 0xa}, {0x5, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x4}, {0x3, 0xa}, {0x3, 0x8}, {0x2, 0x3}, {0x4}, {0x0, 0x5}, {0x5, 0x1}, {0x0, 0x5}, {0x0, 0x1}, {0x5, 0x6}, {0x4}, {0x1, 0x2}, {0x5, 0x1}, {0x1, 0x8}, {0x0, 0x7}, {0x1, 0x7}, {0x6, 0x4}, {0x1, 0x1}, {0x1, 0x2}, {0x7, 0x5}, {0x3}, {0x7, 0x2}, {0x4, 0x5}, {0x2, 0x2}, {0x1, 0x8}, {0x7, 0x3}, {0x6, 0x8}, {0x0, 0x2}, {0x3, 0x3}, {0x2, 0xa}, {0x4, 0x1}, {0x1, 0x1}, {0x7, 0x2}, {0x1, 0x4}, {0x4, 0xa}, {0x3, 0x1}, {0x0, 0xa}, {0x4, 0x7}, {0x1, 0xa}, {0x7, 0x8}, {0x2, 0x8}, {0x4, 0x4}, {0x2, 0x4}, {0x0, 0x5}]}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x3, 0x7, 0x5, 0xeae7, 0xd2]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x3, 0x3}, {0x3, 0x3}, {0x3, 0x9}, {0x4, 0x4}, {0x0, 0x3}, {0x1, 0x2}, {0x6, 0x4}, {0x7, 0x3}, {0x4, 0x7}, {0x3}, {0x6, 0x7}, {0x0, 0x1}, {0x0, 0x6}, {0x2, 0x1}, {0x0, 0x2}, {0x7, 0x2}, {0x2, 0x8}, {0x4}, {0x0, 0x1}, {}, {0x3, 0x4}, {0x4, 0x4}, {0x5, 0x6}, {0x3, 0x6}, {0x4, 0x9}, {0x6, 0x6}, {0x6, 0x8}, {0x4, 0x4}, {0x5, 0xa}, {0x7, 0x4}, {0x7, 0x6}, {0x4, 0x8}, {0x7, 0x2}, {0x0, 0x5}, {0x0, 0x6}, {0x1, 0x7}, {0x6, 0x6}, {0x4, 0x5}]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0x16]}]}]}, @NL80211_ATTR_TX_RATES={0x44, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0x48, 0x9, 0x24, 0x60, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7a3c, 0x9, 0x4f1d, 0x4, 0xc, 0x0, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x0, 0xbc, 0x3, 0x0, 0x4, 0x5, 0x7f]}}]}]}, @NL80211_ATTR_TX_RATES={0x498, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0x24, 0x1b, 0x16, 0x1, 0xc, 0x60, 0x18, 0x36, 0x6, 0x0, 0x1, 0xc, 0x48, 0x24, 0xc, 0x6, 0x6c, 0x1, 0x24, 0x1, 0x9, 0x1b, 0x9, 0x2, 0x6c, 0x1e, 0x60, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x26, 0x2, [{}, {0x5, 0x8}, {0x4, 0x6}, {0x5, 0x1}, {0x0, 0x9}, {0x3, 0x4}, {0x3, 0xa}, {0x2, 0x8}, {0x7, 0x3}, {0x0, 0x6}, {0x4, 0x2}, {0x5, 0x8}, {0x6, 0x9}, {0x6, 0x1}, {0x6, 0x5}, {0x7, 0x7}, {0x7, 0xa}, {}, {0x1, 0x5}, {0x4, 0xa}, {0x7, 0x8}, {0x4, 0x5}, {0x7, 0xa}, {0x2, 0x2}, {0x4, 0x6}, {0x1, 0xa}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x8}, {0x0, 0x6}, {0x2}, {0x1, 0x3}, {0x5, 0x9}, {0x1, 0x9}]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x4, 0x1}, {0x1, 0x5}, {0x3, 0x1}, {0x5, 0x3}, {0x0, 0x7}, {0x1, 0x7}, {0x3, 0x6}, {0x1, 0x4}, {0x3, 0x4}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x4}, {0x6, 0x7}, {0x7, 0x2}, {0x6, 0xa}, {0x3, 0x8}, {0x1, 0x1}, {0x1, 0xa}, {0x2, 0x9}, {0x0, 0x2}, {0x4, 0x6}, {0x1, 0x2}, {0x4, 0x1}, {0x0, 0x2}, {0x2, 0x3}, {0x6, 0x5}, {0x0, 0x9}, {0x5, 0xa}, {0x5, 0x9}, {0x0, 0x9}, {0x7, 0x2}, {0x4, 0x7}, {0x7}, {0x7, 0x3}, {0x5, 0x1}, {0x3, 0x5}, {0x0, 0x8}, {0x0, 0x6}, {0x7}, {0x7, 0xa}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x3, 0x4}, {0x2, 0x5}, {0x5, 0x5}, {}, {0x0, 0x4}, {0x5, 0x9}, {0x2, 0xa}, {0x3, 0x1}, {0x3, 0x6}, {0x4, 0x9}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x5}, {0x7, 0x8}, {0x4}, {0x2, 0x2}, {0x5, 0x8}, {0x0, 0x2}, {0x2, 0x7}, {0x1, 0xa}, {0x0, 0x2}, {0x4, 0x1}, {0x2, 0xa}, {0x6, 0xa}, {0x6}, {0x6, 0x3}, {0x7, 0x7}, {0x2, 0x7}, {0x3, 0x8}, {0x4, 0x8}, {0x6, 0x7}, {0x2, 0x5}, {0x7, 0x3}, {0x0, 0x6}, {0x3, 0x8}, {0x0, 0x3}, {0x3, 0x2}, {0x4, 0x6}, {0x6, 0x1}, {0x4, 0x5}, {0x3, 0x7}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0x2}, {0x1, 0xa}, {0x3, 0x7}, {0x7, 0x9}, {0x5}, {0x1, 0x8}, {0x1, 0x3}, {0x4, 0x7}, {0x0, 0x8}, {0x7, 0x9}, {0x4, 0x9}, {0x7, 0x6}, {0x7, 0x9}, {0x3, 0x8}, {0x2, 0x2}, {0x1, 0x7}, {0x5, 0x5}, {0x0, 0x3}, {0x3}, {0x7, 0x3}, {0x6, 0x3}, {0x2, 0x9}, {0x5, 0xa}, {0x7, 0xa}]}]}, @NL80211_BAND_60GHZ={0xd4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0x1, 0x2d, 0x36, 0xb, 0x3, 0x3, 0x36, 0x16, 0x1, 0x1b, 0x6c, 0x12, 0x36, 0x36, 0x16, 0x5c, 0x6c, 0x3, 0x5, 0x1b, 0xb, 0x30, 0x24, 0x1c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x9}, {0x1, 0x8}, {0x0, 0x6}, {0x0, 0x5}, {0x4, 0x7}, {0x6, 0x5}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x7}, {0x5}, {0x5, 0x7}, {0x2, 0x4}, {0x0, 0x4}, {0x1, 0xa}, {0x6, 0x4}, {0x0, 0x3}, {0x0, 0x3}, {0x1, 0x8}, {0x4, 0x3}, {0x2, 0x5}, {0x7, 0x5}, {0x0, 0x5}, {0x7, 0x3}, {0x0, 0xa}, {0x4, 0x3}, {0x7, 0x1}, {0x1, 0xa}, {0x4, 0x4}, {0x3, 0x7}, {0x3, 0x9}, {0x6, 0x1}, {0x5, 0x4}, {0x1, 0x4}, {0x7, 0x1}, {0x0, 0x9}, {0x1, 0xa}, {0x4, 0x3}, {0x2, 0x8}, {0x3, 0x1}, {0x0, 0xa}, {0x7, 0x7}, {0x4, 0x4}, {0x1, 0x5}, {0x0, 0x2}, {0x7, 0x6}, {0x7, 0x5}, {0x5, 0x2}, {0x2, 0x8}, {0x4, 0x3}, {0x4, 0x5}, {0x4, 0x8}, {0x0, 0x7}, {0x5, 0xa}, {0x1, 0x1}, {0x3}, {0x6, 0x9}, {0x3, 0x5}, {0x4, 0x8}, {0x6, 0x4}, {0x6, 0xa}, {0x6, 0x3}, {0x4, 0x6}, {0x7, 0xa}, {0x6}, {0x0, 0x9}, {0x0, 0x4}, {0x0, 0x6}, {}, {0x7, 0xa}, {0x4, 0x9}, {0x7, 0x7}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5, 0xb, 0x0, 0xb, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x3, 0xfff7, 0x3, 0x6, 0x6, 0x0, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xd, 0x4, 0xfd, 0x9, 0x3, 0x7, 0x200]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x3, 0x24, 0x4, 0x6c, 0x5f, 0x12, 0x16, 0x16, 0x6c, 0x69, 0x16, 0x30, 0x77, 0x36]}]}, @NL80211_BAND_60GHZ={0xd4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x6, 0x9}, {0x4, 0x6}, {0x4, 0x1}, {0x7, 0x4}, {0x3, 0x6}, {0x4, 0x5}, {0x6, 0x1}, {0x2, 0x8}, {0x2, 0x9}, {0x4, 0x9}, {0x3, 0x5}, {0x5, 0x8}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x0, 0x3}, {0x6, 0x1}, {0x4, 0x5}, {0x5, 0x9}, {0x1, 0x7}, {0x1, 0x4}, {0x4, 0x5}, {0x3, 0xa}, {0x1, 0xa}, {0x6, 0x8}, {0x4, 0x8}, {0x6, 0x7}, {0x1, 0x8}, {0x7, 0x3}, {0x0, 0xa}, {0x6, 0x9}, {0x1, 0x2}, {0x6, 0x6}, {0x0, 0x6}, {0x2, 0x1}, {0x2, 0x6}, {0x3, 0x5}, {0x4, 0x3}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x1}, {0x4, 0x4}, {0x7, 0x1}, {0x2, 0x7}, {0x2}, {0x0, 0x1}, {0x6, 0x3}, {0x3, 0x4}, {0x0, 0x7}, {0x6, 0x7}, {0x0, 0x3}, {0x2, 0x6}, {0x1, 0x3}, {0x4}, {0x1, 0x8}, {0x5, 0x9}, {0x3, 0x8}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x0, 0x7}, {0x3, 0x4}, {0x1, 0x5}, {0x4, 0x7}, {0x6, 0x1}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x1, 0x6}, {0x2, 0x8}, {0x6, 0x3}, {0x4, 0x7}, {0x1, 0xa}, {0x5, 0x4}, {0x4, 0x1}, {0x1, 0x9}, {0x7, 0xa}, {0x0, 0x6}, {0x3}, {0x4, 0x1}, {0x5, 0x4}, {0x6, 0x7}, {0x1, 0xa}, {0x2, 0x3}, {0x2, 0x8}, {0x5, 0x3}, {0x6, 0x1}, {0x5, 0x8}, {0x3, 0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x2, 0x8}, {0x7, 0x6}, {0x2, 0x4}, {0x4, 0x1}, {0x6}, {0x0, 0x8}, {0x1, 0x2}, {0x4, 0x8}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x100, 0x0, 0x5, 0x1ff, 0xf8ff, 0x10, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf1, 0x7, 0x4, 0x40, 0x4d, 0x900b, 0x4, 0xd60d]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x39, 0x0, 0xc, 0xf000, 0x7a3, 0x2, 0x5, 0x886]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0xb, 0x6, 0x4, 0x6, 0x30, 0x6c, 0x6, 0x3, 0x1]}]}, @NL80211_BAND_6GHZ={0xf8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x1, 0x7}, {0x2, 0x9}, {0x2, 0x1}, {0x2, 0x2}, {0x3, 0x8}, {0x5, 0x8}, {0x6, 0x3}, {0x5, 0x2}, {0x6, 0x3}, {0x2, 0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x4}, {0x0, 0x7}, {0x2, 0x1}, {0x5, 0xa}, {0x4, 0x1}, {0x6, 0x8}, {0x4, 0x6}, {0x1, 0x2}, {0x2, 0x2}, {0x6, 0x1}, {0x4, 0x5}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x3}, {0x2, 0x2}, {0x2, 0x8}, {0x3, 0x2}, {0x0, 0x7}, {0x3, 0xa}, {0x1, 0x4}, {0x1, 0x6}, {0x1, 0x7}, {0x6, 0x1}, {0x3, 0x5}, {0x7}, {0x0, 0x9}, {0x2, 0x8}, {0x2, 0x7}, {0x1, 0x2}, {0x7, 0xa}, {0x7, 0x4}, {0x0, 0x1}, {0x1, 0x7}, {0x6, 0x5}, {0x1, 0x4}, {0x1, 0x9}, {0x7, 0x8}, {0x2, 0x6}, {0x1, 0x5}, {0x6, 0x7}, {0x1, 0x7}, {0x7, 0x2}, {0x5, 0x3}, {0x2, 0x8}, {0x5, 0x9}, {0x4}, {0x7, 0x6}, {0x1, 0x5}, {0x1, 0x2}, {0x5, 0x4}, {0x1, 0x4}, {0x0, 0x6}, {0x1, 0x4}, {0x5, 0x9}, {0x7, 0x9}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x60, 0x48, 0x12, 0x6c, 0x2, 0x36, 0x3, 0x4, 0x3, 0x2, 0x6c, 0x24, 0x36, 0xb, 0x18, 0xb, 0x5, 0x3, 0x1, 0x48, 0x1a, 0x6, 0xc, 0x60, 0x48, 0x0, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x5, 0x7fff, 0x0, 0xfd18, 0x9, 0x400, 0xa93]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xff2f, 0xa, 0x0, 0xc95, 0x7, 0xf, 0xe04]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9, 0x2, 0x6, 0x10, 0x1, 0xffff, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x8000, 0x3e3, 0x6, 0xe777, 0x7, 0x2, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x400, 0x5, 0x4, 0xc, 0x1, 0xc3a9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x5, 0x8, 0xffff, 0x4, 0x5, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf6e, 0x6ee, 0xfff9, 0xe, 0x7fff, 0x2, 0x9, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0xa5b, 0x7f, 0x100, 0x7, 0x4, 0x6]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x7, 0x5}, {0x1, 0x4}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x4}, {0x1, 0x5}, {0x5, 0x8}, {0x3, 0x7}, {0x0, 0x3}, {0x2, 0x7}, {0x4, 0x8}, {0x4, 0xa}, {0x0, 0x6}, {0x0, 0x3}, {0x4, 0xa}, {0x7, 0x4}, {0x3, 0x7}, {0x7, 0xa}, {0x0, 0xa}, {0x1, 0x1}, {0x1, 0x3}, {0x4, 0xa}, {0x2, 0x8}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x6, 0x6}, {0x3, 0x9}, {0x3, 0x7}, {0x0, 0x5}, {0x0, 0x4}, {0x3, 0x6}, {0x5}, {0x1, 0x3}, {0x6, 0x8}, {0x0, 0x7}, {}, {0x7, 0x1}, {0x1, 0x4}]}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4f9, 0x1ac, 0x2, 0x57, 0x20, 0x5, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xa3bd, 0x7f, 0x1000, 0x0, 0x3, 0x3ff, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x8}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x30, 0xc, 0x18, 0x9, 0x30, 0xc, 0x48, 0x16, 0x12, 0x48, 0x3, 0x5, 0x2, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x2}, {0x0, 0x9}, {0x1, 0x6}, {0x5, 0x8}, {0x0, 0x7}, {0x2, 0xa}, {0x1, 0x2}, {0x1, 0x6}, {0x2, 0xa}, {0x7, 0x2}, {0x0, 0x2}, {0x6, 0x4}, {0x7, 0x8}, {0x3, 0x1}, {0x1, 0x1}, {0x6, 0x2}, {0x1, 0x9}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x1}, {0x3, 0x3}, {0x6, 0x3}, {0x5, 0x5}, {0x7, 0xa}, {0x1, 0x5}, {0x5}, {0x2, 0xa}, {0x0, 0x6}, {0x4, 0x1}, {0x2}, {0x3, 0x2}]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x223f, 0xffff, 0x45e6, 0x1, 0x0, 0x8, 0x4, 0xb75c]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1b, 0x50807cd9c60ad131, 0xb, 0x3, 0x2, 0x60, 0x4, 0x5, 0x1b, 0x30, 0x3, 0x6c, 0x48, 0x1]}]}]}, @NL80211_ATTR_TX_RATES={0x268, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5fb, 0x3, 0x5b1, 0x0, 0xfab, 0x3, 0xf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x6a49, 0xa, 0x3, 0x9, 0x101, 0xa]}}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x6, 0x6}, {0x1, 0x4}, {0x0, 0x1}, {0x7, 0x6}, {0x5, 0x3}, {0x6, 0x9}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x60, 0x15, 0x60, 0x1b, 0x3, 0x9, 0x48, 0x48, 0x5, 0x30, 0x3, 0x36, 0x16, 0xb0f31ca613168d42, 0x30, 0x16, 0xf, 0x5, 0x4, 0x12, 0x2, 0xb, 0x2, 0x12, 0x9, 0x48, 0xc, 0x2, 0xb, 0x36, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x1, 0x4}, {0x3, 0x1}, {0x7, 0x6}, {0x5, 0x3}, {0x0, 0x5}, {0x0, 0xa}, {0x0, 0x8}, {0x0, 0x8}, {0x2}, {0x4, 0x1}, {0x4, 0x6}, {0x6, 0x5}, {0x3, 0x6}, {0x2, 0x3}, {0x2}, {0x1}, {0x0, 0x8}, {0x0, 0x1}, {0x0, 0x9}, {0x7, 0x3}, {0x0, 0xa}, {0x1, 0x4}, {0x1, 0x2}, {0x7, 0x9}, {0x2, 0x6}, {0x2, 0x3}, {0x5, 0x4}, {0x7, 0x5}, {0x3, 0x9}, {0x1, 0xa}, {0x1}, {0x7, 0x1}, {0x1, 0x7}]}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x6, 0x1}, {0x1, 0x5}, {0x0, 0x7}, {0x4, 0x8}, {0x2, 0x6}, {0x7, 0x8}, {0x5, 0x3}, {0x3, 0x8}, {0x7, 0x3}, {0x1, 0x6}, {0x0, 0xa}, {0x2, 0x8}, {0x7, 0x2}, {0x4, 0x1}, {0x0, 0x9}, {0x1}, {0x4, 0x1}, {0x1}, {0x1, 0x2}, {0x5, 0x3}, {0x2, 0xa}, {0x6, 0x4}, {0x6, 0x3}, {0x1}, {0x5, 0x8}, {0x6, 0xa}, {0x4, 0x7}, {0x1}, {0x5, 0x9}, {0x5, 0x8}, {0x5, 0x6}, {}, {0x1, 0x5}, {0x2, 0x1}, {0x0, 0xa}, {0x4, 0x3}, {0x0, 0x5}, {0x1, 0x6}, {0x3, 0x4}, {0x6, 0xa}, {0x1, 0x6}, {0x7, 0x3}, {0x1, 0x5}, {0x2}, {0x6, 0x3}, {0x5, 0x6}, {0x0, 0xa}, {0x7, 0x1}, {0x3, 0x9}, {0x2, 0x7}, {0x4}, {0x7, 0x5}, {0x3, 0x1}, {0x7}, {0x2}, {0x2}, {0x2}, {0x6, 0x6}, {0x1, 0x1}, {0x7, 0x9}, {0x0, 0x3}, {0x6, 0x3}, {0x6}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x4, 0x9}, {0x3, 0x8}, {0x2, 0x4}, {0x1, 0x9}, {0x4, 0x9}, {0x7, 0xa}, {0x0, 0x7}, {0x2, 0x3}, {0x0, 0x6}, {0x2, 0xa}, {0x1, 0x8}, {0x3, 0x2}, {0x4, 0x1}, {0x6, 0xa}, {0x5, 0xa}, {0x4, 0x1}, {0x2, 0x4}, {0x5, 0x9}, {0x4, 0x8}, {0x4, 0x6}, {0x6, 0x3}, {0x0, 0x5}, {0x7, 0x7}, {0x4}, {0x6, 0x6}, {0x0, 0x8}, {0x4, 0x1}, {0x0, 0x2}, {0x4, 0x5}, {0x0, 0x3}, {0x0, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x4, 0x2, 0x5, 0x10, 0x100, 0x1]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x8000, 0x1, 0x7, 0x7fff, 0x0, 0xe]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x3, 0x7, 0x7, 0x9, 0x8, 0x7fff]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x36, 0x36, 0x24, 0xb, 0x5, 0x16, 0x6, 0x1b, 0x5, 0x2, 0x9, 0x77, 0x6, 0x30, 0x9, 0xc, 0x6, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x715d, 0x3, 0x2, 0xfffe, 0x4, 0xffff, 0x7, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x2, 0x7}, {0x6, 0x5}, {0x7, 0x9}, {0x2, 0x9}, {0x4, 0x4}, {0x2}, {0x7, 0x7}, {0x3, 0x14}, {0x4, 0x8}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x18, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x0, 0x5, 0x7, 0x1, 0x9, 0x2bb, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xc, 0x6, 0x2, 0x18, 0x24, 0xb, 0x6c, 0x30, 0x9, 0x1, 0x9, 0x0, 0x60, 0x9, 0x9, 0x3, 0x60, 0x3, 0xb, 0xc, 0x4, 0x6c]}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x5}, {0x4, 0x2}, {0x0, 0x8}, {0x3, 0x6}, {0x4, 0x5}, {0x1, 0x2}, {0x5, 0x6}, {0x7, 0xa}, {0x0, 0x8}, {0x0, 0x5}, {0x6, 0x3}, {0x1, 0xa}, {0x2, 0x2}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0x4}, {0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0x4}, {0x1, 0x6}, {0x7, 0x8}, {0x3, 0x8}, {0x2, 0x6}, {0x4, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x4, 0x9}, {0x3, 0x5}, {0x0, 0x5}, {0x3, 0x1}, {0x4, 0x4}, {0x3, 0x9}, {0x0, 0x4}, {0x3, 0x6}, {0x7, 0xa}, {0x0, 0x4}, {0x4, 0x2}, {0x7, 0x4}, {0x2, 0x3}, {0x5, 0x7}, {0x1, 0x1}, {0x7, 0x2}, {0x2, 0x5}, {0x4, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x208, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x6, 0x3}, {0x2, 0x5}, {0x3, 0x2}, {0x0, 0x8}, {0x3, 0x7}, {0x0, 0x4}, {0x7, 0x8}, {0x2}, {0x0, 0x9}, {0x4, 0x5}, {0x0, 0x7}, {0x6, 0x5}, {0x5, 0x5}, {0x0, 0xa}, {0x3, 0x2}, {0x4, 0x9}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x1e}, {0x0, 0x5}, {0x7, 0x7}, {0x4, 0x1c}, {0x0, 0x6}, {0x4, 0x6}, {0x1, 0x1}, {0x4, 0x5}, {0x7, 0x4}, {0x1, 0x9}, {0x1, 0x8}, {0x4, 0x6}, {0x4, 0xa}, {0x2, 0x1}, {0x3, 0x5}, {0x6, 0xa}, {0x0, 0x4}, {0x4, 0x8}, {0x0, 0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0xa}, {0x1, 0x1}, {0x2, 0x8}, {0x1, 0x8}, {0x3, 0x1}, {0x4, 0x2}, {0x7, 0x5}, {0x1, 0x6}, {0x5, 0x6}, {0x6, 0x4}, {0x0, 0xa}, {0x0, 0x4}, {0x7, 0x1}, {0x0, 0x3}, {0x1, 0x3}, {0x6, 0x2}, {0x4}, {0x6, 0x8}, {0x5, 0x5}, {0x2, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x36b0, 0x8, 0xb3, 0x5, 0xd3, 0x1]}}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x2, 0x6}, {0x3, 0x4}, {0x1, 0x9}, {0x6}, {0x1, 0xa}, {0x1, 0x7}, {0x5, 0x8}, {0x3, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x4, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x6, 0x3}, {0x1, 0x9}, {0x3, 0x6}, {0x4}, {0x5, 0x8}, {0x7, 0x8}, {0x3, 0x9}, {0x7, 0xa}, {0x2}, {0x7, 0x9}, {0x6, 0x6}, {0x1, 0x1}, {0x7, 0x9}, {0x5, 0x1}, {0x7, 0x8}, {0x0, 0x8}, {0x4, 0x1}, {0x3, 0xa}, {0x1, 0xa}, {0x1, 0x6}, {0x1}, {0x6, 0x5}, {0x0, 0x3}, {0x0, 0x5}, {0x2, 0x8}, {0x2, 0x4}, {0x1, 0x8}, {0x3, 0x1}, {0x1, 0x2}, {0x0, 0x9}, {0x0, 0x9}, {0x6, 0x2}, {0x0, 0x2}, {0x4, 0xa}, {0x1, 0x8}, {0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x2}, {0x5}, {0x6}, {0x0, 0x4}, {0x2}, {0x3, 0x9}, {0x0, 0x3}, {0x5}, {0x6, 0x5}, {0x1, 0x6}, {0x4, 0x3}, {0x3, 0x9}, {0x1, 0x1}, {0x2, 0x3}, {0x6, 0x2}, {0x2, 0x8}, {0x2, 0x1}, {0x1, 0x2}, {}, {0x3, 0x8}, {0x1}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x12, 0x9, 0x6, 0x1, 0x24, 0x48, 0x12, 0x1c, 0x2]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5476, 0x8, 0x45a4, 0x9, 0x0, 0xfff4, 0x1, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1, 0x36, 0x3, 0x36, 0x8, 0x6c, 0x9, 0x3, 0x1b, 0x4, 0x18, 0x5, 0x2, 0x9, 0xc, 0x12, 0x0, 0xc, 0x12, 0x1]}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x800, 0x974b, 0xc72, 0x2, 0x8, 0xf5ec]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x4d, 0x4000, 0x8, 0x7, 0x1000, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0x5}, {0x1, 0x2}, {0x4}, {0x5, 0x5}, {0x0, 0xa}, {0x1, 0x9}, {0x3, 0x3}, {0x4, 0x1}, {0x1}, {0x5, 0x5}, {0x6, 0xa}, {0x3, 0x2}, {0x2, 0x9}, {0x0, 0x3}, {0x6, 0x8}, {0x6, 0x5}, {0x7, 0x3}, {0x3, 0x6}, {0x1, 0x1}, {0x0, 0x4}, {0x3, 0x8}, {0x2, 0x2}, {0x0, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0x6}, {0x4, 0x7}, {0x5, 0x9}, {0x3, 0x6}, {0x3, 0x2}, {0x1, 0x2}, {0x2}, {0x2, 0x9}, {0x2, 0x8}, {0x6, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x0, 0x3, 0xc, 0x4, 0x4, 0xc, 0x5]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x2, 0x6}, {0x6, 0x1}, {0x4, 0x8}, {0x4, 0x5}, {0x7, 0x6}, {0x0, 0x3}, {0x2}, {0x4, 0x4}, {0x3, 0x5}, {0x7, 0x5}, {0x7, 0x5}, {0x6, 0x1}, {0x3, 0x2}, {0x6, 0xa}, {0x2}, {0x0, 0x7}, {0x7, 0x2}, {0x2, 0x9}, {0x1, 0x5}, {0x3, 0xa}, {0x0, 0x7}, {0x2, 0x9}, {0x0, 0x9}, {0x0, 0x5}, {0x2, 0x3}, {0x0, 0x1}, {0x4, 0x5}, {0x3, 0x1}, {0x0, 0x4}, {0x7, 0x6}, {0x7, 0x4}, {0x1}, {0x6, 0x7}, {0x1, 0x4}, {0x1, 0x8}, {0x1, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x2, 0xa}, {0x4, 0x6}, {0x4, 0x7}, {0x0, 0x7}, {0x7, 0x4}, {0x1, 0x1}, {0x5, 0x8}, {0x0, 0xa}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0x8}, {0x7, 0x4}, {0x1, 0x4}, {0x3}, {0x1, 0x1}, {0x5, 0x6}, {0x0, 0x8}, {0x4, 0x5}, {0x3, 0x9}, {0x7, 0x8}, {0x1, 0x2}, {0x1}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x5}, {}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x2, 0xfff7, 0x8c, 0x5, 0x0, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0x118, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd8, 0x9, 0x7, 0xf, 0x1, 0x2, 0x5, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0x5, 0xd3, 0x3, 0x5, 0x400, 0x101]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x84f, 0xa, 0xfff8, 0x3ff, 0x4000, 0x4]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7f, 0x7, 0x40, 0x0, 0x3, 0xfffe, 0x7]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x6, 0xa}, {0x0, 0x9}, {0x2, 0x1}, {0x0, 0x5}, {0x7, 0x2}, {0x4}, {0x4, 0x8}, {}, {0x2}, {0x7, 0x8}, {0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x1}, {0x7, 0x6}, {0x5, 0x1}, {0x7}, {0x6, 0x6}, {0x0, 0x2}, {0x5, 0x4}, {0x0, 0x6}, {0x5, 0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x2, 0x8}, {0x3, 0x6}, {0x6, 0x5}, {0x1, 0x4}, {0x0, 0x6}, {0x6}, {0x4, 0x7}, {0x5, 0x5}, {0x5, 0x1}, {0x1}, {0x1, 0x7}, {0x3, 0x1}, {0x7, 0x1}, {0x6, 0x2}, {0x1}, {0x1, 0x5}, {0x5, 0x6}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x5}, {0x6, 0x1}, {0x1, 0x7}, {0x2, 0x2}, {0x5, 0x4}, {0x4}, {0x0, 0x1}, {0x7, 0x7}, {0x5, 0x2}, {0x4, 0x8}, {0x0, 0x2}, {0x1, 0x1}, {0x5}, {0x0, 0x9}, {0x6, 0x7}, {0x6, 0x7}, {0x4, 0x6}, {0x4}, {0x2, 0x1}, {0x1, 0x2}, {0x6, 0x4}, {0x5}, {0x1, 0xa}, {0x1, 0x8}, {0x5}, {0x3, 0x5}, {0x4, 0x9}, {0x6, 0xa}, {0x7}, {0x1, 0x5}, {0x7}, {0x3, 0x2}, {0x0, 0x3}, {0x5, 0x8}, {0x7, 0x7}, {0x2, 0xa}, {0x1, 0x2}, {0x5, 0x2}, {0x0, 0x5}, {0x2}, {0x5, 0x1}, {0x6, 0x1}, {0x7, 0x15}, {0x3}, {0x1, 0x8}, {0x3, 0x4}, {0x1, 0x9}, {0x6, 0x8}, {0x3, 0x7}]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0xc48}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$inet(r3, &(0x7f00000032c0)={&(0x7f0000003000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000003240)=[{&(0x7f0000003040)="074cda63face16745e83977aeabf44bc9bf85f96d2f7a3c51a3bb09db5e42ab57cc8f215da196688751485b0f37f17c4a29865a232896074207944dad74d95c59655735d9c4c6af33a682cff85438712a5aa93048dd4c2653960a3a5ce812f4bd4b2b1ce87ec6b40f42368a9d6f4773ad12f805eb3d7df606d4fce7b042848ea75", 0x81}, {&(0x7f0000003100)="7ebe682b216b8ea222e2f08e7ede893e8679c28edfa54fdbc977138a974b80f51be29d4e6fe38aea5374e28834bdeedbc9", 0x31}, {&(0x7f0000003140)="0e40debcf0a4c8281c2cec9a1b1af73dc84b3defa5d20ed1848fde63dfc8ce5b2e88640efce62bfda9c72c2745b6358e17103f38de5d8fc141a102515dda13d2521d0b57555d99aff48ba4b64ecb6d9b46c0fd502d75b5ec8d13758fb87830530051dfc68a925243b6b205df097f3f563a2164c2a37ee8b9ac92aacca485de59b8fa5a94deb2033b5b52393c3fc96f2dfbe269b263c4e488476d6f3baf49aaa2e1f015055a7113280a81d04b98b2c9ee15d050650d68b067493db6d31280627688f72bf0b1e4fa19cd3eb6c1c054b1e55fe90d0e0fa89156", 0xd8}], 0x3, &(0x7f0000003280)}, 0x4000000) r10 = signalfd4(r5, &(0x7f0000003300)={[0x3]}, 0x8, 0x800) ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000003340)={0x7fffffff, 0xd000, 0x1, r4}) mmap$IORING_OFF_SQ_RING(0x0, 0x8, 0x2000008, 0x8010, r7, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r10, &(0x7f0000003500)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000034c0)={&(0x7f00000033c0)={0x100, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x100}, 0x1, 0x0, 0x0, 0x48000}, 0x4048010) pwrite64(r8, &(0x7f0000003540)="4f1cee2de8e5fc2d54cc831ad7b3cde9e78424aebb79c4616646d85240aeb0d928fd1d5b1701b7b2fcf627426ce13bfb02a91f6f2871eb72bac443bfb1b37372acf4c7f7330ae372f353e70ba4b1c42af0e16a68b7d61e3c142e49be58a7ce050c56ced7c22cbb981fb3abdf807131147eaacbb6b1862f76e5253138578fdb70eec3663b00f2dd7a8d624a9740fa010903b5930b5d5bce43a971d4ff4ab18ae33a19bd5a053ff59317e1e461264821238292b3058e88118532f1cac0da08f716cbd2c1", 0xc3, 0x1) preadv2(r6, &(0x7f0000003940)=[{&(0x7f0000003640)=""/169, 0xa9}, {&(0x7f0000003700)=""/181, 0xb5}, {&(0x7f00000037c0)=""/129, 0x81}, {&(0x7f0000003880)=""/104, 0x68}, {&(0x7f0000003900)=""/20, 0x14}], 0x5, 0xffffffff, 0x4, 0xd) openat$kvm(0xffffffffffffff9c, &(0x7f00000039c0), 0xc000, 0x0) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000003a40), r10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000003b00)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x3c, r11, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7a78}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x840) ioctl$USBDEVFS_WAIT_FOR_RESUME(r10, 0x5523) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000003c40)={0x14, &(0x7f0000003b40)={0x20, 0x7, 0x96, {0x96, 0xc, "acf02c02d767868b70af717ffe804860120c271521efbc3085555015a8b61f1dd0a891d0bd850603b1f2ca4950d03786fca0846f42994974da1545941f9b1f539a12e656e51cd005b622f7e481570242890c694df63719b1e5e59059348bd1fb42dcc5c6cca48d9f056e67b88d7cbc0e403595dc11d4fe60734be2b8f716eb666a92032cf11c29b819a153e3cabacd97b21c6fda"}}, &(0x7f0000003c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x861}}}, &(0x7f0000003ec0)={0x34, &(0x7f0000003c80)={0x40, 0x0, 0x49, "96d836e47970c43922182ec9a699bd574e3becf19c4cbf1241115c2d79be13067ae5861689e650a2037559519744bebc8dfbdb51613a08d54f545e400fb7a07f9711e7a2dfb587851d"}, &(0x7f0000003d00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000003d40)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000003d80)={0x20, 0x0, 0xb2, {0xb0, "249b7217e043a43408f093100a2b25d9f41ec42c4c89f169c68a6dcb853e75db78f4f0883c6a11dfb3170856a430c8a450c17251aac57d1dce83b39c2ef35608f900a5745bb0b9fc2e28dafa5d76c3c994c8c87b7267c7c36d0fa80c2c1ccbe0ba7dc54166e481f51ed1c7d87208235b5ee35df73be2dc7791c3b18fd1a4b0b3f6fe454e3b3a8d4cd4a8c6baf2ef0c912415312554391ca78bca8e9178a7772daab771f5c9344fb2a9c70061cc7d0022"}}, &(0x7f0000003e40)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000003e80)={0x20, 0x0, 0x1, 0x1}}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000003fc0)={&(0x7f0000003f00), 0xc, &(0x7f0000003f80)={&(0x7f0000003f40)={0x1c, r9, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040094}, 0x20000010) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.44' (ED25519) to the list of known hosts. [ 29.906972][ T36] audit: type=1400 audit(1793357821.810:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.910631][ T286] cgroup: Unknown subsys name 'net' [ 29.929643][ T36] audit: type=1400 audit(1793357821.820:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.957256][ T36] audit: type=1400 audit(1793357821.850:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.957726][ T286] cgroup: Unknown subsys name 'devices' [ 30.079133][ T286] cgroup: Unknown subsys name 'hugetlb' [ 30.084781][ T286] cgroup: Unknown subsys name 'rlimit' [ 30.201154][ T36] audit: type=1400 audit(1793357822.110:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.224404][ T36] audit: type=1400 audit(1793357822.110:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.249168][ T36] audit: type=1400 audit(1793357822.110:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.279996][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.289010][ T36] audit: type=1400 audit(1793357822.200:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.314552][ T36] audit: type=1400 audit(1793357822.200:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.327823][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.341169][ T36] audit: type=1400 audit(1793357822.230:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.374722][ T36] audit: type=1400 audit(1793357822.230:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.139075][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.146218][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.153402][ T293] bridge_slave_0: entered allmulticast mode [ 31.160651][ T293] bridge_slave_0: entered promiscuous mode [ 31.176942][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.184046][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.191204][ T293] bridge_slave_1: entered allmulticast mode [ 31.197572][ T293] bridge_slave_1: entered promiscuous mode [ 31.323624][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.330727][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.338109][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.345158][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.359601][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.366673][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.373880][ T298] bridge_slave_0: entered allmulticast mode [ 31.380595][ T298] bridge_slave_0: entered promiscuous mode [ 31.387418][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.394533][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.401751][ T298] bridge_slave_1: entered allmulticast mode [ 31.408219][ T298] bridge_slave_1: entered promiscuous mode [ 31.425169][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.432360][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.439514][ T299] bridge_slave_0: entered allmulticast mode [ 31.445778][ T299] bridge_slave_0: entered promiscuous mode [ 31.452591][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.459694][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.466846][ T299] bridge_slave_1: entered allmulticast mode [ 31.473331][ T299] bridge_slave_1: entered promiscuous mode [ 31.569086][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.576199][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.583516][ T300] bridge_slave_0: entered allmulticast mode [ 31.589810][ T300] bridge_slave_0: entered promiscuous mode [ 31.596383][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.603560][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.610663][ T300] bridge_slave_1: entered allmulticast mode [ 31.616891][ T300] bridge_slave_1: entered promiscuous mode [ 31.682296][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.689631][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.712612][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.719709][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.727690][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.734775][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.781755][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.788861][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.802854][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.809958][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.850628][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.857747][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.866044][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.873136][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.883592][ T293] veth0_vlan: entered promiscuous mode [ 31.912136][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.919212][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.926837][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.933927][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.959840][ T293] veth1_macvtap: entered promiscuous mode [ 31.968784][ T298] veth0_vlan: entered promiscuous mode [ 31.992313][ T299] veth0_vlan: entered promiscuous mode [ 31.998537][ T298] veth1_macvtap: entered promiscuous mode [ 32.032782][ T299] veth1_macvtap: entered promiscuous mode [ 32.039618][ T300] veth0_vlan: entered promiscuous mode [ 32.051343][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.092708][ T300] veth1_macvtap: entered promiscuous mode [ 32.133371][ T314] sd 0:0:1:0: PR command failed: 1026 [ 32.150218][ T314] sd 0:0:1:0: Sense Key : 0x5 [current] [ 32.155913][ T314] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 32.161620][ T319] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 32.181531][ T323] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 32.260658][ T324] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.304804][ T333] Zero length message leads to an empty skb [ 32.377301][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.467068][ T312] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 32.528100][ T31] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 32.539488][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.550657][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.560514][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 32.574339][ T31] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 32.583681][ T31] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 32.591880][ T31] usb 3-1: Manufacturer: syz [ 32.598240][ T31] usb 3-1: config 0 descriptor?? [ 32.628003][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 32.628038][ T312] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 32.636494][ T345] device-mapper: ioctl: error adding target to table [ 32.649067][ T312] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.654900][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 32.663896][ T312] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.673843][ T345] device-mapper: ioctl: error adding target to table [ 32.685331][ T312] usb 4-1: config 0 interface 0 has no altsetting 0 [ 32.695143][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 32.699363][ T312] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 32.712354][ T345] device-mapper: ioctl: error adding target to table [ 32.715825][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.723458][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 32.739090][ T345] device-mapper: ioctl: error adding target to table [ 32.740812][ T312] usb 4-1: config 0 descriptor?? [ 32.745923][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 32.761801][ T345] device-mapper: ioctl: error adding target to table [ 32.768836][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 32.779894][ T345] device-mapper: ioctl: error adding target to table [ 32.786738][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 32.795175][ T345] device-mapper: ioctl: error adding target to table [ 32.802259][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 32.812246][ T345] device-mapper: ioctl: error adding target to table [ 32.819327][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 32.827815][ T345] device-mapper: ioctl: error adding target to table [ 32.834593][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 32.842977][ T345] device-mapper: ioctl: error adding target to table [ 32.849801][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 32.859265][ T345] device-mapper: ioctl: error adding target to table [ 32.866051][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 32.875864][ T345] device-mapper: ioctl: error adding target to table [ 32.882727][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 32.891086][ T345] device-mapper: ioctl: error adding target to table [ 32.898085][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 32.906388][ T345] device-mapper: ioctl: error adding target to table [ 32.913184][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 32.921524][ T345] device-mapper: ioctl: error adding target to table [ 32.928347][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 32.936619][ T345] device-mapper: ioctl: error adding target to table [ 32.944191][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 32.953915][ T345] device-mapper: ioctl: error adding target to table [ 32.960796][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 32.969122][ T345] device-mapper: ioctl: error adding target to table [ 32.975921][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 32.984258][ T345] device-mapper: ioctl: error adding target to table [ 32.991058][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 32.999394][ T345] device-mapper: ioctl: error adding target to table [ 33.006188][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 33.014492][ T345] device-mapper: ioctl: error adding target to table [ 33.019730][ T31] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 33.022325][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 33.036799][ T345] device-mapper: ioctl: error adding target to table [ 33.043601][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 33.045016][ T31] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 33.051914][ T345] device-mapper: ioctl: error adding target to table [ 33.052063][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 33.074598][ T345] device-mapper: ioctl: error adding target to table [ 33.081745][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 33.081856][ T31] appleir 0003:05AC:8243.0001: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 33.090052][ T345] device-mapper: ioctl: error adding target to table [ 33.090249][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 33.117756][ T345] device-mapper: ioctl: error adding target to table [ 33.124518][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 33.132867][ T345] device-mapper: ioctl: error adding target to table [ 33.139664][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 33.147969][ T345] device-mapper: ioctl: error adding target to table [ 33.154720][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 33.163033][ T345] device-mapper: ioctl: error adding target to table [ 33.169830][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 33.178223][ T345] device-mapper: ioctl: error adding target to table [ 33.193334][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 33.203290][ T345] device-mapper: ioctl: error adding target to table [ 33.210783][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 33.219801][ T345] device-mapper: ioctl: error adding target to table [ 33.226577][ T345] device-mapper: table: 252:0: striped: Invalid stripe count (-EINVAL) [ 33.234906][ T345] device-mapper: ioctl: error adding target to table [ 33.244532][ T312] usbhid 4-1:0.0: can't add hid device: -71 [ 33.265758][ T312] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 33.289447][ T312] usb 4-1: USB disconnect, device number 2 [ 33.351020][ T360] fuse: Unknown parameter 'gbo' [ 33.368684][ T360] batadv_slave_0: entered promiscuous mode [ 33.376183][ T359] batadv_slave_0: left promiscuous mode [ 33.567001][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.636992][ T321] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.727074][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 33.735251][ T31] usb 2-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 33.747990][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.756107][ T31] usb 2-1: Product: syz [ 33.760910][ T31] usb 2-1: Manufacturer: syz [ 33.765565][ T31] usb 2-1: SerialNumber: syz [ 33.796970][ T321] usb 1-1: Using ep0 maxpacket: 32 [ 33.805811][ T321] usb 1-1: unable to get BOS descriptor or descriptor too short [ 33.821838][ T321] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 33.830578][ T321] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 33.841648][ T321] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 33.850973][ T321] usb 1-1: config 128 has no interface number 0 [ 33.857594][ T321] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 33.868160][ T321] usb 1-1: config 128 interface 127 has no altsetting 0 [ 33.876659][ T321] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 33.885982][ T321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.894165][ T321] usb 1-1: Product: syz [ 33.900910][ T321] usb 1-1: Manufacturer: syz [ 33.905564][ T321] usb 1-1: SerialNumber: syz [ 33.988499][ T31] usb 2-1: USB disconnect, device number 2 [ 34.013384][ T371] udevd[371]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.046035][ T373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.055445][ T373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.064385][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 34.217118][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 34.223732][ T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.234837][ T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.244721][ T10] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 34.257792][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 34.264425][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 34.273795][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.282936][ T10] usb 4-1: config 0 descriptor?? [ 34.318193][ T321] usb 1-1: USB disconnect, device number 2 [ 34.332674][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.901383][ T10] usb 4-1: USB disconnect, device number 3 [ 35.415239][ T36] kauditd_printk_skb: 91 callbacks suppressed [ 35.415256][ T36] audit: type=1400 audit(1793357827.320:165): avc: denied { unmount } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 35.450636][ T389] netlink: 'syz.3.21': attribute type 4 has an invalid length. [ 35.459987][ T36] audit: type=1400 audit(1793357827.370:166): avc: denied { create } for pid=390 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 35.479244][ T36] audit: type=1400 audit(1793357827.390:167): avc: denied { write } for pid=390 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 35.499079][ T36] audit: type=1400 audit(1793357827.390:168): avc: denied { setopt } for pid=390 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.532075][ T36] audit: type=1400 audit(1793357827.440:169): avc: denied { mount } for pid=392 comm="syz.0.22" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 35.556982][ T393] sd 0:0:1:0: PR command failed: 1026 [ 35.567168][ T393] sd 0:0:1:0: Sense Key : 0x5 [current] [ 35.573160][ T393] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 35.588071][ T399] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 35.647655][ T36] audit: type=1400 audit(1793357827.560:170): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 35.678070][ T404] rust_binder: 403:404 got transaction to invalid handle 1 [ 35.685397][ T404] rust_binder: 403:404 transaction async to 0:0 failed ENOENT, code 0 size 0-0 line process.rs:958 [ 35.699610][ T404] rust_binder: 403: undelivered TRANSACTION_ERROR: 29201 [ 35.707936][ T404] sd 0:0:1:0: PR command failed: 1026 [ 35.713376][ T404] sd 0:0:1:0: Sense Key : 0x5 [current] [ 35.719478][ T404] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 35.767210][ T407] netlink: 140 bytes leftover after parsing attributes in process `syz.0.27'. [ 35.867037][ T312] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 36.018286][ T312] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 36.029226][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.040163][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.049963][ T312] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 36.064407][ T312] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 36.073519][ T312] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 36.081684][ T312] usb 2-1: Manufacturer: syz [ 36.087077][ T312] usb 2-1: config 0 descriptor?? [ 36.127075][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.186988][ T64] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 36.278190][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.288729][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 36.298156][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.309395][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.320894][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 36.330083][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.338182][ T64] usb 1-1: Using ep0 maxpacket: 16 [ 36.338230][ T10] usb 4-1: Product: syz [ 36.347661][ T10] usb 4-1: Manufacturer: syz [ 36.352333][ T10] usb 4-1: SerialNumber: syz [ 36.357102][ T64] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 36.368988][ T10] usb 4-1: Found UVC 1.00 device syz (046d:0821) [ 36.375599][ T10] usb 4-1: No streaming interface found for terminal 2. [ 36.387430][ T427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.395975][ T427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.404707][ T64] usb 1-1: string descriptor 0 read error: -71 [ 36.411035][ T64] usb 1-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 36.420269][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.432506][ T64] r8152-cfgselector 1-1: Unknown version 0x0000 [ 36.439568][ T64] r8152-cfgselector 1-1: rejected 8 configurations due to insufficient available bus power [ 36.449667][ T64] r8152-cfgselector 1-1: no configuration chosen from 8 choices [ 36.458710][ T64] r8152-cfgselector 1-1: USB disconnect, device number 3 [ 36.500112][ T312] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 36.507472][ T312] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 36.516174][ T312] appleir 0003:05AC:8243.0003: hiddev97,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 36.569369][ T10] usb 4-1: USB disconnect, device number 4 [ 36.924373][ T432] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 36.953570][ T434] sd 0:0:1:0: PR command failed: 1026 [ 36.959117][ T434] sd 0:0:1:0: Sense Key : 0x5 [current] [ 36.964869][ T434] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 36.986262][ T437] capability: warning: `syz.0.37' uses deprecated v2 capabilities in a way that may be insecure [ 37.000252][ T36] audit: type=1400 audit(1793357828.910:171): avc: denied { cmd } for pid=436 comm="syz.0.37" path="socket:[4029]" dev="sockfs" ino=4029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 37.069671][ T36] audit: type=1400 audit(1793357828.980:172): avc: denied { block_suspend } for pid=436 comm="syz.0.37" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.117216][ T446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.126240][ T446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.154931][ T36] audit: type=1400 audit(1793357829.060:173): avc: denied { name_bind } for pid=447 comm="syz.3.41" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 37.176824][ T36] audit: type=1400 audit(1793357829.060:174): avc: denied { node_bind } for pid=447 comm="syz.3.41" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 37.232060][ T456] can: request_module (can-proto-0) failed. [ 37.288031][ T461] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 37.321537][ T467] overlayfs: missing 'lowerdir' [ 37.556043][ T485] fuse: Bad value for 'fd' [ 37.723014][ T491] overlayfs: missing 'lowerdir' [ 37.738337][ T493] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 37.760266][ T495] rust_binder: Error in use_page_slow: ESRCH [ 37.766550][ T496] rust_binder: Error in use_page_slow: ESRCH [ 37.767078][ T495] rust_binder: use_range failure ESRCH [ 37.773117][ T496] rust_binder: use_range failure ESRCH [ 37.781016][ T495] rust_binder: 494:495 transaction call to 494:0 failed ESRCH, code 0 size 112-0 line process.rs:1128 [ 37.783833][ T496] rust_binder: 494:496 transaction call to 494:0 failed ESRCH, code 0 size 112-0 line process.rs:1128 [ 37.811116][ T312] rust_binder: 494: undelivered TRANSACTION_ERROR: 29201 [ 37.818734][ T312] rust_binder: 494: undelivered TRANSACTION_ERROR: 29201 [ 37.826097][ T499] binder: Bad value for 'max' [ 37.831156][ T498] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 37.882695][ T509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.891527][ T509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.900969][ T512] SELinux: policydb magic number 0x2c0 does not match expected magic number 0xf97cff8c [ 37.911377][ T512] SELinux: failed to load policy [ 38.114241][ T526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.122954][ T526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.157032][ T64] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 38.336802][ T532] overlayfs: missing 'lowerdir' [ 38.366705][ T534] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 38.637008][ T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 38.782024][ T10] usb 1-1: device descriptor read/64, error -71 [ 38.853250][ T560] overlayfs: missing 'lowerdir' [ 38.896292][ T566] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 39.144514][ T574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.153017][ T572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.154745][ T574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.165373][ T572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.176997][ T10] usb 1-1: device descriptor read/64, error -71 [ 39.417002][ T10] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 39.556997][ T10] usb 1-1: device descriptor read/64, error -71 [ 39.769682][ T582] kvm: kvm [581]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 39.778592][ T582] kvm: kvm [581]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 39.797001][ T10] usb 1-1: device descriptor read/64, error -71 [ 39.811106][ T582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.820226][ T582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.907086][ T10] usb usb1-port1: attempt power cycle [ 40.257002][ T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 40.277934][ T10] usb 1-1: device descriptor read/8, error -71 [ 40.400412][ T591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.409801][ T591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.418206][ T10] usb 1-1: device descriptor read/8, error -71 [ 40.430551][ T36] kauditd_printk_skb: 53 callbacks suppressed [ 40.430578][ T36] audit: type=1400 audit(1793357832.330:228): avc: denied { relabelfrom } for pid=590 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 40.452712][ T595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.87'. [ 40.467292][ T595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.87'. [ 40.473700][ T36] audit: type=1400 audit(1793357832.330:229): avc: denied { relabelto } for pid=590 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 40.479980][ T595] netlink: 'syz.3.87': attribute type 49 has an invalid length. [ 40.495534][ T36] audit: type=1400 audit(1793357832.340:230): avc: denied { write } for pid=594 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 40.560424][ T595] team_slave_1: entered promiscuous mode [ 40.566414][ T36] audit: type=1400 audit(1793357832.470:231): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 40.569081][ T595] team_slave_1: entered allmulticast mode [ 40.596278][ T36] audit: type=1400 audit(1793357832.500:232): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.618295][ T36] audit: type=1400 audit(1793357832.500:233): avc: denied { read } for pid=149 comm="dhcpcd" name="n508" dev="tmpfs" ino=761 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.640220][ T36] audit: type=1400 audit(1793357832.500:234): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n508" dev="tmpfs" ino=761 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.665363][ T36] audit: type=1400 audit(1793357832.510:235): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n508" dev="tmpfs" ino=761 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.695209][ T600] overlayfs: missing 'lowerdir' [ 40.700207][ T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 40.726835][ T603] overlayfs: failed to resolve './file1': -2 [ 40.728788][ T10] usb 1-1: device descriptor read/8, error -71 [ 40.746704][ T36] audit: type=1400 audit(1793357832.660:236): avc: denied { read } for pid=604 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.770042][ T36] audit: type=1400 audit(1793357832.660:237): avc: denied { open } for pid=604 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.871811][ T10] usb 1-1: device descriptor read/8, error -71 [ 40.987197][ T10] usb usb1-port1: unable to enumerate USB device [ 41.236989][ T311] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 41.387013][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 41.393482][ T311] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.403714][ T311] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.414718][ T311] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.424862][ T311] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 41.439728][ T311] usb 4-1: config 0 interface 0 has no altsetting 0 [ 41.446386][ T311] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 41.455786][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.471614][ T311] usb 4-1: config 0 descriptor?? [ 41.491053][ T638] sd 0:0:1:0: PR command failed: 1026 [ 41.496572][ T638] sd 0:0:1:0: Sense Key : 0x5 [current] [ 41.502625][ T638] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 41.554589][ T643] overlayfs: missing 'lowerdir' [ 41.592038][ T645] overlayfs: failed to resolve './file1': -2 [ 41.628053][ T648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.637123][ T648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.875412][ T654] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.888893][ T311] usbhid 4-1:0.0: can't add hid device: -71 [ 41.898292][ T311] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 41.910448][ T311] usb 4-1: USB disconnect, device number 5 [ 41.924570][ T658] process 'syz.2.103' launched './file0' with NULL argv: empty string added [ 41.946997][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 41.957826][ T660] input: syz0 as /devices/virtual/input/input5 [ 41.964262][ T660] FAULT_INJECTION: forcing a failure. [ 41.964262][ T660] name failslab, interval 1, probability 0, space 0, times 1 [ 41.977317][ T660] CPU: 0 UID: 0 PID: 660 Comm: syz.2.104 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 41.977342][ T660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 41.977358][ T660] Call Trace: [ 41.977364][ T660] [ 41.977370][ T660] __dump_stack+0x21/0x30 [ 41.977431][ T660] dump_stack_lvl+0x140/0x1c0 [ 41.977473][ T660] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.977497][ T660] ? ida_alloc_range+0xa44/0xa80 [ 41.977526][ T660] dump_stack+0x19/0x20 [ 41.977549][ T660] should_fail_ex+0x3c2/0x510 [ 41.977565][ T660] should_failslab+0xac/0x100 [ 41.977581][ T660] __kmalloc_cache_noprof+0x41/0x470 [ 41.977603][ T660] ? __kasan_check_write+0x18/0x20 [ 41.977623][ T660] ? evdev_connect+0x99/0x4c0 [ 41.977647][ T660] evdev_connect+0x99/0x4c0 [ 41.977668][ T660] ? input_match_device_id+0x5d9/0x6d0 [ 41.977691][ T660] input_register_device+0xce6/0x1080 [ 41.977717][ T660] uinput_create_device+0x416/0x670 [ 41.977742][ T660] uinput_ioctl_handler+0x3ea/0x1360 [ 41.977766][ T660] ? uinput_release+0x70/0x70 [ 41.977791][ T660] ? __fget_files+0x2bc/0x330 [ 41.977806][ T660] uinput_ioctl+0x2c/0x40 [ 41.977829][ T660] ? __cfi_uinput_ioctl+0x10/0x10 [ 41.977851][ T660] __se_sys_ioctl+0x123/0x1b0 [ 41.977867][ T660] __x64_sys_ioctl+0x7f/0xa0 [ 41.977881][ T660] x64_sys_call+0x1878/0x2ee0 [ 41.977897][ T660] do_syscall_64+0x57/0xf0 [ 41.977913][ T660] ? clear_bhb_loop+0x50/0xa0 [ 41.977935][ T660] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.977956][ T660] RIP: 0033:0x7f67ecb9f559 [ 41.977975][ T660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.977988][ T660] RSP: 002b:00007f67eda5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 41.978013][ T660] RAX: ffffffffffffffda RBX: 00007f67ece25fa0 RCX: 00007f67ecb9f559 [ 41.978026][ T660] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 41.978036][ T660] RBP: 00007f67ecc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 41.978047][ T660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.978056][ T660] R13: 00007f67ece26038 R14: 00007f67ece25fa0 R15: 00007ffcc07bcd38 [ 41.978071][ T660] [ 41.978092][ T660] input: failed to attach handler evdev to device input5, error: -12 [ 42.261882][ T667] overlayfs: failed to resolve './file1': -2 [ 42.289005][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 42.314398][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.326461][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.336399][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 42.351316][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 42.360825][ T10] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 42.369425][ T671] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.369836][ T10] usb 1-1: Manufacturer: syz [ 42.391747][ T10] usb 1-1: config 0 descriptor?? [ 42.419904][ T671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.428503][ T671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.706976][ T575] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 42.800951][ T10] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 42.808470][ T10] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 42.817239][ T10] appleir 0003:05AC:8243.0004: hiddev98,hidraw2: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 42.878186][ T575] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 42.888097][ T575] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 36, changing to 7 [ 42.899259][ T575] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 18095, setting to 1024 [ 42.912103][ T575] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 42.921342][ T575] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.929470][ T575] usb 4-1: Product: syz [ 42.933768][ T575] usb 4-1: Manufacturer: syz [ 42.943827][ T575] usb 4-1: SerialNumber: syz [ 42.949782][ T575] usb 4-1: config 0 descriptor?? [ 42.956661][ T575] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 39, bLength 9, bSynchAddress 24 [ 42.967496][ T684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.976466][ T684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.258316][ T695] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 43.317105][ T64] usb 3-1: device descriptor read/64, error -110 [ 43.344811][ T698] usb usb8: usbfs: process 698 (syz.2.117) did not claim interface 0 before use [ 43.502285][ T711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.510922][ T711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.549363][ T715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.557895][ T64] usb 3-1: device descriptor read/64, error -32 [ 43.564406][ T715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.678493][ T575] usb 4-1: USB disconnect, device number 6 [ 43.691541][ T366] udevd[366]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.720464][ T711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.731880][ T711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.738677][ T717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.123'. [ 43.746884][ T711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.758765][ T711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.797051][ T64] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 43.936965][ T64] usb 3-1: device descriptor read/64, error -32 [ 43.967029][ T725] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 43.999818][ T728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.009478][ T728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.018462][ T728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.028638][ T728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.176971][ T64] usb 3-1: device descriptor read/64, error -32 [ 44.287054][ T575] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 44.323805][ T741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.335336][ T741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.357045][ T64] raw-gadget.0 gadget.2: failed to queue resume event [ 44.427046][ T64] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 44.467210][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 44.474695][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 44.482407][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 44.489576][ T64] usb 3-1: device descriptor read/8, error -32 [ 44.498576][ T575] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 44.500777][ T754] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 44.510932][ T575] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.518871][ T754] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 44.531749][ T575] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.538771][ T754] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 44.549203][ T575] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 44.570649][ T575] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 44.580245][ T575] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 44.588850][ T575] usb 4-1: Manufacturer: syz [ 44.597907][ T575] usb 4-1: config 0 descriptor?? [ 44.626016][ T759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.634992][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 44.642412][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 44.649750][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 44.657183][ T64] usb 3-1: device descriptor read/8, error -32 [ 44.657203][ T759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.672140][ T762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.682151][ T762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.693324][ T761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.137'. [ 44.767038][ T64] raw-gadget.0 gadget.2: failed to queue suspend event [ 44.774124][ T64] raw-gadget.0 gadget.2: failed to queue reset event [ 44.847048][ T64] raw-gadget.0 gadget.2: failed to queue resume event [ 44.906990][ T64] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 44.927162][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 44.934912][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 44.942368][ T766] FAULT_INJECTION: forcing a failure. [ 44.942368][ T766] name failslab, interval 1, probability 0, space 0, times 0 [ 44.942508][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 44.955322][ T766] CPU: 1 UID: 0 PID: 766 Comm: syz.1.139 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 44.955400][ T766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 44.955452][ T766] Call Trace: [ 44.955474][ T766] [ 44.955495][ T766] __dump_stack+0x21/0x30 [ 44.955590][ T766] dump_stack_lvl+0x140/0x1c0 [ 44.955672][ T766] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.955763][ T766] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 44.955838][ T766] dump_stack+0x19/0x20 [ 44.955918][ T766] should_fail_ex+0x3c2/0x510 [ 44.955986][ T766] should_failslab+0xac/0x100 [ 44.956039][ T766] kmem_cache_alloc_noprof+0x42/0x410 [ 44.956116][ T766] ? __kernfs_new_node+0xf1/0x740 [ 44.956179][ T766] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 44.956245][ T766] __kernfs_new_node+0xf1/0x740 [ 44.956298][ T766] ? __kasan_check_write+0x18/0x20 [ 44.956367][ T766] ? kernfs_new_node+0x280/0x280 [ 44.956426][ T766] ? down_write+0xee/0x2b0 [ 44.956521][ T766] ? __cfi_down_write+0x10/0x10 [ 44.956620][ T766] ? __kasan_check_write+0x18/0x20 [ 44.956692][ T766] ? up_write+0x66/0x280 [ 44.956756][ T766] ? kernfs_activate+0x1ee/0x200 [ 44.956818][ T766] kernfs_new_node+0x154/0x280 [ 44.956878][ T766] __kernfs_create_file+0x52/0x280 [ 44.956952][ T766] sysfs_add_file_mode_ns+0x1d2/0x280 [ 44.957031][ T766] internal_create_group+0x66c/0xe70 [ 44.957115][ T766] ? sysfs_create_group+0x40/0x40 [ 44.957196][ T766] ? device_add_attrs+0x72d/0x850 [ 44.957272][ T766] ? device_add_class_symlinks+0x260/0x260 [ 44.957346][ T766] sysfs_create_group+0x23/0x40 [ 44.957430][ T766] dpm_sysfs_add+0x6e/0x280 [ 44.957494][ T766] device_add+0x521/0xbf0 [ 44.957565][ T766] device_create_groups_vargs+0x1b0/0x2c0 [ 44.957652][ T766] device_create+0xfe/0x170 [ 44.957735][ T766] ? __cfi_device_create+0x10/0x10 [ 44.957818][ T766] bdi_register_va+0x94/0x640 [ 44.957902][ T766] ? bdi_alloc+0x111/0x1d0 [ 44.957986][ T766] super_setup_bdi_name+0xf6/0x210 [ 44.958069][ T766] ? _raw_spin_lock+0x92/0x120 [ 44.958145][ T766] ? __cfi_super_setup_bdi_name+0x10/0x10 [ 44.958256][ T766] ? _raw_spin_unlock+0x45/0x60 [ 44.958317][ T766] ? fuse_dev_install+0x17a/0x1b0 [ 44.958381][ T766] fuse_fill_super_common+0x6d1/0x1450 [ 44.958451][ T766] ? __cfi_fuse_fill_super_common+0x10/0x10 [ 44.958514][ T766] ? _raw_spin_lock+0x92/0x120 [ 44.958566][ T766] ? __cfi__raw_spin_lock+0x10/0x10 [ 44.958628][ T766] ? __kasan_check_write+0x18/0x20 [ 44.958699][ T766] ? shrinker_register+0x162/0x220 [ 44.958794][ T766] fuse_fill_super+0x71/0x250 [ 44.958865][ T766] get_tree_nodev+0xcb/0x170 [ 44.958928][ T766] ? __cfi_fuse_fill_super+0x10/0x10 [ 44.959003][ T766] fuse_get_tree+0x2cb/0x640 [ 44.959067][ T766] vfs_get_tree+0x9e/0x290 [ 44.959146][ T766] do_new_mount+0x251/0xb40 [ 44.959219][ T766] ? security_capable+0x44/0x130 [ 44.959320][ T766] path_mount+0x66a/0xff0 [ 44.959414][ T766] ? putname+0x113/0x150 [ 44.959495][ T766] __se_sys_mount+0x2bf/0x480 [ 44.959571][ T766] ? __x64_sys_mount+0xf0/0xf0 [ 44.959651][ T766] ? __kasan_check_write+0x18/0x20 [ 44.959722][ T766] ? fpregs_restore_userregs+0x11c/0x260 [ 44.959806][ T766] __x64_sys_mount+0xc3/0xf0 [ 44.959887][ T766] x64_sys_call+0x2021/0x2ee0 [ 44.959949][ T766] do_syscall_64+0x57/0xf0 [ 44.960011][ T766] ? clear_bhb_loop+0x50/0xa0 [ 44.960085][ T766] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.960162][ T766] RIP: 0033:0x7f995319f559 [ 44.960206][ T766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.960249][ T766] RSP: 002b:00007f9954031028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 44.960311][ T766] RAX: ffffffffffffffda RBX: 00007f9953425fa0 RCX: 00007f995319f559 [ 44.960353][ T766] RDX: 00002000000070c0 RSI: 0000200000007080 RDI: 0000000000000000 [ 44.960393][ T766] RBP: 00007f9953236b20 R08: 0000200000007100 R09: 0000000000000000 [ 44.960426][ T766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.960465][ T766] R13: 00007f9953426038 R14: 00007f9953425fa0 R15: 00007fff65061978 [ 44.960516][ T766] [ 44.972138][ T766] FAULT_INJECTION: forcing a failure. [ 44.972138][ T766] name failslab, interval 1, probability 0, space 0, times 0 [ 44.980054][ T64] usb 3-1: device descriptor read/8, error -32 [ 44.984512][ T766] CPU: 1 UID: 0 PID: 766 Comm: syz.1.139 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 44.984599][ T766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 44.984639][ T766] Call Trace: [ 44.984660][ T766] [ 44.984681][ T766] __dump_stack+0x21/0x30 [ 44.984771][ T766] dump_stack_lvl+0x140/0x1c0 [ 44.984849][ T766] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.984941][ T766] dump_stack+0x19/0x20 [ 44.985026][ T766] should_fail_ex+0x3c2/0x510 [ 44.985097][ T766] should_failslab+0xac/0x100 [ 44.985169][ T766] kmem_cache_alloc_noprof+0x42/0x410 [ 44.985266][ T766] ? security_inode_alloc+0x51/0x230 [ 44.985330][ T766] security_inode_alloc+0x51/0x230 [ 44.985384][ T766] inode_init_always_gfp+0x756/0x9e0 [ 44.985445][ T766] alloc_inode+0xc5/0x270 [ 44.985509][ T766] new_inode+0x25/0x1e0 [ 44.985567][ T766] ? start_creating+0x1fb/0x310 [ 44.985640][ T766] ? debugfs_create_dir+0x20/0x470 [ 44.985726][ T766] debugfs_create_dir+0xfa/0x470 [ 44.985807][ T766] bdi_register_va+0x262/0x640 [ 44.985877][ T766] super_setup_bdi_name+0xf6/0x210 [ 44.985957][ T766] ? _raw_spin_lock+0x92/0x120 [ 44.986019][ T766] ? __cfi_super_setup_bdi_name+0x10/0x10 [ 44.986094][ T766] ? _raw_spin_unlock+0x45/0x60 [ 44.986149][ T766] ? fuse_dev_install+0x17a/0x1b0 [ 44.986226][ T766] fuse_fill_super_common+0x6d1/0x1450 [ 44.986292][ T766] ? __cfi_fuse_fill_super_common+0x10/0x10 [ 44.986355][ T766] ? _raw_spin_lock+0x92/0x120 [ 44.986409][ T766] ? __cfi__raw_spin_lock+0x10/0x10 [ 44.986490][ T766] ? __kasan_check_write+0x18/0x20 [ 44.986568][ T766] ? shrinker_register+0x162/0x220 [ 44.986648][ T766] fuse_fill_super+0x71/0x250 [ 44.986721][ T766] get_tree_nodev+0xcb/0x170 [ 44.986783][ T766] ? __cfi_fuse_fill_super+0x10/0x10 [ 44.986854][ T766] fuse_get_tree+0x2cb/0x640 [ 44.986916][ T766] vfs_get_tree+0x9e/0x290 [ 44.986943][ T766] do_new_mount+0x251/0xb40 [ 44.986988][ T766] ? security_capable+0x44/0x130 [ 44.987106][ T766] path_mount+0x66a/0xff0 [ 44.987190][ T766] ? putname+0x113/0x150 [ 44.987294][ T766] __se_sys_mount+0x2bf/0x480 [ 44.987371][ T766] ? __x64_sys_mount+0xf0/0xf0 [ 44.987451][ T766] ? __kasan_check_write+0x18/0x20 [ 44.987524][ T766] ? fpregs_restore_userregs+0x11c/0x260 [ 44.987605][ T766] __x64_sys_mount+0xc3/0xf0 [ 44.987680][ T766] x64_sys_call+0x2021/0x2ee0 [ 44.987717][ T766] do_syscall_64+0x57/0xf0 [ 44.987766][ T766] ? clear_bhb_loop+0x50/0xa0 [ 44.987854][ T766] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.987935][ T766] RIP: 0033:0x7f995319f559 [ 44.987981][ T766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.988032][ T766] RSP: 002b:00007f9954031028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 44.988093][ T766] RAX: ffffffffffffffda RBX: 00007f9953425fa0 RCX: 00007f995319f559 [ 44.988134][ T766] RDX: 00002000000070c0 RSI: 0000200000007080 RDI: 0000000000000000 [ 44.988175][ T766] RBP: 00007f9953236b20 R08: 0000200000007100 R09: 0000000000000000 [ 44.988225][ T766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.988258][ T766] R13: 00007f9953426038 R14: 00007f9953425fa0 R15: 00007fff65061978 [ 44.988310][ T766] [ 44.988535][ T766] debugfs: out of free dentries, can not create directory '0:49' [ 45.024835][ T575] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 45.736492][ T575] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 45.747141][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 45.754455][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 45.761841][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 45.769017][ T64] usb 3-1: device descriptor read/8, error -32 [ 45.781253][ T575] appleir 0003:05AC:8243.0005: hiddev99,hidraw3: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 45.800114][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 45.800133][ T36] audit: type=1400 audit(1793358097.769:279): avc: denied { wake_alarm } for pid=772 comm="syz.2.141" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.809382][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 45.850319][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 45.860318][ T774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.869676][ T774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.877174][ T64] raw-gadget.0 gadget.2: failed to queue suspend event [ 45.891406][ T36] audit: type=1400 audit(1793358097.859:280): avc: denied { create } for pid=773 comm="syz.0.140" name="dm0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 45.910313][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 45.913044][ T387] usb 3-1: USB disconnect, device number 2 [ 45.929558][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 45.938731][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 45.947987][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 45.957476][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 45.966607][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 45.973180][ T387] raw-gadget.0 gadget.2: failed to queue reset event [ 45.976972][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 45.990975][ T36] audit: type=1400 audit(1793358097.859:281): avc: denied { read write } for pid=773 comm="syz.0.140" name="dm0" dev="tmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 45.991441][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.023408][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.034361][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.047621][ T785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.048812][ T36] audit: type=1400 audit(1793358097.859:282): avc: denied { open } for pid=773 comm="syz.0.140" path="/37/dm0" dev="tmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 46.067657][ T785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.090231][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.097523][ T387] raw-gadget.0 gadget.2: failed to queue resume event [ 46.103290][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.116300][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.125550][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.132309][ T36] audit: type=1400 audit(1793358097.989:283): avc: denied { lock } for pid=780 comm="syz.1.143" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 46.135887][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.157492][ T387] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 46.173902][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 46.174480][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.182013][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 46.191417][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.198024][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 46.207420][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.213022][ T387] raw-gadget.0 gadget.2: failed to queue reset event [ 46.230266][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.239672][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.249386][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.258938][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.267091][ T787] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 46.269511][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.277345][ T787] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 46.286676][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.293878][ T787] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 46.305736][ T387] raw-gadget.0 gadget.2: failed to queue resume event [ 46.317671][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.326857][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.336482][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.347215][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.356979][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.366372][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.375692][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.385070][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.393815][ T387] usb 3-1: device descriptor read/64, error -32 [ 46.401503][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.411242][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.421051][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.430333][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.439672][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.448990][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.458716][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.468071][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.477474][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.481992][ T792] FAULT_INJECTION: forcing a failure. [ 46.481992][ T792] name failslab, interval 1, probability 0, space 0, times 0 [ 46.488239][ T775] 9pnet_fd: p9_fd_create_tcp (775): problem connecting socket to 127.0.0.1 [ 46.504491][ T792] CPU: 1 UID: 0 PID: 792 Comm: syz.1.147 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 46.504602][ T792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 46.504644][ T792] Call Trace: [ 46.504663][ T792] [ 46.504685][ T792] __dump_stack+0x21/0x30 [ 46.504789][ T792] dump_stack_lvl+0x140/0x1c0 [ 46.504876][ T792] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.504967][ T792] ? security_file_alloc+0x49/0x220 [ 46.505045][ T792] dump_stack+0x19/0x20 [ 46.505129][ T792] should_fail_ex+0x3c2/0x510 [ 46.505193][ T792] should_failslab+0xac/0x100 [ 46.505257][ T792] kmem_cache_alloc_noprof+0x42/0x410 [ 46.505341][ T792] ? alloc_file_pseudo+0x191/0x1f0 [ 46.505404][ T792] ? alloc_empty_file+0xbf/0x270 [ 46.505475][ T792] alloc_empty_file+0xbf/0x270 [ 46.505540][ T792] ? __mutex_init+0xa6/0x1a0 [ 46.505604][ T792] alloc_file_clone+0x5a/0xe0 [ 46.505666][ T792] create_pipe_files+0x3bf/0x6c0 [ 46.505758][ T792] __do_pipe_flags+0x50/0x2f0 [ 46.505869][ T792] do_pipe2+0xab/0x190 [ 46.505967][ T792] ? xfd_validate_state+0x68/0x140 [ 46.506048][ T792] ? pipe_fcntl+0x520/0x520 [ 46.506134][ T792] __x64_sys_pipe2+0x5e/0x70 [ 46.506211][ T792] x64_sys_call+0x8be/0x2ee0 [ 46.506273][ T792] do_syscall_64+0x57/0xf0 [ 46.506337][ T792] ? clear_bhb_loop+0x50/0xa0 [ 46.506420][ T792] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.506494][ T792] RIP: 0033:0x7f995319f559 [ 46.506548][ T792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.506597][ T792] RSP: 002b:00007f9954031028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 46.506660][ T792] RAX: ffffffffffffffda RBX: 00007f9953425fa0 RCX: 00007f995319f559 [ 46.506703][ T792] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 00002000000009c0 [ 46.506744][ T792] RBP: 00007f9953236b20 R08: 0000000000000000 R09: 0000000000000000 [ 46.506784][ T792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.506818][ T792] R13: 00007f9953426038 R14: 00007f9953425fa0 R15: 00007fff65061978 [ 46.506869][ T792] [ 46.565614][ T36] audit: type=1400 audit(1793358098.499:284): avc: denied { unlink } for pid=298 comm="syz-executor" name="dm0" dev="tmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 46.568619][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 46.604864][ T36] audit: type=1400 audit(1793358098.539:285): avc: granted { setsecparam } for pid=795 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 46.609785][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 46.776372][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 46.783864][ T387] raw-gadget.0 gadget.2: failed to queue reset event [ 46.807938][ T36] audit: type=1400 audit(1793358098.779:286): avc: denied { connect } for pid=800 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.835695][ T809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.844338][ T809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.856979][ T387] raw-gadget.0 gadget.2: failed to queue resume event [ 46.873412][ T36] audit: type=1400 audit(1793358098.839:287): avc: granted { setsecparam } for pid=813 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 46.891850][ T821] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 46.901112][ T821] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 46.909453][ T821] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 46.917606][ T387] usb 3-1: device descriptor read/64, error -32 [ 47.035963][ T387] raw-gadget.0 gadget.2: failed to queue suspend event [ 47.043074][ T387] raw-gadget.0 gadget.2: failed to queue reset event [ 47.126996][ T387] raw-gadget.0 gadget.2: failed to queue resume event [ 47.148604][ T840] netlink: 'syz.1.159': attribute type 4 has an invalid length. [ 47.164069][ T838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.169749][ T840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'. [ 47.176233][ T838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.187460][ T387] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 47.198661][ T840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.207225][ T36] audit: type=1400 audit(1793358099.169:288): avc: denied { write } for pid=839 comm="syz.1.159" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.231137][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 47.237671][ T840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.238607][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 47.253181][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 47.260377][ T387] raw-gadget.0 gadget.2: failed to queue reset event [ 47.337025][ T387] raw-gadget.0 gadget.2: failed to queue resume event [ 47.394500][ T843] sd 0:0:1:0: PR command failed: 1026 [ 47.400022][ T843] sd 0:0:1:0: Sense Key : 0x5 [current] [ 47.405803][ T843] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 47.407081][ T387] usb 3-1: device descriptor read/64, error -32 [ 47.437384][ T846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.449463][ T846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.527157][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 47.534470][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 47.541748][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 47.548906][ T387] raw-gadget.0 gadget.2: failed to queue reset event [ 47.617006][ T387] raw-gadget.0 gadget.2: failed to queue resume event [ 47.684765][ T387] usb 3-1: device descriptor read/64, error -32 [ 47.763912][ T852] overlayfs: missing 'lowerdir' [ 47.796986][ T387] raw-gadget.0 gadget.2: failed to queue suspend event [ 47.805304][ T387] usb usb3-port1: attempt power cycle [ 47.811014][ T387] raw-gadget.0 gadget.2: failed to queue disconnect event [ 47.819545][ T387] raw-gadget.0 gadget.2: failed to queue reset event [ 47.838776][ T862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.840785][ T863] overlayfs: failed to resolve './bus': -2 [ 47.853028][ T862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.881987][ T867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.890615][ T868] sd 0:0:1:0: PR command failed: 1026 [ 47.896030][ T868] sd 0:0:1:0: Sense Key : 0x5 [current] [ 47.899740][ T867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.902044][ T387] raw-gadget.0 gadget.2: failed to queue resume event [ 47.916348][ T868] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 47.928095][ T387] raw-gadget.0 gadget.2: failed to queue reset event [ 48.042790][ T880] overlayfs: missing 'lowerdir' [ 48.066307][ T882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.075025][ T882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.147003][ T387] raw-gadget.0 gadget.2: failed to queue resume event [ 48.207119][ T387] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 48.237156][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 48.244482][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 48.251793][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 48.258964][ T387] usb 3-1: device descriptor read/8, error -32 [ 48.377481][ T885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.386074][ T885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.388195][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 48.401322][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 48.409057][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 48.416337][ T387] usb 3-1: device descriptor read/8, error -32 [ 48.470852][ T890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.176'. [ 48.479857][ T890] sit0: entered promiscuous mode [ 48.496966][ T892] overlayfs: failed to resolve './bus': -2 [ 48.527005][ T387] raw-gadget.0 gadget.2: failed to queue suspend event [ 48.534979][ T897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.543641][ T897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.544209][ T387] raw-gadget.0 gadget.2: failed to queue reset event [ 48.599788][ T299] ------------[ cut here ]------------ [ 48.605340][ T299] WARNING: CPU: 1 PID: 299 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 48.613335][ T299] Modules linked in: [ 48.617305][ T299] CPU: 1 UID: 0 PID: 299 Comm: syz-executor Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 48.627120][ T387] raw-gadget.0 gadget.2: failed to queue resume event [ 48.629066][ T299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 48.645947][ T299] RIP: 0010:drop_nlink+0xce/0x110 [ 48.651033][ T299] Code: 04 00 00 be 08 00 00 00 e8 8f 08 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 e2 74 94 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 48.670707][ T299] RSP: 0018:ffffc9000120fc68 EFLAGS: 00010293 [ 48.676978][ T299] RAX: ffffffff81f4e0ee RBX: ffff888135c9a700 RCX: ffff88811fb13b40 [ 48.684979][ T299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.693010][ T299] RBP: ffffc9000120fc90 R08: 0000000000000003 R09: 0000000000000004 [ 48.701043][ T299] R10: dffffc0000000000 R11: fffff52000241f84 R12: dffffc0000000000 [ 48.707095][ T387] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 48.709082][ T299] R13: 1ffff11026b934e9 R14: ffff888135c9a748 R15: 0000000000000000 [ 48.724589][ T299] FS: 0000555582e04500(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 48.733575][ T299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.737326][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 48.740232][ T299] CR2: 0000555582e2f998 CR3: 000000010525e000 CR4: 00000000003526b0 [ 48.748100][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 48.755201][ T299] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 48.762682][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 48.770312][ T299] DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 48.777714][ T387] usb 3-1: device descriptor read/8, error -32 [ 48.785308][ T299] Call Trace: [ 48.785319][ T299] [ 48.785329][ T299] simple_rmdir+0x152/0x260 [ 48.802316][ T299] vfs_rmdir+0x3de/0x560 [ 48.806611][ T299] incfs_kill_sb+0x102/0x220 [ 48.811297][ T299] deactivate_locked_super+0xd5/0x270 [ 48.817043][ T299] deactivate_super+0xb8/0xe0 [ 48.821768][ T299] cleanup_mnt+0x438/0x4d0 [ 48.826236][ T299] __cleanup_mnt+0x1d/0x40 [ 48.830769][ T299] task_work_run+0x1e8/0x260 [ 48.835402][ T299] ? __cfi_task_work_run+0x10/0x10 [ 48.840576][ T299] ? __x64_sys_umount+0x12e/0x180 [ 48.845649][ T299] ? __cfi___x64_sys_umount+0x10/0x10 [ 48.851126][ T299] ? __kasan_check_read+0x15/0x20 [ 48.856195][ T299] resume_user_mode_work+0x35/0x50 [ 48.861430][ T299] syscall_exit_to_user_mode+0x63/0xb0 [ 48.866972][ T299] do_syscall_64+0x63/0xf0 [ 48.871428][ T299] ? clear_bhb_loop+0x50/0xa0 [ 48.876138][ T299] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.882131][ T299] RIP: 0033:0x7f67ecba0797 [ 48.886572][ T299] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 48.906242][ T299] RSP: 002b:00007ffcc07baeb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 48.914728][ T299] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f67ecba0797 [ 48.922782][ T299] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc07baf70 [ 48.927255][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 48.930849][ T299] RBP: 00007ffcc07baf70 R08: 00007ffcc07bbf70 R09: 00000000ffffffff [ 48.938803][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 48.945845][ T299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcc07bc060 [ 48.961023][ T299] R13: 00007f67ecc35f63 R14: 000000000000bdbe R15: 00007ffcc07bd130 [ 48.969067][ T299] [ 48.972017][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 48.972115][ T299] ---[ end trace 0000000000000000 ]--- [ 48.980020][ T387] usb 3-1: device descriptor read/8, error -32 [ 48.990966][ T299] ================================================================== [ 48.999048][ T299] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 49.005307][ T299] Write of size 4 at addr 0000000000000168 by task syz-executor/299 [ 49.013329][ T299] [ 49.015686][ T299] CPU: 0 UID: 0 PID: 299 Comm: syz-executor Tainted: G W syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 49.015722][ T299] Tainted: [W]=WARN [ 49.015727][ T299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 49.015739][ T299] Call Trace: [ 49.015746][ T299] [ 49.015753][ T299] __dump_stack+0x21/0x30 [ 49.015780][ T299] dump_stack_lvl+0x140/0x1c0 [ 49.015804][ T299] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.015829][ T299] print_report+0x3d/0x70 [ 49.015853][ T299] kasan_report+0x162/0x1a0 [ 49.015869][ T299] ? ihold+0x24/0x70 [ 49.015891][ T299] ? ihold+0x24/0x70 [ 49.015904][ T299] kasan_check_range+0x25a/0x2b0 [ 49.015921][ T299] __kasan_check_write+0x18/0x20 [ 49.015943][ T299] ihold+0x24/0x70 [ 49.015957][ T299] vfs_rmdir+0x25c/0x560 [ 49.015975][ T299] incfs_kill_sb+0x102/0x220 [ 49.015998][ T299] deactivate_locked_super+0xd5/0x270 [ 49.016017][ T299] deactivate_super+0xb8/0xe0 [ 49.016034][ T299] cleanup_mnt+0x438/0x4d0 [ 49.016050][ T299] __cleanup_mnt+0x1d/0x40 [ 49.016064][ T299] task_work_run+0x1e8/0x260 [ 49.016087][ T299] ? __cfi_task_work_run+0x10/0x10 [ 49.016108][ T299] ? __x64_sys_umount+0x12e/0x180 [ 49.016128][ T299] ? __cfi___x64_sys_umount+0x10/0x10 [ 49.016149][ T299] ? __kasan_check_read+0x15/0x20 [ 49.016170][ T299] resume_user_mode_work+0x35/0x50 [ 49.016189][ T299] syscall_exit_to_user_mode+0x63/0xb0 [ 49.016213][ T299] do_syscall_64+0x63/0xf0 [ 49.016229][ T299] ? clear_bhb_loop+0x50/0xa0 [ 49.016251][ T299] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.016272][ T299] RIP: 0033:0x7f67ecba0797 [ 49.016286][ T299] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 49.016299][ T299] RSP: 002b:00007ffcc07baeb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 49.016316][ T299] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f67ecba0797 [ 49.016327][ T299] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc07baf70 [ 49.016338][ T299] RBP: 00007ffcc07baf70 R08: 00007ffcc07bbf70 R09: 00000000ffffffff [ 49.016349][ T299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcc07bc060 [ 49.016360][ T299] R13: 00007f67ecc35f63 R14: 000000000000bdbe R15: 00007ffcc07bd130 [ 49.016375][ T299] [ 49.016381][ T299] ================================================================== [ 49.256505][ T299] Disabling lock debugging due to kernel taint [ 49.262845][ T299] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 49.270676][ T299] #PF: supervisor write access in kernel mode [ 49.276857][ T299] #PF: error_code(0x0002) - not-present page [ 49.282882][ T299] PGD 8000000110336067 P4D 8000000110336067 PUD 0 [ 49.289418][ T299] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 49.295496][ T299] CPU: 0 UID: 0 PID: 299 Comm: syz-executor Tainted: G B W syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 49.308619][ T299] Tainted: [B]=BAD_PAGE, [W]=WARN [ 49.313642][ T299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 49.323734][ T299] RIP: 0010:ihold+0x2a/0x70 [ 49.328264][ T299] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 cd 6b 94 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 4c ff ed ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 dd [ 49.347884][ T299] RSP: 0018:ffffc9000120fcc8 EFLAGS: 00010246 [ 49.353972][ T299] RAX: ffff88811fb13b00 RBX: 0000000000000000 RCX: ffff88811fb13b40 [ 49.361956][ T299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.369946][ T299] RBP: ffffc9000120fcd8 R08: ffffffff893cf947 R09: 1ffffffff1279f28 [ 49.377954][ T299] R10: dffffc0000000000 R11: fffffbfff1279f29 R12: 0000000000000000 [ 49.386052][ T299] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 49.394048][ T299] FS: 0000555582e04500(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 49.403099][ T299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.409709][ T299] CR2: 0000000000000168 CR3: 000000010525e000 CR4: 00000000003526b0 [ 49.417692][ T299] Call Trace: [ 49.420985][ T299] [ 49.423919][ T299] vfs_rmdir+0x25c/0x560 [ 49.428189][ T299] incfs_kill_sb+0x102/0x220 [ 49.432809][ T299] deactivate_locked_super+0xd5/0x270 [ 49.438218][ T299] deactivate_super+0xb8/0xe0 [ 49.442923][ T299] cleanup_mnt+0x438/0x4d0 [ 49.447347][ T299] __cleanup_mnt+0x1d/0x40 [ 49.451791][ T299] task_work_run+0x1e8/0x260 [ 49.456404][ T299] ? __cfi_task_work_run+0x10/0x10 [ 49.461533][ T299] ? __x64_sys_umount+0x12e/0x180 [ 49.466575][ T299] ? __cfi___x64_sys_umount+0x10/0x10 [ 49.471961][ T299] ? __kasan_check_read+0x15/0x20 [ 49.477008][ T299] resume_user_mode_work+0x35/0x50 [ 49.482159][ T299] syscall_exit_to_user_mode+0x63/0xb0 [ 49.487634][ T299] do_syscall_64+0x63/0xf0 [ 49.492066][ T299] ? clear_bhb_loop+0x50/0xa0 [ 49.496769][ T299] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.502674][ T299] RIP: 0033:0x7f67ecba0797 [ 49.507110][ T299] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 49.526728][ T299] RSP: 002b:00007ffcc07baeb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 49.535160][ T299] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f67ecba0797 [ 49.543157][ T299] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc07baf70 [ 49.551145][ T299] RBP: 00007ffcc07baf70 R08: 00007ffcc07bbf70 R09: 00000000ffffffff [ 49.559125][ T299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcc07bc060 [ 49.567119][ T299] R13: 00007f67ecc35f63 R14: 000000000000bdbe R15: 00007ffcc07bd130 [ 49.575100][ T299] [ 49.578129][ T299] Modules linked in: [ 49.582040][ T299] CR2: 0000000000000168 [ 49.586199][ T299] ---[ end trace 0000000000000000 ]--- [ 49.591681][ T299] RIP: 0010:ihold+0x2a/0x70 [ 49.596211][ T299] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 cd 6b 94 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 4c ff ed ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 dd [ 49.616001][ T299] RSP: 0018:ffffc9000120fcc8 EFLAGS: 00010246 [ 49.622179][ T299] RAX: ffff88811fb13b00 RBX: 0000000000000000 RCX: ffff88811fb13b40 [ 49.630166][ T299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.638174][ T299] RBP: ffffc9000120fcd8 R08: ffffffff893cf947 R09: 1ffffffff1279f28 [ 49.646156][ T299] R10: dffffc0000000000 R11: fffffbfff1279f29 R12: 0000000000000000 [ 49.654145][ T299] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 49.662127][ T299] FS: 0000555582e04500(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 49.671153][ T299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.677742][ T299] CR2: 0000000000000168 CR3: 000000010525e000 CR4: 00000000003526b0 [ 49.685737][ T299] Kernel panic - not syncing: Fatal exception [ 49.692488][ T299] Kernel Offset: disabled [ 49.696833][ T299] Rebooting in 86400 seconds..