last executing test programs: 4.647775621s ago: executing program 2 (id=214): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) clock_getres(0xfffffffffffffffd, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r1) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x140, 0x10, 0x1, 0x70bd2d, 0x1, {{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x1234, 0x32}, @in=@broadcast, {0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffb, 0xffffffffffffffff}, {}, {}, 0x0, 0x34ff, 0xa}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x57, 0x80, "00010203"}}]}, 0x140}}, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x20) (async) syz_ublk_setup_io_uring(0x7744, &(0x7f0000000040)={0x0, 0x93d1, 0x4000, 0x2, 0x1ba, 0x0, r2}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 4.640714851s ago: executing program 2 (id=215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xdddd0000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0xa, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0xfc, 0x2e, 0x4b}, {0x6000, 0x0, 0xb, 0x0, 0x3, 0x1, 0x1, 0xbf, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x2, 0xf, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xfd}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x8, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0x60000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x400, 0x7, 0xc5]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0xffff1800, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0x1, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x7, 0x15, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x9, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x8, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0x0, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x3, 0x5, '\x00', 0x4}, {0xf9, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0x5, 0x1, '\x00', 0x21}, {0x5, 0xec, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) 4.560919005s ago: executing program 2 (id=216): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f0000001080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x5fda9137}}]}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x26) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000140)={0x3, 0x0, 0x98, &(0x7f0000000040)={0x3, 0x3ff, 0xf}}) 4.437326731s ago: executing program 2 (id=217): rt_sigprocmask(0x1000000, &(0x7f0000000080)={[0x8]}, 0x0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'macvtap0\x00', 0x2}) fcntl$setsig(r0, 0xa, 0x14) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000140)) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="37000000110001000001800000000000100000000a0000002f44303023000000"], 0x20}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0xa, 0x20003) socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000100)=0x8, 0x4) socket$inet6(0xa, 0x2, 0x0) 4.091323927s ago: executing program 2 (id=219): clock_gettime(0x766293fdc5a3d1b3, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, 0x0) prlimit64(0x0, 0x8, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev_mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(0x4) modify_ldt$write2(0x11, &(0x7f0000000100)={0xb31, 0x20000000, 0x1000, 0x1}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file2\x00', 0x101) 3.776525162s ago: executing program 0 (id=225): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xdddd0000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0xa, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0xfc, 0x2e, 0x4b}, {0x6000, 0x0, 0xb, 0x0, 0x3, 0x1, 0x1, 0xbf, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x2, 0xf, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xfd}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x8, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0x60000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x400, 0x7, 0xc5]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0xffff1900, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0x1, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x7, 0x15, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x9, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x8, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0x0, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x3, 0x5, '\x00', 0x4}, {0xf9, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0x5, 0x1, '\x00', 0x21}, {0x5, 0xec, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) 3.616575619s ago: executing program 0 (id=228): read(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) syz_clone(0x68411, 0x0, 0x17, 0x0, 0x0, 0x0) syz_clone(0xf21e4000, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x3) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x1a012, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x22) write(r2, &(0x7f0000000000)='3', 0x4e) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000100)={'rose0\x00', 0x7}) unshare(0x60000600) 3.066027235s ago: executing program 0 (id=229): r0 = socket$inet6(0xa, 0x3, 0x2f) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="02031b00fbff100003006332c5ab00582fff0000004000000088a8ffffffffffff00ff020000000000000000000000000001"], 0x8a) 3.044505916s ago: executing program 0 (id=230): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0xd3cd, 0x4) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wake_unlock', 0x202, 0x0) copy_file_range(r1, 0x0, r1, &(0x7f0000000100)=0xf160, 0x4, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000002004e21e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000b700000000000000000000000000000000c116ad67360100000001"], 0x110) 2.984074229s ago: executing program 0 (id=231): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "62668d89ff4f2803", "fe128ea4a93b713cd2004d1b475b4cfdf2d62b6da34d8b04a5672eff1cbe2d03", "b47c7055", "973f3003a9268c3b"}, 0x38) writev(r3, &(0x7f0000010b40)=[{&(0x7f0000000140)='X', 0x1}], 0x1) splice(r3, 0x0, r2, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000440)=0x2, 0x4) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0xc4000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80605414, &(0x7f0000000180)) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "750600", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "ffffffffffffffff"}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1000003, 0x1010, r6, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendfile(r0, r6, &(0x7f00000000c0)=0x1, 0x7ff) ioctl$UBLK_U_CMD_GET_FEATURES(r6, 0x80207513, &(0x7f0000000040)={0x0, 0xffff, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) 1.912909079s ago: executing program 1 (id=235): mkdir(&(0x7f0000000300)='./bus\x00', 0x63) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x2b, 0x30, 0x0, 0x6, 0x2, 0x5a, 0xb, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) r1 = socket$inet6(0xa, 0x802, 0x0) socket$netlink(0x10, 0x3, 0x9) epoll_create1(0x0) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000440)={0x8cc, 0x1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r2 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$packet(r2, &(0x7f0000000180)='-', 0x5cc, 0x10, &(0x7f0000000040)={0x11, 0x1d, 0x0, 0x1, 0x6}, 0x14) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@verity_require}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) (async) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) (async) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x2b, 0x30, 0x0, 0x6, 0x2, 0x5a, 0xb, 0x2}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) (async) socket$inet6(0xa, 0x802, 0x0) (async) socket$netlink(0x10, 0x3, 0x9) (async) epoll_create1(0x0) (async) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000440)={0x8cc, 0x1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) socket$packet(0x11, 0x3, 0x300) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) sendto$packet(r2, &(0x7f0000000180)='-', 0x5cc, 0x10, &(0x7f0000000040)={0x11, 0x1d, 0x0, 0x1, 0x6}, 0x14) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@verity_require}]}) (async) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) (async) 1.882169991s ago: executing program 1 (id=236): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x44240, 0x128) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000013c0), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x24, r2, 0x601, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x8044) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) (async) clock_gettime(0x0, 0x0) (async) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2e, 0x74, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@new_dev={0x3, 0x4eb, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x82}}}, &(0x7f0000000400)=0x0) (async) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r6, 0x400, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_clone3(&(0x7f0000004300)={0x200000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) (async) syz_ublk_setup_queues(r0, r5, &(0x7f0000000440)={0x0, 0x3a0c, 0x20000, 0x0, 0x22d, 0x0, r0}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3247, 0x84, 0x2, 0x84, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc26a, 0x0, 0x3, 0x377, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5fc2, 0x10800, 0x1, 0x230, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2756, 0x80, 0x2, 0x2d5}}], 0x4, &(0x7f0000001980)={0x2e, 0x0, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x800}, 0x0, 0x0, '\x00', {0x4, 0x64e, 0x0, &(0x7f0000000980)=@buf_512="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"}}, &(0x7f0000001a00)) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) clock_getres(0xfffffffffffffffa, 0x0) (async) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c08c6e04702f1e977cf86c7df7138bc5b7df699e2b8b5268ca6c61e4a99b37d9f942c971b4f679dd2bee7bcd7c63f1f407ef09f5392e541b9d3ea0f440d7f5bd9b85f884e3c00da006e5726e33ee8b11d77df043bc17c6928b46b465c002188fdacd4cfa1771aace7e5a650e903773aa183d89a63"]) (async) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) 1.804117864s ago: executing program 1 (id=237): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0xfffe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x80800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x26) 1.189586524s ago: executing program 3 (id=241): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 'id0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async, rerun: 64) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000000c0), 0x2, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x4, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80800}, 0x850) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001100)={&(0x7f00000002c0)={0xe1c, r4, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x2}, @NL80211_ATTR_PEER_MEASUREMENTS={0x988, 0x111, 0x0, 0x1, {0x984, 0x5, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x20, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x3cc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffd}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ac}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x27c5ea1c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x166}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x34c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xca}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x158, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xba}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xcc6c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf0}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe57}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x779}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}]}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}]}, {0x1dc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xf4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6b}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36b}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x150}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x78, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8d}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x85fb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}]}, {0x368, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x1a0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x168, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x44, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}]}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x230, 0x111, 0x0, 0x1, {0x22c, 0x5, 0x0, 0x1, [{0x168, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x158, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x24}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd}]}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}]}]}, {0x80, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x247}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}]}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x248, 0x111, 0x0, 0x1, {0x244, 0x5, 0x0, 0x1, [{0x240, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x198, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x44, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}]}]}}]}, 0xe1c}}, 0x4000000) (async, rerun: 64) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f00000014c0)={0x5, &(0x7f0000001400)=[{0x3, 0xf9, &(0x7f0000001180)="12e80c02d3a8578f96a49b4e0aa548430015f6effe2bfb9590b24c929cd07da39d06e327b5a173f4ae2c8f160ed7dd9279a713850def8261d91b19566dadc72ba880fc1e236172d1b4411113bab7894fadf4252805a3797d355cc8dc17201a6f5709e772e03f0a92cdfc9caf60ccb90f94e9141c4309794d29bacb8592f954a636ad1ae591d080bb85f91467309fd2f6dfdfa5f218a352fb57e8064c12ca14506057c0309f200481f052c4ccd6522891c03d6ddbee3a083626107e4b79a262a11c34cde5eebd7abd636b90f0b29f41b7fcea5bf6d65cdba243044bbc88cfbc69baabae13847e14175d5cdcf86d20bf9700747e89a2a1d56c95", 0x1, 0x1}, {0x100, 0x85, &(0x7f0000001280)="4a3594b655efd594adbebaa02a7972e7b4fa5df895a5e4254b834a2f036c66df7f8c2b5cc996ea3051e5799f328114d54420a2933bd8743cc2823cf69f8c8dcd095112d06bfc8e5fef6f4c9dc54da6683301cf83c60ffcf81386f52d4bca04953430a20a26999d23634f20e76068f8a8664c497c955f1e1f2b29a7128cfbcd6fdc6a07a1b3", 0x1, 0x1}, {0x9, 0x3, &(0x7f0000001340)="65deb2", 0x1, 0x1}, {0x5, 0x0, &(0x7f0000001380), 0x0, 0x1}, {0x29dc, 0x40, &(0x7f00000013c0)="aa10bc4283faac2bb33e31b8e889006b20949fba900e8e26d204bca5dc56657a75ba72eb6f397e7367030a87fd2a02d8e44fe16388c69fabdd8a0da582064b25", 0x1, 0x1}]}) (rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001540), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000003640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003600)={&(0x7f0000001580)={0x2058, r6, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_OURS={0x201c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}, @ETHTOOL_A_LINKMODES_SPEED={0x8}]}, 0x2058}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000003680), r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003700)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000003800)=0xe8) statx(r0, &(0x7f0000003840)='./file0\x00', 0x1000, 0x8, &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) statx(0xffffffffffffffff, &(0x7f0000003980)='./file0\x00', 0x100, 0x80, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) lstat(&(0x7f0000003ac0)='./file0\x00', &(0x7f0000003b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000003b80)={0x0, 0x0, 0x0}, &(0x7f0000003bc0)=0xc) lstat(&(0x7f0000003c00)='./file0\x00', &(0x7f0000003c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000003cc0), &(0x7f0000003d00)=0x0, &(0x7f0000003d40)) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000003d80)='./file0\x00', &(0x7f0000003dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) (async) getgroups(0x3, &(0x7f0000003e40)=[0xee00, 0xffffffffffffffff, 0x0]) lstat(&(0x7f0000003e80)='./file0\x00', &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r0, &(0x7f0000003f40)='./file0\x00', 0x400, 0x100, &(0x7f0000003f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r1, &(0x7f00000036c0)='system.posix_acl_access\x00', &(0x7f0000004080)={{}, {0x1, 0x9}, [{0x2, 0x1, r8}, {0x2, 0x0, r9}], {0x4, 0x5}, [{0x8, 0x5, r10}, {0x8, 0x1, r11}, {0x8, 0x3, r12}, {0x8, 0x3, r13}, {0x8, 0x3, r14}, {0x8, 0x3, r15}, {0x8, 0x2, r16}, {0x8, 0x0, r17}, {0x8, 0x0, r18}], {0x10, 0x1}, {0x20, 0x5}}, 0x7c, 0x3) (async, rerun: 64) readlinkat(r0, &(0x7f0000004100)='./file1\x00', &(0x7f0000004140)=""/5, 0x5) (async, rerun: 64) r19 = open$dir(&(0x7f0000004200)='./file1\x00', 0x204242, 0x44) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000004180)='net_prio.ifpriomap\x00', &(0x7f00000041c0)='./file1\x00', r19) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000004380)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004340)={&(0x7f00000042c0)={0x54, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 1.160191305s ago: executing program 3 (id=242): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r2, 0x4068aea3, &(0x7f0000000440)={0xc1, 0x0, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x1c1082, 0x0) read$FUSE(r3, &(0x7f0000000f40)={0x2020}, 0x2020) r4 = memfd_secret(0x0) sendto$inet_nvme_pdu(r4, &(0x7f0000000000)=@data_h2c={{0x6, 0x7, 0x18, 0xf3, 0x135}, 0x3, 0x9, 0x8, 0x80000080, "b780e1bc"}, 0x73, 0x0, 0x0, 0x0) 1.072092179s ago: executing program 3 (id=243): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RLERRORu(r1, &(0x7f0000000140)={0x16, 0x7, 0x2, {{0x9, '/dev/kvm\x00'}, 0x3a}}, 0x16) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000040)={0xc0, 0x0, 0x200000}) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000180)={0x1, 0x1, 0xf, 0x80, 0x7, 0x0, 0x8, 0x8}) (async, rerun: 32) write(r4, &(0x7f00000000c0)='/,0x400000,0x4', 0xe) (rerun: 32) 1.069650489s ago: executing program 2 (id=244): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xb8, &(0x7f0000000380)={[{0x3f, 0x4e00, "2f16be18a6e0698c2ec47801ac9a164dbceff78c262447ab202548ce39b8a1441e399de7772cb7317a340c68aa1cfa28ca42f9acd28ba2cf708f000350fe3f"}, {0x44, 0x4e00, "3cf49b1d6b67df73cb5fe2c3b516a9e1810abc2784312e35e471a875e3010ad723a587ea04d2b1bb2a2af22fb6c01de6b81b5aae7a90f4d71789d73c9a122e37d0db3fa8"}, {0x20, 0x4e00, "6aa512313a026ef3dadec90e0206b165196219733bf0a2f5c004550a16fa9944"}, {0x2, 0x4e00, "97fb"}]}) syz_usb_connect$cdc_ncm(0x6, 0x95, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x2, 0x1, 0xe2, 0x0, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "0f"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x7fff, 0x800, 0x0, 0x6}, {0x6, 0x24, 0x1a, 0x2, 0x7}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x92}, @network_terminal={0x7, 0x24, 0xa, 0x7e, 0x0, 0x69, 0x2}, @country_functional={0xe, 0x24, 0x7, 0xff, 0x4e26, [0x8, 0x64fd, 0x6, 0x7ff]}, @obex={0x5, 0x24, 0x15, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0xe, 0x7, 0x9, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x2, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3b7, 0x90, 0x4, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0x6, 0x1}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0xf8, 0xb, 0x10, 0x10, 0x7}, 0x43, &(0x7f00000001c0)={0x5, 0xf, 0x43, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xf2, "066b89e36012d8329698bc9066012c69"}, @ssp_cap={0x24, 0x10, 0xa, 0xb, 0x6, 0x4, 0x0, 0x401, [0x3f3f, 0x3f30, 0xc0, 0x1fe000f, 0xc000, 0xc000]}, @ptm_cap={0x3}]}, 0x2, [{0x49, &(0x7f0000000240)=@string={0x49, 0x3, "d3eca5ca3f79e7d8bc53800b04d06577d11fe3e1a2a07927653656584fdc04687f4da799e6ad44e2f34b3501fa467773400c250a28ef38734849ef584c651b7ab52ce095f74724"}}, {0xd1, &(0x7f0000000440)=@string={0xd1, 0x3, "ebc697452a5b1820f0688bc67a5b2b7cb8806ebf96454d07367284017fef55a21094f5f844c4d1b2509c5f1801507935d698279e5d5035b9be3d2c813c4508353e1d8e7b4d780e10d13b98db72894776feafcc99d234655f8e6151c8845b21b4aac642ee4659db3b8880f766c7edea91aff2c63794f8960b490c72cdce49b1ac64f0d1c1131261615f3c4c32047f5768ed02408c5aed8ee998a89915c747cde5e1be654ef1f4191de75f3f7ac19f4619c3b8d4b665447732fbd330d42a3479ddff394c2b3174e4b3c5d3994af47f35"}}]}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000680)={0x10, &(0x7f0000000100)={0x40, 0x11, 0x87, "4970305f8a5acaa7d55cd81866f0185481fc08c2cb2200545c42ae9763b0495d806dcdc3fc47b8a0a795619685a1c9ab7d526b1e4024897b5592bbe6a1ab13e2a76278c04dd6273cd7da9f7827f3d888fc704906a5cf59be38d4b2967a10afde15257d74982991e8358123110775e7d2204ff7da994e876030057ecf70ae858a12ef798d146e56"}, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000300)={0x14, &(0x7f0000000000)={0x40, 0x23, 0x36, {0x36, 0x30, "87d7c9568556f08d424e0ce5c8c94923e28c78c72a8fe56acee3a30608f17c07fcb697f0e159734a5c85e4c008b2ebf3b1f25ed6"}}, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x1c, &(0x7f0000000580)={0x20, 0x7, 0xd3, "0e0605d12a987be7d018c8b5eb6a02e0606fa93cb89c572189c79bd1ea00075ff685d1808323248b70ce0ceff9e239eb4cd6296adcbbb4ce1bef085e683c214cfe1fdf18a6aa66f09e2f7f78d69bd4a5227a55aa12289ae5f4cdaac8d167b0ae36404c58930dcf7dcaea477f5e668d7524e81246fae7c85ea9120bf78d35d9073dfb891cb421f9788ff1849078475448071f8a7130ebd48730bfd38c01900e941fabba5d5d87cb76a00ed89eae042df33ca66f5895b2e1aadd47a318e736b22092ff0df2e3006b9a6448fbce54ebea206fd5f3"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x5}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.000459013s ago: executing program 1 (id=245): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x81}, {0x1290}]}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) futex(0x0, 0x9, 0x2, 0x0, 0x0, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000100)={0x4, 0xc, 0x7, 0x6, 0x2f}) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{0x2, 0x4, 0x6, 0x4}, {0x6, 0x59, 0x3, 0x6}, {0x1, 0x8b, 0x4, 0x385e}, {0x8, 0x5, 0x44, 0xa}, {0x7, 0x0, 0x4, 0x45bf}, {0x2d3f, 0xff, 0xd, 0x6}, {0x8, 0x4, 0xd5, 0x4}, {0x2200, 0xd, 0xfd, 0xfffff800}, {0x8000, 0xf8, 0x3f}]}) 985.567433ms ago: executing program 1 (id=246): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) 932.187836ms ago: executing program 1 (id=247): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000140)={0xda, 0xe, 0x3}) prlimit64(0x0, 0x8, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev_mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) close(0x4) modify_ldt$write2(0x11, &(0x7f0000000100)={0xb31, 0x20000000, 0x1000, 0x1}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 217.138819ms ago: executing program 3 (id=248): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) socket$igmp(0x2, 0x3, 0x2) 200.40759ms ago: executing program 3 (id=249): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x8080000, 0x8, 0x9, 0x3, 0xe5, 0x40, 0x3, 0x0, 0x30, 0x19}, {0x41000, 0x3000, 0xa, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3}, {0xdddd1000, 0xd000, 0xe, 0x5, 0x3, 0x2, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x82}, {0x6000, 0x8000000, 0x3, 0x5d, 0x4, 0x3f, 0x3, 0xfa, 0x80, 0xb, 0xe}, {0x0, 0x9000, 0x10, 0x1, 0x3, 0x7, 0xab, 0x8, 0x7, 0x83, 0xff, 0x82}, {0x60000, 0x80a0000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xf, 0x4, 0xfd}, {0x54000, 0xeeee0000, 0x4, 0x5, 0x9, 0x2, 0xb, 0x5, 0x5, 0x81, 0xff, 0x5}, {0xd000, 0x1000, 0xb, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x3, 0x9}, {0xb000, 0x2d}, {0x30000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x42024, 0x400000000000000b, 0x1, 0x70000, [0x6840000000000002, 0x7fffffffffffffff, 0x10de, 0xff]}) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './sys/bus/pci/devices/0000:00:03.0/remove', [{}]}, 0x2e) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) 84.006726ms ago: executing program 3 (id=250): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="12011001000000405804055000000000000109022400010000f07e0904000002030002000921fd7f000122eb0009058103"], 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) ptrace(0xffffffffffffffff, 0x0) (async) sendmsg$key(r1, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020200090d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000400000000030005000000000002000000ac1414aa000000000000000001001500080000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x814) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) fcntl$getflags(r3, 0x40a) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x118}}, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) (async) getsockopt$inet_tcp_int(r5, 0x6, 0x18, 0x0, &(0x7f0000000280)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r9) sendmsg$IEEE802154_LLSEC_LIST_KEY(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r10, 0x705, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4000810) (async) sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20061a04}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000cc7807175d22169ebcdd0031f002c824004f5a80f03cd24d7f9c435f9a61d3fc93900a408cbcbc48e047e948887d59a3af7c5c43eb043ea282bdefc5cb4ee9b328d68bb0f977be8e01cb3989c39afd1b16cb11234c5e62b68f4b1579cf194b3c92918c0ab6b97b2e103d07bca09a44adcfe6e75536bc46933ee89cb62b7daad6", @ANYRES16=r10, @ANYBLOB="040026bd7000fddbdf251f0000000a0001007770616e3300000008000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e30000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000040)=""/95) 0s ago: executing program 0 (id=251): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x27) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_usb_connect$uac1(0x2, 0xfc, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xea, 0x3, 0x1, 0xdb, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x4b}, [@feature_unit={0x9, 0x24, 0x6, 0x5, 0x4, 0x1, [0x6]}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x403, 0x3, 0x2, 0x7f}, @processing_unit={0xa, 0x24, 0x7, 0x2, 0x2, 0x1, "444516"}, @feature_unit={0x13, 0x24, 0x6, 0x1, 0x4, 0x6, [0x5, 0x2, 0x7, 0x7, 0x5, 0xa], 0xd8}, @processing_unit={0x9, 0x24, 0x7, 0x1, 0x0, 0x10, "5cff"}, @feature_unit={0x9, 0x24, 0x6, 0x4, 0x6, 0x1, [0x2], 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x8, 0xb284, 0x1, '?'}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xba3, 0x81, 0xf6, "c4b39b1787"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x6, 0xf, 0x7f, 0x1}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x1, 0x2, 0xe, 0x0, "c97df392ed"}, @as_header={0x7, 0x24, 0x1, 0xb, 0x4, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x5, 0x7, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x7, 0x4, {0x7, 0x25, 0x1, 0xc, 0x9, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x40, 0x3, 0xb9, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x1, 0x2, 0x4, {0x7, 0x25, 0x1, 0x0, 0x3, 0x9}}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x40, 0x7, 0x4, 0x40, 0x5}, 0x1b3, &(0x7f0000000440)={0x5, 0xf, 0x1b3, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x4, 0x8, 0xf}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "762b21258f9610df7c249113e4e8148e"}, @generic={0xc9, 0x10, 0x3, "c8541bfad062d31ba1f0118dc4e30bdae01a954e35bf72207722d14d946f763ab1ce9be78a2a529a10e3fc84eb79944dc6aad4ac4ded75cd85a8d44ea90701178c47f1787137c144dc5f0f35003e49230a8738972342da4b754c2c020b653018794a2bef0015310e2baef395956ed6606e73175cad59c0c9839b28070dd23c5484566885f485bc8f75221608d2b38a979916b67fec3f1c828858f31bd2f0e61823109bbaa5844f67fb46ce4034c223cb1b085b85110b8dc44380dd5b982c493efbfbe322e177"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x7, 0xaa, 0x90, 0x4}, @generic={0xb2, 0x10, 0x1, "2dacaefe04e43cf70b4ded9574f496ee870222b59d57ad399a79f0f7d228a79dd3c76605108d04f7f4dbcea43ffce1d2d7e7cef339d617dc091292b4985fe905fc18410cc2ac1e2f40df59f312ad7cb7fbbbc713a6b552663102fbe16340c8f9982a8bf999e6a0d2a68d55ebbbaa97f0841265bb1a208ca5a0dd620605b2ccaae9c4567364613e671219d0021a87c691e5e1613c311c453370f8452413533962d499d13ece8f79d88dd81208e4143a"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x80, 0xb5, 0x8}]}, 0x5, [{0x9d, &(0x7f00000006c0)=@string={0x9d, 0x3, "a1553a39c93051d43831e288ac4d590cf14fa8737f689e3c146dd4dac74146b80fcb3eebcc3b8ea8b3b461fa5eda416fb5898fd8baedb0e8b61e9324ffe2ec19444f7080374aaed65d2f92f4efdf080aff35067603c1f3f1573b427f9985c84aa95a1ec5d264f756857a9cfb07bca4e5490209f482cfe6f6592ea3a5988174789c5afab54f738deaf795fb54c375809758ebcc54d789c02d474b97"}}, {0x4e, &(0x7f0000000780)=@string={0x4e, 0x3, "e870bbfbd98d095cda8475293d76e6fc3200670ee9a693b5d96b4ab10e54f2289a2f9199a41c6c6256f35a0a497352490b6d44f0973c6f66693ef831dc47562e85d820c5d44934c09251d803"}}, {0x4c, &(0x7f0000000800)=@string={0x4c, 0x3, "4945b2145f54728b6ba9fa174664ff8f71f3b8ea7857df91f4ad1eb9ed2897cca847c46b430b7cbbe96d4ee76174ec6adb944943c3466f4fb66025088f7f4c91adb4559a7f208f5f5ac4"}}, {0x51, &(0x7f0000000880)=@string={0x51, 0x3, "696706b23566eb71e737eee3b102b505774a8911cc46b8999ee7a19a811fa001fb7c6d80157bf5788f41933bca5d06c59994dbb82b3da602cff09a5103dddc01c838fbe14fa3884c2a4038338fa0a2"}}, {0x90, &(0x7f0000000900)=@string={0x90, 0x3, "244b58ff998c6a9837e42a70485a6307997ba16aac85c25ba637436a71bec086afd7c00c66910051b65319683957b8d419cf5b48c0bd70bfecfdff4a6e3df724b2719d5c513b9ba3354d4d1df6ef0944c63558964c8fd6976c39d9941c1050c6af63195fbae9076620a6c3bfaba1eaca5cab6d2e80e1172c480b001df931a979354a2b4fd99646a40d7e20d474ef"}}]}) syz_usb_control_io$uac1(r5, &(0x7f0000000b40)={0x14, &(0x7f0000000a40)={0x60, 0x31, 0x7e, {0x7e, 0x28, "84c7247f73401110ff404be614c51e49ecde4b050fe8ea731fd27d09cbed5a076dbd2889fa5e17cc55000fa424480b52a3a7f6170ae19178a34fb3fd3cb64338ed8471275d76fd12f656c6b3a0852fdfa1f195cb90494863c8c8cad81a4f5064633ca0f1a42b9f771a96e9b7dcf039096ae1ce9c92715de885cb534f"}}, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x300a}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000b80)={0x20, 0xc, 0x31, "b5947ead26edcfde25923831a1119376866230938930200dbd1de30383f0b7cff9c082ab3ca76817c48bdb49e439a5a8d3"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000c40)={0x20, 0x81, 0x1, "cf"}, &(0x7f0000000c80)={0x20, 0x82, 0x1, "ec"}, &(0x7f0000000cc0)={0x20, 0x83, 0x1, "94"}, &(0x7f0000000d00)={0x20, 0x84, 0x4, "f679403d"}, &(0x7f0000000d40)={0x20, 0x85, 0x3, "23138f"}}) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r6, 0x400, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8900, &(0x7f0000000400)={0x0, 0x1, 0x340000}, 0x20) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file2\x00', 0x101) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.241' (ED25519) to the list of known hosts. [ 29.662645][ T36] audit: type=1400 audit(1790046444.100:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.666450][ T287] cgroup: Unknown subsys name 'net' [ 29.685337][ T36] audit: type=1400 audit(1790046444.100:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.712920][ T36] audit: type=1400 audit(1790046444.130:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.713410][ T287] cgroup: Unknown subsys name 'devices' [ 29.849263][ T287] cgroup: Unknown subsys name 'hugetlb' [ 29.854996][ T287] cgroup: Unknown subsys name 'rlimit' [ 29.954681][ T36] audit: type=1400 audit(1790046444.390:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.977915][ T36] audit: type=1400 audit(1790046444.390:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.003272][ T36] audit: type=1400 audit(1790046444.390:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.070823][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.079784][ T36] audit: type=1400 audit(1790046444.520:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 30.105386][ T36] audit: type=1400 audit(1790046444.520:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.147864][ T36] audit: type=1400 audit(1790046444.590:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.149825][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.173588][ T36] audit: type=1400 audit(1790046444.590:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.064227][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.071464][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.078643][ T295] bridge_slave_0: entered allmulticast mode [ 31.085203][ T295] bridge_slave_0: entered promiscuous mode [ 31.093708][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.100979][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.108505][ T295] bridge_slave_1: entered allmulticast mode [ 31.114833][ T295] bridge_slave_1: entered promiscuous mode [ 31.160408][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.167732][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.174861][ T296] bridge_slave_0: entered allmulticast mode [ 31.181604][ T296] bridge_slave_0: entered promiscuous mode [ 31.189764][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.196852][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.204034][ T296] bridge_slave_1: entered allmulticast mode [ 31.210587][ T296] bridge_slave_1: entered promiscuous mode [ 31.220003][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.227112][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.234211][ T294] bridge_slave_0: entered allmulticast mode [ 31.240744][ T294] bridge_slave_0: entered promiscuous mode [ 31.257541][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.264645][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.271838][ T294] bridge_slave_1: entered allmulticast mode [ 31.278159][ T294] bridge_slave_1: entered promiscuous mode [ 31.320372][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.327828][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.334970][ T297] bridge_slave_0: entered allmulticast mode [ 31.341785][ T297] bridge_slave_0: entered promiscuous mode [ 31.352431][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.359708][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.366865][ T297] bridge_slave_1: entered allmulticast mode [ 31.373481][ T297] bridge_slave_1: entered promiscuous mode [ 31.514389][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.521506][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.528860][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.536020][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.544384][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.551482][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.558909][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.565975][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.605392][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.612592][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.619917][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.626983][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.647060][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.654154][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.661579][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.668746][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.693804][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.701178][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.708742][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.716330][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.724216][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.731597][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.739626][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.747012][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.760172][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.767293][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.783056][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.790294][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.800956][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.808075][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.828779][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.835876][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.864433][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.871542][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.880043][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.887160][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.923135][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.930278][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.938893][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.945944][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.972634][ T295] veth0_vlan: entered promiscuous mode [ 31.998154][ T294] veth0_vlan: entered promiscuous mode [ 32.006850][ T296] veth0_vlan: entered promiscuous mode [ 32.018172][ T295] veth1_macvtap: entered promiscuous mode [ 32.044021][ T294] veth1_macvtap: entered promiscuous mode [ 32.065185][ T297] veth0_vlan: entered promiscuous mode [ 32.074761][ T296] veth1_macvtap: entered promiscuous mode [ 32.090956][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.122213][ T297] veth1_macvtap: entered promiscuous mode [ 32.204567][ T319] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.259444][ T319] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3766862737 (7533725474 ns) > initial count (2843276174 ns). Using initial count to start timer. [ 32.298007][ T319] kvm: apic: phys broadcast and lowest prio [ 32.317744][ T319] FAULT_INJECTION: forcing a failure. [ 32.317744][ T319] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 32.337362][ T319] CPU: 0 UID: 0 PID: 319 Comm: syz.3.5 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 32.337406][ T319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.337430][ T319] Call Trace: [ 32.337439][ T319] [ 32.337448][ T319] __dump_stack+0x21/0x30 [ 32.337503][ T319] dump_stack_lvl+0x140/0x1c0 [ 32.337545][ T319] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.337587][ T319] ? check_stack_object+0x138/0x150 [ 32.337624][ T319] dump_stack+0x19/0x20 [ 32.337658][ T319] should_fail_ex+0x3c2/0x510 [ 32.337696][ T319] should_fail+0xf/0x20 [ 32.337731][ T319] should_fail_usercopy+0x1e/0x30 [ 32.337775][ T319] _copy_to_user+0x24/0xa0 [ 32.337815][ T319] simple_read_from_buffer+0xed/0x160 [ 32.337866][ T319] proc_fail_nth_read+0x1aa/0x220 [ 32.337903][ T319] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 32.337945][ T319] ? bpf_lsm_file_permission+0xd/0x20 [ 32.337982][ T319] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 32.338022][ T319] vfs_read+0x288/0xc70 [ 32.338051][ T319] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 32.338083][ T319] ? __cfi_vfs_read+0x10/0x10 [ 32.338108][ T319] ? __kasan_check_write+0x18/0x20 [ 32.338148][ T319] ? mutex_lock+0x97/0x1d0 [ 32.338181][ T319] ? __cfi_mutex_lock+0x10/0x10 [ 32.338213][ T319] ksys_read+0x145/0x260 [ 32.338240][ T319] ? xfd_validate_state+0x68/0x140 [ 32.338685][ T319] ? __cfi_ksys_read+0x10/0x10 [ 32.338718][ T319] ? __kasan_check_write+0x18/0x20 [ 32.338748][ T319] ? fpregs_restore_userregs+0x11c/0x260 [ 32.338786][ T319] __x64_sys_read+0x7f/0x90 [ 32.338817][ T319] x64_sys_call+0x2638/0x2ee0 [ 32.338844][ T319] do_syscall_64+0x57/0xf0 [ 32.338870][ T319] ? clear_bhb_loop+0x50/0xa0 [ 32.338905][ T319] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.338935][ T319] RIP: 0033:0x7fde9ff5e98e [ 32.338965][ T319] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 32.338989][ T319] RSP: 002b:00007fdea0e14fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 32.339029][ T319] RAX: ffffffffffffffda RBX: 00007fdea0e156c0 RCX: 00007fde9ff5e98e [ 32.339048][ T319] RDX: 000000000000000f RSI: 00007fdea0e150a0 RDI: 0000000000000006 [ 32.339071][ T319] RBP: 00007fdea0e15090 R08: 0000000000000000 R09: 0000000000000000 [ 32.339088][ T319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.339106][ T319] R13: 00007fdea0226038 R14: 00007fdea0225fa0 R15: 00007ffdc4c1c458 [ 32.339138][ T319] [ 32.841402][ T403] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3766862737 (7533725474 ns) > initial count (2843276174 ns). Using initial count to start timer. [ 32.861138][ T403] kvm: apic: phys broadcast and lowest prio [ 32.887113][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 32.897021][ T334] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.009600][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.027083][ T334] usb 1-1: device descriptor read/64, error -71 [ 33.038386][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.049678][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.059518][ T31] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 33.068731][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.078229][ T31] usb 2-1: config 0 descriptor?? [ 33.168335][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.179594][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.189417][ T45] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 33.198741][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.208348][ T45] usb 3-1: config 0 descriptor?? [ 33.267110][ T334] usb 1-1: device descriptor read/64, error -71 [ 33.488854][ T31] savu 0003:1E7D:2D5A.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 33.507125][ T334] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 33.618582][ T45] savu 0003:1E7D:2D5A.0002: hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 33.636979][ T334] usb 1-1: device descriptor read/64, error -71 [ 33.738113][ T317] usb 2-1: USB disconnect, device number 2 [ 33.746465][ T330] hid_roccat: roccat device with minor 0 doesn't exist [ 33.820472][ T45] usb 3-1: USB disconnect, device number 2 [ 33.897155][ T334] usb 1-1: device descriptor read/64, error -71 [ 34.007067][ T334] usb usb1-port1: attempt power cycle [ 34.202138][ T431] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.219128][ T431] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.299983][ T435] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3766862737 (7533725474 ns) > initial count (2843276174 ns). Using initial count to start timer. [ 34.346991][ T334] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.367844][ T444] process 'syz.2.24' launched './file0' with NULL argv: empty string added [ 34.388632][ T334] usb 1-1: device descriptor read/8, error -71 [ 34.538446][ T334] usb 1-1: device descriptor read/8, error -71 [ 34.720724][ T36] kauditd_printk_skb: 88 callbacks suppressed [ 34.720745][ T36] audit: type=1400 audit(1790046449.160:162): avc: denied { ioctl } for pid=459 comm="syz.2.29" path="socket:[4744]" dev="sockfs" ino=4744 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.807058][ T334] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 34.828270][ T334] usb 1-1: device descriptor read/8, error -71 [ 34.887038][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.956999][ T317] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 34.959353][ T334] usb 1-1: device descriptor read/8, error -71 [ 35.038383][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.049483][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.059319][ T45] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 35.068428][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.077117][ T334] usb usb1-port1: unable to enumerate USB device [ 35.083766][ T45] usb 2-1: config 0 descriptor?? [ 35.118350][ T317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.129459][ T317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.139338][ T317] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 35.148675][ T317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.157786][ T317] usb 4-1: config 0 descriptor?? [ 35.489853][ T475] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3766862737 (7533725474 ns) > initial count (2843276174 ns). Using initial count to start timer. [ 35.508430][ T475] kvm: apic: phys broadcast and lowest prio [ 35.519983][ T45] savu 0003:1E7D:2D5A.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 35.570911][ T317] savu 0003:1E7D:2D5A.0004: hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 35.597010][ T36] audit: type=1400 audit(1790046450.030:163): avc: denied { watch watch_reads } for pid=477 comm="syz.2.35" path="/8" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 35.672987][ T36] audit: type=1400 audit(1790046450.110:164): avc: denied { setopt } for pid=481 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.692502][ T36] audit: type=1400 audit(1790046450.110:165): avc: denied { read } for pid=481 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.724784][ T36] audit: type=1400 audit(1790046450.160:166): avc: denied { bind } for pid=481 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.731318][ T483] Bluetooth: ISO socket layer initialized [ 35.745139][ T36] audit: type=1400 audit(1790046450.170:167): avc: denied { read } for pid=481 comm="syz.0.36" dev="nsfs" ino=4026532489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 35.771469][ T36] audit: type=1400 audit(1790046450.170:168): avc: denied { open } for pid=481 comm="syz.0.36" path="net:[4026532489]" dev="nsfs" ino=4026532489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 35.775137][ T317] usb 4-1: USB disconnect, device number 2 [ 35.795436][ T36] audit: type=1400 audit(1790046450.170:169): avc: denied { create } for pid=481 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.815388][ T310] usb 2-1: USB disconnect, device number 3 [ 35.827676][ T36] audit: type=1400 audit(1790046450.170:170): avc: denied { bind } for pid=481 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.847853][ T36] audit: type=1400 audit(1790046450.170:171): avc: denied { write } for pid=481 comm="syz.0.36" path="socket:[4833]" dev="sockfs" ino=4833 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.853347][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.897712][ T488] ./dev/sda1: Can't lookup blockdev [ 36.083439][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 36.104165][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.116105][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.126790][ T45] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 36.136398][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.144816][ T45] usb 3-1: Product: syz [ 36.149429][ T45] usb 3-1: Manufacturer: syz [ 36.154259][ T45] usb 3-1: SerialNumber: syz [ 36.164915][ T45] usb 3-1: selecting invalid altsetting 1 [ 36.175039][ T45] usb 3-1: unit 6 not found! [ 36.183720][ T45] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 36.285793][ T486] udevd[486]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.363497][ T503] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3766862737 (7533725474 ns) > initial count (2843276174 ns). Using initial count to start timer. [ 36.384819][ T503] kvm: apic: phys broadcast and lowest prio [ 36.587052][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.596982][ T310] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 36.736990][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 36.743784][ T45] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.747114][ T310] usb 4-1: Using ep0 maxpacket: 8 [ 36.756557][ T45] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 36.771307][ T310] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 130, changing to 11 [ 36.773394][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 36.790740][ T45] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 36.794496][ T310] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.799964][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.830083][ T45] usb 2-1: config 0 descriptor?? [ 36.836951][ T310] usb 4-1: config 0 interface 0 has no altsetting 0 [ 36.843755][ T310] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 36.856976][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.865899][ T310] usb 4-1: config 0 descriptor?? [ 37.075955][ T505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.085867][ T505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.242583][ T507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.252063][ T507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.261549][ T45] input: HID 2006:0118 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:2006:0118.0005/input/input4 [ 37.277294][ T45] hkems 0003:2006:0118.0005: input,hidraw0: USB HID v0.03 Joystick [HID 2006:0118] on usb-dummy_hcd.1-1/input0 [ 37.292315][ T45] hkems 0003:2006:0118.0005: no output reports found [ 37.299582][ T45] hkems 0003:2006:0118.0005: force feedback init failed [ 37.302620][ T310] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 37.327604][ T310] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 37.335037][ T310] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 37.342578][ T310] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 37.351377][ T310] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 37.359195][ T310] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 37.366437][ T310] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 37.373817][ T310] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 37.381039][ T310] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 37.388270][ T310] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 37.395495][ T310] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 37.402687][ T310] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 37.410773][ T310] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 37.417937][ T310] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 37.425019][ T310] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 37.433106][ T310] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 37.440243][ T310] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 37.448551][ T310] hid-rmi 0003:0461:4E72.0006: hidraw0: USB HID v0.07 Device [HID 0461:4e72] on usb-dummy_hcd.3-1/input0 [ 37.460847][ T45] usb 2-1: USB disconnect, device number 4 [ 37.502322][ T334] usb 4-1: USB disconnect, device number 3 [ 37.540558][ T526] Zero length message leads to an empty skb [ 37.548604][ T526] loop7: detected capacity change from 0 to 7 [ 37.555378][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 37.564591][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 37.572913][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 37.582140][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 37.590197][ T526] loop7: unable to read partition table [ 37.595958][ T526] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 37.606769][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 37.616009][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 37.625954][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 37.635158][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 37.643296][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 37.652511][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 37.670619][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 37.679815][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 37.688335][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 37.697543][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 38.049170][ T542] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3766862737 (7533725474 ns) > initial count (2843276174 ns). Using initial count to start timer. [ 38.068532][ T542] kvm: apic: phys broadcast and lowest prio [ 38.237007][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 38.371231][ T556] loop9: detected capacity change from 0 to 7 [ 38.377954][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 38.387402][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.390052][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.395938][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 38.406811][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.415310][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.415652][ T556] loop9: unable to read partition table [ 38.425978][ T45] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 38.436315][ T556] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 38.448369][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.472952][ T45] usb 2-1: config 0 descriptor?? [ 38.501926][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 38.511971][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.528953][ T558] loop9: unable to read partition table [ 38.537553][ T558] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 38.659339][ T566] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3766862737 (7533725474 ns) > initial count (2843276174 ns). Using initial count to start timer. [ 38.679806][ T566] kvm: apic: phys broadcast and lowest prio [ 38.698055][ T310] usb 3-1: USB disconnect, device number 3 [ 38.706131][ T111] loop7: unable to read partition table [ 38.888679][ T45] savu 0003:1E7D:2D5A.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 39.147731][ T45] usb 2-1: USB disconnect, device number 5 [ 39.705301][ T602] input: syz0 as /devices/virtual/input/input5 [ 39.721143][ T359] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.754629][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 39.754649][ T36] audit: type=1400 audit(1790046454.190:217): avc: denied { setattr } for pid=605 comm="syz.0.80" name="PPPOL2TP" dev="sockfs" ino=5725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.805272][ T36] audit: type=1400 audit(1790046454.190:218): avc: denied { create } for pid=605 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 39.830462][ T608] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3766862737 (7533725474 ns) > initial count (2843276174 ns). Using initial count to start timer. [ 39.848824][ T608] kvm: apic: phys broadcast and lowest prio [ 40.166976][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 40.316992][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 40.323429][ T31] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 40.331849][ T31] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 40.340436][ T31] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 40.349615][ T31] usb 1-1: config 250 has no interface number 0 [ 40.355892][ T31] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 40.368425][ T31] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 40.379030][ T31] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 40.389621][ T31] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 40.403163][ T31] usb 1-1: config 250 interface 228 has no altsetting 0 [ 40.411796][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 40.426869][ T31] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 40.435316][ T31] usb 1-1: Product: syz [ 40.439556][ T31] usb 1-1: SerialNumber: syz [ 40.480029][ T31] hub 1-1:250.228: bad descriptor, ignoring hub [ 40.496666][ T31] hub 1-1:250.228: probe with driver hub failed with error -5 [ 40.679862][ T31] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 40.767000][ T412] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 40.881162][ T36] audit: type=1400 audit(1790046455.320:219): avc: denied { read write } for pid=611 comm="syz.0.83" name="lp0" dev="devtmpfs" ino=486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 40.904646][ T36] audit: type=1400 audit(1790046455.320:220): avc: denied { open } for pid=611 comm="syz.0.83" path="/dev/usb/lp0" dev="devtmpfs" ino=486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 40.930270][ T412] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 40.939449][ T412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.947737][ T412] usb 4-1: Product: syz [ 40.951928][ T412] usb 4-1: Manufacturer: syz [ 40.956715][ T412] usb 4-1: SerialNumber: syz [ 40.957923][ C0] usblp0: nonzero read bulk status received: -71 [ 40.997215][ T334] usb 1-1: USB disconnect, device number 6 [ 41.004379][ T334] usblp0: removed [ 41.727073][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.846951][ T310] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 41.866612][ T641] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3766862737 (7533725474 ns) > initial count (2843276174 ns). Using initial count to start timer. [ 41.885048][ T641] kvm: apic: phys broadcast and lowest prio [ 41.932595][ T645] netlink: 32 bytes leftover after parsing attributes in process `syz.1.93'. [ 41.942058][ T36] audit: type=1326 audit(1790046456.380:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=644 comm="syz.1.93" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98a9f9e159 code=0x0 [ 42.008240][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.019246][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.029141][ T310] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 42.038562][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.047648][ T310] usb 1-1: config 0 descriptor?? [ 42.052299][ T36] audit: type=1326 audit(1790046456.490:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=644 comm="syz.1.93" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98a9f9e159 code=0x0 [ 42.071322][ T646] netlink: 32 bytes leftover after parsing attributes in process `syz.1.93'. [ 42.096980][ T317] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 42.227040][ T317] usb 3-1: device descriptor read/64, error -71 [ 42.459108][ T310] savu 0003:1E7D:2D5A.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 42.470231][ T317] usb 3-1: device descriptor read/64, error -71 [ 42.706997][ T317] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 42.718346][ T310] usb 1-1: USB disconnect, device number 7 [ 42.782120][ T36] audit: type=1400 audit(1790046457.220:223): avc: denied { create } for pid=655 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.785843][ T656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.94'. [ 42.801671][ T36] audit: type=1400 audit(1790046457.220:224): avc: denied { setopt } for pid=655 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.837008][ T317] usb 3-1: device descriptor read/64, error -71 [ 43.047019][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 43.077055][ T317] usb 3-1: device descriptor read/64, error -71 [ 43.187059][ T317] usb usb3-port1: attempt power cycle [ 43.197040][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 43.203631][ T10] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 43.211980][ T10] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 43.219390][ T10] usb 2-1: config 0 has no interface number 0 [ 43.233188][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 43.242365][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.257251][ T10] usb 2-1: Product: syz [ 43.261714][ T10] usb 2-1: Manufacturer: syz [ 43.266491][ T10] usb 2-1: SerialNumber: syz [ 43.272167][ T10] usb 2-1: config 0 descriptor?? [ 43.278923][ T10] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 43.285357][ T10] usb 2-1: No valid video chain found. [ 43.461174][ T36] audit: type=1400 audit(1790046457.900:225): avc: denied { bind } for pid=666 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.480441][ T36] audit: type=1400 audit(1790046457.910:226): avc: denied { listen } for pid=666 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.526963][ T317] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 43.541287][ T310] usb 4-1: USB disconnect, device number 4 [ 43.568851][ T317] usb 3-1: device descriptor read/8, error -71 [ 43.698214][ T317] usb 3-1: device descriptor read/8, error -71 [ 43.769761][ T681] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3766862737 (7533725474 ns) > initial count (2843276174 ns). Using initial count to start timer. [ 43.788240][ T681] kvm: apic: phys broadcast and lowest prio [ 43.937006][ T317] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 43.958171][ T317] usb 3-1: device descriptor read/8, error -71 [ 44.076965][ T310] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 44.076965][ T412] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 44.093274][ T317] usb 3-1: device descriptor read/8, error -71 [ 44.218868][ T317] usb usb3-port1: unable to enumerate USB device [ 44.228244][ T412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.239265][ T412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.247061][ T310] usb 1-1: Using ep0 maxpacket: 8 [ 44.249678][ T412] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 44.257539][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.267217][ T412] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.274904][ T310] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.293569][ T412] usb 4-1: config 0 descriptor?? [ 44.295917][ T310] usb 1-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.00 [ 44.312176][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.321166][ T310] usb 1-1: config 0 descriptor?? [ 44.535662][ T688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.544301][ T688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.706529][ T412] savu 0003:1E7D:2D5A.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 44.754416][ T310] apple 0003:05AC:023F.000A: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 44.766638][ T310] input: HID 05ac:023f as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:023F.000A/input/input6 [ 44.779739][ T310] apple 0003:05AC:023F.000A: input,hidraw1: USB HID v0.00 Joystick [HID 05ac:023f] on usb-dummy_hcd.0-1/input0 [ 44.896028][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 44.896045][ T36] audit: type=1400 audit(1790046459.330:236): avc: denied { mounton } for pid=693 comm="syz.2.107" path="/proc/49/task" dev="proc" ino=6094 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 44.925403][ T36] audit: type=1400 audit(1790046459.360:237): avc: denied { associate } for pid=697 comm="syz.2.107" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 44.956618][ T334] usb 1-1: USB disconnect, device number 8 [ 44.989050][ T412] usb 4-1: USB disconnect, device number 5 [ 45.009686][ T685] hid_roccat: roccat device with minor 0 doesn't exist [ 45.257020][ T652] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 45.408179][ T652] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 45.417473][ T652] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.426315][ T652] usb 3-1: config 0 descriptor?? [ 45.491880][ T36] audit: type=1400 audit(1790046459.930:238): avc: denied { getopt } for pid=700 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.579671][ T707] capability: warning: `syz.3.111' uses 32-bit capabilities (legacy support in use) [ 45.663853][ T715] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3766862737 (7533725474 ns) > initial count (2843276174 ns). Using initial count to start timer. [ 45.682043][ T715] kvm: apic: phys broadcast and lowest prio [ 45.792808][ T317] usb 2-1: USB disconnect, device number 6 [ 45.827550][ T36] audit: type=1400 audit(1790046460.270:239): avc: denied { read write } for pid=723 comm="syz.1.117" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 45.832847][ T724] MTRR 1 not used [ 45.853285][ T36] audit: type=1400 audit(1790046460.270:240): avc: denied { open } for pid=723 comm="syz.1.117" path="/14/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 45.880434][ T652] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 45.890565][ T36] audit: type=1400 audit(1790046460.270:241): avc: denied { ioctl } for pid=723 comm="syz.1.117" path="/14/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 45.897402][ T412] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 45.916429][ T652] playstation 0003:054C:0DF2.000B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 45.966420][ T36] audit: type=1400 audit(1790046460.380:242): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 45.996791][ T36] audit: type=1400 audit(1790046460.380:243): avc: denied { cmd } for pid=720 comm="iou-wrk-727" path="socket:[6509]" dev="sockfs" ino=6509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 46.087011][ T412] usb 1-1: device descriptor read/64, error -71 [ 46.120518][ T36] audit: type=1400 audit(1790046460.560:244): avc: denied { write } for pid=732 comm="syz.3.119" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 46.120841][ T733] random: crng reseeded on system resumption [ 46.155351][ T36] audit: type=1400 audit(1790046460.560:245): avc: denied { open } for pid=732 comm="syz.3.119" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 46.220825][ T736] ======================================================= [ 46.220825][ T736] WARNING: The mand mount option has been deprecated and [ 46.220825][ T736] and is ignored by this kernel. Remove the mand [ 46.220825][ T736] option from the mount to silence this warning. [ 46.220825][ T736] ======================================================= [ 46.257712][ T736] tmpfs: Too few inodes for current use [ 46.276962][ T317] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 46.286048][ T652] input: HID 054c:0df2 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.000B/input/input7 [ 46.302841][ T652] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.000B/input/input8 [ 46.327042][ T412] usb 1-1: device descriptor read/64, error -71 [ 46.331918][ T652] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.000B/input/input9 [ 46.378972][ T652] playstation 0003:054C:0DF2.000B: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 46.448658][ T317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.467559][ T317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.477527][ T317] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 46.486584][ T334] usb 3-1: USB disconnect, device number 8 [ 46.493546][ T317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.508680][ T743] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3766862737 (7533725474 ns) > initial count (2843276174 ns). Using initial count to start timer. [ 46.516711][ T317] usb 2-1: config 0 descriptor?? [ 46.538467][ T743] kvm: apic: phys broadcast and lowest prio [ 46.567008][ T412] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 46.696979][ T412] usb 1-1: device descriptor read/64, error -71 [ 46.711146][ T749] netlink: 'syz.3.126': attribute type 22 has an invalid length. [ 46.910339][ T756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.128'. [ 46.936980][ T412] usb 1-1: device descriptor read/64, error -71 [ 46.943754][ T317] savu 0003:1E7D:2D5A.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 47.047138][ T412] usb usb1-port1: attempt power cycle [ 47.190570][ T317] usb 2-1: USB disconnect, device number 7 [ 47.201646][ T730] hid_roccat: roccat device with minor 0 doesn't exist [ 47.357002][ T45] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 47.386982][ T412] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 47.408427][ T412] usb 1-1: device descriptor read/8, error -71 [ 47.486972][ T45] usb 3-1: device descriptor read/64, error -71 [ 47.537981][ T412] usb 1-1: device descriptor read/8, error -71 [ 47.737045][ T45] usb 3-1: device descriptor read/64, error -71 [ 47.777035][ T412] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 47.798054][ T412] usb 1-1: device descriptor read/8, error -71 [ 47.918737][ T774] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3766862737 (7533725474 ns) > initial count (2843276174 ns). Using initial count to start timer. [ 47.937221][ T774] kvm: apic: phys broadcast and lowest prio [ 47.943405][ T412] usb 1-1: device descriptor read/8, error -71 [ 47.967051][ T334] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 47.977419][ T45] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 48.057231][ T412] usb usb1-port1: unable to enumerate USB device [ 48.117001][ T45] usb 3-1: device descriptor read/64, error -71 [ 48.148629][ T334] usb 2-1: unable to get BOS descriptor or descriptor too short [ 48.157139][ T334] usb 2-1: not running at top speed; connect to a high speed hub [ 48.166372][ T334] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 48.167210][ T787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.174560][ T334] usb 2-1: can't read configurations, error -22 [ 48.190118][ T787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.317008][ T334] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 48.356997][ T45] usb 3-1: device descriptor read/64, error -71 [ 48.396979][ T412] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 48.467238][ T45] usb usb3-port1: attempt power cycle [ 48.474147][ T334] usb 2-1: unable to get BOS descriptor or descriptor too short [ 48.482506][ T334] usb 2-1: not running at top speed; connect to a high speed hub [ 48.491417][ T334] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 48.499438][ T334] usb 2-1: can't read configurations, error -22 [ 48.506148][ T334] usb usb2-port1: attempt power cycle [ 48.527014][ T412] usb 4-1: device descriptor read/64, error -71 [ 48.769672][ T412] usb 4-1: device descriptor read/64, error -71 [ 48.806993][ T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 48.828180][ T45] usb 3-1: device descriptor read/8, error -71 [ 48.847226][ T334] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 48.868711][ T334] usb 2-1: unable to get BOS descriptor or descriptor too short [ 48.876730][ T334] usb 2-1: not running at top speed; connect to a high speed hub [ 48.885673][ T334] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 48.893663][ T334] usb 2-1: can't read configurations, error -22 [ 48.958148][ T45] usb 3-1: device descriptor read/8, error -71 [ 49.006986][ T412] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 49.027010][ T334] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 49.037095][ T317] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 49.048857][ T334] usb 2-1: unable to get BOS descriptor or descriptor too short [ 49.056980][ T334] usb 2-1: not running at top speed; connect to a high speed hub [ 49.065876][ T334] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 49.073964][ T334] usb 2-1: can't read configurations, error -22 [ 49.080670][ T334] usb usb2-port1: unable to enumerate USB device [ 49.136973][ T412] usb 4-1: device descriptor read/64, error -71 [ 49.186994][ T317] usb 1-1: Using ep0 maxpacket: 16 [ 49.193433][ T317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.204660][ T317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.214803][ T317] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 49.217035][ T45] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 49.224501][ T317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.240456][ T317] usb 1-1: config 0 descriptor?? [ 49.248306][ T45] usb 3-1: device descriptor read/8, error -71 [ 49.377035][ T412] usb 4-1: device descriptor read/64, error -71 [ 49.384367][ T45] usb 3-1: device descriptor read/8, error -71 [ 49.487102][ T412] usb usb4-port1: attempt power cycle [ 49.497029][ T45] usb usb3-port1: unable to enumerate USB device [ 49.647743][ T317] apple 0003:05AC:024B.000D: unknown global tag 0xe [ 49.654644][ T317] apple 0003:05AC:024B.000D: item 0 1 1 14 parsing failed [ 49.662222][ T317] apple 0003:05AC:024B.000D: parse failed [ 49.668258][ T317] apple 0003:05AC:024B.000D: probe with driver apple failed with error -22 [ 49.826970][ T412] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 49.849497][ T412] usb 4-1: device descriptor read/8, error -71 [ 49.850067][ T317] usb 1-1: USB disconnect, device number 13 [ 49.978104][ T412] usb 4-1: device descriptor read/8, error -71 [ 50.182421][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 50.182440][ T36] audit: type=1400 audit(1790046464.620:257): avc: denied { mount } for pid=799 comm="syz.2.141" name="/" dev="configfs" ino=2419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 50.213358][ T36] audit: type=1400 audit(1790046464.630:258): avc: denied { search } for pid=799 comm="syz.2.141" name="/" dev="configfs" ino=2419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 50.236930][ T412] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 50.258004][ T412] usb 4-1: device descriptor read/8, error -71 [ 50.382997][ T36] audit: type=1400 audit(1790046464.820:259): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 50.408140][ T412] usb 4-1: device descriptor read/8, error -71 [ 50.496509][ T36] audit: type=1400 audit(1790046464.930:260): avc: denied { create } for pid=809 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 50.517074][ T412] usb usb4-port1: unable to enumerate USB device [ 50.529009][ T808] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3766862737 (7533725474 ns) > initial count (2843276174 ns). Using initial count to start timer. [ 50.548298][ T808] kvm: apic: phys broadcast and lowest prio [ 50.619339][ T36] audit: type=1400 audit(1790046465.060:261): avc: denied { name_bind } for pid=811 comm="syz.0.146" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 50.725142][ T819] netlink: 'syz.0.148': attribute type 32 has an invalid length. [ 50.733087][ T36] audit: type=1400 audit(1790046465.160:262): avc: denied { write } for pid=818 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.766140][ T36] audit: type=1400 audit(1790046465.160:263): avc: denied { nlmsg_write } for pid=818 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.846986][ T317] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 50.977111][ T317] usb 3-1: device descriptor read/64, error -71 [ 51.012433][ T36] audit: type=1400 audit(1790046465.450:264): avc: denied { unlink } for pid=835 comm="syz.1.152" name="#1" dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 51.039241][ T36] audit: type=1400 audit(1790046465.450:265): avc: denied { mount } for pid=835 comm="syz.1.152" name="/" dev="overlay" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 51.061658][ T36] audit: type=1400 audit(1790046465.480:266): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 51.111293][ T841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.140196][ T841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.154282][ T841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.165266][ T841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.178039][ T841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.199662][ T844] FAULT_INJECTION: forcing a failure. [ 51.199662][ T844] name failslab, interval 1, probability 0, space 0, times 1 [ 51.216931][ T317] usb 3-1: device descriptor read/64, error -71 [ 51.218153][ T841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.227018][ T844] CPU: 0 UID: 0 PID: 844 Comm: syz.3.154 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 51.227115][ T844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.227154][ T844] Call Trace: [ 51.227174][ T844] [ 51.227195][ T844] __dump_stack+0x21/0x30 [ 51.227292][ T844] dump_stack_lvl+0x140/0x1c0 [ 51.227377][ T844] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.227465][ T844] dump_stack+0x19/0x20 [ 51.227551][ T844] should_fail_ex+0x3c2/0x510 [ 51.227685][ T844] should_failslab+0xac/0x100 [ 51.227775][ T844] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 51.227844][ T844] ? __cfi_selinux_file_permission+0x10/0x10 [ 51.227918][ T844] ? event_filter_write+0x55/0x200 [ 51.227993][ T844] memdup_user_nul+0x40/0x1a0 [ 51.228045][ T844] ? event_filter_write+0x30/0x200 [ 51.228110][ T844] event_filter_write+0x55/0x200 [ 51.228164][ T844] ? vfs_write+0x396/0xfd0 [ 51.228218][ T844] ? __cfi_event_filter_write+0x10/0x10 [ 51.228288][ T844] vfs_write+0x3c1/0xfd0 [ 51.228354][ T844] ? __cfi_vfs_write+0x10/0x10 [ 51.228412][ T844] ? __kasan_check_write+0x18/0x20 [ 51.228470][ T844] ? mutex_lock+0x97/0x1d0 [ 51.228547][ T844] ? __cfi_mutex_lock+0x10/0x10 [ 51.228622][ T844] ksys_write+0x145/0x260 [ 51.228681][ T844] ? __cfi_ksys_write+0x10/0x10 [ 51.228748][ T844] ? __kasan_check_read+0x15/0x20 [ 51.228808][ T844] __x64_sys_write+0x7f/0x90 [ 51.228874][ T844] x64_sys_call+0x271c/0x2ee0 [ 51.228951][ T844] do_syscall_64+0x57/0xf0 [ 51.229036][ T844] ? clear_bhb_loop+0x50/0xa0 [ 51.229114][ T844] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.229190][ T844] RIP: 0033:0x7fde9ff9e159 [ 51.229246][ T844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.229294][ T844] RSP: 002b:00007fdea0e15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 51.229361][ T844] RAX: ffffffffffffffda RBX: 00007fdea0225fa0 RCX: 00007fde9ff9e159 [ 51.229404][ T844] RDX: 0000000000000026 RSI: 0000000000000000 RDI: 0000000000000003 [ 51.229442][ T844] RBP: 00007fdea0e15090 R08: 0000000000000000 R09: 0000000000000000 [ 51.229480][ T844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.229520][ T844] R13: 00007fdea0226038 R14: 00007fdea0225fa0 R15: 00007ffdc4c1c458 [ 51.229569][ T844] [ 51.327640][ T652] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 51.335615][ T841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.467019][ T317] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 51.493001][ T841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.506962][ T652] usb 2-1: Using ep0 maxpacket: 16 [ 51.626944][ T317] usb 3-1: device descriptor read/64, error -71 [ 51.710342][ T854] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3766862737 (7533725474 ns) > initial count (2843276174 ns). Using initial count to start timer. [ 51.728475][ T854] kvm: apic: phys broadcast and lowest prio [ 51.829694][ T856] netlink: 'syz.3.159': attribute type 64 has an invalid length. [ 51.866989][ T317] usb 3-1: device descriptor read/64, error -71 [ 51.892773][ T856] Built 1 zonelists, mobility grouping on. Total pages: 1727885 [ 51.951777][ T864] netlink: 'syz.0.162': attribute type 27 has an invalid length. [ 51.985671][ T317] usb usb3-port1: attempt power cycle [ 52.009478][ T869] FAULT_INJECTION: forcing a failure. [ 52.009478][ T869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.027026][ T869] CPU: 0 UID: 0 PID: 869 Comm: syz.0.163 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 52.027059][ T869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.027076][ T869] Call Trace: [ 52.027083][ T869] [ 52.027092][ T869] __dump_stack+0x21/0x30 [ 52.027129][ T869] dump_stack_lvl+0x140/0x1c0 [ 52.027160][ T869] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.027193][ T869] ? check_stack_object+0x81/0x150 [ 52.027218][ T869] ? __virt_addr_valid+0x2a1/0x370 [ 52.027246][ T869] dump_stack+0x19/0x20 [ 52.027277][ T869] should_fail_ex+0x3c2/0x510 [ 52.027306][ T869] should_fail+0xf/0x20 [ 52.027331][ T869] should_fail_usercopy+0x1e/0x30 [ 52.027361][ T869] _copy_from_user+0x20/0xa0 [ 52.027394][ T869] memdup_user_nul+0x7d/0x1a0 [ 52.027415][ T869] ? event_filter_write+0x30/0x200 [ 52.027440][ T869] event_filter_write+0x55/0x200 [ 52.027463][ T869] ? vfs_write+0x396/0xfd0 [ 52.027486][ T869] ? __cfi_event_filter_write+0x10/0x10 [ 52.027510][ T869] vfs_write+0x3c1/0xfd0 [ 52.027544][ T869] ? __cfi_vfs_write+0x10/0x10 [ 52.027568][ T869] ? __kasan_check_write+0x18/0x20 [ 52.027590][ T869] ? mutex_lock+0x97/0x1d0 [ 52.027636][ T869] ? __cfi_mutex_lock+0x10/0x10 [ 52.027665][ T869] ksys_write+0x145/0x260 [ 52.027690][ T869] ? __cfi_ksys_write+0x10/0x10 [ 52.027715][ T869] ? __kasan_check_read+0x15/0x20 [ 52.027738][ T869] __x64_sys_write+0x7f/0x90 [ 52.027762][ T869] x64_sys_call+0x271c/0x2ee0 [ 52.027784][ T869] do_syscall_64+0x57/0xf0 [ 52.027804][ T869] ? clear_bhb_loop+0x50/0xa0 [ 52.027832][ T869] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.027864][ T869] RIP: 0033:0x7f08fa99e159 [ 52.027883][ T869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.027901][ T869] RSP: 002b:00007f08fb8c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 52.027925][ T869] RAX: ffffffffffffffda RBX: 00007f08fac25fa0 RCX: 00007f08fa99e159 [ 52.027942][ T869] RDX: 0000000000000026 RSI: 0000000000000000 RDI: 0000000000000003 [ 52.027955][ T869] RBP: 00007f08fb8c4090 R08: 0000000000000000 R09: 0000000000000000 [ 52.027969][ T869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.027982][ T869] R13: 00007f08fac26038 R14: 00007f08fac25fa0 R15: 00007ffce3a4b888 [ 52.028001][ T869] [ 52.277937][ T873] FAULT_INJECTION: forcing a failure. [ 52.277937][ T873] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 52.295372][ T873] CPU: 1 UID: 0 PID: 873 Comm: syz.0.165 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 52.295404][ T873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.295417][ T873] Call Trace: [ 52.295425][ T873] [ 52.295443][ T873] __dump_stack+0x21/0x30 [ 52.295482][ T873] dump_stack_lvl+0x140/0x1c0 [ 52.295514][ T873] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.295548][ T873] dump_stack+0x19/0x20 [ 52.295578][ T873] should_fail_ex+0x3c2/0x510 [ 52.295607][ T873] should_fail_alloc_page+0xec/0x110 [ 52.295637][ T873] __alloc_pages_noprof+0x1c0/0x7e0 [ 52.295672][ T873] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 52.295708][ T873] ? __kasan_check_write+0x18/0x20 [ 52.295731][ T873] ? lockref_get+0x131/0x1c0 [ 52.295751][ T873] ? __kasan_check_write+0x18/0x20 [ 52.295773][ T873] get_free_pages_noprof+0x14/0x40 [ 52.295807][ T873] selinux_genfs_get_sid+0x63/0x2d0 [ 52.295839][ T873] inode_doinit_with_dentry+0x8f8/0xde0 [ 52.295871][ T873] ? sb_finish_set_opts+0xa40/0xa40 [ 52.295900][ T873] ? __kasan_slab_alloc+0x73/0x90 [ 52.295931][ T873] selinux_d_instantiate+0x2b/0x40 [ 52.295960][ T873] security_d_instantiate+0xb8/0xf0 [ 52.295990][ T873] d_splice_alias+0x71/0x3a0 [ 52.296016][ T873] kernfs_iop_lookup+0x2c6/0x320 [ 52.296048][ T873] lookup_one_qstr_excl+0x129/0x280 [ 52.296078][ T873] filename_create+0x241/0x450 [ 52.296110][ T873] ? kern_path_create+0x70/0x70 [ 52.296141][ T873] ? __cfi___check_object_size+0x10/0x10 [ 52.296168][ T873] do_mkdirat+0xa9/0x530 [ 52.296200][ T873] ? __cfi_do_mkdirat+0x10/0x10 [ 52.296231][ T873] ? __kasan_check_write+0x18/0x20 [ 52.296254][ T873] ? getname_flags+0x203/0x6b0 [ 52.296279][ T873] ? __kasan_check_write+0x18/0x20 [ 52.296303][ T873] __x64_sys_mkdirat+0x8b/0xa0 [ 52.296336][ T873] x64_sys_call+0x2ba8/0x2ee0 [ 52.296357][ T873] do_syscall_64+0x57/0xf0 [ 52.296379][ T873] ? clear_bhb_loop+0x50/0xa0 [ 52.296409][ T873] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.296444][ T873] RIP: 0033:0x7f08fa99e159 [ 52.296463][ T873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.296481][ T873] RSP: 002b:00007f08fb8c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 52.296505][ T873] RAX: ffffffffffffffda RBX: 00007f08fac25fa0 RCX: 00007f08fa99e159 [ 52.296522][ T873] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 52.296538][ T873] RBP: 00007f08faa3506b R08: 0000000000000000 R09: 0000000000000000 [ 52.296553][ T873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.296573][ T873] R13: 00007f08fac26038 R14: 00007f08fac25fa0 R15: 00007ffce3a4b888 [ 52.296592][ T873] [ 52.537188][ T317] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 52.618296][ T317] usb 3-1: device descriptor read/8, error -71 [ 52.758893][ T317] usb 3-1: device descriptor read/8, error -71 [ 52.834618][ T881] FAULT_INJECTION: forcing a failure. [ 52.834618][ T881] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 52.848028][ T881] CPU: 0 UID: 0 PID: 881 Comm: syz.0.168 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 52.848066][ T881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.848081][ T881] Call Trace: [ 52.848092][ T881] [ 52.848102][ T881] __dump_stack+0x21/0x30 [ 52.848143][ T881] dump_stack_lvl+0x140/0x1c0 [ 52.848177][ T881] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.848213][ T881] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 52.848249][ T881] dump_stack+0x19/0x20 [ 52.848279][ T881] should_fail_ex+0x3c2/0x510 [ 52.848308][ T881] should_fail_alloc_page+0xec/0x110 [ 52.848345][ T881] __alloc_pages_noprof+0x1c0/0x7e0 [ 52.848381][ T881] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 52.848418][ T881] ? __kasan_check_write+0x18/0x20 [ 52.848445][ T881] __pmd_alloc+0xb0/0x9a0 [ 52.848476][ T881] ? __cfi___pmd_alloc+0x10/0x10 [ 52.848504][ T881] ? lruvec_init+0x211/0x280 [ 52.848533][ T881] __get_locked_pte+0x222/0x2a0 [ 52.848559][ T881] map_ldt_struct+0x413/0x730 [ 52.848589][ T881] ? alloc_ldt_struct+0x2f0/0x2f0 [ 52.848616][ T881] ? alloc_ldt_struct+0xf9/0x2f0 [ 52.848642][ T881] ? __kasan_check_write+0x18/0x20 [ 52.848666][ T881] write_ldt+0x5fe/0x760 [ 52.848693][ T881] ? native_write_gdt_entry+0x40/0x40 [ 52.848722][ T881] ? xfd_validate_state+0x68/0x140 [ 52.848757][ T881] __se_sys_modify_ldt+0x70/0x2e0 [ 52.848785][ T881] __x64_sys_modify_ldt+0x7f/0xa0 [ 52.848814][ T881] x64_sys_call+0x143d/0x2ee0 [ 52.848835][ T881] do_syscall_64+0x57/0xf0 [ 52.848858][ T881] ? clear_bhb_loop+0x50/0xa0 [ 52.848887][ T881] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.848915][ T881] RIP: 0033:0x7f08fa99e159 [ 52.848935][ T881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.848956][ T881] RSP: 002b:00007f08fb8c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 52.848983][ T881] RAX: ffffffffffffffda RBX: 00007f08fac25fa0 RCX: 00007f08fa99e159 [ 52.849001][ T881] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000001 [ 52.849017][ T881] RBP: 00007f08faa3506b R08: 0000000000000000 R09: 0000000000000000 [ 52.849032][ T881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.849046][ T881] R13: 00007f08fac26038 R14: 00007f08fac25fa0 R15: 00007ffce3a4b888 [ 52.849066][ T881] [ 53.096608][ T883] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3766862737 (7533725474 ns) > initial count (2843276174 ns). Using initial count to start timer. [ 53.115436][ T883] kvm: apic: phys broadcast and lowest prio [ 53.236992][ T317] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 53.267947][ T317] usb 3-1: device descriptor read/8, error -71 [ 53.333592][ T895] FAULT_INJECTION: forcing a failure. [ 53.333592][ T895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.346811][ T895] CPU: 1 UID: 0 PID: 895 Comm: syz.3.173 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 53.346844][ T895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.346858][ T895] Call Trace: [ 53.346865][ T895] [ 53.346879][ T895] __dump_stack+0x21/0x30 [ 53.346917][ T895] dump_stack_lvl+0x140/0x1c0 [ 53.346947][ T895] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.346979][ T895] ? check_stack_object+0x138/0x150 [ 53.347005][ T895] dump_stack+0x19/0x20 [ 53.347035][ T895] should_fail_ex+0x3c2/0x510 [ 53.347062][ T895] should_fail+0xf/0x20 [ 53.347087][ T895] should_fail_usercopy+0x1e/0x30 [ 53.347116][ T895] _copy_to_user+0x24/0xa0 [ 53.347149][ T895] simple_read_from_buffer+0xed/0x160 [ 53.347181][ T895] proc_fail_nth_read+0x1aa/0x220 [ 53.347232][ T895] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 53.347264][ T895] ? memdup_user_nul+0x9c/0x1a0 [ 53.347287][ T895] ? bpf_lsm_file_permission+0xd/0x20 [ 53.347317][ T895] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 53.347350][ T895] vfs_read+0x288/0xc70 [ 53.347374][ T895] ? __cfi_vfs_read+0x10/0x10 [ 53.347396][ T895] ? __kasan_check_write+0x18/0x20 [ 53.347420][ T895] ? mutex_lock+0x97/0x1d0 [ 53.347460][ T895] ? __cfi_mutex_lock+0x10/0x10 [ 53.347489][ T895] ksys_read+0x145/0x260 [ 53.347512][ T895] ? __cfi_ksys_read+0x10/0x10 [ 53.347534][ T895] ? __kasan_check_read+0x15/0x20 [ 53.347556][ T895] __x64_sys_read+0x7f/0x90 [ 53.347580][ T895] x64_sys_call+0x2638/0x2ee0 [ 53.347601][ T895] do_syscall_64+0x57/0xf0 [ 53.347620][ T895] ? clear_bhb_loop+0x50/0xa0 [ 53.347647][ T895] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.347672][ T895] RIP: 0033:0x7fde9ff5e98e [ 53.347690][ T895] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 53.347708][ T895] RSP: 002b:00007fdea0e14fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 53.347731][ T895] RAX: ffffffffffffffda RBX: 00007fdea0e156c0 RCX: 00007fde9ff5e98e [ 53.347747][ T895] RDX: 000000000000000f RSI: 00007fdea0e150a0 RDI: 0000000000000004 [ 53.347760][ T895] RBP: 00007fdea0e15090 R08: 0000000000000000 R09: 0000000000000000 [ 53.347773][ T895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.347785][ T895] R13: 00007fdea0226038 R14: 00007fdea0225fa0 R15: 00007ffdc4c1c458 [ 53.347803][ T895] [ 53.605931][ T897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.174'. [ 53.622153][ T317] usb 3-1: device descriptor read/8, error -71 [ 53.656948][ T310] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 53.737082][ T317] usb usb3-port1: unable to enumerate USB device [ 53.816975][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 53.823802][ T310] usb 1-1: config 1 interface 0 altsetting 251 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 53.840299][ T310] usb 1-1: config 1 interface 0 has no altsetting 0 [ 53.851769][ T310] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a0c, bcdDevice= 0.40 [ 53.874239][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.882690][ T310] usb 1-1: Product: ᷠ䌞꼯᯺檜疝⎀ࠌۘ䓒飿¡錃䎳剭铦㧴죯皒璦勝{♞ᑝᵩ帴穙樵ꭄ꠺郿᱘स￳帅㲘弊膱ᆏꡥ´ [ 53.898094][ T310] usb 1-1: Manufacturer: 鎴⺃㳄흧갮Ⴣ죖淩ⶰ篢⋥꒍黮㴽➜苗۰^ȍ毥⏨ᇏ财①ჯΆ⃅莀 [ 53.924881][ T310] usb 1-1: SerialNumber: ⅒匔全ᷯ꾨廡ច簦걤䣧飈Ώठ蝋 [ 53.938872][ T652] usb 2-1: unable to get BOS descriptor or descriptor too short [ 53.946650][ T652] usb 2-1: no configurations [ 53.953176][ T652] usb 2-1: can't read configurations, error -22 [ 53.955301][ T914] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3766862737 (7533725474 ns) > initial count (2843276174 ns). Using initial count to start timer. [ 53.977839][ T914] kvm: apic: phys broadcast and lowest prio [ 54.123789][ T920] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=18548 sclass=netlink_xfrm_socket pid=920 comm=syz.3.182 [ 54.348594][ T310] usbhid 1-1:1.0: can't add hid device: -71 [ 54.354611][ T310] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 54.367270][ T310] usb 1-1: USB disconnect, device number 14 [ 54.594660][ T930] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 54.597095][ T334] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 54.696949][ T935] netlink: 108 bytes leftover after parsing attributes in process `syz.2.187'. [ 54.747015][ T334] usb 4-1: device descriptor read/64, error -71 [ 54.899361][ T940] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3766862737 (7533725474 ns) > initial count (2843276174 ns). Using initial count to start timer. [ 54.919363][ T940] kvm: apic: phys broadcast and lowest prio [ 54.986937][ T334] usb 4-1: device descriptor read/64, error -71 [ 55.077932][ T956] kvm: kvm [955]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 55.226960][ T334] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 55.246951][ T310] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 55.357005][ T334] usb 4-1: device descriptor read/64, error -71 [ 55.398164][ T310] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.409188][ T310] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.419011][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 55.426688][ T310] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.439699][ T310] usb 1-1: config 0 interface 0 has no altsetting 0 [ 55.446523][ T310] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 55.455752][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.465013][ T310] usb 1-1: config 0 descriptor?? [ 55.596959][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 55.603528][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 55.613915][ T9] usb 3-1: config 2 has an invalid interface number: 232 but max is 0 [ 55.617114][ T334] usb 4-1: device descriptor read/64, error -71 [ 55.624200][ T9] usb 3-1: config 2 has no interface number 0 [ 55.634609][ T9] usb 3-1: config 2 interface 232 altsetting 128 endpoint 0x8 has invalid wMaxPacketSize 0 [ 55.644733][ T9] usb 3-1: config 2 interface 232 altsetting 128 bulk endpoint 0x8 has invalid maxpacket 0 [ 55.654886][ T9] usb 3-1: config 2 interface 232 has no altsetting 0 [ 55.663189][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=89a4, bcdDevice=4f.cd [ 55.672366][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.683156][ T9] usb 3-1: Product: syz [ 55.687515][ T9] usb 3-1: Manufacturer: syz [ 55.692581][ T963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.701004][ T9] usb 3-1: SerialNumber: syz [ 55.706194][ T963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.718527][ T310] logitech 0003:046D:C298.000E: unknown main item tag 0x0 [ 55.725743][ T310] logitech 0003:046D:C298.000E: unknown main item tag 0x0 [ 55.733427][ T310] logitech 0003:046D:C298.000E: unknown main item tag 0x0 [ 55.740762][ T310] logitech 0003:046D:C298.000E: unknown main item tag 0x0 [ 55.747300][ T334] usb usb4-port1: attempt power cycle [ 55.748194][ T310] logitech 0003:046D:C298.000E: unknown main item tag 0x0 [ 55.761147][ T310] logitech 0003:046D:C298.000E: unknown main item tag 0x0 [ 55.769488][ T310] logitech 0003:046D:C298.000E: unknown main item tag 0x0 [ 55.776693][ T310] logitech 0003:046D:C298.000E: unknown main item tag 0x0 [ 55.783892][ T310] logitech 0003:046D:C298.000E: unknown main item tag 0x0 [ 55.791160][ T310] logitech 0003:046D:C298.000E: unknown main item tag 0x0 [ 55.798377][ T310] logitech 0003:046D:C298.000E: unknown main item tag 0x0 [ 55.805630][ T310] logitech 0003:046D:C298.000E: unknown main item tag 0x0 [ 55.813059][ T310] logitech 0003:046D:C298.000E: unknown main item tag 0x0 [ 55.821523][ T310] logitech 0003:046D:C298.000E: unknown main item tag 0x0 [ 55.828778][ T310] logitech 0003:046D:C298.000E: unknown main item tag 0x0 [ 55.835965][ T310] logitech 0003:046D:C298.000E: unknown main item tag 0x0 [ 55.843205][ T310] logitech 0003:046D:C298.000E: unknown main item tag 0x0 [ 55.850434][ T310] logitech 0003:046D:C298.000E: unknown main item tag 0x0 [ 55.857650][ T310] logitech 0003:046D:C298.000E: unknown main item tag 0x0 [ 55.864983][ T310] logitech 0003:046D:C298.000E: unknown main item tag 0x0 [ 55.872197][ T310] logitech 0003:046D:C298.000E: unknown main item tag 0x0 [ 55.880566][ T310] logitech 0003:046D:C298.000E: unknown main item tag 0x0 [ 55.887827][ T310] logitech 0003:046D:C298.000E: unknown main item tag 0x0 [ 55.895111][ T310] logitech 0003:046D:C298.000E: unknown main item tag 0x0 [ 55.903144][ T310] logitech 0003:046D:C298.000E: hidraw0: USB HID v0.00 Device [HID 046d:c298] on usb-dummy_hcd.0-1/input0 [ 55.915227][ T310] logitech 0003:046D:C298.000E: no inputs found [ 55.922702][ T962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.934731][ T962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.949623][ T9] usb 3-1: USB disconnect, device number 17 [ 55.969944][ T486] udevd[486]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.232/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.086967][ T334] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 56.108196][ T334] usb 4-1: device descriptor read/8, error -71 [ 56.241665][ T334] usb 4-1: device descriptor read/8, error -71 [ 56.377739][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 56.377758][ T36] audit: type=1400 audit(1790046470.820:285): avc: denied { cmd } for pid=969 comm="iou-wrk-971" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 56.486941][ T334] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 56.517960][ T334] usb 4-1: device descriptor read/8, error -71 [ 56.574323][ T983] veth1_macvtap: left promiscuous mode [ 56.586939][ T983] macsec0: entered promiscuous mode [ 56.596914][ T983] macsec0: entered allmulticast mode [ 56.609027][ T983] veth1_macvtap: entered promiscuous mode [ 56.624960][ T983] veth1_macvtap: entered allmulticast mode [ 56.631009][ T983] macsec0: left promiscuous mode [ 56.646218][ T983] macsec0: left allmulticast mode [ 56.651435][ T983] veth1_macvtap: left allmulticast mode [ 56.657996][ T334] usb 4-1: device descriptor read/8, error -71 [ 56.767914][ T334] usb usb4-port1: unable to enumerate USB device [ 56.790219][ T990] kvm: kvm [985]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 56.807351][ T990] kvm: kvm [985]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 56.841708][ C0] blk_print_req_error: 57 callbacks suppressed [ 56.841731][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 56.861113][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.870318][ C0] buffer_io_error: 55 callbacks suppressed [ 56.870338][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 56.884027][ C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.893206][ C0] Buffer I/O error on dev loop7, logical block 1, async page read [ 56.901092][ C0] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.910275][ C0] Buffer I/O error on dev loop7, logical block 2, async page read [ 56.918178][ C0] I/O error, dev loop7, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.927348][ C0] Buffer I/O error on dev loop7, logical block 3, async page read [ 56.935279][ C0] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.944528][ C0] Buffer I/O error on dev loop7, logical block 4, async page read [ 56.952480][ C0] I/O error, dev loop7, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.961677][ C0] Buffer I/O error on dev loop7, logical block 5, async page read [ 56.969567][ C0] I/O error, dev loop7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.978734][ C0] Buffer I/O error on dev loop7, logical block 6, async page read [ 56.988627][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.988888][ C0] I/O error, dev loop7, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.997824][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 57.006957][ C0] Buffer I/O error on dev loop7, logical block 3, async page read [ 57.014851][ C1] Buffer I/O error on dev loop7, logical block 1, async page read [ 57.168926][ T997] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3766862737 (7533725474 ns) > initial count (2843276174 ns). Using initial count to start timer. [ 57.188710][ T997] kvm: apic: phys broadcast and lowest prio [ 57.311135][ T1013] FAULT_INJECTION: forcing a failure. [ 57.311135][ T1013] name fail_futex, interval 1, probability 0, space 0, times 1 [ 57.324097][ T1013] CPU: 0 UID: 0 PID: 1013 Comm: syz.1.210 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 57.324122][ T1013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.324133][ T1013] Call Trace: [ 57.324139][ T1013] [ 57.324145][ T1013] __dump_stack+0x21/0x30 [ 57.324188][ T1013] dump_stack_lvl+0x140/0x1c0 [ 57.324210][ T1013] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.324234][ T1013] ? gup_fast_fallback+0x671/0x740 [ 57.324278][ T1013] dump_stack+0x19/0x20 [ 57.324312][ T1013] should_fail_ex+0x3c2/0x510 [ 57.324332][ T1013] should_fail+0xf/0x20 [ 57.324350][ T1013] should_fail_futex+0x3c/0x50 [ 57.324371][ T1013] futex_lock_pi_atomic+0x11b/0xcb0 [ 57.324395][ T1013] ? __cfi_futex_lock_pi_atomic+0x10/0x10 [ 57.324420][ T1013] ? __cfi_futex_setup_timer+0x10/0x10 [ 57.324442][ T1013] ? __cfi_get_futex_key+0x10/0x10 [ 57.324463][ T1013] futex_lock_pi+0x2a7/0xa70 [ 57.324486][ T1013] ? futex_unqueue+0x136/0x160 [ 57.324507][ T1013] ? __cfi_futex_lock_pi+0x10/0x10 [ 57.324531][ T1013] ? __cfi_futex_wake_mark+0x10/0x10 [ 57.324548][ T1013] ? __cfi_futex_wake_mark+0x10/0x10 [ 57.324564][ T1013] ? vfs_write+0xbcf/0xfd0 [ 57.324581][ T1013] do_futex+0x2fc/0x510 [ 57.324602][ T1013] ? __cfi_do_futex+0x10/0x10 [ 57.324622][ T1013] ? mutex_unlock+0x90/0x240 [ 57.324643][ T1013] __se_sys_futex+0x13c/0x320 [ 57.324664][ T1013] ? fput+0x1a4/0x230 [ 57.324685][ T1013] ? __x64_sys_futex+0x110/0x110 [ 57.324711][ T1013] ? __cfi_ksys_write+0x10/0x10 [ 57.324730][ T1013] ? __kasan_check_write+0x18/0x20 [ 57.324747][ T1013] __x64_sys_futex+0xe9/0x110 [ 57.324768][ T1013] x64_sys_call+0x227f/0x2ee0 [ 57.324783][ T1013] do_syscall_64+0x57/0xf0 [ 57.324797][ T1013] ? clear_bhb_loop+0x50/0xa0 [ 57.324817][ T1013] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.324837][ T1013] RIP: 0033:0x7f98a9f9e159 [ 57.324854][ T1013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.324868][ T1013] RSP: 002b:00007f98aaf33028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 57.324893][ T1013] RAX: ffffffffffffffda RBX: 00007f98aa225fa0 RCX: 00007f98a9f9e159 [ 57.324906][ T1013] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000200 [ 57.324917][ T1013] RBP: 00007f98aa03506b R08: 0000000000000000 R09: 0000000034fffffd [ 57.324932][ T1013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.324942][ T1013] R13: 00007f98aa226038 R14: 00007f98aa225fa0 R15: 00007ffc9594c3f8 [ 57.324955][ T1013] [ 57.663196][ T36] audit: type=1400 audit(1790046472.100:286): avc: denied { block_suspend } for pid=1015 comm="syz.3.211" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.727007][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 57.736633][ T1029] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3766862737 (7533725474 ns) > initial count (2843276174 ns). Using initial count to start timer. [ 57.754944][ T1029] kvm: apic: phys broadcast and lowest prio [ 57.795645][ T36] audit: type=1400 audit(1790046472.230:287): avc: denied { ioctl } for pid=1030 comm="syz.2.216" path="/41/trace/events/kmem/kmalloc/filter" dev="tracefs" ino=19680823 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 57.832578][ T1033] FAULT_INJECTION: forcing a failure. [ 57.832578][ T1033] name failslab, interval 1, probability 0, space 0, times 0 [ 57.845274][ T1033] CPU: 1 UID: 0 PID: 1033 Comm: syz.2.217 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 57.845347][ T1033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.845357][ T1033] Call Trace: [ 57.845363][ T1033] [ 57.845370][ T1033] __dump_stack+0x21/0x30 [ 57.845397][ T1033] dump_stack_lvl+0x140/0x1c0 [ 57.845420][ T1033] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.845445][ T1033] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 57.845464][ T1033] dump_stack+0x19/0x20 [ 57.845486][ T1033] should_fail_ex+0x3c2/0x510 [ 57.845506][ T1033] should_failslab+0xac/0x100 [ 57.845528][ T1033] kmem_cache_alloc_noprof+0x42/0x410 [ 57.845546][ T1033] ? __kernfs_new_node+0xf1/0x740 [ 57.845567][ T1033] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 57.845590][ T1033] __kernfs_new_node+0xf1/0x740 [ 57.845611][ T1033] ? __kasan_check_write+0x18/0x20 [ 57.845628][ T1033] ? kernfs_new_node+0x280/0x280 [ 57.845649][ T1033] ? down_write+0xee/0x2b0 [ 57.845670][ T1033] ? __cfi_down_write+0x10/0x10 [ 57.845691][ T1033] ? __kasan_check_write+0x18/0x20 [ 57.845708][ T1033] ? up_write+0x66/0x280 [ 57.845731][ T1033] ? kernfs_activate+0x1ee/0x200 [ 57.845754][ T1033] kernfs_new_node+0x154/0x280 [ 57.845775][ T1033] __kernfs_create_file+0x52/0x280 [ 57.845803][ T1033] sysfs_add_file_mode_ns+0x1d2/0x280 [ 57.845820][ T1033] internal_create_group+0x66c/0xe70 [ 57.845839][ T1033] ? __kasan_check_write+0x18/0x20 [ 57.845856][ T1033] ? sysfs_create_group+0x40/0x40 [ 57.845875][ T1033] ? kernfs_activate+0x1ee/0x200 [ 57.845898][ T1033] sysfs_create_groups+0x5c/0x130 [ 57.845917][ T1033] device_add_attrs+0xdf/0x850 [ 57.845932][ T1033] ? device_add_class_symlinks+0x260/0x260 [ 57.845947][ T1033] ? __kasan_check_write+0x18/0x20 [ 57.845964][ T1033] ? kobject_put+0x1cc/0x2a0 [ 57.845978][ T1033] ? device_add_class_symlinks+0x22e/0x260 [ 57.845994][ T1033] device_add+0x4db/0xbf0 [ 57.846019][ T1033] netdev_register_kobject+0x196/0x330 [ 57.846045][ T1033] register_netdevice+0x1042/0x1a80 [ 57.846063][ T1033] ? __cfi_register_netdevice+0x10/0x10 [ 57.846082][ T1033] tun_set_iff+0x828/0xec0 [ 57.846100][ T1033] __tun_chr_ioctl+0x852/0x1fb0 [ 57.846118][ T1033] ? tun_flow_create+0x400/0x400 [ 57.846137][ T1033] ? __fget_files+0x2bc/0x330 [ 57.846158][ T1033] tun_chr_ioctl+0x2e/0x40 [ 57.846174][ T1033] ? __cfi_tun_chr_ioctl+0x10/0x10 [ 57.846191][ T1033] __se_sys_ioctl+0x123/0x1b0 [ 57.846212][ T1033] __x64_sys_ioctl+0x7f/0xa0 [ 57.846232][ T1033] x64_sys_call+0x1878/0x2ee0 [ 57.846247][ T1033] do_syscall_64+0x57/0xf0 [ 57.846262][ T1033] ? clear_bhb_loop+0x50/0xa0 [ 57.846289][ T1033] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.846331][ T1033] RIP: 0033:0x7ffab1b9e159 [ 57.846351][ T1033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.846373][ T1033] RSP: 002b:00007ffab297e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.846404][ T1033] RAX: ffffffffffffffda RBX: 00007ffab1e25fa0 RCX: 00007ffab1b9e159 [ 57.846418][ T1033] RDX: 0000200000000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 57.846429][ T1033] RBP: 00007ffab1c3506b R08: 0000000000000000 R09: 0000000000000000 [ 57.846440][ T1033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.846451][ T1033] R13: 00007ffab1e26038 R14: 00007ffab1e25fa0 R15: 00007ffe3d8e1188 [ 57.846465][ T1033] [ 57.907079][ T9] usb 2-1: device descriptor read/64, error -71 [ 58.060936][ T1035] syz.2.217 uses obsolete (PF_INET,SOCK_PACKET) [ 58.101630][ T317] usb 1-1: USB disconnect, device number 15 [ 58.393187][ T36] audit: type=1400 audit(1790046472.830:288): avc: denied { listen } for pid=1045 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.436983][ T9] usb 2-1: device descriptor read/64, error -71 [ 58.465760][ T36] audit: type=1400 audit(1790046472.900:289): avc: denied { append } for pid=1050 comm="syz.3.223" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.506927][ T310] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 58.608887][ T1066] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3766862737 (7533725474 ns) > initial count (2843276174 ns). Using initial count to start timer. [ 58.626897][ T1066] kvm: apic: phys broadcast and lowest prio [ 58.646934][ T310] usb 3-1: device descriptor read/64, error -71 [ 58.676987][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 58.695788][ T36] audit: type=1400 audit(1790046473.130:290): avc: denied { map } for pid=1069 comm="syz.3.227" path="/83/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 58.737011][ T36] audit: type=1400 audit(1790046473.170:291): avc: denied { create } for pid=1071 comm="syz.0.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 58.766917][ T36] audit: type=1400 audit(1790046473.170:292): avc: denied { sys_admin } for pid=1071 comm="syz.0.228" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 58.806934][ T9] usb 2-1: device descriptor read/64, error -71 [ 58.886926][ T310] usb 3-1: device descriptor read/64, error -71 [ 59.046951][ T9] usb 2-1: device descriptor read/64, error -71 [ 59.126927][ T310] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 59.157230][ T9] usb usb2-port1: attempt power cycle [ 59.266934][ T310] usb 3-1: device descriptor read/64, error -71 [ 59.506987][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 59.514644][ T310] usb 3-1: device descriptor read/64, error -71 [ 59.539674][ T9] usb 2-1: device descriptor read/8, error -71 [ 59.632984][ T310] usb usb3-port1: attempt power cycle [ 59.677977][ T9] usb 2-1: device descriptor read/8, error -71 [ 59.917196][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 59.926969][ T317] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 59.938056][ T9] usb 2-1: device descriptor read/8, error -71 [ 59.976965][ T310] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 60.008068][ T310] usb 3-1: device descriptor read/8, error -71 [ 60.068129][ T9] usb 2-1: device descriptor read/8, error -71 [ 60.087910][ T317] usb 4-1: not running at top speed; connect to a high speed hub [ 60.096392][ T317] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.106662][ T317] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 60.115956][ T317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.128961][ T317] usb 4-1: Found UVC 1.00 device (046d:0825) [ 60.135915][ T317] usb 4-1: No streaming interface found for terminal 2. [ 60.147144][ T310] usb 3-1: device descriptor read/8, error -71 [ 60.177075][ T9] usb usb2-port1: unable to enumerate USB device [ 60.330586][ T45] usb 4-1: USB disconnect, device number 14 [ 60.342523][ T1094] rust_binder: 1093:1094 error while translating object: EINVAL [ 60.344554][ T36] audit: type=1400 audit(1790046474.780:293): avc: denied { map } for pid=1093 comm="syz.1.234" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 60.350568][ T1094] rust_binder: Failure in copy_transaction_data: EINVAL [ 60.374020][ T1094] rust_binder: 1093:1094 transaction async to 1093:0 failed EINVAL, code 0 size 80-24 [ 60.384342][ T36] audit: type=1400 audit(1790046474.780:294): avc: denied { call } for pid=1093 comm="syz.1.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 60.391609][ T310] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 60.419282][ T9] rust_binder: 1093: undelivered TRANSACTION_ERROR: 29201 [ 60.438255][ T310] usb 3-1: device descriptor read/8, error -71 [ 60.482570][ T1105] fuseblk: Unknown parameter 'Gwφq8[}⸵&J}' [ 60.568070][ T310] usb 3-1: device descriptor read/8, error -71 [ 60.677060][ T310] usb usb3-port1: unable to enumerate USB device [ 60.990584][ T1110] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3766862737 (7533725474 ns) > initial count (2843276174 ns). Using initial count to start timer. [ 61.009069][ T1110] kvm: apic: phys broadcast and lowest prio [ 61.076201][ T1112] capability: warning: `syz.3.239' uses deprecated v2 capabilities in a way that may be insecure [ 61.626958][ T45] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 61.677069][ T310] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 61.777960][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.789226][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.799032][ T45] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 61.808230][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.816983][ T45] usb 2-1: config 0 descriptor?? [ 61.836968][ T310] usb 3-1: Using ep0 maxpacket: 16 [ 61.843389][ T310] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.854559][ T310] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.864520][ T310] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 61.877568][ T310] usb 3-1: config 0 interface 0 has no altsetting 0 [ 61.884272][ T310] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 61.893401][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.902242][ T310] usb 3-1: config 0 descriptor?? [ 62.109240][ T1134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.118103][ T1134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.229838][ T45] savu 0003:1E7D:2D5A.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 62.330167][ T310] usbhid 3-1:0.0: can't add hid device: -71 [ 62.336743][ T310] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 62.346841][ T310] usb 3-1: USB disconnect, device number 22 [ 62.476978][ T334] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 62.480910][ T652] usb 2-1: USB disconnect, device number 18 [ 62.492453][ T652] ================================================================== [ 62.500568][ T652] BUG: KASAN: slab-use-after-free in roccat_disconnect+0x236/0x240 [ 62.508579][ T652] Read of size 4 at addr ffff88811eb73808 by task kworker/0:5/652 [ 62.516387][ T652] [ 62.518717][ T652] CPU: 0 UID: 0 PID: 652 Comm: kworker/0:5 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 62.518740][ T652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.518757][ T652] Workqueue: usb_hub_wq hub_event [ 62.518787][ T652] Call Trace: [ 62.518793][ T652] [ 62.518801][ T652] __dump_stack+0x21/0x30 [ 62.518827][ T652] dump_stack_lvl+0x140/0x1c0 [ 62.518851][ T652] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.518876][ T652] print_address_description+0x71/0x210 [ 62.518902][ T652] print_report+0x4a/0x70 [ 62.518924][ T652] kasan_report+0x162/0x1a0 [ 62.518947][ T652] ? roccat_disconnect+0x236/0x240 [ 62.518967][ T652] ? roccat_disconnect+0x236/0x240 [ 62.518985][ T652] __asan_report_load4_noabort+0x18/0x20 [ 62.519002][ T652] roccat_disconnect+0x236/0x240 [ 62.519021][ T652] savu_remove+0xf0/0x170 [ 62.519044][ T652] ? __cfi_savu_remove+0x10/0x10 [ 62.519067][ T652] hid_device_remove+0x293/0x400 [ 62.519085][ T652] ? __cfi_hid_device_remove+0x10/0x10 [ 62.519102][ T652] device_release_driver_internal+0x4aa/0x830 [ 62.519120][ T652] device_release_driver+0x1d/0x30 [ 62.519136][ T652] bus_remove_device+0x34f/0x370 [ 62.519158][ T652] device_del+0x583/0xcf0 [ 62.519172][ T652] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 62.519189][ T652] ? __pm_runtime_resume+0xa0/0xa0 [ 62.519211][ T652] ? __cfi_device_del+0x10/0x10 [ 62.519225][ T652] ? __kasan_check_write+0x18/0x20 [ 62.519242][ T652] ? _raw_spin_lock_irq+0x93/0x120 [ 62.519258][ T652] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 62.519274][ T652] hid_destroy_device+0x6e/0x110 [ 62.519292][ T652] usbhid_disconnect+0xa3/0xc0 [ 62.519307][ T652] usb_unbind_interface+0x2ad/0xa40 [ 62.519334][ T652] ? __cfi_usb_unbind_interface+0x10/0x10 [ 62.519372][ T652] device_release_driver_internal+0x522/0x830 [ 62.519389][ T652] device_release_driver+0x1d/0x30 [ 62.519404][ T652] bus_remove_device+0x34f/0x370 [ 62.519425][ T652] device_del+0x583/0xcf0 [ 62.519438][ T652] ? kfree_const+0x3d/0x50 [ 62.519452][ T652] ? __cfi_device_release+0x10/0x10 [ 62.519470][ T652] ? __cfi_device_del+0x10/0x10 [ 62.519484][ T652] ? kobject_put+0x238/0x2a0 [ 62.519499][ T652] ? device_unregister+0x2b/0x40 [ 62.519513][ T652] usb_disable_device+0x3af/0x770 [ 62.519537][ T652] usb_disconnect+0x331/0x950 [ 62.519559][ T652] hub_event+0x1ad5/0x4360 [ 62.519581][ T652] ? hub_event+0x11d0/0x4360 [ 62.519611][ T652] ? __cfi_hub_event+0x10/0x10 [ 62.519635][ T652] ? kick_pool+0xb9/0x540 [ 62.519655][ T652] process_scheduled_works+0x7f4/0x1060 [ 62.519675][ T652] worker_thread+0xc99/0x13f0 [ 62.519692][ T652] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 62.519712][ T652] ? __kasan_check_read+0x15/0x20 [ 62.519729][ T652] kthread+0x2c4/0x360 [ 62.519752][ T652] ? __cfi_worker_thread+0x10/0x10 [ 62.519769][ T652] ? __cfi_kthread+0x10/0x10 [ 62.519788][ T652] ret_from_fork+0x64/0xa0 [ 62.519812][ T652] ? __cfi_kthread+0x10/0x10 [ 62.519830][ T652] ret_from_fork_asm+0x1a/0x30 [ 62.519847][ T652] [ 62.519853][ T652] [ 62.638608][ T334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 62.642034][ T652] Allocated by task 45: [ 62.642050][ T652] kasan_save_track+0x3e/0x80 [ 62.648096][ T334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.652719][ T652] kasan_save_alloc_info+0x3a/0x50 [ 62.657926][ T334] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.662790][ T652] __kasan_kmalloc+0x96/0xb0 [ 62.662824][ T652] __kmalloc_cache_noprof+0x23c/0x470 [ 62.668387][ T334] usb 4-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 62.673484][ T652] roccat_connect+0x6a/0x540 [ 62.678873][ T334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.683202][ T652] savu_probe+0x1a7/0x3f0 [ 62.710150][ T334] usb 4-1: config 0 descriptor?? [ 62.710257][ T652] hid_device_probe+0x2d1/0x5f0 [ 62.914302][ T652] really_probe+0x2e4/0x8b0 [ 62.918833][ T652] __driver_probe_device+0x193/0x280 [ 62.924225][ T652] driver_probe_device+0x54/0x3f0 [ 62.929270][ T652] __device_attach_driver+0x2f1/0x4b0 [ 62.934695][ T652] bus_for_each_drv+0x267/0x300 [ 62.939585][ T652] __device_attach+0x2c4/0x3c0 [ 62.944386][ T652] device_initial_probe+0x1e/0x30 [ 62.949447][ T652] bus_probe_device+0x18b/0x270 [ 62.954345][ T652] device_add+0x7fd/0xbf0 [ 62.958718][ T652] hid_add_device+0x3c4/0x5a0 [ 62.963515][ T652] usbhid_probe+0xdca/0x1310 [ 62.968144][ T652] usb_probe_interface+0x6ab/0xbf0 [ 62.973278][ T652] really_probe+0x2e4/0x8b0 [ 62.977828][ T652] __driver_probe_device+0x193/0x280 [ 62.983157][ T652] driver_probe_device+0x54/0x3f0 [ 62.988185][ T652] __device_attach_driver+0x2f1/0x4b0 [ 62.993772][ T652] bus_for_each_drv+0x267/0x300 [ 62.998649][ T652] __device_attach+0x2c4/0x3c0 [ 63.003432][ T652] device_initial_probe+0x1e/0x30 [ 63.008483][ T652] bus_probe_device+0x18b/0x270 [ 63.013372][ T652] device_add+0x7fd/0xbf0 [ 63.017725][ T652] usb_set_configuration+0x1aad/0x2080 [ 63.023235][ T652] usb_generic_driver_probe+0x95/0x160 [ 63.028742][ T652] usb_probe_device+0x1ef/0x3b0 [ 63.033624][ T652] really_probe+0x2e4/0x8b0 [ 63.038135][ T652] __driver_probe_device+0x193/0x280 [ 63.043462][ T652] driver_probe_device+0x54/0x3f0 [ 63.048508][ T652] __device_attach_driver+0x2f1/0x4b0 [ 63.053896][ T652] bus_for_each_drv+0x267/0x300 [ 63.058766][ T652] __device_attach+0x2c4/0x3c0 [ 63.063560][ T652] device_initial_probe+0x1e/0x30 [ 63.068621][ T652] bus_probe_device+0x18b/0x270 [ 63.073500][ T652] device_add+0x7fd/0xbf0 [ 63.077867][ T652] usb_new_device+0x98d/0x1500 [ 63.082660][ T652] hub_event+0x2dbd/0x4360 [ 63.087108][ T652] process_scheduled_works+0x7f4/0x1060 [ 63.092770][ T652] worker_thread+0xc99/0x13f0 [ 63.097476][ T652] kthread+0x2c4/0x360 [ 63.101578][ T652] ret_from_fork+0x64/0xa0 [ 63.106041][ T652] ret_from_fork_asm+0x1a/0x30 [ 63.110925][ T652] [ 63.113267][ T652] Freed by task 1132: [ 63.117264][ T652] kasan_save_track+0x3e/0x80 [ 63.121973][ T652] kasan_save_free_info+0x44/0x50 [ 63.127012][ T652] __kasan_slab_free+0x5f/0x80 [ 63.131804][ T652] kfree+0x158/0x440 [ 63.135801][ T652] roccat_release+0x2c3/0x390 [ 63.140531][ T652] __fput+0x20b/0xa30 [ 63.144553][ T652] ____fput+0x20/0x30 [ 63.148610][ T652] task_work_run+0x1e5/0x260 [ 63.153219][ T652] resume_user_mode_work+0x35/0x50 [ 63.158351][ T652] syscall_exit_to_user_mode+0x63/0xb0 [ 63.163936][ T652] do_syscall_64+0x63/0xf0 [ 63.168392][ T652] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.174325][ T652] [ 63.176691][ T652] The buggy address belongs to the object at ffff88811eb73800 [ 63.176691][ T652] which belongs to the cache kmalloc-512 of size 512 [ 63.190765][ T652] The buggy address is located 8 bytes inside of [ 63.190765][ T652] freed 512-byte region [ffff88811eb73800, ffff88811eb73a00) [ 63.204529][ T652] [ 63.206875][ T652] The buggy address belongs to the physical page: [ 63.213400][ T652] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11eb70 [ 63.222276][ T652] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 63.230826][ T652] flags: 0x4000000000000040(head|zone=1) [ 63.236491][ T652] page_type: f5(slab) [ 63.240515][ T652] raw: 4000000000000040 ffff888100041c80 dead000000000100 dead000000000122 [ 63.249132][ T652] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 63.257784][ T652] head: 4000000000000040 ffff888100041c80 dead000000000100 dead000000000122 [ 63.266493][ T652] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 63.275279][ T652] head: 4000000000000002 ffffea00047adc01 ffffffffffffffff 0000000000000000 [ 63.283987][ T652] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 63.292689][ T652] page dumped because: kasan: bad access detected [ 63.299216][ T652] page_owner tracks the page as allocated [ 63.304938][ T652] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 149, tgid 149 (dhcpcd), ts 11082248574, free_ts 0 [ 63.326353][ T652] post_alloc_hook+0x37d/0x3b0 [ 63.331180][ T652] prep_new_page+0x2d/0x180 [ 63.335720][ T652] get_page_from_freelist+0x4aea/0x4ba0 [ 63.341303][ T652] __alloc_pages_noprof+0x35a/0x7e0 [ 63.346604][ T652] alloc_slab_page+0x6b/0x1e0 [ 63.351316][ T652] allocate_slab+0x69/0x430 [ 63.355869][ T652] ___slab_alloc+0x591/0x8c0 [ 63.360530][ T652] __kmalloc_node_track_caller_noprof+0x2e3/0x4f0 [ 63.366981][ T652] kmalloc_reserve+0x144/0x4f0 [ 63.371792][ T652] __alloc_skb+0x13f/0x360 [ 63.376248][ T652] alloc_skb_with_frags+0xd0/0x8b0 [ 63.381480][ T652] sock_alloc_send_pskb+0x883/0x9a0 [ 63.386734][ T652] unix_dgram_sendmsg+0x63a/0x1a90 [ 63.391879][ T652] unix_seqpacket_sendmsg+0x11c/0x1e0 [ 63.397285][ T652] sock_write_iter+0x445/0x490 [ 63.402094][ T652] vfs_write+0x75f/0xfd0 [ 63.406366][ T652] page_owner free stack trace missing [ 63.411755][ T652] [ 63.414100][ T652] Memory state around the buggy address: [ 63.419859][ T652] ffff88811eb73700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 63.427945][ T652] ffff88811eb73780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 63.436028][ T652] >ffff88811eb73800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.444148][ T652] ^ [ 63.448516][ T652] ffff88811eb73880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.456614][ T652] ffff88811eb73900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.464712][ T652] ================================================================== [ 63.477369][ T652] Disabling lock debugging due to kernel taint [ 63.510333][ T334] usbhid 4-1:0.0: can't add hid device: -71 [ 63.516420][ T334] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 63.525474][ T334] usb 4-1: USB disconnect, device number 15