last executing test programs: 4.661835905s ago: executing program 1 (id=180): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x3) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$9p(0x0, 0x800) ioctl$sock_bt_hci(r4, 0x400448e3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x10, &(0x7f0000000100)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendto$inet(r5, 0x0, 0x0, 0x880, &(0x7f00000001c0)={0x2, 0x4e9c, @local}, 0x10) fsmount(0xffffffffffffffff, 0x1, 0x80) r6 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x8) nanosleep(0x0, 0x0) r7 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_set_state_pages={0x140, 0x28, {0x0, 0x14, @unmapped=0xfffffffffffff000}}, @nested_vmresume={0x130, 0x18, 0x2}], 0x70}) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) read$FUSE(r3, 0x0, 0x0) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x3) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) pipe2$9p(0x0, 0x800) (async) ioctl$sock_bt_hci(r4, 0x400448e3, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_buf(r5, 0x0, 0x10, &(0x7f0000000100)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) (async) sendto$inet(r5, 0x0, 0x0, 0x880, &(0x7f00000001c0)={0x2, 0x4e9c, @local}, 0x10) (async) fsmount(0xffffffffffffffff, 0x1, 0x80) (async) openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x8) (async) nanosleep(0x0, 0x0) (async) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_set_state_pages={0x140, 0x28, {0x0, 0x14, @unmapped=0xfffffffffffff000}}, @nested_vmresume={0x130, 0x18, 0x2}], 0x70}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) 4.571254825s ago: executing program 1 (id=181): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1, 0x7fffffff, 0x9) r3 = socket(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f00000002c0)="b9800000c00f3235000800000f30805000fd450f01f40f017137400f1ee7c403957ca7fd5856025bb805000000b9620000000f01c1debfdbc40000400fc73dadc30000400f78741d01", 0x49}], 0x1, 0x49627e0e9a2bded4, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f0000000380)="66b8003000000f23c80f21f866350c0070000f23f8653e660ffa9700800f1bc6670f01c40f01c40f2265bad004edbaf80c66b8e8c54b8c66efbafc0c66edc225000f5fc9", 0x44}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f900655e00000000ae00002d000000000000ea08000f0001000000", 0x24) 4.478637574s ago: executing program 1 (id=182): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000040)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)={0x24, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x4, 0x2e}]}, 0x24}], 0x1}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000006c0)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0}) syz_usb_ep_write(r1, 0x81, 0x25, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d") 3.492151005s ago: executing program 3 (id=190): prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', r1, 0x4, 0x5, 0xad, 0x4, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x8000, 0x7, 0x1f0, 0x400}}) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000106307302040000102030109026e0003017f0006080b0002012030230904000000010130000a2401100a000b0000000904010000010230000904010101010230000905050960002510050a25250404000000050009040200ffffff7f00090402010101023000090582"], 0x0) 3.148695299s ago: executing program 2 (id=191): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x4000, &(0x7f0000000040)={@align=0xd, {0x82a, 0x8, 0xfffffffa, 0x7000000000000}}, 0xffff, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x10}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000140)) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) write$fault_inject(r1, &(0x7f0000000200)='Y\x00', 0x2) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000000240)) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000300)={'broute\x00', 0x0, 0x0, 0x0, [0xe, 0x44, 0x2, 0x6, 0x2, 0x2883], 0x4, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000003c0)={0x5, 0x1, 0x2}) getsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000400), &(0x7f0000000440)=0x4) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) r2 = userfaultfd(0x80001) close(r0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000580)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) writev(r2, &(0x7f0000001700)=[{&(0x7f00000005c0)="b0518142ba1731e94e8d21f25aa4339f0fe82a076d845966a50272fb7453b521679ca9f629fd50ee35d81a69dff5a379a77a8c1fa4319cda34939a73e17e9a129a9c0998e28446b191d1dfa1b118c794661ddc2fc1e8899de72f8d76ae68fd431164370072a88925c76a229a1dd3b74700bb1dfbfe60b4c5117df40590", 0x7d}, {&(0x7f0000000640)="8aef79c975319c090591c3ea44be7b882eb8be65d94ef69b23fe445a7962ce911b90b265bcbdae7ea0ce3a8c967ca26f4559b99c1aaaeff610120860e858aa579e746d7a0207b3c66dd2a642f8b69758ac8b8b6b4ecb3a3bfd3c01781e0d1a300ae75097555727d0aa5a8fb0793883af1f0a9a82330d88ef1dfb0e8287966eaf6dab1f27ce", 0x85}, {&(0x7f0000000700)="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", 0x1000}], 0x3) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDENABIO(r3, 0x4b36) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000001740)={'\x00', 0x7, 0xbc0e, 0x8, 0x7, 0x9, 0xffffffffffffffff}) rt_sigqueueinfo(r4, 0x24, &(0x7f00000017c0)={0x25, 0x8, 0x8000}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001840), 0x2, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r5, 0x40186e8d, &(0x7f00000019c0)={&(0x7f0000001880)=[{0x1251, 0x2, 0x0, {0x80000001, 0x7f, 0x2}}, {0x7, 0x2, 0x0, {0x1371}}, {0x9, 0x2, 0x0, {0x4, 0x5, 0x1}}, {0x3, 0x2, 0x0, {0x7ff, 0x751192af}}, {0x5, 0x1, 0x0, {0x4, 0xfffffffd, 0x2}}, {0x0, 0x1, 0x0, {0x1, 0x6}}, {0x5, 0x1, 0x0, {0x8, 0x1, 0x2}}, {0x2, 0x2, 0x0, {0x7, 0x2e0f}}, {0x4, 0x0, 0x0, {0x7fff, 0x5}}, {0x0, 0x0, 0x0, {0x38f53dfe, 0xd8}}], 0xa, 0x20, 0x2, 0x1}) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000001a00)="15122df6a51b3086548618aa992d53a9d27edda779789a97ff2da428c974d1aae3d99ae4fd287071e40f3bb8c67042650753a3b29847f80090fc5d5c2676b1fe7f1911b0531c81592f3a8ff85c33479fc833ebb6d5505dd0fdc288dfa27882fe4648401dbdef5b6ed83e48a5ea020af95c87bf3526e0848f7414bd4473145f1f9f01060ff0a1609eccedd148bee33e315f29130506ccaf9fdd0eab957befe03019c8d2962a87b0f162f4e00ef4e74c0355313c891502c42a0f5f04fd287b0e13ca7c91e62eac47ab815e37e41d48aeec5782737bf56422d7718478d9adfbb1dc2f8acd96a3d39d115bdb", 0xea) r6 = open_tree(r0, &(0x7f0000001b00)='./file0\x00', 0x800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000001b40)={0x73622a85, 0x10a, 0x0, 0x2}) ioctl$TIOCSRS485(r6, 0x542f, &(0x7f0000001b80)={0x7fffffff, 0x3, 0xe5}) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001bc0), 0x503540, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c40), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f0000001d40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x34, r8, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xfffa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) 3.087465745s ago: executing program 2 (id=192): r0 = socket(0x2a, 0x3, 0x3e0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(r1, r1, r1) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x200071, 0x101341) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) setfsuid(0x0) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205fe0506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0x78, 0x800, 0x0, 0x0) 3.085217296s ago: executing program 2 (id=193): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x20e2}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xbe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x166}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004090) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000000200)={0x1198, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x30, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x90}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xc0, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x30}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2d}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6d}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xef}]}]}, @NL80211_ATTR_TID_CONFIG={0x530, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc0}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x77}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x94}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0xf8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x1, 0x63bd, 0x8, 0x1ff, 0x5, 0x6]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x3, 0x2}, {0x0, 0x4}, {0x3, 0xa}, {0x4, 0x7}, {0x1}, {0x4, 0xa}, {0x0, 0x6}, {0x0, 0x3}, {0x6}, {0x0, 0x1}, {0x0, 0xa}, {0x6, 0x5}, {0x1, 0x3}, {0x4, 0x5}, {0x4, 0x2}, {0x1, 0x3}, {0x7, 0x3}, {0x7, 0x9}, {0x6, 0x3}, {0x1, 0x8}, {0x5, 0x9}, {0x1, 0x7}, {0x7, 0x4}, {0x1, 0x6}, {0x7, 0x3}, {0x0, 0x6}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x2}, {0x1, 0x8}, {0x1, 0x5}, {0x5, 0x5}, {0x5, 0x8}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x8}, {0x7, 0x6}, {0x5, 0x9}, {0x0, 0x6}, {0x4, 0xa}, {0x2, 0x6}, {0x3, 0x6}, {0x4, 0x7}, {0x5, 0x4}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x4, 0x7}, {0x1, 0x3}, {0x2, 0x2}, {0x5, 0x4}, {0x1, 0x3}, {0x1, 0x9}, {0x0, 0x5}, {0x6}, {0x7, 0x9}, {0x4, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0xffff, 0xd, 0x10, 0x9, 0x3, 0x4000]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x10, 0xfffd, 0x7e, 0x43cf, 0x100, 0x4]}}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x4, 0x3, 0x7, 0x7, 0x5, 0x0, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6f00, 0x4, 0x36a, 0x8000, 0x6, 0x5, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0xa2d989c1d72853db}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x22}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7e}]}, {0x2ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2e8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x1, 0x5}, {0x0, 0x5}, {0x0, 0x8}, {0x4, 0x2}, {0x4, 0x2}, {0x1, 0x8}, {0x2, 0x9}, {0x1, 0x6}, {0x6, 0x3}, {0x4, 0x1}, {0x7, 0x9}, {0x1, 0xa}, {0x6, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x1, 0x2}, {0x4}, {0x5}, {0x6, 0x7}, {0x1, 0x7}, {0x1, 0x5}, {0x0, 0x6}, {0x2, 0x4}, {0x1, 0x7}, {0x1, 0x6}, {0x4, 0x4}, {0x7}, {0x0, 0x3}, {0x0, 0x6}, {0x1, 0x7}, {0x5, 0x5}, {0x7, 0x3}, {0x3, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x7}, {0x7, 0x6}, {0x6, 0x7}, {0x2, 0x9}, {0x5}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x6, 0x9}, {0x2, 0xa}, {0x1, 0x9}, {0x7, 0x8}, {0x3, 0x6}, {0x4, 0x2}, {0x7, 0x2}, {0x3, 0x9}, {0x7, 0x3}, {0x0, 0x6}, {0x7, 0x5}, {0x4, 0x1d}, {0x5, 0x5}, {0x2, 0xa}, {0x2, 0x6}, {0x6, 0x6}, {0x1, 0x5}, {0x6, 0x6}, {0x7, 0x4}, {0x4, 0x3}, {0x1, 0x3}, {0x5, 0x5}, {0x5, 0x7}, {0x1, 0x4}, {0x4, 0x3}, {0x2}, {0x0, 0x6}, {0x7, 0x9}, {0x6, 0x8}, {0x1, 0x1}, {0x5, 0x3}, {0x1, 0x9}, {0x0, 0x4}, {0x2, 0x5}, {0x5, 0x7}, {0x1, 0x3}, {0x4, 0x9}, {0x7, 0x8}, {0x5}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x2e, 0x60, 0x0, 0x71, 0x1b, 0x6, 0x1, 0xb]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x3, 0xa}, {0x1, 0x4}, {0x0, 0x8}, {0x2, 0x6}, {0x2, 0x4}, {0x5, 0x2}, {0x4, 0x5}, {0x7, 0x9}, {0x7, 0x8}, {0x7, 0x8}, {0x3, 0x4}, {0x4, 0x2}, {0x1, 0x4}, {0x4, 0x7}, {0x1, 0x7}, {0x0, 0x9}, {0x0, 0x7}, {0x4}, {0x0, 0x9}, {0x4, 0x6}, {0x4, 0x4}, {0x0, 0x2}, {}, {0x5, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x0, 0xc4c, 0x0, 0x8, 0x0, 0x7b]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x5}, {0x3, 0x5}, {0x5, 0x5}, {0x2, 0x1}, {0x0, 0x4}, {0x6, 0x9}, {0x6, 0x9}, {}, {0x1}, {0x1, 0x6}, {0x7}, {0x7, 0x4}, {0x0, 0x4}, {0x7, 0x8}, {0x6, 0x7}, {0x1, 0x8}, {0x7, 0x1}, {0x6, 0x7}, {0x4, 0xa}, {0x7, 0x5}, {0x4, 0x5}, {0x0, 0xa}, {0x3, 0x9}, {0x1, 0x6}, {0x7, 0x4}, {0x5, 0x4}, {0x5, 0xa}, {0x4, 0x8}, {0x6, 0x4}, {0x1, 0xa}, {0x2, 0x6}, {0x3, 0x4}, {0x2, 0x5}, {0x3, 0xa}]}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xdb8, 0x8, 0x82d0, 0x0, 0x8000, 0x6, 0x5, 0xfe06]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x23, 0xfffc, 0x7, 0x9, 0x1, 0x8, 0x100, 0x3]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x6, 0x7}, {}, {0x4, 0xa}, {0x4, 0x9}, {0x1, 0xa}, {0x7, 0xa}, {0x7, 0x8}, {0x4, 0x1}, {0x4, 0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x0, 0x3}, {0x2, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x4, 0x8}, {0x2, 0x9}, {0x3, 0x8}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0xa}, {0x4, 0xa}, {0x3, 0x7}, {0x2, 0x2}, {0x0, 0x7}, {0x3, 0x7}, {0x1, 0x4}, {0x6, 0x8}, {0x0, 0xa}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x8}, {0x3, 0x5}, {0x0, 0x5}, {0x1, 0x3}, {0x2, 0x7}, {0x6, 0xa}, {0x7, 0x5}, {0x7, 0x9}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x8}, {0x3, 0x4}, {0x3}, {0x0, 0x3}, {0x2, 0x5}, {0x3}, {0x1, 0x4}, {0x1, 0x7}, {0x6, 0x6}, {0x4, 0x8}, {0x6, 0x2}, {0x7, 0x1}, {0x3, 0x5}, {0x6, 0x7}, {0x4}, {0x1, 0x9}, {0x3, 0x5}, {0x4, 0x8}, {0x0, 0xa}, {0x5, 0x5}, {0x7, 0x7}, {0x4, 0xa}, {0x3, 0x2}, {0x7, 0x2}, {0x6}, {0x7, 0x9}, {0x6, 0x3}, {0x3, 0x1}, {0x4, 0x7}, {0x6, 0x2}, {0x1, 0x7}, {0x4, 0xa}, {0x5, 0x1}, {0x5, 0x2}, {0x4}, {0x4, 0x2}, {0x6, 0x5}, {0x2, 0x3}, {0x4, 0x9}, {0x6}, {0x7, 0x3}, {0x2, 0x5}, {0x4, 0x5}, {0x1, 0x3}, {0x0, 0xa}, {0x3, 0x3}, {0x1, 0x1}, {0x1, 0x5}, {0x4, 0x1}, {0x7, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x2, 0x3, 0x40, 0x401, 0x8, 0xf2f, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x3, 0x6a, 0x24]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x5}, {0x4, 0x6}, {0x0, 0x7}, {0x6, 0xa}, {0x6, 0x2}, {0x0, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x6, 0x9}, {0x6, 0x1}, {0x5, 0x5}, {0x1, 0x1e}, {0x0, 0x5}, {0x0, 0x6}, {0x3, 0x5}, {0x4, 0x7}, {0x6, 0x2}, {0x4, 0x4}, {0x6, 0x6}, {0x5, 0x7}, {0x2, 0xa}, {0x7, 0x3}, {0x7, 0x1}]}]}, @NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x9, 0x12, 0x9, 0x24, 0x6, 0xb, 0x36, 0x1, 0x18, 0x6c, 0xb, 0x48, 0x12, 0x12, 0x6, 0x2, 0xb, 0x1, 0x30, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x0, 0x7, 0x80, 0x8, 0x2, 0x7]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x6, 0x4}, {0x7, 0x5}, {0x0, 0x9}, {0x5, 0x4}, {0x0, 0x9}, {0x1, 0xa}, {0x2, 0x6}, {0x4, 0x5}, {0x5, 0x8}, {0x6, 0x8}, {0x5, 0x9}, {0x5, 0x6}, {0x4, 0x5}, {0x5, 0x3}, {0x1, 0x8}, {0x4, 0x8}, {0x0, 0x5}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x7}, {0x6, 0x3}, {0x6, 0x3}, {0x5, 0xa}, {0x6, 0x5}, {0x4, 0x1}, {0x1, 0x3}, {0x5, 0x7}, {0x4}, {0x1, 0x5}, {0x2, 0x1}, {0x1, 0x5}, {0x1}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0x4}, {0x5}, {0x1, 0x5}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xc, 0x6, 0xb, 0x30, 0x1b, 0x18, 0xc, 0x6, 0x2, 0x4, 0x1b, 0x12, 0x9, 0xb, 0x5, 0x1b, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x10, 0x9, 0xfff, 0x1, 0x7fff, 0x1ff, 0x1d67]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x101, 0xc, 0x0, 0x8, 0x6, 0x4c5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2e84, 0x4, 0x7ff, 0x1, 0x5, 0x400, 0x7]}}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf1, 0x7, 0x6, 0x6, 0x7, 0xe, 0x5, 0x7]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3d20cc6a8ca1dbcc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xff}]}]}, @NL80211_ATTR_TID_CONFIG={0x324, 0x11d, 0x0, 0x1, [{0x12c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xdc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0x2}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0x2}, {0x3, 0x7}, {0x0, 0x4}, {0x4, 0x8}, {0x2}, {0x3, 0x4}, {0x0, 0x6}, {0x5, 0x9}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xbc, 0x4, 0x24, 0x81, 0x8, 0x4, 0xfff9, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x5}, {0x4, 0xa}, {0x1, 0x5}, {0x1, 0x3}, {0x2, 0x8}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x4}, {0x5}, {0x3, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x1, 0x1}, {0x0, 0xa}, {0x5, 0x9}, {0x2, 0x7}, {0x0, 0x4}, {0x2, 0x7}, {0x1, 0x2}, {0x1}, {0x0, 0x9}, {0x0, 0x8}, {0x3, 0x2}, {0x3, 0x8}, {0x7, 0x7}, {0x3, 0x6}, {0x0, 0x4}, {0x0, 0x8}, {0x1, 0x8}, {0x7, 0x9}, {0x6, 0x6}, {0x6, 0xa}, {0x6, 0x4}, {0x7, 0x1}, {0x2, 0xa}, {0x7, 0x6}, {0x2, 0x2}, {0x4}, {0x4, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x5, 0x6}, {0x4, 0x2}, {0x5, 0x8}, {0x7, 0x4}]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x7a1, 0x0, 0x3, 0x4, 0x4, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x90}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x1b8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x41}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x190, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x1, 0x9}, {0x7, 0x3}, {0x5}, {0x0, 0x8}, {0x3, 0x9}, {0x6, 0x6}, {0x5, 0x9}, {0x4, 0x2}, {0x2, 0x5}, {0x4, 0x9}, {0x0, 0xa}, {0x4, 0x5}, {0x4, 0x1}, {0x7, 0x7}, {0x3, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x80, 0x6, 0x9, 0x19, 0x1, 0x69ea, 0x10]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x5, 0x4, 0x4, 0x1000, 0x4, 0xf82]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x36, 0x0, 0x6c, 0xc, 0x16, 0x6, 0xfae6aaff6d2c0034, 0x16, 0x16, 0x36, 0x9, 0x3, 0x4b, 0x1b, 0xc0, 0x60, 0x30, 0x9, 0x2, 0x30, 0x24, 0x53, 0x60, 0xc, 0x5, 0x36, 0x6, 0x12, 0x48, 0x2, 0x18, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x1, 0x7, 0x4, 0x6ecb, 0x3, 0x0, 0x7f]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xd24, 0x4000, 0x2, 0x401, 0xfffe, 0x2, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x2, 0x5, 0x9111, 0x800, 0xfff7, 0x8]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0xa}, {0x0, 0x6}, {0x3, 0x2}, {0x2, 0x3}, {0x0, 0x6}, {0x0, 0x2}, {0x1, 0x8}, {0x7, 0x3}, {0x2, 0xa}, {0x5, 0x9}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x6}, {0x1, 0x4}, {0x7, 0x2}, {0x4, 0x4}, {0x5, 0x2}, {0x2, 0x6}, {0x4, 0x7}, {0x7, 0xa}, {0x6, 0xa}, {0x3, 0x1}, {0x7, 0x1}, {0x1, 0x3}, {0x0, 0x9}, {0x4, 0x5}, {0x2, 0x3}, {0x4, 0x8}, {0x2, 0x5}, {0x1}, {0x2, 0x2}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x7, 0x2}, {0x0, 0x7}, {0x6, 0xa}, {0x0, 0x6}, {0x4, 0x9}, {0x7, 0x4}, {0x1, 0xa}, {0x3, 0x9}, {0x7, 0x4}, {0x4, 0x3}, {0x7}, {0x0, 0x2}, {0x3}, {0x2, 0x1}, {0x6, 0x3}, {0x0, 0x3}, {0x1, 0x5}, {0x3, 0x1}, {0x4, 0x8}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x8}, {0x4, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4d0e, 0x8000, 0x8, 0x8, 0x9, 0x5, 0x9]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd692, 0x2, 0x2, 0x8000, 0x6, 0x200, 0x6, 0x85e9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x6}, {0x0, 0x6}, {0x4}, {0x6, 0x3}, {0x6, 0x7}, {0x7, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0xb3, 0xfffb, 0xa, 0x1, 0x6, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x210, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000000000000001}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x67}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x89}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x110, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x11, 0x12, 0x3d, 0x1b, 0x5, 0x2, 0x60, 0x31, 0x16, 0x4, 0x6c, 0x5, 0x24, 0x18, 0x6, 0x4, 0x30, 0x6, 0x1, 0x1, 0x60, 0xc, 0x16, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x3ff, 0x8, 0x7f, 0x8, 0x21df, 0x0, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5b, 0x8146, 0x1, 0x3, 0x200, 0x800, 0x4, 0x7fe]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x5, 0xe, 0x2f, 0x3, 0xd, 0x9, 0x40]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x200, 0x1, 0x40, 0x8903, 0x2b69, 0x188]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0xe73c, 0x991, 0x4, 0x3ff, 0xfe, 0x401, 0x9380]}}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x3, 0x1}, {0x1, 0x2}, {0x4, 0x3}, {0x1, 0x4}, {0x5, 0x3}, {0x0, 0xa}, {0x3, 0x8}, {0x4, 0x3}, {0x3, 0x6}, {0x4, 0x2}, {0x3, 0x3}, {0x0, 0xa}, {0x1, 0x3}, {0x5}, {0x5, 0x1}, {0x1, 0x9}, {0x7, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x5bc, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xbe}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x364, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xae45}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000000}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x31c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x4, 0x48, 0x2, 0x4, 0x4, 0x6, 0x36, 0x60, 0x60, 0xb, 0x60, 0x6c, 0x0, 0x5, 0x30, 0xc, 0x1, 0x60, 0x1f, 0x60, 0x18, 0x6c, 0x48, 0x4, 0x1, 0x48, 0x5, 0x16, 0x0, 0x1]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0x30, 0x5, 0x16, 0x36, 0x6, 0x1b, 0x16, 0x3, 0x24, 0x4, 0x60, 0x24, 0x12, 0x5, 0x6c, 0x2, 0xb, 0x48, 0x2, 0x36, 0x30, 0x18, 0x6, 0x48, 0x30, 0x1b, 0x36, 0x1, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x24, 0x36, 0xb, 0x48, 0x1, 0x48, 0x2, 0x44, 0x1, 0xb, 0x36, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0x1}, {0x0, 0x7}, {0x5, 0x1}, {0x2, 0x4}, {0x2, 0x2}, {0x5, 0xa}, {0x5}, {0x5, 0x2}, {0x7}, {0x6, 0x4}, {0x0, 0x3}, {0x6, 0x9}, {0x0, 0x3}, {0x0, 0x9}, {0x6, 0xa}, {0x4, 0xa}, {0x5, 0x5}, {0x1, 0x4}, {0x4, 0x1}, {0x5, 0x3}, {0x6, 0x1}, {0x3, 0x7}, {0x7, 0x3}, {0x1, 0x8}, {0x0, 0x6}, {0x2, 0x5}, {0x4, 0x3}, {0x6, 0x1}, {0x3, 0xa}, {0x7, 0x5}, {0x1, 0x2}, {0x1, 0x6}, {0x1, 0xa}, {0x7}, {0x1, 0x6}, {0x7}, {0x1, 0x9}, {0x0, 0x1}, {0x1, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x1, 0x3}, {0x0, 0x8}, {0x6, 0x8}, {0x1, 0x4}, {0x1, 0x4}, {0x1, 0x3}, {0x0, 0x8}, {0x4, 0x5}, {}, {0x3, 0xa}, {0x4, 0x7}, {0x4, 0x5}, {0x3, 0x8}, {0x1}, {0x7, 0x6}, {0x6}, {0x7, 0x3}, {0x3, 0x5}, {0x0, 0x7}, {0x5, 0x5}, {0x2}, {0x5, 0xa}, {0x7, 0x9}, {0x3, 0x7}, {0x6, 0x1}, {0x3, 0x7}, {0x5, 0x7}, {0x3, 0x9}, {0x2, 0xa}, {0x2, 0xa}, {0x0, 0x2}, {0x6, 0x8}, {0x2, 0x8}, {0x0, 0x8}, {0x1, 0x9}, {0x3, 0x5}, {0x7, 0xa}, {0x5, 0x5}, {0x1, 0x5}, {0x5, 0x2}, {0x1, 0x1}, {0x6}, {0x3, 0x2}, {0x1, 0x2}, {0x5}, {0x0, 0x2}, {0x4, 0x2}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdbd1, 0x2, 0xfff, 0xfff7, 0x6, 0xffff, 0x8a67, 0x9]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x3}, {0x4, 0x3}, {0x4, 0x7}, {0x6, 0x5}, {0x5, 0x8}, {0x3}, {0x3, 0x8}, {0x6, 0x3}, {0x1, 0x2}, {0x2}, {0x2, 0x2}, {0x2, 0x8}, {0x6, 0x6}, {0x6, 0x4}, {0x7}, {0x4, 0x9}, {0x2, 0xa}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x7, 0x1}, {0x2, 0x9}, {0x6, 0x7}, {0x1, 0x5}, {0x2, 0x6}, {0x3, 0x8}, {0x2, 0xa}, {0x6, 0x5}, {0x5, 0x2}, {0x0, 0x8}, {0x7, 0x4}, {0x7}, {0x5, 0x8}, {0x3, 0xa}, {0x3, 0x4}, {0x1, 0x8}, {0x1, 0x6}, {0x0, 0x8}, {0x0, 0x9}, {0x6, 0x4}, {0x1, 0x9}, {0x1, 0x3}, {0x2, 0xa}, {0x7, 0x5}, {0x6}, {0x0, 0x4}, {0x0, 0x5}, {0x2}, {0x1, 0x4}, {0x1, 0x2}, {0x4, 0x8}, {0x0, 0x1}, {0x5, 0x8}, {0x6, 0x2}, {0x7, 0x1}, {0x7, 0xa}, {0x4, 0x1}, {0x1, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x2}, {0x2, 0x6}, {0x6}, {0x4, 0x4}, {0x6, 0x2}, {0x4}, {0x0, 0x2}, {0x3, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6c, 0x2, 0x9, 0x1b, 0x91f8fdff62123c19, 0x2, 0x2, 0xc, 0x36, 0x24, 0x6c, 0x18, 0x16, 0x16, 0x2, 0xc, 0x6c, 0xc, 0x18, 0x48, 0x6, 0x1b, 0xb, 0x60, 0x12, 0x6, 0x36, 0xb, 0x16, 0x3, 0x7, 0x1b]}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x3, 0x5}, {0x0, 0x4}, {0x2, 0x4}, {}, {0x1, 0x6}, {0x6, 0x6}, {0x3, 0x2}, {0x7, 0x4}, {0x3, 0x4}, {0x7, 0x7}, {0x0, 0x5}, {0x3, 0x4}, {0x0, 0x3}, {0x3, 0x8}, {0x2, 0x4}, {0x7, 0x9}, {0x1, 0x5}, {0x4, 0x1}, {0x1, 0x4}, {0x5, 0x3}, {0x6, 0x1}, {}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x24, 0x6, 0x1, 0x24]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0x1, 0x58, 0x5, 0x2, 0x80, 0x7]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x1, 0x4}, {0x4, 0x3}, {0x1, 0x8}, {0x5, 0x1}, {0x1, 0x2}, {0x4, 0x8}, {0x0, 0x7}, {0x0, 0xa}, {0x4, 0x7}, {0x3}, {0x1}, {0x4, 0x8}, {0x7, 0x9}, {0x3, 0x4}, {0x3, 0x1}, {0x1, 0x8}, {0x4}, {0x2, 0x5}, {0x1, 0x4}, {0x0, 0x9}, {0x0, 0x2}, {0x5, 0x4}, {0x2, 0x7}, {0x2, 0x9}, {0x3, 0x1}, {0x1, 0x2}, {0x7, 0x1}, {0x0, 0x3}, {0x4, 0x3}, {0x0, 0x6}, {0x6, 0x5}]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x1, 0x5}, {0x1, 0x9}, {0x0, 0x1}, {0x1}, {}, {0x0, 0x4}, {0x5, 0xa}, {0x6, 0x2}, {0x7, 0x8}, {0x7, 0x3}, {0x0, 0x8}, {0x1, 0x2}, {0x4, 0xa}, {0x5, 0x7}, {0x2, 0x6}, {0x0, 0x7}, {0x5, 0x6}, {0x0, 0x1}, {0x2, 0x7}, {0x7}, {0x0, 0x2}, {0x1, 0xa}, {0x7, 0x7}, {0x3}, {0x3, 0x2}, {0x7, 0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x2}, {0x0, 0x2}, {0x6, 0x3}, {0x7, 0x7}, {0x1, 0x5}, {0x6, 0x3}, {0x0, 0x3}, {0x5, 0x1}, {0x4, 0x5}, {0x0, 0x8}, {0x2, 0x8}, {0x6, 0x6}, {0x0, 0x9}, {0x0, 0x5}, {0x3, 0x2}, {0x7, 0x9}, {0x0, 0x4}, {0x0, 0x2}, {0x2, 0xa}, {0x0, 0x7}, {0x6, 0x3}, {0x6, 0x6}, {0x0, 0x4}, {0x5, 0x5}, {0x2, 0x8}, {0x0, 0x3}, {0x2, 0x6}, {0x7, 0x3}, {0x2, 0x5}, {0x0, 0x7}, {0x2, 0x5}, {0x4, 0x5}, {0x3, 0x8}, {0x0, 0x2}, {0x4, 0x3}, {0x1, 0x4}, {0x5}, {0x6}, {0x1, 0x5}, {0x1, 0x5}, {0x7, 0x3}, {0x6, 0x2}, {0x6}, {0x2, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x9, 0x5, 0x6, 0x22d3, 0x7, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x40, 0xff, 0x4, 0x1, 0x0, 0xfffe]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x65d9, 0x4, 0x80, 0x5, 0x0, 0x1, 0x777c, 0xd]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x0, 0xa}, {0x0, 0x5}, {0x1, 0x7}, {0x7, 0xa}, {0x3, 0x9}, {0x3, 0x8}, {0x3, 0x8}, {0x3, 0x7}, {0x0, 0x9}, {0x5}, {0x4}, {0x0, 0x4}, {0x7, 0xa}, {0x2, 0x3}, {0x1, 0x1}, {0x2, 0x6}, {0x2, 0x3}, {0x5, 0x2}, {0x4, 0x4}, {0x1, 0xa}, {0x4, 0x7}, {0x0, 0x6}, {0x3, 0x3}, {0x5, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x1a0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x28, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x24, 0x51]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x33}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1, 0x1, 0x12, 0x60, 0x60, 0xc, 0x2, 0x36, 0x5, 0x60, 0x30, 0x30, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x1ab3, 0x0, 0x9b8, 0x40, 0x6, 0x2, 0x9e]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1dd5, 0x4, 0x81, 0x6, 0x3, 0xfffc, 0x0, 0x3242]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xbb, 0x4, 0x91f, 0x4, 0x2, 0x2, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xdce, 0x2, 0x10, 0x1000, 0x6, 0x0, 0x3]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7aa, 0x3, 0xd83, 0x1ff, 0x5dc, 0x5, 0x8, 0x7fff]}}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x3}, {0x2, 0x5}, {0x5, 0x1}, {0x0, 0x9}, {0x6, 0x1}, {0x3, 0x8}, {0x4, 0x7}, {}, {0x1, 0x1}, {0x0, 0x6}, {0x0, 0x7}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x0, 0x5}, {0x1, 0x4}, {0x6, 0x6}, {}, {0x2, 0x8}, {0x4}, {0x7, 0x7}, {0x2, 0x5}, {0x2}, {0x1, 0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x5, 0x7}, {0x6, 0x5}, {0x4, 0x7}, {0x1, 0x4}, {0x4, 0x1}, {0x3, 0x2}, {0x0, 0x2}, {0x1, 0x5}, {0x5, 0x5}, {0x7, 0x2}, {0x1, 0x5}, {0x2, 0x5}, {}, {0x0, 0x1}, {0x0, 0x4}, {0x6, 0xa}, {0x5, 0x8}, {0x6, 0x5}, {0x7, 0x3}, {0x4, 0x3}, {0x7, 0x2}, {0x0, 0x6}, {0x6, 0x7}, {0x4, 0x3}, {0x7, 0x9}, {0x3, 0x9}, {0x5, 0x6}]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x36, 0x6, 0x48, 0xb, 0x16, 0x2, 0xb, 0x9, 0x5, 0x3, 0xb, 0x6]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xfffa, 0x7, 0x2, 0x3, 0x3, 0x90e, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2e}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7d}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc1}]}]}, @NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x39}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x90}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x1198}, 0x1, 0x0, 0x0, 0xc0}, 0x800) r3 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x0, 0x1) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000001480)={0x0, 0x0, 0x3ff, 0xd}, 0x10) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x10, 0x3f5, 0x200, 0x70bd2d, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000800}, 0x3) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000015c0)='^^\x00', &(0x7f0000001600)='.:$.\x00', 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001680), r3) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x24, r5, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, r1, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "58193ad71dde940d84073491f752308d"}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8800) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000018c0), r3) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x3c, r6, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) sendmsg$inet(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000019c0)="3247c0a5efd664086993bf91d9f0a91a8651be32dda856bd7d88c7a4ceb817f23d7e5cc4d913fda202ad52a37c33dc94a9e6a4f0606293f1081bec5f055651281870c781b420f219350ec7eceabffc757d9bde0e8e585df7b5385db12d9b4761bbb1a125b161c56744", 0x69}], 0x1, &(0x7f0000001a80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x80000001}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb}}], 0x30}, 0x20044001) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001b40)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x50, 0x0, 0x202, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3d84aed17f593fcc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x816acfb3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8000}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4040098) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x24, r1, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) r8 = signalfd(r0, &(0x7f0000001d80)={[0x5]}, 0x8) r9 = fsmount(r8, 0x0, 0x88) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001e00), r8) sendmsg$TIPC_NL_NET_GET(r9, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x44, r10, 0x11, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5f92}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r8, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x7c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}]}, 0x7c}, 0x1, 0x0, 0x0, 0x42}, 0x4040) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r9, 0x10f, 0x84, &(0x7f0000002080), &(0x7f00000020c0)=0x4) ioctl$TCGETS2(r9, 0x802c542a, &(0x7f0000002100)) r11 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002140), 0x1, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r11, 0x4058587a, &(0x7f00000022c0)={{r3, &(0x7f0000002180)='[K\'\\\x00', 0x404000, &(0x7f00000021c0)={@align=0x7, {0x7, 0x9542, 0x5f1f7aa, 0x1}}, 0x81, &(0x7f0000002200), &(0x7f0000002240)=0x7}, {[0x10, 0xfffffff0, 0x2, 0x2]}, 0x41, 0x1b, &(0x7f0000002280)=""/27}) setsockopt$MRT_ASSERT(r9, 0x0, 0xcf, &(0x7f0000002340)=0x1, 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r12, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x101}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 3.079811546s ago: executing program 2 (id=194): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xe05, 0x3a, '/selinux/access\x00', 0x3a, 'kfree\x00', 0x3a, './file0'}, 0x3d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000080)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000080)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0xc028ae92, &(0x7f00000002c0)={0x1}) r6 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) setsockopt$packet_buf(r6, 0x107, 0x6, &(0x7f0000000180)="1681447f608224da01b846492d6543358a63f597d59200290fbae4b9aa7bf548da91612685a6d9ef8d227485829d381bd63e50a1f5c4c965dc448f518e0ec150686ffe0c822467922afa2b7cf47b41ef42a2895c13b84819d8112f9445b97b76632db7c5a7047a2f5a1a23bcf04c7a748061669f2d9675b6ca420f1fdd170aa21aa2dee18a8c81953a842344b1a44615f304bd54cf4556693abf361437738d6ed0c3b397455e779b42322a5337770c48ce05fb021169aebb4beb2558eadd924550b224999799877a2833aed3e55b637c705406", 0xd3) getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, &(0x7f00000000c0)) syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff000040da0b52811130010203010902380001ff0f000009040000530f99c303ffff400007058d020002000705020200020007058303"], 0x0) 2.445110101s ago: executing program 0 (id=196): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000001500)=[@text64={0x40, &(0x7f0000001540)="f081550100a000000f01a6b9fc0300000f324500a2be252f8a094d36420f705626002e660f3a176a4b00b9800100c035f70000000f22c067420f01c3460f79c20cb8b8010000000f01d945c194710a00000005c6828b44bcae0090", 0x5b}], 0x1, 0x1, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000040)={0xa, 0x7, [{0x7, 0x0, 0x3}, {0x3, 0x0, 0x3}, {0x3, 0x0, 0x11a2}, {0xffffff7f, 0x0, 0x8}, {0x9, 0x0, 0x4}, {0x6, 0x0, 0x4}, {0x8, 0x0, 0x4}, {0x62a, 0x0, 0x4}, {0x64, 0x0, 0x2}, {0x9}, {0x6, 0x0, 0x4}, {0x9, 0x0, 0x8000000000000000}, {0x1, 0x0, 0x3}, {0x2, 0x0, 0x2000}, {0x7fffffff, 0x0, 0x10}, {0x4, 0x0, 0x3}]}) 2.371322079s ago: executing program 0 (id=197): r0 = memfd_create(&(0x7f00000001c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) iopl(0x3) nanosleep(&(0x7f0000000040)={0x10000008, 0x4000000000000002}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000440)={0x0, 0x1, 0x71f2, 0x1000007}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0xc8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write(r1, &(0x7f00000004c0)='4', 0x1) 2.272996779s ago: executing program 0 (id=198): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt(r1, 0x90, 0x1, 0x0, 0x0) write(r0, &(0x7f0000000380)='100', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./bus\x00', 0xe3) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2.230956913s ago: executing program 3 (id=199): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, 0x0) chdir(0x0) r3 = open(0x0, 0x80000, 0x103) getdents(r3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.831218604s ago: executing program 0 (id=200): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0xcb, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000400)=0x10001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4, @multicast2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x8000000000000000, 0x100000000000}, {0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0xfffffffe, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000000580), 0x800001d, 0x0) r4 = syz_usb_connect(0x3, 0xc7, &(0x7f0000000000)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224020101020000000000000000030000000924030201010003000c24050301000002000000000705810310000609040100000e0200000e240101470082000200000001001b240401015955593200001000800000aa00389b711001000000001e24050100a000780000c0e00000c0e000009600001516050001"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)={0x0, 0x12, 0x3c, "6b02dc3cf8bcb1239d12008f5f75ff0d911df0c47f54f58b48abd06f29a2436d14c1179c2dee99da3abd5316c54da0e828d39609ea956e513abe1ad6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r5, 0x0, 0x14, 0x0, &(0x7f0000000e80)) 1.456529131s ago: executing program 1 (id=201): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) 1.411018006s ago: executing program 1 (id=202): sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f00000000c0)={0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000200)={@val={0xa, 0x10}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x46}, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, '\x00', 0x0, 0x88, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2}}}}}, 0x3a) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c80)=ANY=[@ANYBLOB="240000002100010000000000000000000a00000000000001016200000800158002"], 0x24}], 0x1}, 0x0) 1.305553957s ago: executing program 1 (id=203): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000000000205f14120200000000000109022400010000600009040180020300000009210604000122050009058103"], 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000200)={0x0, 0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000440)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000540)={'veth0_to_hsr\x00'}) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xc, "09207420fe0090a2000000000000fffb8000000000000000fa0f00"}) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x101100, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) close_range(r4, 0xffffffffffffffff, 0x200000000000000) syz_usb_control_io(r0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000004800010000000000000000000a00806e0800000000000000140001800d2a79075827af5aa534d6815c2e93f10c000280", @ANYRES32], 0x3c}}, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000d00)={0x24, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) connect$netlink(r6, &(0x7f00000003c0)=@unspec, 0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="2e00000013000500000000000000000003010000100002007664706173696d5f6e6574000a00040076647061303f", 0x2e}], 0x1}, 0x0) syz_usb_connect(0x5, 0x39, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000200000040490d007001000102030109022700010100803209040000030806500007000102000200070582020002000705835e87"], 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000480)={0x0, 0x3, 0xc, @string={0xc, 0x3, "7da73cb86b47777a03fd"}}, 0x0, 0x0, 0x0}, 0x0) 1.300805258s ago: executing program 3 (id=204): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000200)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005700)=""/4112, 0x1010}, {&(0x7f0000004340)=""/38, 0x26}, {&(0x7f0000004380)=""/98, 0x62}, {&(0x7f0000004580)=""/4087, 0xff7}, {&(0x7f00000055c0)=""/120, 0x78}, {&(0x7f0000005640)=""/187, 0xbb}, {0x0}, {&(0x7f0000000640)=""/98, 0x62}], 0x8}}, {{0x0, 0x0, 0x0}, 0x7ffffff}], 0x2, 0x40002100, 0x0) 1.283827559s ago: executing program 3 (id=205): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$pptp(0x18, 0x1, 0x2) (async) r2 = syz_ublk_setup_io_uring(0x50ba, &(0x7f00000000c0)={0x0, 0xe62e, 0x80000, 0x3, 0x2bd}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000000)) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r5, @ANYRES8=r5, @ANYRES32=r4, @ANYRES8=r2, @ANYBLOB="8709c1739eaa9f266f1bd9cfd32801e149319aeec2ebe7de7b2664e98fc58e7bdd98251874d80d5240683452beee10ba1d554b40654da5d67d0fb9a78156dfbf122896a80d4b72995bfde79b915f73160acd9e", @ANYRESDEC=r0, @ANYRESDEC=r3, @ANYRESHEX=r4], 0x3c}], 0x1, 0x0, 0x0, 0xc090}, 0x40080) 1.27051095s ago: executing program 3 (id=206): epoll_create(0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2c41, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x20000) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x2, 0x1) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000d40)=ANY=[@ANYBLOB="ff07000000000000270b0000000000000100000000000000", @ANYRES32=r5, @ANYBLOB="0bcf5ce242f18d00000000000100"/35]) pipe(&(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x80) r12 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl(r12, 0x400452c8, &(0x7f0000000400)="00000000000000f1ffffffffffffff000512665a01") mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000c80)='./dev\x00', &(0x7f0000000cc0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000d00)='./dev/rfcomm0\x00', 0x802, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(r11, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000540)=0x0) r14 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r11, r13, &(0x7f0000000680)={0x0, 0x7590, 0x4000, 0x2, 0x128, 0x0, r10}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad5b, 0x20000, 0x3, 0x2d9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8149, 0x20, 0x2, 0x13c}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd6d7, 0x200, 0x1, 0x1c7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4ce6, 0x0, 0x2, 0x19e, 0x0, r9}}], 0x4, 0x0, 0x0) syz_ublk_setup_queues(r14, r13, &(0x7f0000000980)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d, 0x0, r15}}], 0x1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x8, 0x7ff, 0x0, 0x0, 0xd, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "82da37601a8ca5b07dcc06ff00", [0xfffffffffffffce8, 0xa]}}) 355.116284ms ago: executing program 3 (id=207): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f00000003c0)=0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x22082, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000a00)=[@text16={0x10, &(0x7f0000000a40)="ea0080b00066b9800000c00f320f91ebe1ca1be1ca1b000d004300ba000100000d1ff5ee1a0f32d8910080262e0f01c4b85800643ed068002e7e1b", 0x3b}], 0x1, 0x4, &(0x7f0000000a80)=[@cstype3={0x5, 0xd}], 0x1) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2f) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r6, r7, &(0x7f0000000400)={0x0, 0x7590, 0x4000, 0x2, 0x128, 0x0, r5}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad5b, 0x20000, 0x3, 0x2d9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8149, 0x20, 0x2, 0x13c}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd6d7, 0x200, 0x1, 0x1c7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4ce6, 0x0, 0x2, 0x19e, 0x0, r4}}], 0x4, 0x0, 0x0) syz_ublk_setup_queues(r12, r7, &(0x7f0000000700)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d, 0x0, r13}}], 0x1, 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r14, r15, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_RUN(r15, 0xae80, 0x0) 173.505853ms ago: executing program 0 (id=208): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone3(0x0, 0x0) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x13) r2 = memfd_create(&(0x7f0000000280)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\x04\x00\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd1M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xdew\x94\x01\x88K\xe6\x86\xaf)hW\xc8\\/Pl\x9b\x1b\xf2\xf1_\xbb\xaa\xc9?\xf7\xae\x13\xc2\f=\x059\x1c\xb7\x1ca\xe4\xb8C[\x06\x8c\f%l\x19I\x1fq9y)\xaf~~\xa8\xaf\'S\xf0kA\xa8\x93\x8a\xd3\x98\xbf[5\x0f\x05\"\xbd4h\xd9\xd4\xb8\x17P\xb4\xa7\xd6\x03\x86\xe6\xb0\x90W\xc3\xbd\xcb\x1er\xc4e\xc2\x96\r\x15\x84\xda\x16m\xc7\x19g\x83O\a=\xcb\'\xb7E\xc2\xd3L\xd5\xe5\xc2&L\xebjb\xfaOBc\x95\xb7\x97[\xcd$n\xbcO\x81\x03\xc3e:C&\"\x06B:\xa4\xe9\xab\x95DG(^\xd7\xb4\x8e5\x1a\xdb\xcf\x12\xccV\xb7\x98i\xfb\xadv\xb3', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r2, 0x0) tkill(r1, 0x12) waitid(0x1, r1, 0x0, 0x8, &(0x7f0000000740)) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newsa={0x148, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@private1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0xfb5, 0xa, 0x80, 0x20}, {@in=@broadcast, 0x4d4, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251e, 0x5, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x2}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x148}}, 0x844) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) 98.81144ms ago: executing program 0 (id=209): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x4}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x41, 0x0, 0x1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r2, 0x0, 0xf, 0x0, &(0x7f00000000c0)) syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 8.986789ms ago: executing program 2 (id=210): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="d6cec25f210a1db04fa819a7a425eb90002396964d756e2bce05a9893047f6099de9ab349303d7f2a38daad4b54b9a080a6febea3f899e412dc9b0da968e9090cac5"], 0x64) socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3) socket$inet6(0xa, 0x3, 0x1) sendto$packet(0xffffffffffffffff, &(0x7f00000005c0)="0b041400e0ffe2ff02004788001ca13b", 0x10, 0x0, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000600), 0x2, 0x4140) r6 = fspick(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x1) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x101000, 0x0) fsopen(&(0x7f00000006c0)='logfs\x00', 0x1) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) syz_kvm_setup_cpu$x86(r8, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000700)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000740)={0x2, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x6, 0x41, 0x1, 0xf7}}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000980)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x8, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c0251}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f00000001c0)=0x100000b3, 0x4) 0s ago: executing program 2 (id=211): mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./dev\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/../file0\x00', 0x480c2, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x104000, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000800)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000006e00)={0x1, &(0x7f0000006e40)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000006e80)={0x1, &(0x7f0000006ec0)=[{0x6, 0x5}]}, 0x10) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f00000001c0)='binfmt_misc\x00', 0x0, 0x0) socket(0x10, 0x803, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000007000)={'veth0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000007040)={'veth0\x00', &(0x7f0000007080)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000070c0)={&(0x7f0000007100)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000007140)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000007180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000071c0)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000007200)={0x2c, 0x0, r2, 0x1, 0xffffffff}, 0x10) r4 = epoll_create(0x61) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000007240)={0x60000005}) mknod(&(0x7f00000000c0)='./dev/sda1\x00', 0x486c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt\x00', 0x1ff) mount(&(0x7f0000000940)=@filename='./dev/sda1\x00', &(0x7f0000000980)='./mnt\x00', &(0x7f00000009c0)='ext4\x00', 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000080)=@random={'trusted.', 'devtmpfs\x00'}, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) mount$9p_unix(&(0x7f0000000540)='./dev/sda1\x00', &(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0), 0x3040000, &(0x7f0000000740)={'trans=unix,', {[{@version_L}, {}, {@cache_none}, {@cache_readahead}, {@fscache}, {@access_client}, {@msize={'msize', 0x3d, 0x15}}, {@cache_readahead}], [{@dont_hash}, {@euid_lt={'euid<', r6}}, {@fsmagic={'fsmagic', 0x3d, 0x2f}}]}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.106' (ED25519) to the list of known hosts. [ 20.371547][ T36] audit: type=1400 audit(1793729886.390:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.394742][ T36] audit: type=1400 audit(1793729886.410:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.395783][ T286] cgroup: Unknown subsys name 'net' [ 20.422560][ T36] audit: type=1400 audit(1793729886.440:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.422693][ T286] cgroup: Unknown subsys name 'devices' [ 20.549506][ T286] cgroup: Unknown subsys name 'hugetlb' [ 20.555145][ T286] cgroup: Unknown subsys name 'rlimit' [ 20.707050][ T36] audit: type=1400 audit(1793729886.720:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.730303][ T36] audit: type=1400 audit(1793729886.720:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.755126][ T36] audit: type=1400 audit(1793729886.720:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.763636][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.787999][ T36] audit: type=1400 audit(1793729886.800:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.813542][ T36] audit: type=1400 audit(1793729886.810:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.858945][ T36] audit: type=1400 audit(1793729886.880:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.859455][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.884475][ T36] audit: type=1400 audit(1793729886.880:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.694066][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.701401][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.708530][ T296] bridge_slave_0: entered allmulticast mode [ 21.714724][ T296] bridge_slave_0: entered promiscuous mode [ 21.722589][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.729641][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.736875][ T296] bridge_slave_1: entered allmulticast mode [ 21.743221][ T296] bridge_slave_1: entered promiscuous mode [ 21.776890][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.783977][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.791127][ T295] bridge_slave_0: entered allmulticast mode [ 21.797285][ T295] bridge_slave_0: entered promiscuous mode [ 21.806655][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.813726][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.820825][ T295] bridge_slave_1: entered allmulticast mode [ 21.826964][ T295] bridge_slave_1: entered promiscuous mode [ 21.870248][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.877314][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.884526][ T293] bridge_slave_0: entered allmulticast mode [ 21.890835][ T293] bridge_slave_0: entered promiscuous mode [ 21.897174][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.904278][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.911420][ T293] bridge_slave_1: entered allmulticast mode [ 21.917685][ T293] bridge_slave_1: entered promiscuous mode [ 21.924018][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.931142][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.938289][ T294] bridge_slave_0: entered allmulticast mode [ 21.944441][ T294] bridge_slave_0: entered promiscuous mode [ 21.953415][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.960506][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.967704][ T294] bridge_slave_1: entered allmulticast mode [ 21.973894][ T294] bridge_slave_1: entered promiscuous mode [ 22.077410][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.084500][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.091819][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.098883][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.131251][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.138343][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.145655][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.152770][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.178208][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.185278][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.192608][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.199654][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.222455][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.229982][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.237150][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.244743][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.253370][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.260921][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.280018][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.287083][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.302388][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.309477][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.317389][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.324461][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.346099][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.353204][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.361490][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.368531][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.376586][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.383631][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.425680][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.432778][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.449700][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.456759][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.470192][ T295] veth0_vlan: entered promiscuous mode [ 22.477871][ T296] veth0_vlan: entered promiscuous mode [ 22.490775][ T294] veth0_vlan: entered promiscuous mode [ 22.497873][ T296] veth1_macvtap: entered promiscuous mode [ 22.519788][ T295] veth1_macvtap: entered promiscuous mode [ 22.528319][ T294] veth1_macvtap: entered promiscuous mode [ 22.575214][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.577324][ T293] veth0_vlan: entered promiscuous mode [ 22.619319][ T315] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.621052][ T293] veth1_macvtap: entered promiscuous mode [ 22.649029][ T317] ======================================================= [ 22.649029][ T317] WARNING: The mand mount option has been deprecated and [ 22.649029][ T317] and is ignored by this kernel. Remove the mand [ 22.649029][ T317] option from the mount to silence this warning. [ 22.649029][ T317] ======================================================= [ 22.694084][ T321] x86/PAT: syz.3.4:321 freeing invalid memtype [mem 0xfe408000-0xfe408fff] [ 22.900565][ T347] netlink: 140 bytes leftover after parsing attributes in process `syz.1.8'. [ 23.207619][ T310] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.387684][ T310] usb 2-1: Using ep0 maxpacket: 8 [ 23.395702][ T310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 23.405955][ T310] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 23.424846][ T310] usb 2-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 23.434314][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.442360][ T310] usb 2-1: Product: syz [ 23.446513][ T310] usb 2-1: Manufacturer: syz [ 23.451161][ T310] usb 2-1: SerialNumber: syz [ 23.483409][ T320] x86/PAT: syz.3.4:320 freeing invalid memtype [mem 0xfe407000-0xfe407fff] [ 23.547595][ T9] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 23.673691][ T392] Zero length message leads to an empty skb [ 23.707582][ T9] usb 3-1: Invalid ep0 maxpacket: 32 [ 23.837317][ T403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 23.837572][ T9] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 23.875364][ T407] FAULT_INJECTION: forcing a failure. [ 23.875364][ T407] name failslab, interval 1, probability 0, space 0, times 1 [ 23.888221][ T407] CPU: 0 UID: 0 PID: 407 Comm: syz.0.20 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 23.888253][ T407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 23.888276][ T407] Call Trace: [ 23.888284][ T407] [ 23.888292][ T407] __dump_stack+0x21/0x30 [ 23.888317][ T407] dump_stack_lvl+0x140/0x1c0 [ 23.888335][ T407] ? __cfi_dump_stack_lvl+0x10/0x10 [ 23.888349][ T407] ? number+0xc9d/0xf00 [ 23.888359][ T407] dump_stack+0x19/0x20 [ 23.888368][ T407] should_fail_ex+0x3c2/0x510 [ 23.888385][ T407] should_failslab+0xac/0x100 [ 23.888396][ T407] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 23.888412][ T407] ? sidtab_sid2str_get+0x135/0x360 [ 23.888426][ T407] kmemdup_noprof+0x31/0x80 [ 23.888439][ T407] sidtab_sid2str_get+0x135/0x360 [ 23.888452][ T407] security_sid_to_context_core+0x30d/0x5d0 [ 23.888465][ T407] security_sid_to_context+0x2e/0x50 [ 23.888476][ T407] avc_audit_post_callback+0x117/0x790 [ 23.888488][ T407] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 23.888499][ T407] ? audit_log_untrustedstring+0xea/0x100 [ 23.888513][ T407] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 23.888523][ T407] common_lsm_audit+0x1b9/0x220 [ 23.888534][ T407] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 23.888544][ T407] ? __cfi_common_lsm_audit+0x10/0x10 [ 23.888554][ T407] ? avc_update_node+0x2fc/0x8a0 [ 23.888565][ T407] slow_avc_audit+0x19f/0x220 [ 23.888575][ T407] ? __cfi_slow_avc_audit+0x10/0x10 [ 23.888585][ T407] ? avc_has_perm_noaudit+0x2bc/0x360 [ 23.888596][ T407] avc_has_perm+0x1ec/0x240 [ 23.888607][ T407] ? __cfi_avc_has_perm+0x10/0x10 [ 23.888617][ T407] ? __schedule+0x16e8/0x2380 [ 23.888629][ T407] selinux_socket_sendmsg+0x281/0x380 [ 23.888641][ T407] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 23.888656][ T407] ? __sched_text_start+0x10/0x10 [ 23.888668][ T407] ? __futex_queue+0x19f/0x350 [ 23.888679][ T407] security_socket_sendmsg+0x5c/0x100 [ 23.888691][ T407] ____sys_sendmsg+0x533/0xa00 [ 23.888705][ T407] ? __import_iovec+0x5b9/0x7d0 [ 23.888717][ T407] ? __sys_sendmsg_sock+0x50/0x50 [ 23.888729][ T407] ? import_iovec+0x80/0xb0 [ 23.888741][ T407] ___sys_sendmsg+0x2a6/0x370 [ 23.888754][ T407] ? __sys_sendmsg+0x260/0x260 [ 23.888766][ T407] ? __cfi_futex_wait+0x10/0x10 [ 23.888780][ T407] ? __fget_files+0x2bc/0x330 [ 23.888791][ T407] __x64_sys_sendmsg+0x1be/0x2a0 [ 23.888804][ T407] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 23.888818][ T407] ? __kasan_check_write+0x18/0x20 [ 23.888838][ T407] ? fpregs_restore_userregs+0x11c/0x260 [ 23.888852][ T407] ? switch_fpu_return+0x12/0x20 [ 23.888864][ T407] x64_sys_call+0x2a4c/0x2ee0 [ 23.888875][ T407] do_syscall_64+0x57/0xf0 [ 23.888885][ T407] ? clear_bhb_loop+0x50/0xa0 [ 23.888899][ T407] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 23.888911][ T407] RIP: 0033:0x7f254f39fb19 [ 23.888928][ T407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 23.888937][ T407] RSP: 002b:00007f254dde3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 23.888952][ T407] RAX: ffffffffffffffda RBX: 00007f254f625fa0 RCX: 00007f254f39fb19 [ 23.888961][ T407] RDX: 0000000020000c00 RSI: 0000200000000000 RDI: 0000000000000005 [ 23.888969][ T407] RBP: 00007f254f437b70 R08: 0000000000000000 R09: 0000000000000000 [ 23.888975][ T407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 23.888982][ T407] R13: 00007f254f626038 R14: 00007f254f625fa0 R15: 00007ffe0de0d1d8 [ 23.888991][ T407] [ 23.947708][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.047589][ T9] usb 3-1: Invalid ep0 maxpacket: 32 [ 24.232095][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.239867][ T9] usb usb3-port1: attempt power cycle [ 24.263818][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 24.273489][ T310] usb 2-1: unit 0 not found! [ 24.287599][ T31] usb 4-1: config 1 has no interface number 0 [ 24.292573][ T310] usb 2-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 24.312320][ T31] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 24.313305][ T310] usb 2-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 24.339837][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 24.345861][ T412] capability: warning: `syz.0.21' uses deprecated v2 capabilities in a way that may be insecure [ 24.349261][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.378296][ T31] usb 4-1: Product: syz [ 24.382535][ T31] usb 4-1: Manufacturer: syz [ 24.387124][ T31] usb 4-1: SerialNumber: syz [ 24.388231][ T310] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 24.399514][ T31] usb 4-1: selecting invalid altsetting 1 [ 24.403835][ T310] usb 2-1: USB disconnect, device number 2 [ 24.449070][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.649854][ T397] cgroup: fork rejected by pids controller in /syz3 [ 24.656582][ T9] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 24.677957][ T9] usb 3-1: Invalid ep0 maxpacket: 32 [ 24.758506][ T388] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.807680][ T9] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 24.837924][ T9] usb 3-1: Invalid ep0 maxpacket: 32 [ 24.850660][ T9] usb usb3-port1: unable to enumerate USB device [ 24.924835][ T31] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 24.930953][ T31] cdc_ncm 4-1:1.1: bind() failure [ 24.939188][ T388] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 24.947140][ T388] usb 1-1: can't read configurations, error -22 [ 24.953807][ T31] usb 4-1: USB disconnect, device number 2 [ 25.087607][ T388] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 25.249838][ T388] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 25.257851][ T388] usb 1-1: can't read configurations, error -22 [ 25.264272][ T388] usb usb1-port1: attempt power cycle [ 25.445117][ T36] kauditd_printk_skb: 99 callbacks suppressed [ 25.445133][ T36] audit: type=1400 audit(1793729891.460:173): avc: denied { mount } for pid=512 comm="syz.3.32" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 25.473600][ T36] audit: type=1400 audit(1793729891.460:174): avc: denied { remount } for pid=512 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.607737][ T388] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 25.629410][ T388] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 25.637395][ T388] usb 1-1: can't read configurations, error -22 [ 25.767669][ T388] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 25.789329][ T388] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 25.797265][ T388] usb 1-1: can't read configurations, error -22 [ 25.803640][ T517] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 25.803741][ T388] usb usb1-port1: unable to enumerate USB device [ 25.823501][ T36] audit: type=1400 audit(1793729891.840:175): avc: denied { write } for pid=515 comm="syz.3.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 25.847306][ T517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33'. [ 26.086393][ T36] audit: type=1400 audit(1793729892.100:176): avc: denied { name_bind } for pid=526 comm="syz.1.37" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 26.109341][ T36] audit: type=1400 audit(1793729892.100:177): avc: denied { node_bind } for pid=526 comm="syz.1.37" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 26.312159][ T36] audit: type=1400 audit(1793729892.330:178): avc: denied { setopt } for pid=530 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.331893][ T36] audit: type=1400 audit(1793729892.350:179): avc: denied { map } for pid=530 comm="syz.2.39" path="socket:[5215]" dev="sockfs" ino=5215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.354789][ T36] audit: type=1400 audit(1793729892.350:180): avc: denied { read } for pid=530 comm="syz.2.39" path="socket:[5215]" dev="sockfs" ino=5215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.437606][ T310] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.537337][ T36] audit: type=1400 audit(1793729892.550:181): avc: denied { create } for pid=535 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 26.587607][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 26.593882][ T310] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.605234][ T310] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 26.615123][ T36] audit: type=1400 audit(1793729892.630:182): avc: denied { map } for pid=535 comm="syz.3.41" path="socket:[5242]" dev="sockfs" ino=5242 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 26.638002][ T310] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 26.648090][ T310] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 26.661912][ T310] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 26.671029][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 26.679132][ T310] usb 2-1: SerialNumber: syz [ 26.684598][ T529] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 26.691856][ T529] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 26.699618][ T310] hub 2-1:1.0: bad descriptor, ignoring hub [ 26.705593][ T310] hub 2-1:1.0: probe with driver hub failed with error -5 [ 26.712824][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 26.735540][ T539] bpf: Bad value for 'gid' [ 26.741482][ T539] fuse: Bad value for 'user_id' [ 26.746367][ T539] fuse: Bad value for 'user_id' [ 26.878318][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 26.884514][ T9] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 26.896007][ T9] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.908969][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 26.915893][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 26.926033][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.937961][ T9] usb 3-1: config 0 descriptor?? [ 26.976334][ T545] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 26.983557][ T545] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 27.347809][ T533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.356422][ T533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.372786][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 27.378978][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 27.387881][ T9] usb 3-1: USB disconnect, device number 6 [ 27.392018][ T545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.402372][ T545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.414057][ T310] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 27.600305][ T568] batadv_slave_1: entered promiscuous mode [ 27.670411][ T572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.679052][ T572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.788205][ T567] batadv_slave_1: left promiscuous mode [ 27.803349][ T576] netlink: 'syz.0.47': attribute type 12 has an invalid length. [ 27.967748][ T596] rust_binder: 595:596 no such ref 0 [ 27.973146][ T596] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 27.981258][ T596] rust_binder: Read failure Err(EFAULT) in pid:58 [ 28.002493][ T598] rust_binder: 597:598 got transaction to invalid handle 1 [ 28.010302][ T598] rust_binder: 597:598 transaction async to 0:0 failed ENOENT, code 1 size 0-0 line process.rs:958 [ 28.021255][ T310] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.028068][ T598] rust_binder: 597: undelivered TRANSACTION_ERROR: 29201 [ 28.136091][ T601] netlink: 104 bytes leftover after parsing attributes in process `syz.0.56'. [ 28.177570][ T310] usb 4-1: device descriptor read/64, error -71 [ 28.417589][ T310] usb 4-1: device descriptor read/64, error -71 [ 28.657590][ T310] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 28.788099][ T310] usb 4-1: device descriptor read/64, error -71 [ 29.029541][ T310] usb 4-1: device descriptor read/64, error -71 [ 29.051355][ T625] ptp ptp0: new virtual clock ptp1 [ 29.059894][ T625] ptp ptp0: new virtual clock ptp2 [ 29.068804][ T625] ptp ptp0: new virtual clock ptp3 [ 29.078337][ T625] ptp ptp0: new virtual clock ptp4 [ 29.083618][ T625] ptp ptp0: guarantee physical clock free running [ 29.091348][ T625] ptp ptp0: delete virtual clock ptp4 [ 29.109391][ T625] ptp ptp0: delete virtual clock ptp3 [ 29.116602][ T625] ptp ptp0: delete virtual clock ptp2 [ 29.123987][ T625] ptp ptp0: guarantee physical clock free running [ 29.137756][ T310] usb usb4-port1: attempt power cycle [ 29.212752][ T31] usb 2-1: USB disconnect, device number 3 [ 29.225705][ T31] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 29.331985][ T637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.63'. [ 29.497580][ T310] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 29.528630][ T310] usb 4-1: device descriptor read/8, error -71 [ 29.658980][ T310] usb 4-1: device descriptor read/8, error -71 [ 29.677565][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 29.838664][ T31] usb 2-1: config 1 has an invalid descriptor of length 98, skipping remainder of the config [ 29.849215][ T31] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 29.858335][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.872766][ T31] uvcvideo 2-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 29.892876][ T31] usb 2-1: Found UVC 1.00 device (0000:0000) [ 29.907707][ T31] uvcvideo 2-1:1.1: No supported video formats found. [ 29.907764][ T310] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 29.924083][ T31] uvcvideo 2-1:1.1: Failed to initialize the device (-22). [ 29.958546][ T310] usb 4-1: device descriptor read/8, error -71 [ 30.094297][ T9] usb 2-1: USB disconnect, device number 4 [ 30.118620][ T310] usb 4-1: device descriptor read/8, error -71 [ 30.227670][ T310] usb usb4-port1: unable to enumerate USB device [ 30.546547][ T36] kauditd_printk_skb: 40 callbacks suppressed [ 30.546563][ T36] audit: type=1400 audit(1793729896.560:223): avc: denied { read write } for pid=692 comm="syz.2.69" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.548283][ T694] input: syz0 as /devices/virtual/input/input4 [ 30.563183][ T36] audit: type=1400 audit(1793729896.560:224): avc: denied { open } for pid=692 comm="syz.2.69" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.587225][ T36] audit: type=1400 audit(1793729896.560:225): avc: denied { ioctl } for pid=692 comm="syz.2.69" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.632706][ T36] audit: type=1400 audit(1793729896.600:226): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=454 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.655240][ T36] audit: type=1400 audit(1793729896.600:227): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=454 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.678820][ T36] audit: type=1400 audit(1793729896.600:228): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=454 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.715207][ T36] audit: type=1400 audit(1793729896.710:229): avc: denied { read } for pid=700 comm="syz.2.72" path="socket:[5936]" dev="sockfs" ino=5936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.800782][ T721] netlink: 28 bytes leftover after parsing attributes in process `syz.3.78'. [ 30.851812][ T36] audit: type=1400 audit(1793729896.870:230): avc: denied { setopt } for pid=719 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 30.874742][ T720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=720 comm=syz.3.78 [ 30.887556][ T36] audit: type=1400 audit(1793729896.890:231): avc: denied { write } for pid=719 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 30.906839][ T36] audit: type=1400 audit(1793729896.910:232): avc: denied { map } for pid=712 comm="syz.1.75" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.297637][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 31.345159][ T751] netlink: 'syz.2.87': attribute type 12 has an invalid length. [ 31.353503][ T751] x_tables: duplicate underflow at hook 1 [ 31.369386][ T755] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 31.377484][ T755] rust_binder: Read failure Err(EFAULT) in pid:56 [ 31.385394][ T755] rust_binder: 754:755 failed copying remainder into alloc: EFAULT [ 31.393885][ T755] rust_binder: 754:755 transaction call to 754:0 failed EFAULT, code 0 size 120-24 line thread.rs:1139 [ 31.405980][ T388] rust_binder: 754: undelivered TRANSACTION_ERROR: 29201 [ 31.448656][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.458842][ T31] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 31.468913][ T757] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 31.477412][ T31] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 31.486742][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.494807][ T31] usb 4-1: Product: syz [ 31.499031][ T31] usb 4-1: Manufacturer: syz [ 31.503640][ T31] usb 4-1: SerialNumber: syz [ 31.624615][ T762] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 31.634128][ T762] overlayfs: failed to get uuid (22/file0, err=-13); falling back to uuid=null. [ 31.664055][ T767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.675306][ T767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.878496][ T31] usb 4-1: BAAD HEADSET c_chmask mismatch [ 31.885565][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 31.907573][ T310] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 31.909072][ T31] usb 4-1: USB disconnect, device number 7 [ 31.933427][ T777] udevd[777]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.069333][ T310] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 32.079223][ T310] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 32.089068][ T310] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.100133][ T310] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 32.109276][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.117290][ T310] usb 3-1: Product: syz [ 32.123393][ T310] usb 3-1: Manufacturer: syz [ 32.128028][ T310] usb 3-1: SerialNumber: syz [ 32.133912][ T766] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 32.141124][ T766] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 32.149521][ T310] cdc_acm 3-1:1.1: probe with driver cdc_acm failed with error -12 [ 32.219803][ T779] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 32.239304][ T782] tipc: Started in network mode [ 32.244280][ T782] tipc: Node identity 7f000001, cluster identity 4711 [ 32.251761][ T782] tipc: New replicast peer: 127.0.0.1 [ 32.260524][ T782] tipc: Enabled bearer , priority 10 [ 32.270658][ T782] tipc: Disabling bearer [ 32.347577][ T791] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 32.349798][ T310] usb 3-1: USB disconnect, device number 7 [ 32.567657][ T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 32.697572][ T31] usb 4-1: device descriptor read/64, error -71 [ 32.882946][ T811] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 32.906193][ T811] kvm: kvm [810]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001f) [ 32.937594][ T31] usb 4-1: device descriptor read/64, error -71 [ 33.097135][ T821] FAULT_INJECTION: forcing a failure. [ 33.097135][ T821] name failslab, interval 1, probability 0, space 0, times 0 [ 33.111191][ T821] CPU: 0 UID: 0 PID: 821 Comm: syz.2.109 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 33.111220][ T821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 33.111243][ T821] Call Trace: [ 33.111248][ T821] [ 33.111256][ T821] __dump_stack+0x21/0x30 [ 33.111281][ T821] dump_stack_lvl+0x140/0x1c0 [ 33.111299][ T821] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.111311][ T821] dump_stack+0x19/0x20 [ 33.111319][ T821] should_fail_ex+0x3c2/0x510 [ 33.111335][ T821] should_failslab+0xac/0x100 [ 33.111347][ T821] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 33.111362][ T821] ? alloc_inode+0xa9/0x270 [ 33.111373][ T821] alloc_inode+0xa9/0x270 [ 33.111384][ T821] new_inode+0x25/0x1e0 [ 33.111394][ T821] binderfs_fill_super+0x624/0xfe0 [ 33.111407][ T821] ? ida_alloc_range+0xa44/0xa80 [ 33.111422][ T821] ? __cfi_binderfs_fill_super+0x10/0x10 [ 33.111440][ T821] ? shrinker_register+0x162/0x220 [ 33.111466][ T821] ? sget_fc+0x97e/0xa70 [ 33.111487][ T821] ? __cfi_set_anon_super_fc+0x10/0x10 [ 33.111500][ T821] get_tree_nodev+0xce/0x170 [ 33.111512][ T821] ? __cfi_binderfs_fill_super+0x10/0x10 [ 33.111524][ T821] binderfs_fs_context_get_tree+0x20/0x30 [ 33.111542][ T821] vfs_get_tree+0xa1/0x290 [ 33.111555][ T821] do_new_mount+0x251/0xb40 [ 33.111569][ T821] ? security_capable+0x44/0x130 [ 33.111581][ T821] path_mount+0x66a/0xff0 [ 33.111595][ T821] ? putname+0x113/0x150 [ 33.111605][ T821] __se_sys_mount+0x2bf/0x480 [ 33.111615][ T821] ? __x64_sys_mount+0xf0/0xf0 [ 33.111623][ T821] ? __kasan_check_write+0x18/0x20 [ 33.111637][ T821] ? fpregs_restore_userregs+0x11c/0x260 [ 33.111651][ T821] __x64_sys_mount+0xc3/0xf0 [ 33.111660][ T821] x64_sys_call+0x2021/0x2ee0 [ 33.111670][ T821] do_syscall_64+0x57/0xf0 [ 33.111680][ T821] ? clear_bhb_loop+0x50/0xa0 [ 33.111693][ T821] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.111706][ T821] RIP: 0033:0x7fe54339fb19 [ 33.111716][ T821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.111726][ T821] RSP: 002b:00007fe544206028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 33.111739][ T821] RAX: ffffffffffffffda RBX: 00007fe543625fa0 RCX: 00007fe54339fb19 [ 33.111747][ T821] RDX: 0000200000000900 RSI: 00002000000008c0 RDI: 0000000000000000 [ 33.111754][ T821] RBP: 00007fe543437b70 R08: 0000000000000000 R09: 0000000000000000 [ 33.111760][ T821] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000 [ 33.111766][ T821] R13: 00007fe543626038 R14: 00007fe543625fa0 R15: 00007ffe8ffcbfb8 [ 33.111775][ T821] [ 33.227608][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 33.517618][ T31] usb 4-1: device descriptor read/64, error -71 [ 33.587630][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 33.748607][ T9] usb 1-1: config 0 has an invalid interface number: 233 but max is 0 [ 33.756832][ T9] usb 1-1: config 0 has no interface number 0 [ 33.763130][ T9] usb 1-1: config 0 interface 233 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.767606][ T31] usb 4-1: device descriptor read/64, error -71 [ 33.774546][ T9] usb 1-1: config 0 interface 233 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.793658][ T9] usb 1-1: config 0 interface 233 has no altsetting 0 [ 33.800587][ T9] usb 1-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 33.809666][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.818373][ T9] usb 1-1: config 0 descriptor?? [ 33.867582][ T310] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 33.887678][ T31] usb usb4-port1: attempt power cycle [ 34.021438][ T310] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 34.029669][ T310] usb 3-1: can't read configurations, error -71 [ 34.037247][ T9] usbhid 1-1:0.233: can't add hid device: -71 [ 34.043783][ T9] usbhid 1-1:0.233: probe with driver usbhid failed with error -71 [ 34.053369][ T9] usb 1-1: USB disconnect, device number 6 [ 34.237596][ T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 34.251586][ T835] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=835 comm=syz.1.114 [ 34.258604][ T31] usb 4-1: device descriptor read/8, error -71 [ 34.398587][ T31] usb 4-1: device descriptor read/8, error -71 [ 34.507619][ T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 34.637619][ T31] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 34.669021][ T31] usb 4-1: device descriptor read/8, error -71 [ 34.677750][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 138, changing to 4 [ 34.697777][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 34.710350][ T9] usb 2-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 34.722032][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.738466][ T9] usb 2-1: Product: syz [ 34.742746][ T9] usb 2-1: Manufacturer: syz [ 34.747366][ T9] usb 2-1: SerialNumber: syz [ 34.809185][ T31] usb 4-1: device descriptor read/8, error -71 [ 34.890916][ T858] kvm: kvm [857]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 34.899933][ T858] kvm: kvm [857]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 34.927569][ T31] usb usb4-port1: unable to enumerate USB device [ 34.961439][ T9] usb 2-1: unit 6 not found! [ 34.967128][ T9] usb 2-1: unit 0 not found! [ 34.967583][ T45] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 34.996815][ T9] usb 2-1: USB disconnect, device number 5 [ 35.018795][ T862] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 35.037558][ T862] overlayfs: missing 'lowerdir' [ 35.118172][ T45] usb 1-1: device descriptor read/64, error -71 [ 35.357571][ T45] usb 1-1: device descriptor read/64, error -71 [ 35.557436][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 35.557451][ T36] audit: type=1400 audit(1793729901.570:255): avc: denied { unlink } for pid=879 comm="syz.1.128" name="#8" dev="tmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 35.617610][ T45] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 35.670472][ T310] smpboot: CPU 1 is now offline [ 35.725396][ T887] tmpfs: Unknown parameter '?q :}lx!V' [ 35.734305][ T903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.747596][ T45] usb 1-1: device descriptor read/64, error -71 [ 35.753911][ T36] audit: type=1400 audit(1793729901.770:256): avc: denied { write } for pid=885 comm="syz.1.130" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 35.798624][ T903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.007703][ T45] usb 1-1: device descriptor read/64, error -71 [ 36.117767][ T45] usb usb1-port1: attempt power cycle [ 36.167559][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 36.317596][ T31] usb 3-1: device descriptor read/64, error -71 [ 36.457552][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 36.467725][ T45] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 36.498569][ T45] usb 1-1: device descriptor read/8, error -71 [ 36.557856][ T31] usb 3-1: device descriptor read/64, error -71 [ 36.628611][ T45] usb 1-1: device descriptor read/8, error -71 [ 36.635001][ T9] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 36.643387][ T9] usb 4-1: config 0 has no interface number 0 [ 36.655460][ T9] usb 4-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.678507][ T9] usb 4-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.698589][ T9] usb 4-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.726586][ T9] usb 4-1: config 0 interface 16 has no altsetting 0 [ 36.733390][ T310] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 36.747668][ T9] usb 4-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.4b [ 36.767029][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.784933][ T9] usb 4-1: config 0 descriptor?? [ 36.797580][ T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 36.867728][ T45] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 36.888519][ T45] usb 1-1: device descriptor read/8, error -71 [ 36.898860][ T310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 36.914538][ T310] usb 2-1: not running at top speed; connect to a high speed hub [ 36.931399][ T310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.941581][ T31] usb 3-1: device descriptor read/64, error -71 [ 36.957945][ T310] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 36.977083][ T310] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0 [ 36.998646][ T310] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 37.010955][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.027821][ T310] usb 2-1: Product: syz [ 37.032349][ T45] usb 1-1: device descriptor read/8, error -71 [ 37.042868][ T310] usb 2-1: Manufacturer: syz [ 37.052288][ T310] usb 2-1: SerialNumber: syz [ 37.147637][ T45] usb usb1-port1: unable to enumerate USB device [ 37.197581][ T31] usb 3-1: device descriptor read/64, error -71 [ 37.206192][ T9] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.16/0003:06A3:0CD0.0001/input/input5 [ 37.239284][ T9] saitek 0003:06A3:0CD0.0001: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.3-1/input16 [ 37.281675][ T310] usb 2-1: USB disconnect, device number 6 [ 37.307960][ T31] usb usb3-port1: attempt power cycle [ 37.543260][ T310] usb 4-1: USB disconnect, device number 12 [ 37.667616][ T31] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 37.688479][ T31] usb 3-1: device descriptor read/8, error -71 [ 37.717270][ T36] audit: type=1400 audit(1793729903.730:257): avc: denied { mount } for pid=920 comm="syz.0.138" name="/" dev="configfs" ino=2505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 37.740667][ T921] netlink: 'syz.0.138': attribute type 11 has an invalid length. [ 37.759959][ T36] audit: type=1400 audit(1793729903.760:258): avc: denied { search } for pid=920 comm="syz.0.138" name="/" dev="configfs" ino=2505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 37.791159][ T926] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 37.802444][ T36] audit: type=1400 audit(1793729903.810:259): avc: denied { mount } for pid=924 comm="syz.1.140" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 37.833806][ T36] audit: type=1400 audit(1793729903.850:260): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 37.854866][ T31] usb 3-1: device descriptor read/8, error -71 [ 38.067568][ T310] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 38.097569][ T31] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 38.106472][ T311] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 38.139018][ T31] usb 3-1: device descriptor read/8, error -71 [ 38.218609][ T310] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 38.225910][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 38.235850][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 38.248085][ T310] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 38.257210][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.265386][ T310] usb 2-1: Product: syz [ 38.269671][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 38.275016][ T310] usb 2-1: Manufacturer: syz [ 38.279991][ T310] usb 2-1: SerialNumber: syz [ 38.284752][ T31] usb 3-1: device descriptor read/8, error -71 [ 38.291533][ T311] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 38.300071][ T310] usb 2-1: config 0 descriptor?? [ 38.306211][ T311] usb 1-1: config 0 has no interface number 0 [ 38.313426][ T310] usb 2-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 38.322312][ T311] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 38.332659][ T311] usb 1-1: config 0 interface 196 has no altsetting 0 [ 38.340812][ T311] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 38.350075][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.358222][ T311] usb 1-1: Product: syz [ 38.362464][ T311] usb 1-1: Manufacturer: syz [ 38.367080][ T311] usb 1-1: SerialNumber: syz [ 38.375042][ T311] usb 1-1: config 0 descriptor?? [ 38.380397][ T923] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 38.407627][ T31] usb usb3-port1: unable to enumerate USB device [ 38.514926][ T928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.524012][ T928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.536433][ T310] usb 2-1: USB disconnect, device number 7 [ 38.590321][ T311] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 38.600666][ T311] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 38.761327][ C0] ipheth 1-1:0.196: ipheth_rcvbulk_callback: callback retval: -22 [ 38.917552][ T311] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 38.989615][ T310] usb 1-1: USB disconnect, device number 11 [ 39.008007][ T310] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 39.069992][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.095093][ T975] netlink: 'syz.1.146': attribute type 4 has an invalid length. [ 39.104668][ T311] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 39.124396][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.135063][ T975] netlink: 'syz.1.146': attribute type 46 has an invalid length. [ 39.148392][ T311] uvcvideo 4-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 39.162136][ T980] netlink: 'syz.1.146': attribute type 4 has an invalid length. [ 39.169989][ T311] usb 4-1: Found UVC 1.00 device (0000:0000) [ 39.181183][ T311] uvcvideo 4-1:1.1: No supported video formats found. [ 39.188722][ T990] netlink: 'syz.1.146': attribute type 46 has an invalid length. [ 39.196686][ T311] uvcvideo 4-1:1.1: Failed to initialize the device (-22). [ 39.361204][ T36] audit: type=1400 audit(1793729905.380:261): avc: denied { shutdown } for pid=942 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.504034][ T36] audit: type=1400 audit(1793729905.520:262): avc: denied { ioctl } for pid=1001 comm="syz.0.148" path="socket:[9159]" dev="sockfs" ino=9159 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.543737][ T1015] process 'syz.0.149' launched './file1' with NULL argv: empty string added [ 39.553076][ T36] audit: type=1400 audit(1793729905.560:263): avc: denied { execute } for pid=1014 comm="syz.0.149" name="file1" dev="tmpfs" ino=297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.575537][ T952] x86/PAT: syz.2.144:952 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 39.591726][ T311] usb 4-1: USB disconnect, device number 13 [ 39.627892][ T36] audit: type=1400 audit(1793729905.610:264): avc: denied { execute_no_trans } for pid=1014 comm="syz.0.149" path="/51/file1" dev="tmpfs" ino=297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.664893][ T1017] netlink: 44 bytes leftover after parsing attributes in process `syz.0.150'. [ 39.676400][ T1017] netlink: 43 bytes leftover after parsing attributes in process `syz.0.150'. [ 39.687845][ T1017] netlink: 'syz.0.150': attribute type 6 has an invalid length. [ 39.695646][ T1017] netlink: 'syz.0.150': attribute type 5 has an invalid length. [ 39.703553][ T1017] netlink: 43 bytes leftover after parsing attributes in process `syz.0.150'. [ 40.127565][ T311] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 40.184061][ T1029] syzkaller0: entered promiscuous mode [ 40.192383][ T1029] syzkaller0: entered allmulticast mode [ 40.202753][ T1029] overlay: Unknown parameter 'fsuuid' [ 40.278892][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 40.287284][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.297731][ T311] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.307970][ T311] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 40.317055][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.325251][ T311] usb 4-1: Product: syz [ 40.329559][ T311] usb 4-1: Manufacturer: syz [ 40.334191][ T311] usb 4-1: SerialNumber: syz [ 40.543752][ T1025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.552927][ T1025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.563307][ T311] usb 4-1: selecting invalid altsetting 1 [ 40.572979][ T311] usb 4-1: unit 3 not found! [ 40.764051][ T311] usb 4-1: unit 0 not found! [ 40.773374][ T777] udevd[777]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.965642][ T311] usb 4-1: USB disconnect, device number 14 [ 51.022552][ T1032] netlink: 'syz.0.156': attribute type 12 has an invalid length. [ 51.153136][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 51.153147][ T36] audit: type=1400 audit(1793729917.170:272): avc: denied { setopt } for pid=1069 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.231086][ T36] audit: type=1400 audit(1793729917.200:273): avc: denied { getopt } for pid=1069 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.281444][ T1082] netlink: 'syz.2.172': attribute type 27 has an invalid length. [ 51.447596][ T311] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 51.567548][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 51.587649][ T311] usb 1-1: device descriptor read/64, error -71 [ 51.609539][ T1087] bridge0: port 3(syz_tun) entered blocking state [ 51.615988][ T1087] bridge0: port 3(syz_tun) entered disabled state [ 51.625353][ T1087] syz_tun: entered allmulticast mode [ 51.635038][ T1087] syz_tun: entered promiscuous mode [ 51.640497][ T1087] bridge0: port 3(syz_tun) entered blocking state [ 51.646944][ T1087] bridge0: port 3(syz_tun) entered forwarding state [ 51.674171][ T1096] FAULT_INJECTION: forcing a failure. [ 51.674171][ T1096] name fail_futex, interval 1, probability 0, space 0, times 1 [ 51.692882][ T36] audit: type=1400 audit(1793729917.710:274): avc: denied { mount } for pid=1095 comm="syz.3.178" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 51.715259][ T1096] CPU: 0 UID: 0 PID: 1096 Comm: syz.1.177 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 51.715280][ T1096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 51.715288][ T1096] Call Trace: [ 51.715291][ T1096] [ 51.715296][ T1096] __dump_stack+0x21/0x30 [ 51.715312][ T1096] dump_stack_lvl+0x140/0x1c0 [ 51.715326][ T1096] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.715337][ T1096] dump_stack+0x19/0x20 [ 51.715346][ T1096] should_fail_ex+0x3c2/0x510 [ 51.715361][ T1096] should_fail+0xf/0x20 [ 51.715375][ T1096] get_futex_key+0x178/0x940 [ 51.715385][ T1096] ? kasan_save_track+0x3e/0x80 [ 51.715395][ T1096] ? __cfi_get_futex_key+0x10/0x10 [ 51.715405][ T1096] ? do_sys_openat2+0x170/0x1d0 [ 51.715423][ T1096] ? x64_sys_call+0x131a/0x2ee0 [ 51.715434][ T1096] ? do_syscall_64+0x57/0xf0 [ 51.715445][ T1096] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.715460][ T1096] futex_wake+0x150/0x950 [ 51.715473][ T1096] ? __cfi_futex_wake+0x10/0x10 [ 51.715488][ T1096] do_futex+0x37d/0x510 [ 51.715499][ T1096] ? __cfi_do_futex+0x10/0x10 [ 51.715510][ T1096] __se_sys_futex+0x13c/0x320 [ 51.715521][ T1096] ? fput+0x1a4/0x230 [ 51.715533][ T1096] ? __x64_sys_futex+0x110/0x110 [ 51.715545][ T1096] __x64_sys_futex+0xe9/0x110 [ 51.715556][ T1096] x64_sys_call+0x227f/0x2ee0 [ 51.715566][ T1096] do_syscall_64+0x57/0xf0 [ 51.715576][ T1096] ? clear_bhb_loop+0x50/0xa0 [ 51.715588][ T1096] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.715600][ T1096] RIP: 0033:0x7fe30bf9fb19 [ 51.715610][ T1096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.715619][ T1096] RSP: 002b:00007fe30ce2c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 51.715631][ T1096] RAX: ffffffffffffffda RBX: 00007fe30c225fa8 RCX: 00007fe30bf9fb19 [ 51.715638][ T1096] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe30c225fac [ 51.715645][ T1096] RBP: 00007fe30c225fa0 R08: 4000000000000000 R09: 0000000000000000 [ 51.715652][ T1096] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 51.715658][ T1096] R13: 00007fe30c226038 R14: 00007ffd2fc55e50 R15: 00007ffd2fc55f38 [ 51.715667][ T1096] [ 51.938337][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 51.953054][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 51.961421][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 170, changing to 7 [ 51.974357][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 51.983436][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.991426][ T10] usb 3-1: Product: syz [ 51.995563][ T10] usb 3-1: Manufacturer: syz [ 52.000192][ T10] usb 3-1: SerialNumber: syz [ 52.005112][ T311] usb 1-1: device descriptor read/64, error -71 [ 52.068306][ T310] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 52.076835][ T36] audit: type=1400 audit(1793729918.080:275): avc: denied { write } for pid=1124 comm="syz.1.181" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 52.139206][ T1125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 52.206173][ T1128] netlink: 'syz.1.182': attribute type 46 has an invalid length. [ 52.217543][ T310] usb 4-1: Using ep0 maxpacket: 8 [ 52.223918][ T310] usb 4-1: unable to get BOS descriptor or descriptor too short [ 52.232734][ T310] usb 4-1: config 8 has an invalid interface number: 50 but max is 1 [ 52.242406][ T310] usb 4-1: config 8 has an invalid descriptor of length 226, skipping remainder of the config [ 52.252905][ T311] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 52.260620][ T310] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 52.269741][ T310] usb 4-1: config 8 has no interface number 0 [ 52.275878][ T310] usb 4-1: config 8 interface 50 altsetting 2 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 52.287077][ T310] usb 4-1: config 8 interface 50 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.300222][ T310] usb 4-1: config 8 interface 50 has no altsetting 0 [ 52.308569][ T310] usb 4-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=82.e4 [ 52.317885][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.325885][ T310] usb 4-1: Product: syz [ 52.330349][ T310] usb 4-1: Manufacturer: syz [ 52.334934][ T310] usb 4-1: SerialNumber: syz [ 52.427555][ T311] usb 1-1: device descriptor read/64, error -71 [ 52.442292][ T36] audit: type=1400 audit(1793729918.460:276): avc: denied { create } for pid=1083 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.464187][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 52.472640][ T10] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 52.484266][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 52.501236][ T10] usb 3-1: USB disconnect, device number 14 [ 52.510439][ T1047] udevd[1047]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.546472][ T36] audit: type=1400 audit(1793729918.560:277): avc: denied { search } for pid=1095 comm="syz.3.178" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 52.571895][ T36] audit: type=1400 audit(1793729918.590:278): avc: denied { write } for pid=1095 comm="syz.3.178" name="uprobe_events" dev="tracefs" ino=1053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 52.595344][ T310] rtl8150 4-1:8.50: couldn't find required endpoints [ 52.603194][ T310] rtl8150 4-1:8.50: probe with driver rtl8150 failed with error -5 [ 52.614199][ T310] usb 4-1: USB disconnect, device number 15 [ 52.648652][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.659718][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 52.668834][ T311] usb 1-1: device descriptor read/64, error -71 [ 52.676948][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.686996][ T9] usb 2-1: config 0 descriptor?? [ 52.787589][ T311] usb usb1-port1: attempt power cycle [ 52.896096][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 52.902120][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 52.912239][ T9] usb 2-1: USB disconnect, device number 8 [ 53.080981][ T36] audit: type=1400 audit(1793729919.100:279): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 53.127731][ T311] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 53.145708][ T36] audit: type=1400 audit(1793729919.160:280): avc: denied { ioctl } for pid=1146 comm="syz.3.189" path="socket:[10215]" dev="sockfs" ino=10215 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.171384][ T1147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1147 comm=syz.3.189 [ 53.188924][ T311] usb 1-1: device descriptor read/8, error -71 [ 53.318587][ T311] usb 1-1: device descriptor read/8, error -71 [ 53.348380][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 53.437571][ T310] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 53.498576][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.509697][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 53.518902][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.539975][ T9] usb 2-1: config 0 descriptor?? [ 53.550172][ T36] audit: type=1400 audit(1793729919.570:281): avc: denied { create } for pid=1152 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 53.574214][ T311] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 53.587580][ T310] usb 4-1: Using ep0 maxpacket: 16 [ 53.600915][ T310] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.615784][ T310] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x5 has an invalid bInterval 37, changing to 7 [ 53.626945][ T310] usb 4-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 53.638076][ T310] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 53.651467][ T310] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 53.661662][ T311] usb 1-1: device descriptor read/8, error -71 [ 53.668927][ T310] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 53.678206][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.686188][ T310] usb 4-1: Product: syz [ 53.690576][ T310] usb 4-1: Manufacturer: syz [ 53.695161][ T310] usb 4-1: SerialNumber: syz [ 53.798466][ T311] usb 1-1: device descriptor read/8, error -71 [ 53.847622][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 53.906363][ T310] usb 4-1: Can't get UAC3 power state for id 10 [ 53.914025][ T311] usb usb1-port1: unable to enumerate USB device [ 53.921394][ T310] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 53.930720][ T310] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 53.960818][ T310] usb 4-1: USB disconnect, device number 16 [ 53.977604][ T10] usb 3-1: device descriptor read/64, error -71 [ 53.984816][ T9] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 54.007663][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0002/input/input6 [ 54.089657][ T9] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 54.237666][ T10] usb 3-1: device descriptor read/64, error -71 [ 54.386317][ T310] usb 2-1: USB disconnect, device number 9 [ 54.421522][ T1171] FAULT_INJECTION: forcing a failure. [ 54.421522][ T1171] name failslab, interval 1, probability 0, space 0, times 0 [ 54.461777][ T1171] CPU: 0 UID: 0 PID: 1171 Comm: syz.0.198 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 54.461797][ T1171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 54.461812][ T1171] Call Trace: [ 54.461816][ T1171] [ 54.461828][ T1171] __dump_stack+0x21/0x30 [ 54.461842][ T1171] dump_stack_lvl+0x140/0x1c0 [ 54.461853][ T1171] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.461862][ T1171] ? mtree_alloc_cyclic+0x1bd/0x250 [ 54.461879][ T1171] dump_stack+0x19/0x20 [ 54.461891][ T1171] should_fail_ex+0x3c2/0x510 [ 54.461907][ T1171] should_failslab+0xac/0x100 [ 54.461921][ T1171] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 54.461937][ T1171] ? __d_alloc+0x42/0x8c0 [ 54.461951][ T1171] __d_alloc+0x42/0x8c0 [ 54.461963][ T1171] ? down_write+0xee/0x2b0 [ 54.461976][ T1171] d_alloc+0x4c/0x1c0 [ 54.461988][ T1171] shmem_rename2+0x238/0x3c0 [ 54.462000][ T1171] ? __cfi_shmem_rename2+0x10/0x10 [ 54.462012][ T1171] vfs_rename+0xd59/0x1100 [ 54.462025][ T1171] ? __cfi_vfs_rename+0x10/0x10 [ 54.462037][ T1171] ? ovl_lookup_temp+0x1cb/0x290 [ 54.462049][ T1171] ? __asan_memcpy+0x5a/0x80 [ 54.462063][ T1171] ? _raw_spin_unlock+0x45/0x60 [ 54.462072][ T1171] ? take_dentry_name_snapshot+0x103/0x180 [ 54.462085][ T1171] ovl_fill_super+0x391e/0x51a0 [ 54.462095][ T1171] ? shrinker_alloc+0x68/0xa60 [ 54.462110][ T1171] ? __cfi_ovl_fill_super+0x10/0x10 [ 54.462123][ T1171] ? ida_alloc_range+0xa44/0xa80 [ 54.462138][ T1171] ? __kmalloc_cache_noprof+0x23c/0x470 [ 54.462153][ T1171] ? __kasan_check_write+0x18/0x20 [ 54.462166][ T1171] ? mutex_unlock+0x90/0x240 [ 54.462177][ T1171] ? __cfi_mutex_unlock+0x10/0x10 [ 54.462189][ T1171] ? __kasan_check_write+0x18/0x20 [ 54.462203][ T1171] ? sget_fc+0x97e/0xa70 [ 54.462214][ T1171] ? __cfi_set_anon_super_fc+0x10/0x10 [ 54.462231][ T1171] get_tree_nodev+0xce/0x170 [ 54.462243][ T1171] ? __cfi_ovl_fill_super+0x10/0x10 [ 54.462253][ T1171] ovl_get_tree+0x20/0x30 [ 54.462262][ T1171] vfs_get_tree+0xa1/0x290 [ 54.462275][ T1171] do_new_mount+0x251/0xb40 [ 54.462289][ T1171] ? security_capable+0x44/0x130 [ 54.462300][ T1171] path_mount+0x66a/0xff0 [ 54.462312][ T1171] ? putname+0x113/0x150 [ 54.462321][ T1171] __se_sys_mount+0x2bf/0x480 [ 54.462330][ T1171] ? __x64_sys_mount+0xf0/0xf0 [ 54.462339][ T1171] ? __kasan_check_write+0x18/0x20 [ 54.462352][ T1171] ? fpregs_restore_userregs+0x11c/0x260 [ 54.462366][ T1171] __x64_sys_mount+0xc3/0xf0 [ 54.462374][ T1171] x64_sys_call+0x2021/0x2ee0 [ 54.462385][ T1171] do_syscall_64+0x57/0xf0 [ 54.462395][ T1171] ? clear_bhb_loop+0x50/0xa0 [ 54.462408][ T1171] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.462420][ T1171] RIP: 0033:0x7f254f39fb19 [ 54.462431][ T1171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.462441][ T1171] RSP: 002b:00007f254dde3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 54.462454][ T1171] RAX: ffffffffffffffda RBX: 00007f254f625fa0 RCX: 00007f254f39fb19 [ 54.462462][ T1171] RDX: 00002000000004c0 RSI: 0000200000000480 RDI: 0000000000000000 [ 54.462469][ T1171] RBP: 00007f254f437b70 R08: 0000200000000500 R09: 0000000000000000 [ 54.462476][ T1171] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 54.462482][ T1171] R13: 00007f254f626038 R14: 00007f254f625fa0 R15: 00007ffe0de0d1d8 [ 54.462490][ T1171] [ 54.805940][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd Stopping sshd: stopped /usr/sbin/sshd (pid 202) OK [ 54.977620][ T10] usb 3-1: device descriptor read/64, error -71 Stopping crond: stopped /usr/sbin/crond (pid 194) OK [ 55.093248][ T1129] usb 1-1: new high-speed USB device number 16 using dummy_hcd Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) Stopping network: [ 55.227594][ T10] usb 3-1: device descriptor read/64, error -71 [ 55.250001][ T1129] usb 1-1: unable to get BOS descriptor or descriptor too short [ 55.269270][ T1129] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.295462][ T1129] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 55.311510][ T1129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 55.333788][ T1129] usb 1-1: Product: syz [ 55.339876][ T1129] usb 1-1: Manufacturer: syz OK Stopping iptables: [ 55.360116][ T10] usb usb3-port1: attempt power cycle [ 55.368018][ T1129] usb 1-1: Found UVC 1.00 device syz (8086:0ad2) OK Stopping system message bus: done killall: can't kill pid 1047: No such process killall: can't kill pid 1078: No such process killall: can't kill pid 1098: No such process killall: can't kill pid 1130: No su[ 55.567565][ T9] usb 2-1: new full-speed USB device number 10 using dummy_hcd ch process Stopping klogd: OK Stopping acpid: [ 55.718543][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 55.726651][ T9] usb 2-1: config 0 has no interface number 0 [ 55.732797][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 55.740429][ T9] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 55.751877][ T9] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.761949][ T9] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.775432][ T9] usb 2-1: config 0 interface 1 has no altsetting 0 [ 55.782218][ T9] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 55.791552][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.799753][ T10] usb 3-1: device descriptor read/8, error -71 [ 55.806440][ T9] usb 2-1: config 0 descriptor?? [ 55.932676][ T10] usb 3-1: device descriptor read/8, error -71 [ 55.982743][ T1129] uvcvideo 1-1:1.1: Failed to set UVC probe control : -71 (exp. 26). [ 55.991497][ T1129] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 56.000340][ T1129] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 56.008851][ T1129] usb 1-1: USB disconnect, device number 16 [ 56.029706][ T9] usbhid 2-1:0.1: can't add hid device: -71 [ 56.036794][ T9] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 56.045354][ T9] usb 2-1: USB disconnect, device number 10 [ 56.177671][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 56.198553][ T10] usb 3-1: device descriptor read/8, error -71 [ 56.328604][ T10] usb 3-1: device descriptor read/8, error -71 [ 56.337593][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 56.389354][ T1236] kvm: kvm [1234]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 56.437654][ T10] usb usb3-port1: unable to enumerate USB device [ 56.497565][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 56.506945][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 56.524934][ T9] usb 2-1: config 0 has no interface number 0 [ 56.534251][ T9] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.545579][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 56.545598][ T36] audit: type=1400 audit(1793729922.570:299): avc: denied { execute } for pid=1239 comm="syz.0.208" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.584714][ T9] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.595006][ T9] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.608074][ T9] usb 2-1: config 0 interface 1 has no altsetting 0 [ 56.614709][ T9] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 OK [ 56.642998][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 Stopping syslogd: [ 56.665890][ T9] usb 2-1: config 0 descriptor?? stopped /sbin/syslogd (pid 91) OK [ 56.695000][ T36] audit: type=1400 audit(1793729922.710:300): avc: denied { bind } for pid=1250 comm="syz.2.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.714640][ T1251] ./dev/sda1: Can't lookup blockdev umount: can't remount debugfs read-only [ 56.819191][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: cSent SIGTERM to all processes [ 56.873095][ T36] audit: type=1400 audit(1793729922.860:301): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2940]" dev="pipefs" ino=2940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 Connection to 10.128.1.106 closed by remote host. [ 56.917037][ T9] usbhid 2-1:0.1: can't add hid device: -71 [ 56.953899][ T9] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 57.027670][ T9] usb 2-1: USB disconnect, device number 11 [ 57.056825][ T1048] bridge0: port 3(syz_tun) entered disabled state [ 57.066727][ T1048] syz_tun (unregistering): left allmulticast mode [ 57.073406][ T1048] syz_tun (unregistering): left promiscuous mode [ 57.083803][ T1048] bridge0: port 3(syz_tun) entered disabled state [ 57.093979][ T13] bridge_slave_1: left allmulticast mode [ 57.099690][ T13] bridge_slave_1: left promiscuous mode [ 57.105285][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.114154][ T13] bridge_slave_0: left allmulticast mode [ 57.120266][ T13] bridge_slave_0: left promiscuous mode [ 57.125847][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.219058][ T13] veth1_macvtap: left promiscuous mode [ 57.224600][ T13] veth0_vlan: left promiscuous mode [ 57.328892][ T13] bridge_slave_1: left allmulticast mode [ 57.334560][ T13] bridge_slave_1: left promiscuous mode [ 57.340229][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.347766][ T13] bridge_slave_0: left allmulticast mode [ 57.353396][ T13] bridge_slave_0: left promiscuous mode [ 57.359061][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.366569][ T13] bridge_slave_1: left allmulticast mode [ 57.372290][ T13] bridge_slave_1: left promiscuous mode [ 57.377876][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.385256][ T13] bridge_slave_0: left allmulticast mode [ 57.391080][ T13] bridge_slave_0: left promiscuous mode [ 57.396660][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.404179][ T13] bridge_slave_1: left allmulticast mode [ 57.409858][ T13] bridge_slave_1: left promiscuous mode [ 57.415452][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.422800][ T13] bridge_slave_0: left allmulticast mode [ 57.428902][ T13] bridge_slave_0: left promiscuous mode [ 57.434470][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.539979][ T13] tipc: Left network mode [ 57.545593][ T13] veth1_macvtap: left promiscuous mode [ 57.551115][ T13] veth0_vlan: left promiscuous mode [ 57.556618][ T13] veth1_macvtap: left promiscuous mode [ 57.562222][ T13] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 59.002065][ T1255] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 59.008712][ T1255] ACPI: PM: Preparing to enter system sleep state S5 [ 59.015561][ T1255] kvm: exiting hardware virtualization [ 59.021055][ T1255] reboot: Power down serialport: VM disconnected.