last executing test programs: 12.45212148s ago: executing program 1 (id=1016): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000100)='syzkaller\x00'}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x42) mount$9p_fd(0x0, 0x0, 0x0, 0x84, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r4, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x14}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x200040d0) 11.944847168s ago: executing program 1 (id=1019): r0 = inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x700000000000000) 11.650491781s ago: executing program 4 (id=1021): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001b00)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000004000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a300000000040000380"], 0xfc}}, 0x0) 11.056926398s ago: executing program 4 (id=1022): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000c40)) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r2, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0}) 10.077619044s ago: executing program 4 (id=1023): listen(0xffffffffffffffff, 0x5) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000c00)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x80000000002, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 9.40658384s ago: executing program 1 (id=1026): socket$inet_sctp(0x2, 0x1, 0x84) eventfd(0x100f) epoll_create1(0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000100)={0x40, 0x11, 0x7, "7144a39994855c"}, 0x0, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtfilter={0x24, 0x29, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r1, 0x0, 0x0) 9.273162831s ago: executing program 4 (id=1027): r0 = syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14) r2 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x101000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=0x0, @ANYRES16=r0, @ANYRES8=r2, @ANYRESHEX=r1], 0x60}, 0x1, 0x0, 0x0, 0x24004054}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, &(0x7f0000000200)=0x81, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x5f) r4 = syz_open_dev$video(0x0, 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205647, &(0x7f00000003c0)={0x9f0000, 0x1, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x9c0909, 0x0, '\x00', @string=&(0x7f0000000380)=0x1}}) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB="ffffffff0000000000000000000000000000003dd83c039dfdce7a6b26cdf58cfa0fea52c75802b0c928ea4cfc1016f985fd500939e6f505c6d94279999dc63728ccacbe4121f8d56ec855040ef0b4e3fb1b016b2405f64f8a84bde65f26de206843615742", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="07ff00000400"/28], 0x50) socket$caif_seqpacket(0x25, 0x5, 0x5) 8.638210804s ago: executing program 3 (id=1033): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000100)='syzkaller\x00'}, 0x94) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, 0x0, 0x200040d0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="0b0528bd70000500040002"], 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) 8.571853219s ago: executing program 3 (id=1034): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000c40)) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r3, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0xe0, 0x0, &(0x7f0000000540)=[@acquire={0x40046305, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x101, 0x3}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/191, 0xbf, 0x2, 0x2f}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@fda={0x66646185, 0x8, 0x0, 0x29}, @fda={0x66646185, 0xa, 0x1, 0x34}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/43, 0x2b, 0x2, 0x38}}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000480)={@flat=@handle={0x73682a85, 0x1182016943993805, 0x3}, @flat=@binder={0x73622a85, 0xb, 0x1}, @flat=@handle={0x73682a85, 0x1}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}, @exit_looper], 0x0, 0x0, 0x0}) 7.285727768s ago: executing program 3 (id=1035): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='T', 0x1, 0x8910, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e0"], 0x58}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r6, 0x80845663, &(0x7f00000003c0)) r7 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0x7c81, 0x0) 6.74094732s ago: executing program 4 (id=1037): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = memfd_create(0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x1, 0x97) r5 = openat(r4, &(0x7f0000002040)='./file0\x00', 0x800, 0x68) getdents64(r5, &(0x7f00000004c0)=""/55, 0x37) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) close_range(r0, r0, 0x2) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a000000a4ffff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB="06c9a2"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x5}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0xa, 0x5}, 0x28) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r8) sendmsg$NFC_CMD_GET_SE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r9, 0x5143fad7b81663e7, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 6.711344782s ago: executing program 0 (id=1038): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, 0x0, &(0x7f00000000c0)=@tcp6}, 0x20) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) r5 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x33e}, 0x1c) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f00000004c0)={[0x0, &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@delqdisc={0x24, 0x25, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xa, 0xb}, {0x7, 0x2}}}, 0x24}}, 0x8004) r9 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x2000, {0x60, 0x0, 0x0, r11, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80d1}, 0x30008000) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.795459017s ago: executing program 2 (id=1039): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x40000, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f000079a000/0x4000)=nil, r4, 0x2000002, 0x12, r3, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x32, &(0x7f0000000040)="ff02040000ffffa212731dffff1f2be82db1af00", 0x14) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000300000020"}) ioctl$SG_BLKTRACESTOP(r0, 0x1275, 0x0) 5.754551702s ago: executing program 1 (id=1040): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000440)={0x40, 0x31, 0x2, "01ba"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) futex_waitv(&(0x7f0000000d80)=[{0x1, &(0x7f0000000040), 0x82}, {0x9ce, &(0x7f0000000080)=0x7fffffffffffffff, 0x2}, {0x800, &(0x7f00000000c0)=0x24000000000000, 0x2}, {0x1, &(0x7f0000000100)=0x8000000000000001, 0x82}, {0x4, &(0x7f0000000140)=0x2eba, 0x2}, {0x0, &(0x7f0000000180)=0x23a1, 0x82}, {0x4, &(0x7f00000001c0)=0xa07, 0x2}, {0x6, &(0x7f0000000200)=0x9, 0x82}, {0x3, &(0x7f0000000240)=0xb, 0x82}, {0x7, &(0x7f0000000280), 0x2}, {0x800, &(0x7f00000002c0)=0x9, 0x2}, {0x1, &(0x7f0000000300)=0x7fff, 0x2}, {0x7, &(0x7f0000000340)=0xffffffff, 0x82}, {0x5, &(0x7f0000000380)=0x7, 0x82}, {0x6, &(0x7f00000003c0)=0x4, 0x2}, {0x0, &(0x7f0000000400)=0x4, 0x82}, {0x8, &(0x7f0000000440)=0x850, 0x82}, {0x5, &(0x7f0000000480)=0x6, 0x2}, {0x1, &(0x7f00000004c0), 0x2}, {0x2, &(0x7f0000000500), 0x2}, {0x9, &(0x7f0000000540)=0x5, 0x80}, {0xc9e7, &(0x7f0000000580)=0x8, 0x2}, {0x1, &(0x7f00000005c0)=0x3, 0x186}, {0xe, &(0x7f0000000600)=0xf0b, 0x2}, {0x6, &(0x7f0000000640)=0x44, 0x82}, {0xf5, &(0x7f0000000680)=0xfffffffffffffffb, 0x2}, {0xe, &(0x7f00000006c0)=0x8001, 0x82}, {0xe9c, &(0x7f0000000700), 0x82}, {0x7, &(0x7f0000000740)=0x7f}, {0x322, &(0x7f0000000780)=0x3cd8, 0x2}, {0x5, &(0x7f00000007c0)=0x6c, 0x2}, {0x5, &(0x7f0000000800)=0xe, 0x2}, {0xfffffffffffffff9, &(0x7f0000000840), 0x82}, {0xc2, &(0x7f0000000880)=0xdbf, 0x82}, {0x31e7, &(0x7f00000008c0)=0x5, 0x82}, {0x9, &(0x7f0000000900)=0x4, 0x82}, {0xc, &(0x7f0000000940)=0x5, 0x82}, {0x7fffffff, &(0x7f0000000980)=0xc83d, 0x2}, {0x2, &(0x7f00000009c0)=0x2, 0x82}, {0xffff, &(0x7f0000000a00)=0x7, 0x2}, {0x2, &(0x7f0000000a40)=0x100, 0x82}, {0x10000, &(0x7f0000000a80)=0x8, 0x82}, {0x9, &(0x7f0000000ac0)=0x800000000000, 0x82}, {0x1, &(0x7f0000000b00), 0x59eedcf22ff6c288}, {0x9, &(0x7f0000000b40)=0x3, 0x82}, {0x7, &(0x7f0000000b80)=0x6, 0x2}, {0x2, &(0x7f0000000bc0)=0x9, 0x82}, {0x7fffffffffffffff, &(0x7f0000000c00)=0x3, 0x2}, {0xfffffffffffffff7, &(0x7f0000000c40)=0xfc3}, {0x7, &(0x7f0000000c80)=0x3, 0x2}, {0x10001, &(0x7f0000000cc0)=0x2, 0x2}, {0x80000000, &(0x7f0000000d00)=0xe69e, 0x2f09a5057b90fe73}, {0x100, &(0x7f0000000d40)=0x4, 0x2}], 0x35, 0x0, &(0x7f0000001280)={0x77359400}, 0x0) 4.542305934s ago: executing program 2 (id=1041): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010125bd70000000000000000000", @ANYRES32=r2], 0x20}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9d0, '\x00', r2, 0xffffffffffffffff, 0x3, 0x1}, 0x50) 4.049328223s ago: executing program 0 (id=1042): syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x111800) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)) recvfrom(0xffffffffffffffff, &(0x7f0000000580)=""/150, 0x96, 0x12143, &(0x7f0000000680)=@pppoe={0x18, 0x0, {0x3, @local}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000003f01f00810000007f00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) syz_open_dev$usbmon(&(0x7f0000000480), 0xba, 0x280802) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r2, &(0x7f00000004c0)=""/57, 0x39) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000002000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000000080002"], 0xa4}}, 0x20000010) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) dup(r4) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) 4.011819086s ago: executing program 2 (id=1043): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000ac40)=@delchain={0x5750, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xc, 0xffff}, {0x4, 0x1b}}, [@filter_kind_options=@f_basic={{0xa}, {0x56f8, 0x2, [@TCA_BASIC_ACT={0x6e8, 0x3, [@m_nat={0xcc, 0x9, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x3, 0x20000000, 0x4, 0xa0}, @remote, @remote}}]}, {0x7b, 0x6, "52c8666781bfdbad4525f6f7cc7994c74c5af3a48b4b1586787665570a284ef219dc39d91ca82ced612d71fa3d5805527b609d54cd063b69d956df0f446446e465d9f76a31edeffe4c74ca679b03c54e78b7b98444aa77e3493f8107c376f0c50147c15b6f95c3927170f906c041fdd0c5d741d0260f64"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x114, 0x13, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x700}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfffff7e0, 0x5, 0x0, 0x7, 0x4}, 0xd}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0xffffff07, 0xffffffffffffffff, 0x2, 0x4}, 0xd}}]}, {0x8f, 0x6, "1887cb8c800e6166a79ad7ea3a71c8936c894b5f0c12e6af23f1b6824bbb28dde268e9e9a3d2acb79a6fbc5b085a301d9a4967f43aa80c530e0751537092225d136d50e5eed81ac5372cf12408f9a2a6ba4326f8f8d9b19489d9c2b1752e899bd6c800b0b1f858f37b4c0f81a653d78f8784535389913fa462309ff7caeed9e67cff1943eacedfd09386f6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}, @m_vlan={0xf0, 0xe, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0xba, 0x6, "d76854ca4d707bce946e5c249f3d749878a16e9d2237f6bba5015f8c510a5b06adae66288d0bf667441f9caef50a433feca763beb1d2761b98eb79f5dba0fa905bb3814f0f3709f8a55e4181c448ae0261d68db25b8e805f703d5081020ce771639ef62fd5095ac1407d2feec8ffc299b0dcd4b766adb4c80b5d23e9f0818d69f21437ca8444ef380cff3f19bc9e7d7bb5b302d9cc59244654a9bd09bffe592a0be822a7208fcca87db810ae3b2f34be4c55f68375d7"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ct={0xac, 0x13, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "c9dc0394b12676f6990354e13550605f"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast1}]}, {0x46, 0x6, "90a0bdc3ee2315c158ebb7989d56bf75f5e104c153fe6da3dacd0a2785206783d9ba107c031422a534247eeaa282db70e48c5fdd9beffe89aa26565ce8b3b08f6086"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_ctinfo={0xfc, 0x2, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x10000, 0x100, 0x4, 0x5, 0x6}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x100, 0x27b1b8d7, 0x0, 0x9fc5, 0xb2}}]}, {0x80, 0x6, "5ad2b59d9769f4c022b4abe26445ad6d793755240f67b4171709a16a6b8e0f8b476d4da296fe04730275495a684b22595ce9743045e3d9a1c796bc0d1645deb087a84ad7680442bcd70001990be4e9f9173b8e63bfd453cd8aec1cae0db0f2775807cbb16a87f7b5510e8af5f1c975d729cc15d8d23131761117ddf5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x140, 0xc, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x2, 0x5, 0x7fffffff, 0x8}, @multicast2, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x8, 0x10000000, 0x9, 0x9}, @multicast1, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6766, 0x1, 0xffffffffffffffff, 0x4, 0x46}, @dev={0xac, 0x14, 0x14, 0xb}, @loopback, 0x0, 0x1}}]}, {0xa0, 0x6, "eebd2ca4f67201c83687b2d4c392581ff27c628d5c4e94f9df7e1ed4371cdff3a9e5774a5837cc0ee20c98da94b3bf82db83fc6b1cc4b31f330facb9718a91ff5e4f90616ed7f4fb28b4783f319fb649b52c6fc622d44ec712353764154a9921322ad9b2c76ce9588e50286c7d38f9bc57ea99d0c4f9ad0503e163d60a25c78ed49e39c1d7aee3a9f76e8e09a7afeedd9d9d43a8808b12ee512b1750"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0xe0, 0x4, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x8, 0x3, 0x2}, 0x3, r3}}]}, {0x92, 0x6, "338880f9cfa027295fc9907a572358223da28133e866c18ea0839001e0fb8a1a6e28fa1fbbe9fe0558a3e41b7dbd955eaf7d012eac2c217ddfe26f04b72de7f0a0c1ce04c043bdf9f86df055bb518f2c2c67364a194e24dc18a08ba5bcdd0405d6f86e2b29c29a99ebd8a31115e4f767b82769daccf4712c9077d1b9d3238930702c1566512905891de3b56e2528"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ct={0x4c, 0x1f, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x3}, @TCA_CT_LABELS={0x14, 0x7, "a61f5f8d9209df565c33e6867ca18d95"}]}, {0x6, 0x6, "e606"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xfff3}}, @TCA_BASIC_EMATCHES={0x4c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x8, 0xf35}, {0x0, 0x6, 0x4}}}, @TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x51}, "11511f"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x80, 0x3, 0x5}, {0x7, 0x7f, 0x2, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_BASIC_ACT={0x4108, 0x3, [@m_vlan={0xb8, 0x1a, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x565}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1000, 0x732d, 0x6, 0x7f, 0x8}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x60, 0x6, "e05aa88523ad23a08c6ab4790814204e0685e8dff0050a213c5e4e80db6d20e8a0d97e168d6a9080b983ab7f7f82e1f5316a6821be03e96094423a7be7db981b6eed20efaf3a0dbdbcd4e3890690484bcb54597cb3c4750b460cc1c3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0x11d8, 0x5, 0x0, 0x0, {{0xb}, {0x10f4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400, 0x3, 0x6, 0x80000000, 0x1e5d, 0x7, 0x8, 0xb8, 0x7, 0x3, 0xfab4, 0x3, 0xa2, 0x6, 0x1, 0x6, 0x4, 0x7, 0x1, 0x2, 0x2, 0x2, 0x7, 0x3, 0x2c8, 0x5, 0x8, 0x6, 0x3, 0x0, 0x4, 0xf4f, 0xffff4671, 0x0, 0x9, 0x401, 0xffffffff, 0xffff, 0x6, 0x6f23, 0x101, 0xdfa, 0x32, 0x6, 0x3, 0x56, 0x0, 0x4, 0xffffffff, 0x9, 0x2, 0xf75, 0x1, 0x401, 0x800, 0x6, 0x4, 0x5, 0x40, 0x1, 0xffff, 0x9, 0x6, 0x4f8, 0x6, 0xffff, 0x1, 0x3, 0xc, 0x5, 0x8, 0x3, 0x80000001, 0xffffffff, 0x2, 0x5, 0xffffffff, 0x1, 0x0, 0x10e, 0x5a, 0x6, 0x2, 0x7, 0x80000001, 0x0, 0xf, 0x800, 0x2, 0x7fff, 0x8, 0x9, 0x1, 0x4, 0x1d5, 0x554, 0xfffffffe, 0x0, 0x4, 0x9643, 0x0, 0x3, 0x6, 0xd, 0x7, 0x2, 0x8, 0x2, 0x80000000, 0x31, 0x0, 0x0, 0x4, 0x7, 0x5, 0x6, 0x3, 0x2, 0x1963, 0x7, 0x3ff, 0xc, 0x3ff, 0x2, 0x5, 0x50, 0x6, 0x3d, 0x7fff, 0x8, 0xa414, 0x3, 0x2c36, 0x9253, 0xff, 0x40, 0x0, 0x8, 0x3, 0x6, 0x80000001, 0x4, 0x7f, 0x2, 0x6, 0x7fffffff, 0xf, 0x0, 0xf1, 0x3, 0x2, 0x15, 0xe, 0xe, 0xf22, 0x0, 0x7, 0x8, 0x5, 0x5, 0x400, 0x4, 0x1, 0x8b11, 0x7fffffff, 0x3, 0x4, 0x3, 0x7, 0xf75c, 0xe5, 0x8, 0x5c964e7e, 0x6, 0xfd3a0000, 0x80000000, 0xd7a, 0x1, 0x6, 0x2, 0x7, 0x180000, 0xe6c, 0x1, 0x5, 0x7, 0x80000001, 0xb79, 0x6e6e554b, 0xff, 0x8, 0x8, 0x6, 0x5, 0x9, 0x8, 0x8, 0x49c, 0x5, 0x3, 0x400, 0x65da, 0xff36, 0x6, 0x0, 0xff, 0x0, 0x8, 0x8, 0xc, 0x10001, 0xffff, 0x9, 0x8, 0x2, 0xfffffff5, 0xa7, 0x6, 0x100, 0x2, 0x6, 0x7, 0xfffffe00, 0xf9f1, 0x7c94, 0x1746, 0x2, 0x1, 0x2, 0xe12, 0x9, 0xb, 0x2, 0xb21, 0x3, 0x9, 0xffffffff, 0x7fffffff, 0x1, 0x9, 0x2, 0x40, 0x0, 0x2, 0x7, 0xd, 0x8, 0x5, 0x4, 0x4, 0x8001, 0x7fffffff, 0xff, 0x2aa5400, 0x3396, 0x8]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9a}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0xfffffffffffffff2, 0x1, 0x9, 0x3, {0x4, 0x2, 0xe, 0x9, 0x1, 0x3}, {0xd, 0x1, 0x1000, 0x8e8d, 0xff, 0x6}, 0x4, 0x1, 0x1}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x1, 0x4, 0x3, 0x1, 0x6, 0x5, 0x0, 0xfff, 0x1, 0xb, 0x6, 0x11, 0x20000000, 0x2, 0x20c4, 0xc, 0x1, 0x7, 0x6, 0x8000, 0x464e, 0x9, 0x7f, 0x20de, 0xff, 0x1, 0xfffffffd, 0x1, 0x8, 0x9, 0x5, 0xfffffffc, 0x0, 0x1, 0x8, 0x0, 0x2, 0x3a8f6b25, 0x9112, 0x400, 0xfffffffd, 0xfffffffe, 0x10001, 0x7, 0x9, 0x1, 0x5, 0x101, 0x5, 0x0, 0x8, 0xd68e2c85, 0x5, 0x10000, 0x32, 0x2, 0x1ff, 0xfffff6cc, 0x10000, 0x6, 0x207, 0x5, 0x6, 0x2, 0x10000, 0x40, 0x1, 0xa5a, 0x10001, 0xfffffff7, 0xc117, 0xe7, 0x2, 0xfffffffa, 0x600e, 0x10001, 0x1, 0xa8, 0xb877, 0xd20, 0xfffffffa, 0x9, 0x3, 0x5cc21205, 0x6, 0xb, 0xfffffffe, 0x8, 0x81, 0x4, 0x9, 0x2, 0x1, 0x0, 0x1, 0xb, 0x0, 0x0, 0x13, 0xff, 0x8, 0xff, 0xc0, 0x9227, 0x9, 0xf, 0x101, 0x4, 0x662c1679, 0x9, 0x3, 0x5, 0xc1, 0x7f, 0x5, 0x2, 0x1, 0x2, 0x4, 0x4, 0x90c, 0x3, 0xf3, 0x2be, 0xe, 0x5, 0x4, 0x2, 0x4, 0x4, 0xc98, 0x4a, 0x8, 0x4, 0x2, 0x0, 0x80000000, 0x7, 0x1000, 0x5, 0x3, 0x8, 0x18000, 0x4, 0x5e65f8a4, 0x10, 0xfffffffa, 0x5, 0x7, 0x2, 0x6, 0x3, 0x0, 0x8, 0x0, 0xf, 0x1, 0x2, 0x6, 0x64, 0x6, 0x4, 0x100, 0x9, 0x2, 0x1, 0x1, 0xff27, 0x8, 0x4, 0x5, 0x5, 0x0, 0x5, 0x4, 0x6, 0x81, 0xffffffff, 0x2, 0x1, 0xcae, 0x6, 0xa, 0x2, 0x4, 0x3, 0xfffffff7, 0x1ff, 0x5, 0x6, 0x8, 0x0, 0x10, 0x7, 0x9, 0x4, 0x2, 0x5, 0x8, 0x3, 0x4, 0x80, 0x9, 0xb6, 0x3ff, 0x3878, 0x0, 0xfffffffb, 0x2, 0x7, 0x4, 0x7ff, 0xbdd1, 0x0, 0xde, 0x6, 0x7fffffff, 0x80000001, 0x69af, 0x1ff, 0x3, 0x7, 0xffffbe5b, 0xe0, 0xfffffff2, 0x9, 0x93, 0x4, 0x1, 0x93c2, 0x801d, 0x257a, 0x581c, 0x2, 0xf6, 0xeec, 0x8, 0xffff, 0x40000, 0x2, 0x10, 0xffff, 0x1cc3, 0x1, 0x6, 0x9, 0x10001, 0x80, 0xfffffffc, 0xe7, 0x8, 0x2, 0xa, 0x0, 0x3]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0xc540, 0x7fff, 0x8, 0x2, 0x9, 0xea, 0x9, 0x3, 0x5, 0x3, 0x1ff, 0x7, 0x6, 0x0, 0xe099, 0x9, 0x950d, 0x401, 0x1f3, 0x0, 0xfffff32c, 0xfffffffd, 0x401, 0x6, 0xf, 0x7, 0x1, 0x2, 0x8, 0xac, 0x7d40, 0x8, 0xffffffff, 0x558, 0x4, 0x4, 0x2, 0x6, 0x6, 0x8000, 0x0, 0x0, 0x6b, 0xf, 0x965, 0x4, 0x80, 0x2, 0x3, 0x0, 0xfffffffe, 0x1, 0xa3, 0x13295573, 0x62db, 0x101, 0x68, 0x7fffffff, 0x5, 0xb3d, 0x2, 0xfffffb33, 0x4, 0x2, 0x3e9f732, 0x4, 0x9, 0x80000001, 0xa, 0xd, 0x67b80010, 0x6, 0x3, 0x2, 0xca, 0x4, 0x8, 0x4, 0x3ff, 0x1, 0xa, 0x1, 0xb, 0x3b, 0x7f, 0x81, 0x4, 0x40, 0x5, 0x9, 0x7bc, 0x3, 0xd, 0x6, 0xd7, 0x80000000, 0x88, 0x101, 0x4, 0xfff, 0x7, 0x7fffffff, 0x401, 0x8, 0x5, 0x7, 0x7, 0x8d8, 0x80000000, 0x2, 0x2, 0x9, 0x2, 0x9, 0xbe, 0x5, 0x80, 0x0, 0x6, 0x100, 0x101, 0xffff, 0xf9, 0x2, 0x8, 0x40, 0x331d, 0xf4, 0x59, 0x2, 0x8a1, 0x70b, 0x80000, 0x7fff, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1a, 0x9, 0x5, 0x9, 0x0, 0x4, 0x1, 0xe53, 0x3, 0x8000, 0x2, 0x800, 0x8, 0x9, 0x9, 0xfffffffe, 0x3, 0x5, 0x3102, 0xf, 0x9, 0x9, 0x4, 0x1, 0xffffffff, 0x4, 0x3, 0x7, 0x2, 0x7, 0xb8, 0x7, 0x10001, 0xe, 0x3, 0x10, 0x4, 0xe64, 0x3, 0xfffffff9, 0x9, 0x7, 0x4, 0x81, 0x9, 0x7fffffff, 0x0, 0x5, 0x5, 0x7ff, 0x2, 0x7f, 0x9, 0x80000001, 0x6, 0x2017, 0xc, 0x3, 0x3, 0x1, 0x3, 0x8, 0x4, 0x9, 0x9, 0x4, 0x401, 0x7, 0x9, 0x9, 0x7, 0x9, 0x2, 0x6, 0xd, 0xfffffffc, 0x7, 0x2, 0xe4db, 0x73b0, 0xb, 0x9, 0xff, 0x8, 0x80000001, 0x548, 0x1, 0x28, 0x6, 0x4, 0x0, 0x50a, 0x7606, 0x1, 0xfffffff8, 0x6, 0x3, 0x0, 0x2, 0x9, 0xfff, 0x0, 0x5, 0x100, 0xe, 0xbab, 0xc334, 0x10000, 0x4, 0x9, 0x5, 0x40, 0x8, 0x4605, 0xfffffffa, 0xffff1a3e]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xfffffff5, 0x7fff, 0xbd64, 0x7, 0x8, 0x3, 0x8, 0x0, 0x3, 0x7, 0xffffffff, 0x91, 0x0, 0xd7a4, 0x3, 0x8, 0x7fff, 0x9, 0x5, 0x3, 0x0, 0x1, 0xd, 0x4, 0x7, 0xb78, 0xfff, 0x1, 0x6e, 0x9, 0x6000, 0x8, 0x6, 0x6, 0xf7fd, 0x200, 0x8, 0x8, 0x9, 0x8001, 0x7, 0x3, 0x5, 0x28e, 0x4, 0xfffff61b, 0x886, 0x7fff, 0x4, 0x9, 0x8, 0x1000, 0x10000, 0x1, 0x0, 0x3, 0x2, 0x100, 0x9, 0x3, 0xffffffff, 0x3, 0x1, 0x0, 0x0, 0x10, 0x7, 0x8, 0x2, 0x8, 0x7, 0x4, 0x9, 0x8, 0x9, 0x80000000, 0x747, 0x7, 0xd, 0x6, 0x2, 0x7, 0x2, 0x7ff, 0x6, 0xff, 0x1ff, 0x2, 0x6, 0x9, 0xf, 0x6, 0x1, 0x2, 0x5, 0x7ff, 0x5, 0x5, 0x6, 0x7fff, 0xa5, 0x18000, 0x5602, 0x3ce, 0x5, 0x5, 0x7, 0x9, 0x0, 0x7fff, 0x100, 0x9, 0xfffffe01, 0x8, 0x401, 0x6, 0x7fffffff, 0xff, 0x400, 0x2, 0x6, 0x1, 0x0, 0xeb50, 0x5, 0x9, 0x8, 0x7, 0x6, 0x8, 0x4, 0x63, 0x6, 0x539, 0x1ff, 0xcc51, 0x4, 0xa1, 0x10, 0x8, 0x8, 0x5, 0x7, 0x7, 0x6, 0x8, 0x6bd, 0x1, 0x4, 0xb800, 0x6, 0xf, 0x6, 0x4, 0x1e39, 0x4, 0x9, 0x4, 0x7, 0xe, 0x7, 0xfffffff7, 0x0, 0x8, 0x0, 0x910, 0xfffffff7, 0x8, 0x1, 0x6, 0x3, 0x2, 0x4, 0xf9cb, 0x5, 0x6, 0x5, 0xa00, 0xa, 0x4, 0x3, 0xe2, 0x6, 0x4, 0x8, 0x7a7, 0x2, 0x3, 0x80, 0x3, 0x8, 0x4, 0xffffffff, 0xffffffff, 0x5, 0x5, 0x8, 0x7f, 0xbbf, 0x9, 0x5, 0x80000001, 0x75, 0x2, 0xaf, 0xd, 0xe, 0x0, 0x6, 0x1, 0xe0000000, 0x42, 0x9, 0x5, 0x0, 0x9d, 0x0, 0x401, 0x9, 0x9, 0x2, 0x4, 0x5, 0x4, 0x8, 0xfffffe00, 0x0, 0xc, 0x8, 0x1, 0x8000, 0x7, 0x67, 0x7ff, 0x3, 0x6f, 0x2, 0xfffffff8, 0xff, 0x22d, 0xfffffffc, 0x7, 0xffff8000, 0x1, 0x9, 0x8, 0x5, 0x10e, 0x800, 0x1, 0x7630, 0x4, 0x2d564da2, 0x2, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7fffffff}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}]]}, {0xbc, 0x6, "aafb99662fcf86c209446339ff50224218df4212482c2b4e138cc0e9f3e1ee3345f2e901023c4b8207221775cfc19af279991353f69e8dab745aeec4a3692e64dd8e7fe007fc958999e1a4cddeed75473fb2c62926149ca87d6d27844c56aaacd12e814a0e541788c2553e8d2768dfe13807b72ee8401e83fc0674a308f9b6a88175e9623bb88676199f086d5c835b37a91e8ae3af90aec1608a1cf0920f35bb9622c020d98bea9025f182bbafc8a230c497a2551d2fad8e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7, 0x1}}}}, @m_police={0x2e74, 0x5, 0x0, 0x0, {{0xb}, {0x2dc8, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RATE={0x404, 0x2, [0x7fffffff, 0xc, 0x8, 0x6, 0xb, 0x9, 0x1000, 0xdcae, 0x2, 0x5, 0x9, 0xe261, 0x0, 0x0, 0xf, 0xc, 0x5, 0x7, 0x7fffffff, 0x7, 0x8, 0x8000, 0x81, 0x8, 0x80, 0x6, 0x800, 0x9, 0x3, 0x1, 0x1, 0xd1a, 0x1, 0x3, 0x80000000, 0x468, 0x6, 0x3, 0x4, 0x2, 0xe, 0x7fffffff, 0x6, 0xfff, 0x10000, 0x3, 0x9, 0x6, 0x1, 0x6, 0x401, 0x1, 0x5, 0x3, 0x2, 0xe, 0x6, 0x5, 0x8001, 0x101, 0x3, 0x3, 0x7fff, 0x9, 0x100, 0x9, 0x0, 0x8, 0xe, 0x34fc, 0x5, 0x0, 0x4, 0x9, 0xbe, 0x7, 0x6, 0xc9cd, 0x3e5a, 0x5, 0x859c, 0x2, 0xfffffc01, 0x81, 0x1, 0x0, 0x0, 0x4, 0x2, 0x6, 0x3, 0x3, 0x2, 0xd9, 0x0, 0x6, 0x6, 0xc0000000, 0x1, 0x0, 0x10000, 0x7, 0xa877, 0x2, 0x7, 0x401, 0x5, 0x2, 0x10001, 0x8001, 0x3af, 0x4c7, 0x6, 0x7, 0x5, 0x0, 0x38000, 0x1, 0x6, 0x0, 0xbe2, 0x1, 0x80000001, 0x4, 0x7fffffff, 0x30, 0x34, 0x3, 0x80000001, 0xa000, 0x8, 0x9, 0x8, 0x3, 0x100000, 0x10, 0xfffffeff, 0xd5, 0x2505f369, 0x3ff, 0x6, 0x2, 0x80, 0xa, 0x0, 0x1, 0x5, 0xd606, 0x2, 0x6, 0x8, 0x56, 0x8, 0x4, 0x8, 0x1, 0x9, 0x7, 0x5845, 0x1, 0x1, 0xffff, 0x5, 0x0, 0x5, 0x1, 0x7a5c, 0x4, 0x2, 0x9, 0x6, 0x3, 0x7, 0x92, 0x3, 0x3ff, 0x3, 0xffffffff, 0xb06, 0x6, 0x7, 0x10000, 0x7f, 0x7, 0x3, 0x5, 0xe, 0x0, 0x4, 0x3, 0x8, 0x4, 0x0, 0x7ff, 0x5, 0xffff, 0x2, 0xfff, 0x0, 0x6, 0x8, 0x7, 0x10, 0x8001, 0x8, 0x8, 0x40, 0x9, 0x0, 0x6, 0x2, 0x5, 0x8001, 0xffffd90f, 0x5, 0x2, 0x9, 0x1, 0x0, 0x3, 0x61, 0x4775, 0x8, 0x865, 0x73b9, 0x2, 0x1, 0xffff, 0x7, 0xfffffffd, 0x6, 0x0, 0x8001, 0x7ff, 0x2, 0x6, 0x359, 0x6, 0xd, 0x4, 0xb, 0x3, 0x7, 0x8, 0x4, 0x1ff, 0x0, 0xffffc89e, 0x0, 0x9, 0x9, 0x5, 0x6, 0x25b, 0x6, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x59d9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x7f, 0x3ff, 0x5, 0x9, 0xfff, 0x2, 0x10000, 0xfffffff9, 0x0, 0x1, 0x8001, 0x10, 0x9, 0x400, 0x2, 0x0, 0x68b, 0x2, 0x84c, 0x3, 0x4, 0x9, 0x80, 0xfffffffb, 0x7, 0x0, 0x8000, 0x5, 0x1ff, 0x7, 0x40, 0x7, 0x189, 0x7, 0x0, 0xff, 0x6, 0x5, 0x7ff, 0xe1, 0x8001, 0x5, 0x8, 0x3, 0x80, 0x8000, 0x6, 0x6043f4a2, 0x7f7, 0xd, 0x2, 0x5, 0x7, 0x4, 0x9, 0x4, 0x7f, 0x5, 0xa, 0x4, 0x10, 0x100, 0x6, 0x2e, 0x8000, 0x5, 0xfffffffc, 0x8, 0x10001, 0x7, 0x9, 0x1, 0xa, 0x32, 0x9157, 0xd73, 0x4, 0x1, 0x3, 0x6db1, 0x0, 0x5, 0x5, 0x9, 0x995e, 0xb, 0x2, 0x3, 0x1, 0xfff, 0x7, 0x2fcb, 0x1, 0x4, 0x79d, 0x5, 0x475, 0x80, 0x7f, 0x4, 0x7, 0x2, 0x2, 0x80000001, 0x240, 0x1, 0x7fff, 0x9, 0x6, 0x81, 0x922, 0x2, 0x101, 0xb6, 0x8, 0x4, 0x81cd, 0x8, 0x1000, 0x8, 0x7, 0x80, 0x0, 0x3, 0x100, 0x1, 0xc8aa, 0x1, 0x7251cddb, 0x9, 0x6813cf5e, 0x10000, 0x0, 0x3, 0xfffffffc, 0x3, 0x10001, 0x1, 0x2, 0x0, 0x6, 0x9a, 0x8, 0x1000, 0x1, 0xffffffff, 0xf8, 0x9, 0x4, 0x7, 0x9, 0x8a, 0x4, 0x82, 0x0, 0x4, 0x7, 0x5, 0x101, 0xc8, 0x73a, 0x1ff, 0x8001, 0x3, 0xfffffff8, 0x6, 0x8839, 0x9, 0x1000, 0xa3d, 0x9, 0xffff, 0x6, 0x4, 0x2, 0x3, 0xc, 0x401, 0xffff, 0xda0, 0x6, 0x1, 0xffffffff, 0x2, 0x0, 0x7fff, 0x1d5952e, 0xc, 0x7, 0x0, 0x10001, 0x10, 0x8, 0x3, 0x20000, 0x7, 0x5, 0x61, 0x7, 0x9, 0xfffffca6, 0x100, 0x8, 0x3, 0x5, 0x1ff, 0x2, 0x3, 0x5, 0xd9, 0x7, 0x9f35, 0x8, 0x7f, 0x9, 0x8211, 0x9, 0x3, 0xe, 0x80000001, 0xa4b, 0x2, 0x5a5e, 0xb7, 0x0, 0x8, 0x4, 0x3, 0x7e, 0x9, 0x5b, 0x6, 0x10, 0x18967ac0, 0xf053, 0xf74, 0x7ff, 0x0, 0x7, 0x2, 0x1ff, 0x3ff, 0xfff, 0x6, 0x253c, 0x2, 0x0, 0x5, 0x4, 0x1, 0x2, 0x5, 0x8, 0x80, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x6, 0x1, 0x0, 0x80, 0x5c0, 0x8, 0x7fff, 0xd3f, 0x7, 0xb, 0x0, 0x4, 0x4, 0x10001, 0xe, 0x1, 0x0, 0x3, 0x8c, 0x5, 0x8, 0x9, 0x8, 0x10001, 0x1, 0x1, 0x2, 0x800, 0x10001, 0x3, 0x5, 0x3ff, 0xa79, 0x7, 0x5, 0x8, 0x6, 0x3, 0x9, 0x6, 0xce, 0x2, 0x80000000, 0x3, 0x6, 0xe0d, 0x0, 0x8, 0xf166, 0x6, 0x0, 0x2, 0xfffffff7, 0x9, 0x2, 0x1, 0x5, 0x7, 0x3, 0x401, 0x2, 0x8, 0xff2f, 0x58f, 0x2, 0x7, 0x1, 0x8, 0x0, 0x100, 0x59, 0x9, 0x5, 0x4, 0x4, 0x1ff, 0x0, 0x3, 0x1, 0x4, 0x29d9cf3, 0x1, 0x5, 0xcc4, 0x6c, 0x1, 0x4d5, 0x6506, 0x2, 0x1000, 0xd66c, 0x8, 0x9, 0x200, 0x7, 0xfe, 0xd, 0x7, 0x5, 0x9, 0x1, 0x7, 0x5, 0x7, 0xa0000, 0xffffffff, 0xffffff7f, 0x3, 0x3, 0x401, 0x7fffffff, 0x5f7, 0x1, 0x2, 0x72dd, 0xea0, 0x7e2, 0x3, 0xffff, 0xfffffff9, 0x6, 0x1, 0x2, 0x0, 0xffff044b, 0xc59, 0x6, 0x101, 0x8001, 0x3, 0xa, 0x7ff, 0x80000000, 0x7, 0x9, 0x2, 0xff, 0x3, 0xf, 0x40000000, 0x18a00000, 0x0, 0x800, 0x401, 0xe, 0x0, 0x0, 0x80000000, 0x27c, 0xff, 0x40, 0x8, 0x80000, 0x101, 0x0, 0x2, 0x3c, 0x3, 0x8, 0x742, 0x80000001, 0x10000, 0xcb25, 0x1, 0x9, 0x66, 0x8000, 0xfffff4e4, 0xfffffffd, 0xc, 0x7fffffff, 0x4, 0x6, 0xfffffffd, 0x2, 0x200, 0x1000, 0x17e, 0x2, 0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0x6, 0x9, 0x2, 0x3, 0x3, 0x100, 0x0, 0x800, 0x633c, 0x400, 0x724, 0x4, 0x77, 0xffff0071, 0x6a, 0x1200000, 0x2, 0x9, 0xc06, 0x2716, 0xffffff81, 0x81, 0x2, 0x0, 0x5, 0x2, 0xc06f, 0xc, 0x9, 0x8, 0xd9, 0x66, 0x5, 0x80000001, 0x4, 0x2, 0x395b, 0x5, 0x2, 0x40000000, 0x9, 0x3, 0x2dc6, 0xfff, 0x4, 0x80000000, 0x0, 0x1, 0xc, 0x64cd, 0x7, 0x6, 0xc9, 0x88c, 0x5, 0x1, 0xd3, 0x9, 0x2, 0x7, 0x3, 0xe7, 0xd7, 0x9, 0x200, 0x4, 0x5, 0xb9f5, 0x1, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x400, 0x2, 0x4, 0x9, 0xb, {0xad, 0x1, 0x837, 0x1, 0x5, 0x7f}, {0x7, 0x0, 0x6, 0x3, 0x32, 0x33}, 0x7, 0x9, 0x8001}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x101}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0xef0, 0x4, 0x3ff, 0x1cdc, 0x0, 0x1000, 0x4, 0x9, 0x5, 0x3, 0x7fff, 0x8000, 0x1, 0x1, 0x1, 0x9, 0x8, 0x0, 0x1, 0x4, 0x7f, 0x45eb, 0x1, 0x3, 0xfffffeff, 0x3, 0x5, 0x7ff, 0x8, 0x1, 0xfffffff9, 0xfffffff8, 0x8001, 0x8, 0x2, 0x8, 0x9, 0x1, 0xff, 0x73a6, 0xc, 0x5, 0xfffff800, 0x2, 0x23, 0x3, 0x20c, 0x0, 0x7, 0x2, 0x0, 0x5, 0x8, 0xffffffff, 0x832e, 0xa22, 0x200, 0xee, 0x3, 0xffffe000, 0x7, 0x8, 0x8001, 0x6, 0x0, 0x8, 0xa0, 0x8, 0x1, 0x6, 0x1, 0xff, 0x5, 0x5, 0x2, 0x8, 0x10, 0x7, 0x1, 0x9, 0x8, 0x7, 0xad08, 0x1, 0xfffff4f0, 0x0, 0x8, 0x38a, 0x9, 0x5, 0xf0, 0x1ff, 0xed, 0x2, 0xb9e3, 0x0, 0x100, 0x6, 0x7ff, 0x8, 0x80, 0x1, 0x7, 0x9, 0x6, 0xc7, 0x2, 0x7, 0xfffffffc, 0x6, 0x4, 0x97f, 0x3988, 0x6, 0x1, 0x9, 0x7ff, 0x6, 0x5, 0x4, 0xfff, 0x4, 0x7, 0x80000000, 0x3, 0xbb, 0x9, 0x7, 0x401, 0xfffffffa, 0x3, 0xffffffff, 0xf, 0x4c, 0x8, 0x2, 0x7fffffff, 0xfffffffb, 0x7, 0xffffffff, 0x0, 0x8, 0xfffffffd, 0x6, 0xe, 0x7, 0x10, 0x8, 0x4, 0x6, 0x0, 0x3, 0xfff, 0x0, 0x9, 0x10001, 0x5, 0x6, 0x0, 0xe, 0x738, 0x2, 0x400, 0x5, 0x6, 0x7, 0x3ff, 0xd, 0x80000001, 0x4d1, 0x6, 0x8, 0x3, 0x8d14, 0x4, 0x3, 0x9, 0x401, 0x9, 0x2, 0x2, 0xb, 0x2, 0x37777239, 0x4, 0x101, 0x3, 0x6, 0x2, 0x8, 0xfffffffd, 0xffffffff, 0xc41, 0x7fff, 0x3, 0xfffffffd, 0x10001, 0x4, 0x8, 0xa, 0xb1c, 0x401, 0x777, 0x7, 0xff600000, 0x81, 0xfffffffb, 0x2, 0x10, 0x8, 0x9, 0x2, 0xffffffff, 0x1, 0x7, 0x3, 0x81, 0x7, 0x1ff, 0x7fff, 0x7, 0x8, 0x7, 0x30, 0x6, 0x4, 0x4, 0x5, 0x101, 0x7f, 0x4, 0x2, 0x2, 0x200, 0x7fffffff, 0x2, 0x5, 0x1, 0x4, 0x81, 0x0, 0x9, 0x0, 0x2, 0xffff7fff, 0x560f, 0x92, 0x3, 0x5e9, 0x3, 0x8, 0xffffffff, 0x7, 0x5, 0x5, 0xb45]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x101}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0xf, 0x6, 0x8, {0x9, 0x0, 0xfff5, 0x200, 0xd, 0x8}, {0x10, 0x1, 0xbb, 0x0, 0x3, 0x9}, 0x0, 0x1000, 0x1}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x401}, @TCA_POLICE_TBF={0x3c, 0x1, {0x40, 0x7, 0x1, 0xae, 0x4, {0x40, 0x6, 0x2, 0x2, 0x800, 0x8000}, {0xfd, 0x1, 0xc9, 0xee25, 0x1, 0x10001}, 0x2, 0x8, 0x40}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x8, 0x18000000, 0xc1e, 0x401, 0x4, 0x9, 0x4, 0x0, 0x80, 0x5328, 0x2, 0x5, 0x8, 0x9, 0x7, 0x9, 0x0, 0x401, 0x1, 0xcb, 0x5, 0x9, 0x6, 0x3ff, 0x80000000, 0x2, 0x200, 0x3, 0x8eb3, 0x2, 0x46e, 0x2, 0x80, 0xfffffffa, 0x9, 0x4, 0x80000000, 0x0, 0x7, 0x2, 0x5c, 0x2, 0x3, 0x3, 0x81, 0x2, 0x400, 0x1ff, 0xd15, 0x0, 0x10001, 0x2, 0x1ff, 0x8, 0x4, 0xb2c, 0x8, 0x7, 0x1, 0x4, 0x0, 0x6, 0x3, 0x4, 0x8, 0x0, 0xa53, 0x9de, 0x3, 0xc9fa, 0x100, 0x2, 0xa7a9, 0x7, 0x0, 0x32f5, 0x3168, 0x0, 0x0, 0x7, 0x4, 0x3, 0x4, 0xdd, 0x7, 0x4, 0x2b3, 0x4, 0x401, 0x5, 0xffffffff, 0x6, 0x692, 0xd2a, 0x1, 0x5, 0x5, 0x6, 0xde, 0x15, 0x3, 0x200, 0xe00000, 0x5, 0x5, 0x9, 0x6, 0x9, 0x80000001, 0x0, 0x4ee, 0x1, 0xa0000, 0xc, 0x2, 0x7, 0x0, 0x2, 0x4, 0xffffffff, 0xebb9, 0xbc, 0x36, 0x8, 0x8, 0x8, 0x24, 0x5, 0x0, 0x4, 0x2, 0x9, 0x7, 0x7fffffff, 0x8001, 0x3, 0x2, 0xffffffff, 0x5, 0xee0, 0x9, 0x0, 0xfffffffa, 0x1, 0x6, 0xef2, 0x101, 0x4, 0x3, 0x401, 0x1fd4, 0x1, 0x2, 0x9, 0x3, 0x2, 0x6, 0x8000, 0xfffff000, 0x10, 0x6, 0x200, 0x400, 0x9, 0x0, 0x1, 0x2, 0x8, 0x9, 0xe4ed, 0x89, 0x80, 0xfff, 0x4, 0x5, 0x4, 0xfff, 0x7, 0x2, 0x6acd4056, 0x8b75, 0x80000001, 0x4, 0x9, 0x43, 0x1ff, 0x3, 0x4, 0x40, 0x10, 0x8, 0x3, 0xba, 0x2, 0x3972, 0x800, 0x1000, 0x3ff, 0x401, 0x4, 0x6, 0x50, 0x80000000, 0x1, 0x6, 0x0, 0x9, 0x9, 0xc4a5, 0x2, 0x10, 0x6, 0x353, 0x5, 0x4, 0x7fff, 0x3ff, 0x7, 0x2, 0x840, 0x96c, 0x8000, 0x4, 0x7, 0x10, 0x6a, 0x7, 0xffffffff, 0x9, 0x7, 0x8, 0x101, 0xaed5, 0x1, 0x6, 0x7, 0x1, 0x10, 0x6, 0x4, 0xfffffbff, 0x8, 0x2, 0x8, 0x2, 0x2, 0x1, 0x8001, 0x1, 0xffff, 0x7fff, 0xd57, 0x3fe0000, 0x8, 0x63ea]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0x8001, 0x3bd, 0x40, 0x4, 0x0, 0x6, 0x8001, 0x800, 0x0, 0x2, 0x0, 0x4, 0xf8, 0x4, 0x9, 0x6, 0xe55, 0x94, 0x7, 0x6, 0x7ff, 0x3, 0x4, 0xf, 0xa, 0x7fffffff, 0x542c, 0x7, 0x0, 0x8001, 0x9, 0x6, 0x9, 0xe8f, 0x7, 0xfe0, 0xc99, 0x9, 0x6, 0x6, 0xffffffff, 0x2, 0x95, 0x5, 0x6, 0x5, 0x1, 0xf7b7, 0x101, 0x6, 0x9, 0x1ff, 0x5, 0x5f20fb0f, 0x1000, 0x9, 0x5, 0x6, 0x800, 0xdc67, 0x2, 0x7fff, 0xa, 0x8, 0x0, 0x1, 0x7ff, 0x2, 0x7fffffff, 0x2, 0xf6dd, 0x6, 0x176, 0x47, 0x0, 0x3, 0x0, 0x4, 0x80000000, 0x4, 0x1000, 0x5, 0x8, 0x7, 0xf, 0x9, 0x7, 0x3ff, 0x7, 0x6d0012ce, 0xfffffff0, 0x9, 0x8, 0x0, 0x0, 0x3, 0x2, 0x400, 0x7, 0x6, 0x3, 0x8, 0xff, 0x4, 0x5, 0x3, 0xa, 0x1, 0x0, 0x8, 0x5, 0x8001, 0x3, 0x0, 0xffffffff, 0x8, 0x9, 0xfffffff3, 0x80000000, 0x8, 0x1000, 0x2, 0x6, 0x40, 0xffffffff, 0x6, 0x71be11e1, 0x1, 0x1, 0x5, 0x1, 0xd07f, 0x8, 0x97, 0x3ff, 0x229, 0x1, 0x6, 0x4, 0x7fffffff, 0x4, 0x2, 0x6, 0x4, 0xdc1a, 0x9, 0x4, 0x0, 0xfffffffc, 0x200, 0x3, 0x6, 0xa2, 0x3, 0x8001, 0xfffffffc, 0xa, 0x40, 0x8, 0x1, 0xfffffc03, 0x72, 0x7, 0x2, 0x626, 0x7ff, 0x1, 0x5, 0x5, 0xfff, 0x1, 0x1, 0xdf90, 0x78, 0x8, 0x7, 0x2, 0x297c3c21, 0x3, 0x7ff, 0x77, 0x6, 0x5c11, 0x7d, 0x7ff, 0xf70, 0xf8c8, 0x9, 0x2, 0x200, 0xd, 0xd1, 0x7, 0x9, 0x3, 0x9, 0x40, 0xfffffffc, 0x80000000, 0xbe3d, 0x57f45617, 0x3, 0x4, 0xac, 0xffffffff, 0x9, 0xaa, 0x3ff, 0xc589, 0x3, 0x80, 0x80, 0x9914, 0x7, 0x7, 0x7, 0x1, 0x2, 0x7, 0x8, 0xae, 0x8001, 0x398, 0x100, 0x2, 0x2, 0x800, 0x8000, 0xc, 0x9, 0x0, 0x6, 0xa0, 0x3, 0x4, 0x2, 0x4, 0x6, 0x5, 0xda92, 0x9, 0x1, 0x9, 0xffffffff, 0x3, 0x6, 0x8, 0x2eb, 0xbab1, 0xff, 0x2, 0x0, 0x8ea, 0xfffffffc, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x5, 0x6d3, 0x52, 0x4e9, 0xa82, 0x5, 0x107d, 0x1, 0x6, 0xffff, 0x65383ed4, 0xa1, 0xe4d, 0x5, 0x3, 0x101, 0x8, 0x10001, 0x62, 0x8, 0xf00b, 0x3, 0x2, 0x4, 0x8, 0x1e, 0x7, 0x7, 0x4, 0x9, 0x9, 0x10000, 0x8, 0x4, 0x7, 0x5c7, 0x5, 0xe94a, 0x2, 0x0, 0x5, 0xee, 0x8, 0x7, 0xfffffff8, 0x0, 0x1ff, 0x2c2, 0x6, 0x6, 0x7, 0x8, 0xfff, 0xfff, 0x40, 0x2, 0x0, 0xcbb9, 0x61e, 0x1, 0x1, 0xc, 0x0, 0x9, 0x68, 0x8, 0xa, 0x5, 0x3, 0x8, 0x6, 0x5, 0x1, 0x83, 0x1, 0x2, 0x5, 0x8, 0x4f, 0x5, 0x2, 0x1, 0x9, 0xc113, 0x4, 0x1ff, 0x9, 0x5, 0x8, 0x1, 0x3, 0x7, 0x81, 0x2, 0x1, 0x6, 0x0, 0x6, 0x2, 0x5, 0x93f, 0x6, 0x7, 0x3, 0x46, 0x2, 0xc, 0xff, 0x64, 0x5, 0x7, 0x5, 0x0, 0x3, 0xffffffff, 0x2, 0x6, 0x2, 0x4, 0x5, 0x9, 0x1, 0x4, 0x2, 0xa, 0x1, 0xf, 0x80000001, 0x1, 0x0, 0x5, 0x3a, 0x1, 0xfffe000, 0x5, 0x100, 0x1, 0x80, 0x7, 0x9, 0x5, 0xffff, 0x100, 0x4, 0x101, 0x7, 0x0, 0x7fffffff, 0x3, 0x3, 0x8, 0xfffffff8, 0xf797, 0x1, 0xfe, 0x8, 0x4, 0x3, 0x9, 0x1, 0x9, 0x4, 0xfffffff5, 0x7, 0x80, 0xbc4, 0x400, 0x10, 0x5, 0x4, 0x10000000, 0xa, 0x9, 0x8000, 0x6, 0x9, 0x3, 0x6, 0x8, 0x0, 0xd, 0x9, 0x1, 0x2, 0x1000000, 0x5, 0xe, 0x1000, 0x7, 0x3, 0x0, 0xa903, 0x0, 0x3, 0x82, 0x6, 0x3, 0x72, 0x120000, 0xe95, 0x6, 0xd6, 0x0, 0xffffffff, 0x1, 0x2, 0x8, 0x7fff, 0x7, 0x80000000, 0xa1f, 0x6, 0x5, 0x4, 0x2, 0x1, 0x47, 0x5, 0xccb, 0x3, 0x2, 0x26bf0e22, 0x5, 0x1, 0x7fff, 0x6f, 0x5, 0x5, 0x8000, 0x5, 0x7, 0x10, 0x1, 0x4, 0x4, 0x5, 0x6, 0x7fffffff, 0x5, 0x0, 0x7, 0xffff0001, 0xf, 0xb, 0xf3b3, 0x0, 0x0, 0x6, 0x3, 0x7, 0xb, 0x6, 0x400, 0x3, 0x7801]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xc, 0x10000000, 0xfffffff8, 0x8, 0x200, {0x1d, 0x1, 0x2, 0x5, 0x1, 0x4}, {0x7, 0x2, 0x9, 0x2, 0x1, 0xf8}, 0x2, 0x2, 0x1}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3f7}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x6, 0x7fff, 0x7fff, 0x1ff, 0x101, 0x5, 0x39c, 0xc, 0xbb, 0xe1, 0x80, 0x4, 0x401, 0x4, 0x401, 0xb, 0x9, 0xd6a0, 0x1b, 0xfffffffe, 0x200, 0xffffff7f, 0xfff00000, 0x3, 0x0, 0x400, 0x1, 0xffff, 0x0, 0xb, 0xadf9, 0x5, 0x1, 0x3, 0x2, 0x2, 0x2, 0x7fffffff, 0x7fff, 0xfffffffa, 0x8, 0x6, 0x1ca, 0x6, 0x0, 0x9, 0x6, 0x8, 0x1, 0x1ff, 0x9, 0x2, 0x90, 0x3bd, 0x2, 0x1000, 0x2, 0xa636, 0x8000, 0x9, 0x7, 0x6739, 0xd, 0x7, 0x7, 0x7, 0x8e, 0x3, 0xd6f, 0x0, 0x6, 0xb82, 0x0, 0x5, 0x6, 0x4, 0xd, 0x9, 0x8bb, 0x1, 0x81, 0xd, 0x5, 0x10001, 0x1ff, 0x3, 0xff, 0x7f, 0x7, 0x80000000, 0x1, 0x1, 0xf02, 0x8, 0x2, 0x4, 0x98d, 0xe22b, 0x2, 0x3b, 0x7, 0xff, 0x8, 0x10001, 0xd, 0x7, 0x7, 0x7f, 0x2, 0x40000, 0x7, 0x7fffffff, 0x6, 0xd2, 0x2, 0x9, 0x6, 0x9, 0x7, 0x1, 0x2, 0xffffffb4, 0x2, 0x1000, 0x1, 0xc73, 0x2, 0x1b9, 0x1f, 0x4ed2, 0x80000000, 0x0, 0x9, 0x2, 0x5, 0x690, 0x582912b, 0x5, 0x9dcb, 0x81, 0x4, 0x3, 0x6, 0x5a, 0x81, 0x5, 0xb, 0x7, 0x1, 0x3, 0x7, 0x3, 0x3, 0x0, 0x5ae, 0x7fff, 0x3e80, 0x42cb, 0x7, 0x2, 0xffff5a19, 0x1ff, 0x0, 0x5, 0xb, 0xdb88, 0x2, 0x6, 0x8, 0xca9, 0x3ff, 0xe, 0x10, 0x7c8, 0x4, 0x3ff, 0x7980, 0xffff, 0x80000000, 0x0, 0xa725, 0x3, 0x8, 0x3ff, 0x7, 0x0, 0xfffffffa, 0x80, 0x80000000, 0x87a, 0x5, 0xfffffffa, 0x7, 0x8, 0x0, 0x8, 0x2, 0x45c65478, 0x3, 0x4, 0x8, 0x3, 0x3ff, 0x3cc0, 0x0, 0x0, 0x7, 0x9, 0xffffff7d, 0x6, 0x9, 0x1, 0x6, 0x8, 0x6, 0xeb, 0x77, 0x5, 0x2, 0xa25f, 0xe, 0x1fe0000, 0x0, 0x4, 0x1, 0xe787, 0x9, 0x9, 0x9, 0x40, 0x7, 0x2, 0x3, 0x7, 0x3, 0x100, 0x4, 0x5, 0x2, 0xda0, 0x200, 0x80000001, 0x73, 0x40, 0x6, 0x1, 0x57, 0x2, 0x9, 0xffff, 0x800, 0x3, 0x8, 0x7, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x1, 0x7fff, 0xa54f, 0xfff, 0x3, 0x62, 0x20, 0x7fffffff, 0x0, 0x8, 0x80000001, 0x4, 0x3, 0xa2bc, 0x2f, 0x0, 0x0, 0x46, 0x8, 0x8, 0x2e1, 0x5, 0xc, 0xfffffffe, 0x2, 0x5, 0x2, 0x6, 0xf, 0x77f000, 0xfffffffe, 0xe05, 0xc7d2, 0x101, 0x2, 0x8, 0x6, 0x0, 0x3, 0x2, 0x7, 0x267, 0x1, 0x21, 0x6, 0x10001, 0x9, 0x6, 0x3215257b, 0x8, 0x10001, 0x8, 0x1, 0x1, 0x4, 0x5, 0x7, 0x5, 0x6, 0x400, 0x9, 0x5, 0x2f, 0x2, 0x0, 0x100, 0xffffffff, 0x6, 0x6, 0x8, 0x5a, 0x4, 0x9, 0xfff, 0xfffffffb, 0x2, 0x5, 0x8c, 0xfffffff7, 0x7, 0xfb600000, 0x40000000, 0x4, 0x9c09, 0x6, 0x0, 0x7, 0x8, 0x9, 0x7ff, 0x6, 0xc, 0x1, 0x2, 0x0, 0xf, 0x7f, 0xa, 0x5ce7, 0x3800, 0x1, 0x7f, 0x5, 0xb32, 0x800, 0x200, 0x6, 0x200, 0xc, 0xffff, 0x5, 0x8, 0x40, 0x200, 0x0, 0x373a, 0x1, 0xffff, 0x1, 0xfffffffa, 0x7, 0x3, 0x5, 0x1, 0x8000, 0xeddc, 0xd1c, 0x1, 0x798e, 0x7f, 0x1, 0xb, 0x3, 0xfffff228, 0x80000001, 0x0, 0x2, 0x40, 0x6, 0x5, 0x0, 0x62, 0x8, 0x4107831c, 0x3, 0x2, 0x6, 0xc6, 0x3, 0x6, 0x2, 0x6, 0x2, 0xfffffffe, 0x4, 0x4, 0x2, 0x80000000, 0x7, 0x5, 0x1, 0x0, 0x387, 0x401, 0xb63, 0xffffffff, 0x9, 0x140, 0x0, 0x9, 0x7ff, 0x401, 0x2, 0x3, 0x12d, 0x4, 0x4, 0xee3, 0x7, 0x9, 0x5, 0x1, 0xf, 0xb, 0xfff, 0x73c, 0x5, 0x8, 0xe00, 0x6, 0x7, 0xffff, 0x8, 0x58be, 0x5f400000, 0x5, 0x6, 0x5, 0x4, 0x40, 0xf, 0xffffffff, 0x200, 0x4, 0x7, 0x8, 0x9, 0x7, 0x81, 0x80000001, 0x9, 0x65, 0x6, 0x10001, 0xde1, 0x7fff, 0x69a, 0x5, 0x1, 0x6, 0x0, 0x9, 0x0, 0x8, 0x7f, 0xfff, 0x0, 0x3ff, 0x7, 0x6, 0x2, 0x4, 0x1, 0x53a5, 0xa00c, 0x3000, 0x6, 0x2, 0x6, 0x1000000, 0xe8f, 0x7, 0x80, 0x3ff, 0x80000000, 0x3ff, 0xfff, 0x6, 0x8, 0x8, 0x1, 0x8001, 0x8, 0x2, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff6369, 0x7, 0x6, 0x2, 0x79555fa, 0x8001, 0x4bd50a58, 0x98, 0x2, 0x4, 0x4, 0x7fffffff, 0x3, 0x4, 0x6, 0x6, 0x1000, 0x1f7b, 0x0, 0x4, 0x8, 0xe81, 0xe854, 0x6, 0x3b6f, 0x9c, 0x9, 0x10000, 0xffffffff, 0x8, 0xae, 0x4, 0x6, 0x7f, 0x10000, 0xfff, 0x5, 0xd, 0x0, 0x6, 0xf, 0xffffffff, 0x7, 0x4d13, 0x1, 0x44c, 0x6643, 0x40, 0xffff, 0x38, 0x7, 0x8, 0x969, 0x4, 0xfffffff9, 0x8, 0x22f, 0x5985, 0x3, 0xc63f, 0x3, 0x100, 0x3, 0xe84, 0x0, 0x6, 0x8001, 0x0, 0x1, 0x5, 0x2, 0x2, 0x5, 0x80000000, 0x7, 0xd3b, 0x7, 0x5, 0x7, 0x4, 0x8, 0x4, 0x0, 0x4, 0x40, 0x6000000, 0x23a86770, 0xfff, 0x1, 0xfffffff8, 0x81, 0x1ff, 0x4, 0xfffffffb, 0x7, 0xfffffffb, 0x5, 0x3ff, 0x5, 0x60a5, 0x8, 0x2721, 0xfffffffd, 0x9, 0x80000000, 0x80000001, 0x4, 0x5, 0x44db, 0xfffffffc, 0xffffffff, 0x5f, 0x4, 0x2, 0x5, 0x5, 0x7f, 0xe, 0x6000, 0x0, 0x9, 0x7fff, 0x4, 0xe, 0x2, 0xf, 0x7, 0xf, 0x3, 0x0, 0x5, 0x4637, 0x9, 0x3ff, 0xe5c, 0x4, 0xfffffffd, 0xffff, 0xce44, 0x4, 0xb35, 0xf2, 0x7ff, 0x1, 0x5, 0x20, 0x5, 0x7, 0xffff, 0x8, 0x4, 0x9, 0x1000, 0x3ff, 0xe64e, 0xffffff15, 0xffff00, 0x7, 0x3, 0x7a5d5e9a, 0xfffffffc, 0x1200, 0x1, 0x2, 0x7, 0x7, 0x0, 0x9, 0x4, 0x1, 0x2, 0x0, 0x9, 0x1, 0x5, 0x2, 0x3, 0x7ff, 0x3, 0x9, 0x401, 0x8001, 0x1ff, 0x6, 0x7, 0x9, 0x1, 0xe, 0x9, 0x101, 0x5, 0x6, 0x717, 0x3, 0x6, 0xffffffff, 0x9, 0x0, 0x9, 0x7, 0x3, 0x3, 0x0, 0x5, 0x9, 0x80000001, 0x9, 0x7, 0x9, 0xd46, 0xfffffff8, 0x4, 0x1, 0x7, 0x0, 0x2, 0x2, 0xffff, 0x4, 0x7f, 0x2, 0x81, 0x93, 0x2, 0x0, 0x3, 0x240000, 0x2, 0x3ff, 0x1, 0x0, 0x401, 0x6326, 0x800, 0xbb, 0x1, 0x4, 0x3fa, 0x4382, 0x6, 0x3, 0x8000000, 0x1, 0x10, 0x3, 0x3fb, 0xc8, 0x6, 0x2, 0x6, 0x0, 0x7, 0x7, 0xc, 0x2, 0x10]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000000, 0x1, 0x8000, 0x7, {0xbf, 0x0, 0x8, 0x6, 0xff, 0x6}, {0x80, 0x2, 0x0, 0x800, 0x0, 0x800}, 0x4, 0x1, 0xffff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x74, 0x8, 0x9, 0x0, 0x8, 0x8, 0x58, 0x80000001, 0x8, 0x5, 0x200, 0xa2, 0xfe000000, 0x6, 0x0, 0xb, 0x3ff, 0x8, 0xa, 0x1, 0x81, 0x445c04ed, 0x3, 0x9, 0x3, 0xfaa4, 0x5, 0x5, 0xe, 0x17bb5842, 0xfffffff8, 0x7f, 0x6, 0x8, 0x3, 0x3bb, 0x0, 0x540c, 0x1, 0x4de, 0x6, 0x563c2931, 0x6, 0x4657, 0x6, 0x1, 0xc5, 0x5, 0xdcaa, 0x7fff, 0x3, 0x4, 0x5, 0xe, 0xf8, 0x8001, 0x7, 0x3, 0x3, 0xffffffff, 0x0, 0x3, 0x3, 0x400, 0x86, 0xe, 0x5, 0x1, 0x6, 0x4, 0x80000001, 0x7, 0x8, 0x8, 0x7, 0x6, 0x7, 0x5, 0xa, 0x4, 0xb, 0x7, 0x8ba8, 0x7f, 0x6, 0xffff47fc, 0x1353, 0x36f2, 0x8, 0x7, 0x9, 0x8, 0x5, 0x4, 0x5, 0x7ff, 0x1, 0x7f, 0x1, 0x80000000, 0xd, 0x5, 0x4, 0x0, 0x1, 0x3, 0x1000, 0x8, 0xe7c6, 0x3, 0x7, 0x1, 0x1, 0x5, 0x3, 0x9, 0x6e61, 0x23, 0x4, 0x0, 0xbe0, 0x2, 0x4, 0x8, 0x4, 0x47, 0x6, 0x4, 0x3, 0x6, 0xfffffffc, 0x3, 0x7fff, 0x0, 0x5, 0x3, 0x2, 0xfffffffe, 0xff, 0x6, 0x8, 0xc, 0x1, 0x6, 0x5, 0x3, 0x1ff, 0x2, 0x681, 0xf, 0x8, 0x0, 0xffffffff, 0xbb5a, 0x6abd, 0x0, 0x7, 0x9, 0x0, 0x2, 0x80000000, 0x1, 0x3, 0x7, 0x6, 0x5, 0x8, 0xb, 0x0, 0xf, 0xfd, 0x9, 0x905b, 0xa1c, 0x5, 0x8, 0xbd, 0xfffffffd, 0x6, 0x84d, 0x200, 0x8, 0x7fffffff, 0x7ff, 0xc5f, 0x4, 0x800, 0x80000001, 0xc4a, 0x0, 0xbd98, 0x3ff, 0xffff, 0x3, 0xf, 0x7dc7, 0x8, 0x7fffffff, 0x4, 0x7, 0x3, 0x7, 0x7, 0xaac, 0x7, 0x1, 0x86, 0x10000, 0x10001, 0x7, 0xfffffffe, 0xa, 0x7f, 0xc721, 0x81, 0xfffffffa, 0x7, 0x7, 0x5, 0x7fff, 0x10, 0x200, 0x6, 0x5, 0x1, 0xfffff800, 0x1, 0xfffeffff, 0xc435, 0xfffff293, 0x10001, 0x7fffffff, 0x777, 0x3, 0x2, 0x4f53, 0x1, 0xd, 0x7, 0x2, 0x8, 0x8a, 0x22, 0xffffca80, 0x8, 0x5, 0x80000001, 0x2, 0x7, 0x4, 0x7, 0x4, 0x800, 0xfffff800, 0x3, 0x10]}]]}, {0x84, 0x6, "f3727c2664daaac9027dff0ffdd9f1e9fb7870aa487b14205a9c531b741fe4f57e096492e261ee1c5588ae974f56f299f6771c5936cb45185d755caeb82025a84cdfc0f8a6d1a49741bf90efdf83e5b1d921d63ff44eda0c4ed054d2318fe67f1f1fee0d660909b1c7f28d4f9d4b42ac10c52ccacc63b3c21e85aeccd906faeb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BASIC_ACT={0x28c, 0x3, [@m_csum={0x190, 0x19, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x73, 0x5, 0x3, 0x7f}, 0x17}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x1, 0x10000000, 0x8c1, 0x1}}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x7f, 0x1, 0x2, 0x4}, 0x5d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xfffffffa, 0x4, 0x7}, 0x45}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x8, 0x3, 0x3, 0x5}, 0x3f}}]}, {0xd8, 0x6, "dcb4c64feeeb46f30a321986ca7a5de471019b285a649b04ce4896ce5add3856402a503556a1ca253b62eca21955a9797a25c93095e1d4b5b8f9e5d9f5938c6ffddf25de42d63a7dbaacc50a5063ce238b9cb5156e9493968591587b0471dc42cc590655acec9ffd8b4a52b1e7899f6e1ed38537026052a3eeb64550234213865590159f1b3b67b6834790d77b33802d834e92a56602d08786f86e5ee793ed7f2989402612c2785a9f45ace66217fbf3606802c251b34316fc5ec9373a27648f8cfb228724e11a07534f6ca6cf4fe2af3f8a0ce1"}, {0xc}, {0xc, 0x8, {0x7, 0x1}}}}, @m_ct={0xf8, 0xd, 0x0, 0x0, {{0x7}, {0x74, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x5}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x2}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}, @TCA_CT_MARK={0x8}, @TCA_CT_LABELS={0x14, 0x7, "5d392b966830b5c74a799b6224c753d5"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_PARMS={0x18, 0x1, {0x4, 0x400, 0x0, 0x2, 0x1}}]}, {0x5e, 0x6, "c71235e4911c38af2c12fda92008f5657daac720e0046717f9ae5a08ac6ecdc42dc81e1577521f6a41d4d6516017422049f62ba04b8834beba69011f637b0da76b6e7061a53dc21b81b6a72f356adc6ac77a677663c39455b19e"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BASIC_POLICE={0xc20, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x629a00, 0x80, 0x193, 0x200, 0x0, 0x0, 0x1, 0x8, 0xc2d3, 0x5c9e, 0x6, 0x3, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x8, 0xffff2f76, 0xed, 0x1000, 0x75e, 0x80000001, 0xd17, 0x9, 0xfffffff7, 0x5, 0x1, 0x9, 0x5, 0x1, 0xffff, 0x1, 0x9, 0x6, 0x3a, 0x4, 0x7f, 0x0, 0x400, 0x7, 0x5, 0x8000, 0x100, 0x9, 0x401, 0x0, 0x4800000, 0xff7, 0x6, 0x0, 0x3, 0x0, 0xb, 0x7, 0x6, 0x6, 0x1ff, 0xb9, 0x0, 0xd3, 0x80000000, 0x4, 0x81, 0xd, 0x8, 0x8, 0x3ff, 0x7, 0x7, 0xf5c, 0x40, 0x9, 0x8, 0x7f, 0xfffffff8, 0x9, 0x80000000, 0x635, 0x8db9f433, 0x3, 0x9, 0x3, 0x6, 0xfffffff9, 0xfffffffc, 0x7, 0x40, 0x4, 0x176, 0x9, 0x5, 0x5, 0x7, 0x8, 0x9b, 0x5, 0x3, 0x40, 0x1, 0x4, 0xee32, 0x5, 0xac, 0x8001, 0x0, 0x91, 0x0, 0x3, 0x0, 0x2, 0x6, 0x8, 0xd, 0xa36f, 0x80, 0xacd, 0x1000, 0x6, 0x1, 0xc9d, 0x6, 0x1, 0x0, 0x71e8, 0x2271dc35, 0x9, 0x8, 0x7, 0x1000, 0x9, 0x4, 0x4, 0x5, 0x3, 0x8, 0x97d, 0x1e3, 0xfffffffa, 0x1, 0x7fffffff, 0x80000000, 0x0, 0xfda8, 0x4, 0x5, 0x7, 0x2, 0x0, 0x4, 0x200, 0xdf, 0x7fff, 0x80000000, 0x80, 0x10, 0x4, 0x7b1, 0x6, 0x1, 0xa894, 0xc, 0x1, 0x7, 0x5, 0x6, 0xfff, 0x200, 0x10, 0x5, 0x2, 0xfffffffe, 0x8, 0xc, 0x4, 0x5, 0x4, 0xa, 0x54b2, 0x2, 0x2a8, 0x100, 0x9, 0x1, 0x8, 0xc8ad, 0x0, 0x6, 0x8000, 0x3, 0x2, 0x0, 0x10000, 0x2, 0x7, 0x0, 0x2, 0x8, 0x259bf8b4, 0xffffffff, 0x8, 0xd, 0xd6, 0xee808000, 0x52, 0x100, 0xa0, 0x10001, 0xf8, 0x2, 0x7, 0xbac, 0xbdcb, 0x0, 0x8, 0x5, 0x0, 0x1, 0x1, 0xffff0000, 0x41dd186, 0x8000, 0x10001, 0x401, 0xa, 0x8, 0x7, 0x40000, 0x10, 0x4, 0xc, 0x8, 0x80000000, 0xca98, 0x5, 0x3ff, 0x7, 0x90be, 0xd008, 0x100, 0x5, 0x1000, 0x8987, 0x2, 0xfff, 0x1, 0xff, 0x5c, 0x8, 0x5, 0x8, 0x3, 0x2, 0x2, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0xffff, 0xd, 0x1, 0x101, 0x1, 0x6, 0xffff, 0x36, 0x7, 0x54, 0xa1, 0x4, 0x7, 0x40, 0xd, 0x9, 0x9, 0xe, 0x7445, 0x1, 0x6, 0x80, 0x9, 0x7, 0x401, 0x0, 0x81, 0x9, 0x1, 0x94f, 0x8, 0x9, 0x1, 0x70cc, 0x3, 0x6, 0x8, 0xde, 0x1, 0xf, 0x0, 0x4bc, 0x6, 0x5, 0x10, 0xd349, 0x9, 0x1, 0x81, 0x40, 0xfffffff7, 0x6, 0x8001, 0xfffffff7, 0x0, 0x3, 0xcbf, 0x2, 0xfffffff9, 0x2, 0x6, 0x2, 0x2, 0x5, 0x0, 0x9, 0xfffffffe, 0x1ff, 0x7d5, 0x1, 0x4, 0xfffffffe, 0xfa34, 0x9, 0xff, 0xffff8000, 0x1, 0x4, 0xffff, 0x2e, 0x6, 0xde1, 0x1, 0x2, 0x2, 0x0, 0x5c, 0x4, 0x8, 0xf4, 0x4, 0x4, 0x1ff, 0x7, 0x80, 0x5, 0x5, 0x4, 0x4, 0xba1, 0x7, 0x3, 0x840, 0xb, 0x0, 0xfaf, 0x7, 0x1, 0x9, 0x7, 0xfff, 0x19c, 0xb, 0x7, 0x81, 0xcd, 0x4, 0x5, 0x4, 0x6, 0x0, 0x5aa, 0x7, 0x8, 0x510600, 0x8, 0x3, 0x7ff, 0x380000, 0x4, 0x3, 0x4, 0x1000, 0x7ff, 0x2, 0x5, 0x4f, 0x9, 0x7, 0x8000, 0xb5, 0x1, 0x7, 0x91, 0x7ff, 0x3, 0x0, 0x8, 0xb00000, 0x2, 0x5, 0x9, 0xfffffffb, 0xfffffff9, 0x75, 0x0, 0x101, 0xfffffffd, 0x9, 0x1, 0x3, 0x1, 0x3, 0x1, 0x94c, 0x4, 0x3800000, 0x8, 0xb, 0x5, 0x8, 0x4, 0x0, 0x5, 0x7, 0x9, 0x5, 0x3, 0x6, 0x5, 0x5, 0xcd2, 0x0, 0x5, 0x7fffffff, 0x4, 0xc59f, 0x1, 0xd6bd, 0x3, 0x52d, 0x5, 0x5, 0x3, 0x3, 0xfffffffa, 0x5, 0x4cd, 0xf, 0xf, 0x400, 0xef6, 0x3, 0x6, 0x1, 0x8b8, 0xffffffff, 0x6, 0xc, 0x2, 0x7, 0x5, 0x5, 0x2, 0x5, 0x9, 0x6, 0x4, 0x8001, 0x2, 0x0, 0x7, 0xffff72ce, 0xfffffc01, 0x9, 0x7, 0x400, 0x7, 0x0, 0x84d7, 0x7f, 0xffffffff, 0x900, 0x9, 0x7, 0x9, 0x8, 0xffff, 0x1, 0x3c804138, 0x4, 0x3, 0x4, 0x4d1, 0x4, 0x100, 0xfffffbff, 0x2, 0x200, 0xffff, 0x97, 0x8, 0x62, 0xc, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x1, 0x120000, 0x0, 0x9, 0xa9, 0x7, 0x6, 0x7, 0xac94, 0x8, 0x3, 0x9, 0x10, 0x1, 0xfffffffd, 0x6, 0x5, 0x1c56, 0xcf, 0x4, 0x8001, 0xffff, 0x9, 0xc, 0x8, 0xffff, 0x6, 0x8de, 0xc, 0x0, 0x40, 0x1ff, 0x800, 0x3, 0x2, 0x8, 0x1, 0x6, 0x7fff, 0x3ff, 0x1, 0x5, 0x0, 0x0, 0x9, 0x6, 0x1, 0x80000000, 0x8001, 0x1, 0xfffffff7, 0xff, 0x4, 0xfffff078, 0xec5, 0xfffffffa, 0xa, 0x3, 0x4, 0x8, 0xe, 0x80000000, 0x4, 0x8, 0x3, 0x100, 0x4, 0x10001, 0xee, 0x5, 0x8, 0xff, 0x9d, 0x81, 0xe, 0xbe, 0x3, 0xfffffffd, 0x986, 0x9, 0x3, 0xd, 0x3, 0x6fb, 0xdc, 0x95, 0x9, 0x5, 0x7, 0x0, 0x5, 0x6, 0x8, 0x80000000, 0x5, 0xfffffffc, 0x62c64221, 0x7fff, 0xffffff80, 0x4, 0x4, 0x6, 0x781d, 0x5, 0x8, 0x5, 0xfff, 0x7, 0xb3, 0x22a, 0x81, 0x885, 0x2, 0xf8, 0xfffffff0, 0x7, 0x7fff, 0x0, 0x6, 0x7, 0xc, 0x1, 0x7, 0x0, 0x9, 0x3, 0x2, 0x10001, 0x6, 0x5, 0x2, 0x80, 0xd5, 0x7fffffff, 0x8, 0x1, 0x5, 0x8, 0x0, 0x7fffffff, 0xb4f, 0x5, 0xffff7fff, 0x8, 0x4, 0x7, 0x3, 0x9, 0xe22, 0xd850, 0x2, 0x1, 0x52, 0x7fff, 0x45a371e4, 0x3, 0x9, 0x10, 0x9, 0x8001, 0x9, 0x0, 0x4, 0x94407db, 0x4, 0xb05, 0x4, 0x10000, 0x9, 0xe, 0x1, 0xb4e, 0xf, 0x6, 0x800, 0x7, 0x5, 0x9596ac12, 0x3, 0x4, 0x3ff, 0xa8, 0x800, 0x401, 0x9, 0xfa, 0x9, 0x3, 0x7, 0x8001, 0x4, 0xb0d, 0x5, 0xb, 0x9, 0x5, 0xfc5a, 0x4, 0xfffffff8, 0xf218, 0x0, 0x5, 0xffff, 0x7, 0x3, 0x4, 0x9, 0x9, 0x298, 0x8, 0xffffffff, 0x4, 0x7, 0x5, 0x4, 0x3, 0x9, 0x3, 0x67, 0x9, 0xdb0, 0x698, 0x6, 0x8, 0x1ff, 0x8, 0x81, 0xfffffffd, 0xffffffff, 0x6, 0xaf17, 0x5, 0x101, 0xc1, 0x2, 0x8, 0x8, 0x4d, 0xd5a, 0x9, 0x0, 0x6, 0x7, 0x6f6, 0x0, 0x6, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x62c4f068, 0x2]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x659}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x3ff}, @TCA_RATE={0x6, 0x5, {0xb7}}, @TCA_RATE={0x6, 0x5, {0xd, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x85f}, @TCA_RATE={0x6, 0x5, {0xda, 0x81}}]}, 0x5750}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.715667118s ago: executing program 2 (id=1044): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000100)='syzkaller\x00'}, 0x94) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, 0x0, 0x200040d0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="0b0528bd70000500040002"], 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) 3.446239993s ago: executing program 0 (id=1045): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000c40)) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r3, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0xe0, 0x0, &(0x7f0000000540)=[@acquire={0x40046305, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x101, 0x3}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/191, 0xbf, 0x2, 0x2f}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@fda={0x66646185, 0x8, 0x0, 0x29}, @fda={0x66646185, 0xa, 0x1, 0x34}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/43, 0x2b, 0x2, 0x38}}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000480)={@flat=@handle={0x73682a85, 0x1182016943993805, 0x3}, @flat=@binder={0x73622a85, 0xb, 0x1}, @flat=@handle={0x73682a85, 0x1}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}, @exit_looper], 0x0, 0x0, 0x0}) 3.445407801s ago: executing program 2 (id=1046): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfc}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x21700, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) 2.536363823s ago: executing program 3 (id=1047): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfffffffffffffc87, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfffffffffffffc87, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@getpolicy={0x50, 0x15, 0x4, 0x70bd2b, 0x25dfdbfb, {{@in=@loopback, @in=@rand_addr=0x64010101, 0x4e21, 0x8000, 0x4e22, 0x8, 0xa, 0x80, 0x0, 0x89}, 0x6e6bb4}}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@getpolicy={0x50, 0x15, 0x4, 0x70bd2b, 0x25dfdbfb, {{@in=@loopback, @in=@rand_addr=0x64010101, 0x4e21, 0x8000, 0x4e22, 0x8, 0xa, 0x80, 0x0, 0x89}, 0x6e6bb4}}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x1) recvmsg$unix(r1, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x12}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r6}, &(0x7f0000000380), &(0x7f0000000400)=r4}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r6}, &(0x7f0000000380), &(0x7f0000000400)=r4}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x68, &(0x7f0000000800)=ANY=[@ANYBLOB="68000000000000004b0000000000000020000000001100"/32], 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) rseq(0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r9, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0xffffffff, {0x77359400}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) (async) ioctl$vim2m_VIDIOC_QBUF(r9, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0xffffffff, {0x77359400}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) socket$inet(0x2, 0x4000000000000001, 0x0) 2.489913654s ago: executing program 0 (id=1048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000000)=""/213, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000001900)={{}, "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"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x800000, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000000740)=[0x0, 0x40, 0x7, 0x5], &(0x7f0000000780), 0x2) syz_open_pts(0xffffffffffffffff, 0x0) 2.429025891s ago: executing program 1 (id=1049): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee01) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket(0x1, 0x803, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000002060102000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400066c4ada"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x5, 0x7, 0x2, 0xc, r0, 0x40, '\x00', r6, r0, 0x5, 0x0, 0x1}, 0x50) 2.301177569s ago: executing program 2 (id=1050): socket$inet_sctp(0x2, 0x1, 0x84) eventfd(0x100f) epoll_create1(0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000100)={0x40, 0x11, 0x7, "7144a39994855c"}, 0x0, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtfilter={0x24, 0x29, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r1, 0x0, 0x0) 2.282240218s ago: executing program 3 (id=1051): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='io\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/230, 0xe6}], 0x1, 0x401, 0x9) syz_open_dev$char_usb(0xc, 0xb4, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x4048010) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x1) fchdir(r8) write$cgroup_int(r6, &(0x7f0000000040)=0x900, 0x12) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) write$char_usb(r3, &(0x7f0000000100)="05000000a4548ee43813e6ae188b6a940000000000000000d7f9e890", 0x3f) 1.605077613s ago: executing program 4 (id=1052): socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000", @ANYBLOB="f7", @ANYRESOCT], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}, 0x7}, {{&(0x7f0000000240)=@ax25={{0x3, @bcast}, [@bcast, @rose, @netrom, @remote, @bcast, @rose, @netrom, @null]}, 0x80, &(0x7f0000002900)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/198, 0xc6}, {&(0x7f00000013c0)=""/194, 0xc2}, {&(0x7f00000014c0)=""/174, 0xae}, {&(0x7f0000001580)=""/110, 0x6e}, {&(0x7f0000001600)=""/233, 0xe9}, {&(0x7f0000001700)=""/216, 0xd8}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/219, 0xdb}, {&(0x7f0000000000)=""/2, 0x2}], 0xa, &(0x7f0000003a40)=""/4096, 0x1000}, 0x3ff}], 0x2, 0x100, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0xccd4453e7e835cf8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x4094) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x21) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x100000000000f7) 1.193306424s ago: executing program 0 (id=1053): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 758.352369ms ago: executing program 0 (id=1054): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev}, @CTA_NAT_PROTO={0x4}]}]}, 0x74}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000040d07d408612a41f16fb0102030109021b0001000000000904"], 0x0) 12.933448ms ago: executing program 3 (id=1055): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1b, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x50, &(0x7f0000000100), 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @host, 0x0, 0xfffffffffffffffe, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "f64d87da753fa09a", "ec9580400006000000ba6a6b247009d4", "000000f0", '\x00\x00\x00\x00\x00\x00\b\x00'}, 0x28) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0), 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)="ac", 0x1}], 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020}, 0x2020) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002280)='notify_on_release\x00', 0x2, 0x0) 0s ago: executing program 1 (id=1056): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$comedi(0xffffff9c, &(0x7f0000000780)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0x7, 0x80008000, 0x9, 0x2, 0xfffffffe, 0x0, 0x1, 0xf, 0xffe, 0x1, 0xa, 0x1, 0x1006, 0x4, 0xffff, 0x6, 0xffffffa9, 0x44000009, 0x836, 0x2, 0x4, 0x10000, 0x800, 0xe2df, 0x2, 0xfffffffd, 0x4, 0x3, 0x7, 0x5, 0x8005]}) syz_io_uring_setup(0x23c, 0x0, &(0x7f0000000200), 0x0) socket(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85000000750000000400000007000000"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='workqueue_execute_start\x00', r1}, 0x18) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000180)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/resume_offset', 0x82000, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000010401010000000000000000010000050a00020000000005e4ffffff0500010001000000"], 0x28}, 0x1, 0x2000000, 0x0, 0x4040000}, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000}) r7 = io_uring_setup(0x3c86, &(0x7f00000006c0)={0x0, 0x988d, 0x8000, 0x0, 0x148}) io_uring_setup(0x7fd3, &(0x7f00000004c0)={0x0, 0x3eda, 0x4, 0x0, 0x2f9, 0x0, r7}) kernel console output (not intermixed with test programs): 0FE.0004: unknown main item tag 0x0 [ 236.785674][ T8105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.793766][ T975] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 236.811564][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 236.819096][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.838271][ T5919] elecom 0003:056E:00FE.0004: unknown main item tag 0x0 [ 236.847592][ T5919] elecom 0003:056E:00FE.0004: unknown main item tag 0x0 [ 236.856649][ T9] usb 2-1: config 0 has no interfaces? [ 236.865732][ T9] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 236.876249][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.897724][ T8092] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 236.908010][ T5919] elecom 0003:056E:00FE.0004: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.4-1/input0 [ 236.911473][ T975] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 236.930696][ T9] usb 2-1: Product: syz [ 236.947764][ T9] usb 2-1: Manufacturer: syz [ 236.999037][ T9] usb 2-1: SerialNumber: syz [ 237.041283][ T9] usb 2-1: config 0 descriptor?? [ 237.071516][ T5962] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 237.102012][ T10] vhci_hcd: vhci_device speed not set [ 237.214264][ T975] usb 3-1: USB disconnect, device number 14 [ 237.233128][ T5962] usb 1-1: Using ep0 maxpacket: 16 [ 237.263669][ T5962] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 237.286409][ T30] audit: type=1400 audit(1756917372.330:408): avc: denied { setopt } for pid=8087 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 237.312784][ T5962] usb 1-1: config 0 has no interface number 0 [ 237.319076][ T5962] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 237.339571][ T5962] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 237.367242][ T5962] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 237.379277][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 237.387588][ T5962] usb 1-1: Product: syz [ 237.395219][ T5962] usb 1-1: SerialNumber: syz [ 237.416916][ T5962] usb 1-1: config 0 descriptor?? [ 237.446188][ T5962] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 237.473460][ T5962] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input5 [ 237.520151][ T30] audit: type=1400 audit(1756917372.580:409): avc: denied { read } for pid=5204 comm="acpid" name="event4" dev="devtmpfs" ino=2978 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 237.582021][ T30] audit: type=1400 audit(1756917372.580:410): avc: denied { open } for pid=5204 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2978 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 238.134571][ T5919] usb 5-1: USB disconnect, device number 28 [ 238.136996][ T30] audit: type=1400 audit(1756917372.580:411): avc: denied { ioctl } for pid=5204 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2978 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 238.166708][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.182321][ T9] usb 2-1: USB disconnect, device number 19 [ 238.444282][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 239.224484][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 239.232796][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 239.239926][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 239.247086][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 239.254205][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 239.261322][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 239.268496][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 239.275707][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 239.282884][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 239.291668][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 239.417166][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 239.426350][ T5962] usb 1-1: USB disconnect, device number 20 [ 239.663136][ T5962] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 242.993727][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.081939][ T8176] FAULT_INJECTION: forcing a failure. [ 244.081939][ T8176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.102508][ T8176] CPU: 0 UID: 0 PID: 8176 Comm: syz.2.572 Not tainted syzkaller #0 PREEMPT(full) [ 244.102527][ T8176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 244.102533][ T8176] Call Trace: [ 244.102537][ T8176] [ 244.102542][ T8176] dump_stack_lvl+0x16c/0x1f0 [ 244.102558][ T8176] should_fail_ex+0x512/0x640 [ 244.102573][ T8176] _copy_to_iter+0x29f/0x1710 [ 244.102588][ T8176] ? try_to_wake_up+0x160/0x1870 [ 244.102602][ T8176] ? __pfx__copy_to_iter+0x10/0x10 [ 244.102615][ T8176] ? preempt_schedule_thunk+0x16/0x30 [ 244.102630][ T8176] ? preempt_schedule_common+0x44/0xc0 [ 244.102642][ T8176] ? preempt_schedule_thunk+0x16/0x30 [ 244.102659][ T8176] userfaultfd_read_iter+0x91c/0x1c70 [ 244.102676][ T8176] ? __pfx_avc_has_perm+0x10/0x10 [ 244.102688][ T8176] ? __pfx_userfaultfd_read_iter+0x10/0x10 [ 244.102702][ T8176] ? inode_has_perm+0x16f/0x1d0 [ 244.102714][ T8176] ? __pfx_default_wake_function+0x10/0x10 [ 244.102728][ T8176] ? __pfx_file_has_perm+0x10/0x10 [ 244.102741][ T8176] do_iter_readv_writev+0x743/0x9e0 [ 244.102760][ T8176] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 244.102776][ T8176] ? selinux_file_permission+0x126/0x660 [ 244.102793][ T8176] ? bpf_lsm_file_permission+0x9/0x10 [ 244.102806][ T8176] ? security_file_permission+0x71/0x210 [ 244.102822][ T8176] ? rw_verify_area+0xcf/0x6c0 [ 244.102839][ T8176] vfs_readv+0x4cb/0x8b0 [ 244.102851][ T8176] ? __pfx_vfs_readv+0x10/0x10 [ 244.102870][ T8176] ? __fget_files+0x20e/0x3c0 [ 244.102885][ T8176] ? do_readv+0x132/0x340 [ 244.102893][ T8176] do_readv+0x132/0x340 [ 244.102902][ T8176] ? __pfx_do_readv+0x10/0x10 [ 244.102910][ T8176] ? syscall_trace_enter+0x1cb/0x240 [ 244.102924][ T8176] ? rcu_is_watching+0x12/0xc0 [ 244.102939][ T8176] do_syscall_64+0xcd/0x4c0 [ 244.102952][ T8176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.102963][ T8176] RIP: 0033:0x7fb64958ebe9 [ 244.102971][ T8176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.102981][ T8176] RSP: 002b:00007fb64a32b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 244.102992][ T8176] RAX: ffffffffffffffda RBX: 00007fb6497c5fa0 RCX: 00007fb64958ebe9 [ 244.102999][ T8176] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000008 [ 244.103005][ T8176] RBP: 00007fb64a32b090 R08: 0000000000000000 R09: 0000000000000000 [ 244.103011][ T8176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.103016][ T8176] R13: 00007fb6497c6038 R14: 00007fb6497c5fa0 R15: 00007ffc704949d8 [ 244.103029][ T8176] [ 244.403013][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.834316][ T8183] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 244.840948][ T8183] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 244.871482][ T8183] vhci_hcd vhci_hcd.0: Device attached [ 245.071532][ T9] vhci_hcd: vhci_device speed not set [ 245.381643][ T9] usb 33-1: new full-speed USB device number 4 using vhci_hcd [ 245.391263][ T30] audit: type=1400 audit(1756917380.260:412): avc: denied { write } for pid=8198 comm="syz.2.577" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 245.516868][ T8202] netlink: 32 bytes leftover after parsing attributes in process `syz.4.578'. [ 245.740777][ T8189] vhci_hcd: connection reset by peer [ 245.753233][ T6723] vhci_hcd: stop threads [ 245.765847][ T6723] vhci_hcd: release socket [ 245.780660][ T6723] vhci_hcd: disconnect device [ 245.936526][ T8210] can: request_module (can-proto-4) failed. [ 246.141660][ T48] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 246.311893][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 246.376664][ T48] usb 3-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c4.18 [ 246.390918][ T8218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.581'. [ 246.411154][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.419539][ T48] usb 3-1: Product: syz [ 246.424076][ T48] usb 3-1: Manufacturer: syz [ 246.430350][ T48] usb 3-1: SerialNumber: syz [ 246.450060][ T48] usb 3-1: config 0 descriptor?? [ 246.459123][ T48] esd_usb 3-1:0.0: sending version message failed [ 246.469547][ T48] esd_usb 3-1:0.0: probe with driver esd_usb failed with error -22 [ 246.568114][ T8220] batman_adv: batadv0: Adding interface: dummy0 [ 246.574433][ T30] audit: type=1400 audit(1756917381.630:413): avc: denied { bind } for pid=8219 comm="syz.4.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 246.596442][ T8220] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.621682][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.738559][ T8220] batman_adv: batadv0: Interface activated: dummy0 [ 246.741503][ T30] audit: type=1400 audit(1756917381.800:414): avc: denied { ioctl } for pid=8219 comm="syz.4.583" path="socket:[19419]" dev="sockfs" ino=19419 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 246.786937][ T8221] batadv0: mtu less than device minimum [ 246.844037][ T8221] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 246.856952][ T8221] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 246.869809][ T8221] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 246.881969][ T8221] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 246.893427][ T8221] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 246.904287][ T8221] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 246.915136][ T8221] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 248.598307][ T30] audit: type=1400 audit(1756917383.660:415): avc: denied { listen } for pid=8236 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 248.668721][ T30] audit: type=1400 audit(1756917383.690:416): avc: denied { accept } for pid=8236 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 248.822790][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 249.532427][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 249.545645][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.555657][ T10] usb 1-1: Product: syz [ 249.568973][ T10] usb 1-1: Manufacturer: syz [ 249.591899][ T10] usb 1-1: SerialNumber: syz [ 249.871791][ T48] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 250.186015][ T5855] usb 3-1: USB disconnect, device number 15 [ 250.221737][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 250.233607][ T48] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 250.243517][ T48] usb 4-1: config 0 has no interface number 0 [ 250.257130][ T48] usb 4-1: config 0 interface 153 has no altsetting 0 [ 250.275996][ T48] usb 4-1: New USB device found, idVendor=0742, idProduct=200a, bcdDevice=c1.31 [ 250.286210][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.302841][ T48] usb 4-1: Product: syz [ 250.307196][ T48] usb 4-1: Manufacturer: syz [ 250.315002][ T48] usb 4-1: SerialNumber: syz [ 250.322134][ T48] usb 4-1: config 0 descriptor?? [ 250.333814][ T48] HFC-S_USB 4-1:0.153: probe with driver HFC-S_USB failed with error -5 [ 250.964907][ T9] vhci_hcd: vhci_device speed not set [ 251.163779][ T8269] sg_write: data in/out 32731/154 bytes for SCSI command 0x0-- guessing data in; [ 251.163779][ T8269] program syz.2.595 not setting count and/or reply_len properly [ 251.583373][ T30] audit: type=1400 audit(1756917386.620:417): avc: denied { map } for pid=8254 comm="syz.3.594" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 251.695143][ T5855] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 251.807889][ T10] net_ratelimit: 12 callbacks suppressed [ 251.807915][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 251.851489][ T5855] usb 2-1: Using ep0 maxpacket: 8 [ 252.247341][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 252.251047][ T5855] usb 2-1: config 0 has an invalid interface number: 45 but max is 0 [ 252.268893][ T5855] usb 2-1: config 0 has no interface number 0 [ 252.276663][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 252.291743][ T5855] usb 2-1: config 0 interface 45 altsetting 0 endpoint 0x4 has invalid maxpacket 42437, setting to 1024 [ 252.313843][ T5855] usb 2-1: config 0 interface 45 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 252.330530][ T5855] usb 2-1: config 0 interface 45 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 252.364645][ T5855] usb 2-1: config 0 interface 45 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 252.377283][ T5855] usb 2-1: config 0 interface 45 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 252.405421][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 252.405478][ T5855] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0123, bcdDevice=75.c5 [ 252.425948][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.515072][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 252.516600][ T5855] usb 2-1: Product: syz [ 252.532286][ T5855] usb 2-1: Manufacturer: syz [ 252.568792][ T5855] usb 2-1: SerialNumber: syz [ 252.577669][ T10] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 252.613368][ T5855] usb 2-1: config 0 descriptor?? [ 252.616940][ T10] usb 1-1: USB disconnect, device number 21 [ 252.730444][ T8272] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 252.758316][ T8284] futex_wake_op: syz.4.596 tries to shift op by 32; fix this program [ 252.810252][ T5962] usb 4-1: USB disconnect, device number 25 [ 252.948822][ T5855] kvaser_usb 2-1:0.45: error -ENODEV: Cannot get usb endpoint(s) [ 253.091643][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 254.530638][ T48] usb 2-1: USB disconnect, device number 20 [ 254.555666][ T30] audit: type=1400 audit(1756917389.620:418): avc: denied { getopt } for pid=8295 comm="syz.3.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 254.596590][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 254.607840][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 254.618211][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 254.687711][ T10] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 254.794809][ T8306] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 254.863009][ T30] audit: type=1400 audit(1756917389.930:419): avc: denied { lock } for pid=8295 comm="syz.3.604" path="socket:[20210]" dev="sockfs" ino=20210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 255.365998][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.381473][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.521060][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.530253][ T10] usb 1-1: Product: syz [ 255.535364][ T10] usb 1-1: Manufacturer: syz [ 255.539998][ T10] usb 1-1: SerialNumber: syz [ 255.573446][ T10] usb 1-1: config 0 descriptor?? [ 255.695240][ T10] usb 1-1: can't set config #0, error -71 [ 255.735224][ T10] usb 1-1: USB disconnect, device number 22 [ 255.764796][ T8314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.606'. [ 258.741646][ T10] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 258.802526][ T8345] syz.3.612: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 259.179350][ T8345] CPU: 1 UID: 0 PID: 8345 Comm: syz.3.612 Not tainted syzkaller #0 PREEMPT(full) [ 259.179369][ T8345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 259.179377][ T8345] Call Trace: [ 259.179381][ T8345] [ 259.179388][ T8345] dump_stack_lvl+0x16c/0x1f0 [ 259.179406][ T8345] warn_alloc+0x248/0x3a0 [ 259.179420][ T8345] ? __pfx_warn_alloc+0x10/0x10 [ 259.179431][ T8345] ? __pfx_stack_trace_save+0x10/0x10 [ 259.179451][ T8345] ? kasan_save_stack+0x42/0x60 [ 259.179463][ T8345] ? kasan_save_stack+0x33/0x60 [ 259.179473][ T8345] ? kasan_save_track+0x14/0x30 [ 259.179483][ T8345] ? xskq_create+0x52/0x1d0 [ 259.179493][ T8345] ? xsk_setsockopt+0x792/0x9a0 [ 259.179506][ T8345] ? do_sock_setsockopt+0xf3/0x1d0 [ 259.179523][ T8345] ? xskq_create+0xfb/0x1d0 [ 259.179534][ T8345] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 259.179554][ T8345] ? xskq_create+0xfb/0x1d0 [ 259.179566][ T8345] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 259.179586][ T8345] ? xskq_create+0xfb/0x1d0 [ 259.179595][ T8345] vmalloc_user_noprof+0x9e/0xe0 [ 259.179611][ T8345] ? xskq_create+0xfb/0x1d0 [ 259.179620][ T8345] xskq_create+0xfb/0x1d0 [ 259.179632][ T8345] xsk_setsockopt+0x792/0x9a0 [ 259.179647][ T8345] ? __pfx_xsk_setsockopt+0x10/0x10 [ 259.179662][ T8345] ? find_held_lock+0x2b/0x80 [ 259.179678][ T8345] ? selinux_socket_setsockopt+0x6a/0x80 [ 259.179693][ T8345] ? __pfx_xsk_setsockopt+0x10/0x10 [ 259.179709][ T8345] do_sock_setsockopt+0xf3/0x1d0 [ 259.179724][ T8345] __sys_setsockopt+0x1a0/0x230 [ 259.179737][ T8345] __x64_sys_setsockopt+0xbd/0x160 [ 259.179747][ T8345] ? syscall_trace_enter+0xee/0x240 [ 259.179759][ T8345] do_syscall_64+0xcd/0x4c0 [ 259.179773][ T8345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.179784][ T8345] RIP: 0033:0x7efe4918ebe9 [ 259.179793][ T8345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.179803][ T8345] RSP: 002b:00007efe4a020038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 259.179814][ T8345] RAX: ffffffffffffffda RBX: 00007efe493c5fa0 RCX: 00007efe4918ebe9 [ 259.179821][ T8345] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 259.179827][ T8345] RBP: 00007efe49211e19 R08: 0000000000000004 R09: 0000000000000000 [ 259.179833][ T8345] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 259.179839][ T8345] R13: 00007efe493c6038 R14: 00007efe493c5fa0 R15: 00007ffc41baa488 [ 259.179853][ T8345] [ 259.179857][ T8345] Mem-Info: [ 259.193559][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.527534][ T8345] active_anon:20751 inactive_anon:0 isolated_anon:0 [ 259.527534][ T8345] active_file:15396 inactive_file:41040 isolated_file:0 [ 259.527534][ T8345] unevictable:768 dirty:124 writeback:0 [ 259.527534][ T8345] slab_reclaimable:12149 slab_unreclaimable:109453 [ 259.527534][ T8345] mapped:41668 shmem:11375 pagetables:1350 [ 259.527534][ T8345] sec_pagetables:0 bounce:0 [ 259.527534][ T8345] kernel_misc_reclaimable:0 [ 259.527534][ T8345] free:1271694 free_pcp:18018 free_cma:0 [ 259.608144][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 259.608300][ T30] audit: type=1400 audit(1756917394.670:420): avc: denied { read } for pid=8346 comm="syz.0.616" path="socket:[20393]" dev="sockfs" ino=20393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 259.617643][ T10] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 259.641203][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.701493][ T8345] Node 0 active_anon:87120kB inactive_anon:0kB active_file:61584kB inactive_file:163952kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:167232kB dirty:496kB writeback:0kB shmem:48160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13036kB pagetables:5268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 259.748517][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.832126][ T10] usb 5-1: config 0 descriptor?? [ 259.850689][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 259.879550][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 259.916394][ T30] audit: type=1400 audit(1756917394.730:421): avc: denied { read } for pid=8346 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 259.921765][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 259.961586][ T8345] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 260.013287][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 260.020628][ T8345] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 260.026038][ T10] usb 5-1: media controller created [ 260.134382][ T8344] dvb-usb: bulk message failed: -22 (2/0) [ 260.147957][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 260.176252][ T8345] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 260.183662][ T8344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.193578][ T8344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.201598][ T5926] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 260.209296][ T8345] Node 0 DMA32 free:1139328kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:107888kB inactive_anon:0kB active_file:61584kB inactive_file:162644kB unevictable:1536kB writepending:596kB present:3129332kB managed:2539360kB mlocked:0kB bounce:0kB free_pcp:60380kB local_pcp:36632kB free_cma:0kB [ 260.245853][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 260.264892][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 260.292788][ T8344] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 260.370262][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 260.660138][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 260.666722][ T8345] lowmem_reserve[]: 0 0 1 1 1 [ 260.685158][ T5926] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 260.715222][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 260.724157][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 260.737086][ T8345] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32kB inactive_anon:0kB active_file:0kB inactive_file:1308kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:20kB free_cma:0kB [ 260.743266][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 260.795674][ T5926] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 260.823257][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.921770][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 260.927746][ T9] dvb-usb: error while querying for an remote control event. [ 260.941597][ T5926] usb 2-1: Product: syz [ 260.946744][ T5926] usb 2-1: Manufacturer: syz [ 260.971662][ T5926] usb 2-1: SerialNumber: syz [ 260.991829][ T10] usb 5-1: USB disconnect, device number 29 [ 260.993776][ T8345] lowmem_reserve[]: [ 261.000279][ T5926] usb 2-1: config 0 descriptor?? [ 261.026815][ T8345] 0 0 0 0 0 [ 261.033654][ T5926] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 261.056758][ T8345] Node 1 Normal free:3898064kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19908kB local_pcp:8324kB free_cma:0kB [ 261.137796][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 261.189782][ T8345] lowmem_reserve[]: 0 0 0 0 0 [ 261.211499][ T5912] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 261.243089][ T8345] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 261.258017][ T8345] Node 0 DMA32: 0*4kB 4*8kB (UME) 3*16kB (UME) 172*32kB (UME) 17*64kB (UME) 36*128kB (UME) 4*256kB (UME) 0*512kB 12*1024kB (ME) 0*2048kB 274*4096kB (UM) = 1146896kB [ 261.259738][ T5934] usb 2-1: USB disconnect, device number 21 [ 261.285280][ T8345] Node 0 Normal: 4*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 261.301599][ T8345] Node 1 Normal: 190*4kB (UME) 39*8kB (UME) 38*16kB (UME) 90*32kB (UME) 22*64kB (UME) 5*128kB (UM) 5*256kB (UM) 2*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 948*4096kB (M) = 3898064kB [ 261.371508][ T5912] usb 3-1: device descriptor read/64, error -71 [ 261.429177][ T8345] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.479117][ T8345] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 261.502865][ T8345] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.517169][ T8345] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 261.614419][ T8345] 64498 total pagecache pages [ 261.619109][ T8345] 0 pages in swap cache [ 261.681469][ T5912] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 261.761482][ T975] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 261.782447][ T8345] Free swap = 124996kB [ 261.809201][ T8345] Total swap = 124996kB [ 261.814991][ T8345] 2097051 pages RAM [ 261.819563][ T8345] 0 pages HighMem/MovableOnly [ 261.840838][ T5912] usb 3-1: device descriptor read/64, error -71 [ 261.852143][ T8345] 430249 pages reserved [ 261.856707][ T8345] 0 pages cma reserved [ 261.945323][ T975] usb 5-1: Using ep0 maxpacket: 8 [ 261.951786][ T5912] usb usb3-port1: attempt power cycle [ 261.959372][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.058975][ T8389] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 262.411695][ T5912] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 262.419050][ T975] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 262.428584][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.450603][ T975] usb 5-1: config 0 descriptor?? [ 262.850049][ T5912] usb 3-1: device descriptor read/8, error -71 [ 263.178928][ T975] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 263.305816][ T975] usb 5-1: USB disconnect, device number 30 [ 263.341592][ T5912] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 263.430023][ T8399] vivid-001: disconnect [ 263.784794][ T5912] usb 3-1: device not accepting address 19, error -71 [ 263.806446][ T5912] usb usb3-port1: unable to enumerate USB device [ 263.889238][ T30] audit: type=1400 audit(1756917398.950:422): avc: denied { mount } for pid=8400 comm="syz.2.632" name="/" dev="hugetlbfs" ino=21552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 263.990589][ T8410] FAULT_INJECTION: forcing a failure. [ 263.990589][ T8410] name failslab, interval 1, probability 0, space 0, times 0 [ 264.035196][ T8395] vivid-001: reconnect [ 264.084996][ T5962] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 264.120668][ T8410] CPU: 0 UID: 0 PID: 8410 Comm: syz.4.633 Not tainted syzkaller #0 PREEMPT(full) [ 264.120693][ T8410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 264.120701][ T8410] Call Trace: [ 264.120705][ T8410] [ 264.120709][ T8410] dump_stack_lvl+0x16c/0x1f0 [ 264.120726][ T8410] should_fail_ex+0x512/0x640 [ 264.120739][ T8410] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 264.120752][ T8410] should_failslab+0xc2/0x120 [ 264.120765][ T8410] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 264.120775][ T8410] ? getname_flags.part.0+0x4c/0x550 [ 264.120794][ T8410] getname_flags.part.0+0x4c/0x550 [ 264.120810][ T8410] getname_flags+0x93/0xf0 [ 264.120822][ T8410] __x64_sys_renameat2+0xd4/0x130 [ 264.120836][ T8410] do_syscall_64+0xcd/0x4c0 [ 264.120850][ T8410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.120861][ T8410] RIP: 0033:0x7fbb6f78ebe9 [ 264.120870][ T8410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.120881][ T8410] RSP: 002b:00007fbb7055a038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 264.120891][ T8410] RAX: ffffffffffffffda RBX: 00007fbb6f9c5fa0 RCX: 00007fbb6f78ebe9 [ 264.120898][ T8410] RDX: ffffffffffffff9c RSI: 0000200000000780 RDI: ffffffffffffff9c [ 264.120905][ T8410] RBP: 00007fbb7055a090 R08: 0000000000000000 R09: 0000000000000000 [ 264.120911][ T8410] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 264.120917][ T8410] R13: 00007fbb6f9c6038 R14: 00007fbb6f9c5fa0 R15: 00007fff73addf38 [ 264.120930][ T8410] [ 264.276912][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.385045][ T5962] usb 2-1: Using ep0 maxpacket: 16 [ 264.817813][ T5962] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 264.838970][ T5962] usb 2-1: config 0 has no interface number 0 [ 264.855045][ T5962] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 264.866402][ T5962] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 264.895286][ T5962] usb 2-1: config 0 interface 41 has no altsetting 0 [ 264.905397][ T5962] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 264.915198][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.923669][ T5962] usb 2-1: Product: syz [ 264.928221][ T5962] usb 2-1: Manufacturer: syz [ 264.933399][ T5962] usb 2-1: SerialNumber: syz [ 265.014242][ T5962] usb 2-1: config 0 descriptor?? [ 265.019950][ T8404] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 265.042046][ T8404] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 265.130530][ T8422] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 265.130530][ T8422] program syz.4.635 not setting count and/or reply_len properly [ 265.200074][ T8422] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.635'. [ 265.286178][ T8404] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 265.324443][ T8404] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 265.984885][ T5962] Error reading MAC address [ 265.998142][ T8404] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 266.029476][ T8404] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 266.041500][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 266.201623][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 266.209123][ T10] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 266.228919][ T10] usb 5-1: config 0 has no interface number 0 [ 266.256629][ T10] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 266.281554][ T10] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 266.373806][ T10] usb 5-1: config 0 interface 41 has no altsetting 0 [ 266.403721][ T10] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 266.435135][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.464937][ T10] usb 5-1: Product: syz [ 266.473790][ T10] usb 5-1: Manufacturer: syz [ 266.509517][ T10] usb 5-1: SerialNumber: syz [ 266.525463][ T10] usb 5-1: config 0 descriptor?? [ 266.548908][ T8427] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 266.563648][ T8427] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 267.777734][ T8427] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 267.926330][ T8427] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 267.967675][ T5962] sr9700 2-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet, 8a:f8:a8:1b:51:99 [ 268.029715][ T5962] usb 2-1: USB disconnect, device number 22 [ 268.079216][ T5962] sr9700 2-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet [ 268.482458][ T10] Error reading MAC address [ 268.518752][ T8427] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 268.531874][ T8427] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 268.721585][ T48] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 268.829563][ T8463] 9pnet_fd: Insufficient options for proto=fd [ 269.275054][ T48] usb 1-1: device descriptor read/64, error -71 [ 269.473189][ T8469] sg_write: data in/out 32731/154 bytes for SCSI command 0x0-- guessing data in; [ 269.473189][ T8469] program syz.1.649 not setting count and/or reply_len properly [ 269.503503][ T10] sr9700 5-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.4-1, CoreChip SR9700 USB Ethernet, 7e:bf:c4:ed:61:a7 [ 269.553849][ T48] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 269.766184][ T10] usb 5-1: USB disconnect, device number 31 [ 269.795112][ T10] sr9700 5-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.4-1, CoreChip SR9700 USB Ethernet [ 269.909952][ T48] usb 1-1: device descriptor read/64, error -71 [ 269.994938][ T8475] debugfs: 'ttyS3' already exists in 'caif_serial' [ 270.066484][ T48] usb usb1-port1: attempt power cycle [ 270.395135][ T8492] overlayfs: conflicting lowerdir path [ 270.431793][ T48] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 270.568909][ T48] usb 1-1: device descriptor read/8, error -71 [ 270.861449][ T48] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 271.022908][ T48] usb 1-1: device descriptor read/8, error -71 [ 271.519706][ T48] usb usb1-port1: unable to enumerate USB device [ 273.707304][ T8544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.663'. [ 275.101619][ T8553] sg_write: data in/out 32731/154 bytes for SCSI command 0x0-- guessing data in; [ 275.101619][ T8553] program syz.2.665 not setting count and/or reply_len properly [ 277.012146][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 278.088366][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 278.115334][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.154249][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.273805][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 278.297730][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 278.319578][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.797880][ T10] usb 4-1: config 0 descriptor?? [ 279.041092][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 279.050803][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 279.080214][ T10] usb 4-1: USB disconnect, device number 26 [ 280.116938][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 280.290618][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 280.299895][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 280.318694][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.443499][ T10] usb 5-1: config 0 descriptor?? [ 280.608453][ T30] audit: type=1400 audit(1756917415.670:423): avc: denied { ioctl } for pid=8617 comm="syz.2.675" path="socket:[21824]" dev="sockfs" ino=21824 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 280.697804][ T975] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 280.853615][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 280.868552][ T975] usb 2-1: New USB device found, idVendor=00f3, idProduct=0755, bcdDevice= 0.00 [ 280.884441][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.903945][ T975] usb 2-1: config 0 descriptor?? [ 280.910392][ T8629] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 281.045062][ T10] isku 0003:1E7D:3264.0005: hidraw0: USB HID vf.fe Device [HID 1e7d:3264] on usb-dummy_hcd.4-1/input0 [ 281.396531][ T8640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.678'. [ 281.424473][ T975] hid_parser_main: 60 callbacks suppressed [ 281.424488][ T975] hid-generic 0003:00F3:0755.0006: unknown main item tag 0x0 [ 281.462448][ T10] usb 5-1: USB disconnect, device number 32 [ 281.498141][ T975] hid-generic 0003:00F3:0755.0006: unknown main item tag 0x0 [ 281.525438][ T975] hid-generic 0003:00F3:0755.0006: unknown main item tag 0x0 [ 281.546041][ T975] hid-generic 0003:00F3:0755.0006: unknown main item tag 0x0 [ 281.565636][ T975] hid-generic 0003:00F3:0755.0006: unknown main item tag 0x0 [ 281.587684][ T975] hid-generic 0003:00F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 00f3:0755] on usb-dummy_hcd.1-1/input0 [ 281.740970][ T30] audit: type=1400 audit(1756917416.800:424): avc: denied { map } for pid=8628 comm="syz.1.677" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 281.807843][ T975] usb 2-1: USB disconnect, device number 23 [ 282.169041][ T8651] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 285.130141][ T30] audit: type=1400 audit(1756917420.190:425): avc: denied { setopt } for pid=8674 comm="syz.0.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 285.288903][ T30] audit: type=1400 audit(1756917420.350:426): avc: denied { ioctl } for pid=8681 comm="syz.4.689" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 285.371608][ T8684] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8684 comm=syz.1.690 [ 285.411717][ T5962] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 285.424256][ T8684] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=8684 comm=syz.1.690 [ 286.029247][ T5962] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 286.038679][ T5962] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 286.050336][ T5962] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 286.060875][ T5962] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 286.072865][ T5962] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 286.095183][ T5962] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 286.104765][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 286.114391][ T5962] usb 1-1: Product: syz [ 286.118657][ T5962] usb 1-1: Manufacturer: syz [ 286.130285][ T5962] cdc_wdm 1-1:1.0: skipping garbage [ 286.137580][ T5962] cdc_wdm 1-1:1.0: skipping garbage [ 286.152057][ T975] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 286.177338][ T5962] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 286.184802][ T5962] cdc_wdm 1-1:1.0: Unknown control protocol [ 286.314079][ T975] usb 2-1: Using ep0 maxpacket: 16 [ 286.328439][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.339607][ T975] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 286.349901][ T48] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 286.369996][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.385324][ T975] usb 2-1: config 0 descriptor?? [ 286.521451][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 286.535350][ T48] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 286.550670][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.559383][ T48] usb 5-1: Product: syz [ 286.563911][ T48] usb 5-1: Manufacturer: syz [ 286.568513][ T48] usb 5-1: SerialNumber: syz [ 286.577012][ T48] r8152-cfgselector 5-1: Unknown version 0x0000 [ 286.583345][ T48] r8152-cfgselector 5-1: config 0 descriptor?? [ 286.652252][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 286.652613][ T5855] usb 1-1: USB disconnect, device number 27 [ 286.658883][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 286.658905][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 286.746565][ T8715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.697'. [ 286.808195][ T30] audit: type=1400 audit(1756917421.870:427): avc: denied { map } for pid=8697 comm="syz.1.693" path="/proc/475/coredump_filter" dev="proc" ino=21381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 286.833364][ T30] audit: type=1400 audit(1756917421.870:428): avc: denied { execute } for pid=8697 comm="syz.1.693" path="/proc/475/coredump_filter" dev="proc" ino=21381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 286.995175][ T5855] r8152-cfgselector 5-1: USB disconnect, device number 33 [ 288.594964][ T975] usbhid 2-1:0.0: can't add hid device: -71 [ 288.600976][ T975] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 288.623789][ T8731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.700'. [ 288.623889][ T975] usb 2-1: USB disconnect, device number 24 [ 288.632774][ T30] audit: type=1400 audit(1756917423.680:429): avc: denied { bind } for pid=8730 comm="syz.2.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 288.837548][ T30] audit: type=1400 audit(1756917423.790:430): avc: denied { getopt } for pid=8730 comm="syz.2.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 288.921384][ T30] audit: type=1400 audit(1756917423.970:431): avc: denied { mount } for pid=8737 comm="syz.4.703" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 288.994762][ T30] audit: type=1400 audit(1756917424.030:432): avc: denied { read } for pid=8739 comm="syz.1.704" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 289.106096][ T30] audit: type=1400 audit(1756917424.030:433): avc: denied { open } for pid=8739 comm="syz.1.704" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 289.130232][ T30] audit: type=1400 audit(1756917424.050:434): avc: denied { ioctl } for pid=8739 comm="syz.1.704" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x5102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 289.181790][ T975] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 289.211865][ T30] audit: type=1400 audit(1756917424.060:435): avc: denied { write } for pid=8739 comm="syz.1.704" path="socket:[21432]" dev="sockfs" ino=21432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 289.421487][ T975] usb 1-1: Using ep0 maxpacket: 16 [ 289.626156][ T975] usb 1-1: config 176 has too many interfaces: 45, using maximum allowed: 32 [ 289.641519][ T975] usb 1-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 289.654113][ T975] usb 1-1: config 176 has 0 interfaces, different from the descriptor's value: 45 [ 289.666116][ T975] usb 1-1: New USB device found, idVendor=b01d, idProduct=edcc, bcdDevice=9c.2b [ 289.677846][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.686747][ T975] usb 1-1: Product: syz [ 289.691213][ T975] usb 1-1: Manufacturer: syz [ 289.696161][ T975] usb 1-1: SerialNumber: syz [ 292.025949][ T8735] netlink: 20 bytes leftover after parsing attributes in process `syz.0.701'. [ 292.529408][ T8808] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 293.071811][ T30] audit: type=1400 audit(1756917427.620:436): avc: denied { create } for pid=8802 comm="syz.1.714" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 293.203675][ T30] audit: type=1400 audit(1756917427.620:437): avc: denied { link } for pid=8802 comm="syz.1.714" name="file1" dev="ramfs" ino=22129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 293.293706][ T9] usb 1-1: USB disconnect, device number 28 [ 293.599539][ T8823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.717'. [ 293.939017][ T8829] rdma_op ffff88807d2891f0 conn xmit_rdma 0000000000000000 [ 294.051505][ T30] audit: type=1400 audit(1756917429.000:438): avc: denied { write } for pid=8826 comm="syz.1.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 294.291498][ T5912] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 294.601708][ T5912] usb 4-1: Using ep0 maxpacket: 32 [ 294.608603][ T5912] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 294.620571][ T5912] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 294.641461][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 294.670580][ T5912] usb 4-1: Product: syz [ 294.679275][ T5912] usb 4-1: Manufacturer: syz [ 294.721151][ T5912] usb 4-1: SerialNumber: syz [ 294.791077][ T5912] usb 4-1: config 0 descriptor?? [ 294.801936][ T8831] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 294.821568][ T5855] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 294.981486][ T5855] usb 3-1: Using ep0 maxpacket: 16 [ 295.070773][ T5855] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 295.096351][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.105843][ T5912] usb 4-1: USB disconnect, device number 27 [ 295.131428][ T5855] usb 3-1: Product: syz [ 295.137106][ T5855] usb 3-1: Manufacturer: syz [ 295.145652][ T8848] geneve2: entered promiscuous mode [ 295.145848][ T5855] usb 3-1: SerialNumber: syz [ 295.234074][ T5855] usb 3-1: config 0 descriptor?? [ 295.342476][ T5855] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 295.381046][ T8856] 9pnet_fd: Insufficient options for proto=fd [ 295.680612][ T8864] vivid-004: disconnect [ 296.250225][ T8872] FAULT_INJECTION: forcing a failure. [ 296.250225][ T8872] name failslab, interval 1, probability 0, space 0, times 0 [ 296.273182][ T8858] vivid-004: reconnect [ 296.280091][ T5855] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 296.291492][ T8872] CPU: 0 UID: 0 PID: 8872 Comm: syz.0.727 Not tainted syzkaller #0 PREEMPT(full) [ 296.291518][ T8872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 296.291528][ T8872] Call Trace: [ 296.291534][ T8872] [ 296.291541][ T8872] dump_stack_lvl+0x16c/0x1f0 [ 296.291566][ T8872] should_fail_ex+0x512/0x640 [ 296.291585][ T8872] ? fs_reclaim_acquire+0xae/0x150 [ 296.291610][ T8872] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 296.291635][ T8872] should_failslab+0xc2/0x120 [ 296.291654][ T8872] __kmalloc_noprof+0xd2/0x510 [ 296.291679][ T8872] tomoyo_realpath_from_path+0xc2/0x6e0 [ 296.291707][ T8872] ? tomoyo_profile+0x47/0x60 [ 296.291726][ T8872] tomoyo_path_number_perm+0x245/0x580 [ 296.291746][ T8872] ? tomoyo_path_number_perm+0x237/0x580 [ 296.291768][ T8872] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 296.291816][ T8872] ? find_held_lock+0x2b/0x80 [ 296.291845][ T8872] ? hook_file_ioctl_common+0x145/0x410 [ 296.291868][ T8872] ? __fget_files+0x20e/0x3c0 [ 296.291893][ T8872] security_file_ioctl+0x9b/0x240 [ 296.291918][ T8872] __x64_sys_ioctl+0xb7/0x210 [ 296.291946][ T8872] do_syscall_64+0xcd/0x4c0 [ 296.291967][ T8872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.291984][ T8872] RIP: 0033:0x7fcd6818ebe9 [ 296.291998][ T8872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.292015][ T8872] RSP: 002b:00007fcd68fc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.292032][ T8872] RAX: ffffffffffffffda RBX: 00007fcd683c5fa0 RCX: 00007fcd6818ebe9 [ 296.292043][ T8872] RDX: 0000200000000200 RSI: 00000000c008561c RDI: 0000000000000003 [ 296.292053][ T8872] RBP: 00007fcd68fc6090 R08: 0000000000000000 R09: 0000000000000000 [ 296.292063][ T8872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.292072][ T8872] R13: 00007fcd683c6038 R14: 00007fcd683c5fa0 R15: 00007ffd9ecac388 [ 296.292096][ T8872] [ 296.292103][ T8872] ERROR: Out of memory at tomoyo_realpath_from_path. [ 296.883826][ T8886] netlink: 20 bytes leftover after parsing attributes in process `syz.3.728'. [ 297.869975][ T8881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8881 comm=syz.3.728 [ 298.191740][ T8892] netlink: 'syz.4.732': attribute type 1 has an invalid length. [ 298.257525][ T8892] netlink: 20 bytes leftover after parsing attributes in process `syz.4.732'. [ 298.519379][ T5912] usb 3-1: USB disconnect, device number 20 [ 298.691510][ T48] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 299.235507][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.390957][ T8921] sg_write: data in/out 32731/154 bytes for SCSI command 0x0-- guessing data in; [ 299.390957][ T8921] program syz.1.736 not setting count and/or reply_len properly [ 299.680997][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.799857][ T48] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 299.826593][ T8926] comedi comedi0: aio_iiro_16: I/O port conflict (0x5,8) [ 299.852579][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.373384][ T30] audit: type=1400 audit(1756917435.140:439): avc: denied { ioctl } for pid=8924 comm="syz.2.738" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 300.421482][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 300.447991][ T48] usb 5-1: config 0 descriptor?? [ 300.660867][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.725952][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.159031][ T9] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 301.231417][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.416197][ T9] usb 4-1: config 0 descriptor?? [ 301.762288][ T8948] vivid-003: disconnect [ 302.145962][ T9] elo 0003:04E7:0030.0008: item fetching failed at offset 5/7 [ 302.166654][ T9] elo 0003:04E7:0030.0008: parse failed [ 302.176701][ T9] elo 0003:04E7:0030.0008: probe with driver elo failed with error -22 [ 302.344329][ T8943] vivid-003: reconnect [ 302.403937][ T5855] usb 4-1: USB disconnect, device number 28 [ 302.645403][ T48] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0007/input/input7 [ 302.704594][ T8959] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 303.031098][ T30] audit: type=1400 audit(1756917438.090:440): avc: denied { mount } for pid=8890 comm="syz.4.732" name="/" dev="autofs" ino=22737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 303.053375][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.094957][ T48] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0007/input/input8 [ 303.122612][ T30] audit: type=1400 audit(1756917438.130:441): avc: denied { bind } for pid=8890 comm="syz.4.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 303.146798][ T30] audit: type=1400 audit(1756917438.180:442): avc: denied { listen } for pid=8890 comm="syz.4.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 303.301811][ T30] audit: type=1400 audit(1756917438.240:443): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 303.387302][ T30] audit: type=1400 audit(1756917438.330:444): avc: denied { bind } for pid=8957 comm="syz.0.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 303.430489][ T30] audit: type=1400 audit(1756917438.330:445): avc: denied { name_bind } for pid=8957 comm="syz.0.742" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 303.451129][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.517122][ T30] audit: type=1400 audit(1756917438.330:446): avc: denied { node_bind } for pid=8957 comm="syz.0.742" saddr=fe80::aa src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 303.553642][ T48] uclogic 0003:256C:006D.0007: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 303.743806][ T8976] batman_adv: batadv0: Interface deactivated: dummy0 [ 303.779212][ T8976] batman_adv: batadv0: Removing interface: dummy0 [ 303.916046][ T48] usb 5-1: USB disconnect, device number 34 [ 304.138413][ T8976] bridge_slave_0: left allmulticast mode [ 304.153273][ T8976] bridge_slave_0: left promiscuous mode [ 304.324496][ T8990] fido_id[8990]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 304.326271][ T8976] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.993288][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.745'. [ 305.522229][ T8976] bridge_slave_1: left allmulticast mode [ 305.540126][ T8976] bridge_slave_1: left promiscuous mode [ 305.547644][ T8976] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.565703][ T8976] bond0: (slave bond_slave_0): Releasing backup interface [ 305.574743][ T8976] bond_slave_0: left allmulticast mode [ 305.594482][ T8976] bond0: (slave bond_slave_1): Releasing backup interface [ 305.604832][ T8976] bond_slave_1: left allmulticast mode [ 305.633491][ T8976] team0: Port device team_slave_0 removed [ 305.647101][ T8976] team0: Port device team_slave_1 removed [ 305.653529][ T8976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.660889][ T8976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.669858][ T8976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.677447][ T8976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.714281][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.180366][ T8987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.217526][ T9008] netlink: 16 bytes leftover after parsing attributes in process `syz.3.749'. [ 306.228349][ T9013] @: renamed from syz_tun (while UP) [ 307.029576][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.131476][ T30] audit: type=1400 audit(1756917442.190:447): avc: denied { create } for pid=9030 comm="syz.1.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 307.303540][ T5912] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 307.418536][ T30] audit: type=1400 audit(1756917442.480:448): avc: denied { mount } for pid=9030 comm="syz.1.754" name="/" dev="pstore" ino=4104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 307.629977][ T5912] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 307.660713][ T5912] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 307.738644][ T30] audit: type=1400 audit(1756917442.480:449): avc: denied { module_request } for pid=9030 comm="syz.1.754" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 307.811478][ T5912] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 307.820142][ T30] audit: type=1400 audit(1756917442.870:450): avc: denied { setopt } for pid=9030 comm="syz.1.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 308.483398][ T5912] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 308.581532][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.593164][ T30] audit: type=1400 audit(1756917443.660:451): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 308.618698][ T5912] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 308.894009][ T9059] No buffer was provided with the request [ 309.574945][ T5912] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 310.499179][ T9077] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 310.737471][ T5962] usb 5-1: USB disconnect, device number 35 [ 310.757813][ T30] audit: type=1400 audit(1756917445.590:452): avc: denied { rename } for pid=9071 comm="syz.1.765" name="file1" dev="overlay" ino=22517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 310.856451][ T30] audit: type=1400 audit(1756917445.590:453): avc: denied { unlink } for pid=9071 comm="syz.1.765" name="file0" dev="overlay" ino=22517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 310.879672][ T30] audit: type=1400 audit(1756917445.590:454): avc: denied { setattr } for pid=9071 comm="syz.1.765" name="#1b" dev="tmpfs" ino=869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 310.901415][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.099835][ T30] audit: type=1400 audit(1756917446.160:455): avc: denied { setopt } for pid=9080 comm="syz.2.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 312.623256][ T30] audit: type=1400 audit(1756917447.680:456): avc: denied { connect } for pid=9097 comm="syz.2.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 313.495475][ T9106] sg_write: data in/out 32731/154 bytes for SCSI command 0x0-- guessing data in; [ 313.495475][ T9106] program syz.1.772 not setting count and/or reply_len properly [ 314.019368][ T30] audit: type=1400 audit(1756917449.080:457): avc: denied { ioctl } for pid=9112 comm="syz.1.775" path="socket:[23596]" dev="sockfs" ino=23596 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 314.200271][ T30] audit: type=1400 audit(1756917449.260:458): avc: denied { setattr } for pid=9118 comm="syz.0.777" name="tty2" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 314.735691][ T9127] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 316.384544][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078279400: rx timeout, send abort [ 316.402631][ T30] audit: type=1400 audit(1756917451.470:459): avc: denied { read } for pid=5201 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 316.428045][ T30] audit: type=1400 audit(1756917451.470:460): avc: denied { search } for pid=5201 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.447841][ T9121] syz.3.776: vmalloc error: size 18874368, failed to allocated page array size 36864, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/ [ 316.449558][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.449561][ T9121] ,mems_allowed=0-1 [ 316.476939][ T9121] CPU: 1 UID: 0 PID: 9121 Comm: syz.3.776 Not tainted syzkaller #0 PREEMPT(full) [ 316.476954][ T9121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 316.476960][ T9121] Call Trace: [ 316.476964][ T9121] [ 316.476968][ T9121] dump_stack_lvl+0x16c/0x1f0 [ 316.476984][ T9121] warn_alloc+0x248/0x3a0 [ 316.476996][ T9121] ? __pfx_warn_alloc+0x10/0x10 [ 316.477012][ T9121] ? hash_netiface_create+0x3ec/0x1250 [ 316.477030][ T9121] ? __vmalloc_node_noprof+0xad/0xf0 [ 316.477047][ T9121] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 316.477062][ T9121] ? ip_set_create+0x7e1/0x14d0 [ 316.477077][ T9121] ? nfnetlink_rcv_msg+0x9f9/0x1200 [ 316.477096][ T9121] ? hash_netiface_create+0x3ec/0x1250 [ 316.477115][ T9121] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 316.477133][ T9121] ? ___kmalloc_large_node+0xed/0x160 [ 316.477150][ T9121] __kvmalloc_node_noprof+0x30a/0x620 [ 316.477160][ T9121] ? hash_netiface_create+0x3ec/0x1250 [ 316.477176][ T9121] ? hash_netiface_create+0x3ec/0x1250 [ 316.477195][ T9121] ? hash_netiface_create+0x3ec/0x1250 [ 316.477210][ T9121] hash_netiface_create+0x3ec/0x1250 [ 316.477227][ T9121] ? __nla_validate+0x5/0x50 [ 316.477242][ T9121] ? __pfx_hash_netiface_create+0x10/0x10 [ 316.477259][ T9121] ip_set_create+0x7e1/0x14d0 [ 316.477277][ T9121] ? __pfx_ip_set_create+0x10/0x10 [ 316.477303][ T9121] ? find_held_lock+0x2b/0x80 [ 316.477320][ T9121] nfnetlink_rcv_msg+0x9f9/0x1200 [ 316.477339][ T9121] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 316.477356][ T9121] ? __lock_acquire+0x62e/0x1ce0 [ 316.477384][ T9121] ? avc_has_perm_noaudit+0x149/0x3b0 [ 316.477400][ T9121] netlink_rcv_skb+0x158/0x420 [ 316.477412][ T9121] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 316.477428][ T9121] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 316.477446][ T9121] ? ns_capable+0xd7/0x110 [ 316.477461][ T9121] nfnetlink_rcv+0x1b3/0x430 [ 316.477475][ T9121] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 316.477490][ T9121] ? netlink_deliver_tap+0x1ae/0xd30 [ 316.477505][ T9121] netlink_unicast+0x5a7/0x870 [ 316.477518][ T9121] ? __pfx_netlink_unicast+0x10/0x10 [ 316.477531][ T9121] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 316.477547][ T9121] netlink_sendmsg+0x8d1/0xdd0 [ 316.477561][ T9121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.477579][ T9121] ____sys_sendmsg+0xa95/0xc70 [ 316.477594][ T9121] ? copy_msghdr_from_user+0x10a/0x160 [ 316.477605][ T9121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.477617][ T9121] ? ex_handler_uaccess+0xfa/0x230 [ 316.477633][ T9121] ? kernelmode_fixup_or_oops.constprop.0+0x77/0xe0 [ 316.477646][ T9121] ___sys_sendmsg+0x134/0x1d0 [ 316.477658][ T9121] ? __pfx____sys_sendmsg+0x10/0x10 [ 316.477686][ T9121] __sys_sendmsg+0x16d/0x220 [ 316.477697][ T9121] ? __pfx___sys_sendmsg+0x10/0x10 [ 316.477708][ T9121] ? __pfx_bpf_trace_run2+0x10/0x10 [ 316.477723][ T9121] ? syscall_trace_enter+0x1cb/0x240 [ 316.477741][ T9121] ? rcu_is_watching+0x12/0xc0 [ 316.477756][ T9121] do_syscall_64+0xcd/0x4c0 [ 316.477769][ T9121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.477780][ T9121] RIP: 0033:0x7efe4918ebe9 [ 316.477789][ T9121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.477800][ T9121] RSP: 002b:00007efe49fff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.477810][ T9121] RAX: ffffffffffffffda RBX: 00007efe493c6090 RCX: 00007efe4918ebe9 [ 316.477817][ T9121] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 316.477823][ T9121] RBP: 00007efe49211e19 R08: 0000000000000000 R09: 0000000000000000 [ 316.477828][ T9121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.477834][ T9121] R13: 00007efe493c6128 R14: 00007efe493c6090 R15: 00007ffc41baa488 [ 316.477847][ T9121] [ 316.477851][ T9121] Mem-Info: [ 316.847783][ T9121] active_anon:17095 inactive_anon:0 isolated_anon:0 [ 316.847783][ T9121] active_file:15396 inactive_file:41065 isolated_file:0 [ 316.847783][ T9121] unevictable:768 dirty:425 writeback:0 [ 316.847783][ T9121] slab_reclaimable:12111 slab_unreclaimable:115733 [ 316.847783][ T9121] mapped:30954 shmem:8984 pagetables:1380 [ 316.847783][ T9121] sec_pagetables:0 bounce:0 [ 316.847783][ T9121] kernel_misc_reclaimable:0 [ 316.847783][ T9121] free:1270994 free_pcp:18431 free_cma:0 [ 316.885615][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d0c6000: rx timeout, send abort [ 316.893270][ T9121] Node 0 active_anon:68380kB inactive_anon:0kB active_file:61584kB inactive_file:164052kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123816kB dirty:1700kB writeback:0kB shmem:34400kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13160kB pagetables:5384kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 316.911402][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078279400: abort rx timeout. Force session deactivation [ 316.933217][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.933984][ T9121] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 316.979203][ T9121] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.007993][ T9121] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 317.014114][ T9121] Node 0 DMA32 free:1170536kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:68348kB inactive_anon:0kB active_file:61584kB inactive_file:162744kB unevictable:1536kB writepending:1700kB present:3129332kB managed:2539360kB mlocked:0kB bounce:0kB free_pcp:53720kB local_pcp:22936kB free_cma:0kB [ 317.046656][ T9121] lowmem_reserve[]: 0 0 1 1 1 [ 317.051359][ T9121] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32kB inactive_anon:0kB active_file:0kB inactive_file:1308kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:20kB free_cma:0kB [ 317.080475][ T9121] lowmem_reserve[]: 0 0 0 0 0 [ 317.085174][ T9121] Node 1 Normal free:3898064kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19972kB local_pcp:8356kB free_cma:0kB [ 317.116713][ T9121] lowmem_reserve[]: 0 0 0 0 0 [ 317.121450][ T9121] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 317.134078][ T9121] Node 0 DMA32: 1*4kB (M) 10*8kB (UME) 9*16kB (UME) 10*32kB (ME) 10*64kB (UE) 27*128kB (UME) 68*256kB (ME) 33*512kB (UM) 17*1024kB (UME) 0*2048kB 272*4096kB (M) = 1170468kB [ 317.151418][ T9121] Node 0 Normal: 4*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 317.163285][ T9121] Node 1 Normal: 190*4kB (UME) 39*8kB (UME) 38*16kB (UME) 90*32kB (UME) 22*64kB (UME) 5*128kB (UM) 5*256kB (UM) 2*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 948*4096kB (M) = 3898064kB [ 317.181157][ T9121] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.190719][ T9121] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 317.200020][ T9121] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.209554][ T9121] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 317.219345][ T9121] 65441 total pagecache pages [ 317.224028][ T9121] 0 pages in swap cache [ 317.228164][ T9121] Free swap = 124996kB [ 317.232343][ T9121] Total swap = 124996kB [ 317.236467][ T9121] 2097051 pages RAM [ 317.240246][ T9121] 0 pages HighMem/MovableOnly [ 317.244935][ T9121] 430249 pages reserved [ 317.249085][ T9121] 0 pages cma reserved [ 317.321844][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.328147][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.381508][ T30] audit: type=1400 audit(1756917451.470:461): avc: denied { search } for pid=5201 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.403060][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d0c6000: abort rx timeout. Force session deactivation [ 317.414642][ T30] audit: type=1400 audit(1756917451.470:462): avc: denied { add_name } for pid=5201 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.435298][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.453877][ T30] audit: type=1400 audit(1756917451.470:463): avc: denied { create } for pid=5201 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 317.624797][ T30] audit: type=1400 audit(1756917451.470:464): avc: denied { append open } for pid=5201 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 317.656725][ T30] audit: type=1400 audit(1756917451.470:465): avc: denied { getattr } for pid=5201 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 319.143482][ T30] audit: type=1400 audit(1756917454.090:466): avc: denied { accept } for pid=9169 comm="syz.2.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 319.570741][ T9176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=9176 comm=syz.3.791 [ 319.691391][ T30] audit: type=1400 audit(1756917454.710:467): avc: denied { accept } for pid=9167 comm="syz.3.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 320.647543][ T30] audit: type=1400 audit(1756917455.100:468): avc: denied { write } for pid=9180 comm="syz.0.794" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 320.678513][ T30] audit: type=1400 audit(1756917455.100:469): avc: denied { open } for pid=9180 comm="syz.0.794" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 320.845604][ T30] audit: type=1400 audit(1756917455.880:470): avc: denied { ioctl } for pid=9180 comm="syz.0.794" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 321.229805][ T30] audit: type=1400 audit(1756917456.290:471): avc: denied { call } for pid=9190 comm="syz.1.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 323.592767][ T9224] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 325.388720][ T9241] FAULT_INJECTION: forcing a failure. [ 325.388720][ T9241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.402092][ T9241] CPU: 0 UID: 0 PID: 9241 Comm: syz.2.807 Not tainted syzkaller #0 PREEMPT(full) [ 325.402108][ T9241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 325.402114][ T9241] Call Trace: [ 325.402118][ T9241] [ 325.402122][ T9241] dump_stack_lvl+0x16c/0x1f0 [ 325.402138][ T9241] should_fail_ex+0x512/0x640 [ 325.402152][ T9241] copy_to_user_nofault+0xac/0x1c0 [ 325.402167][ T9241] bpf_probe_write_user+0xaf/0xf0 [ 325.402184][ T9241] bpf_prog_19072b5a3fcf5d64+0x41/0x49 [ 325.402194][ T9241] bpf_trace_run2+0x239/0x590 [ 325.402205][ T9241] ? __pfx_bpf_trace_run2+0x10/0x10 [ 325.402216][ T9241] ? __might_fault+0xe3/0x190 [ 325.402226][ T9241] ? __might_fault+0x13b/0x190 [ 325.402239][ T9241] __bpf_trace_sys_enter+0x37/0x60 [ 325.402251][ T9241] syscall_trace_enter+0x1b5/0x240 [ 325.402263][ T9241] do_syscall_64+0x347/0x4c0 [ 325.402276][ T9241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.402287][ T9241] RIP: 0033:0x7fb64958ebe9 [ 325.402297][ T9241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.402307][ T9241] RSP: 002b:00007fb6477f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 325.402318][ T9241] RAX: ffffffffffffffda RBX: 00007fb6497c6090 RCX: 00007fb64958ebe9 [ 325.402324][ T9241] RDX: 0000000000000018 RSI: 00002000000000c0 RDI: 0000000000000011 [ 325.402330][ T9241] RBP: 00007fb6477f6090 R08: 0000000000000000 R09: 0000000000000000 [ 325.402336][ T9241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.402342][ T9241] R13: 00007fb6497c6128 R14: 00007fb6497c6090 R15: 00007ffc704949d8 [ 325.402355][ T9241] [ 325.798055][ T9248] overlayfs: failed to clone upperpath [ 326.272606][ T30] audit: type=1400 audit(1756917461.320:472): avc: denied { read write } for pid=9253 comm="syz.1.813" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 326.327194][ T9258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.811'. [ 326.441392][ T30] audit: type=1400 audit(1756917461.320:473): avc: denied { open } for pid=9253 comm="syz.1.813" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 326.804190][ T9267] netlink: 32 bytes leftover after parsing attributes in process `syz.1.816'. [ 326.837407][ T9267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.816'. [ 326.962559][ T9267] geneve2: entered promiscuous mode [ 326.981878][ T9267] geneve2: entered allmulticast mode [ 327.127648][ T9279] netlink: 'syz.1.822': attribute type 10 has an invalid length. [ 327.144053][ T9279] batman_adv: batadv0: Adding interface: wlan0 [ 327.172072][ T9279] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.200568][ T9279] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 327.521480][ T975] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 327.681428][ T975] usb 2-1: Using ep0 maxpacket: 8 [ 327.845449][ T975] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 327.870451][ T975] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 327.893526][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.972019][ T975] usb 2-1: Product: syz [ 327.976312][ T975] usb 2-1: Manufacturer: syz [ 327.980978][ T975] usb 2-1: SerialNumber: syz [ 327.991519][ T975] usb 2-1: config 0 descriptor?? [ 328.059045][ T975] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 328.141034][ T975] usb 2-1: setting power ON [ 328.235749][ T975] dvb-usb: bulk message failed: -22 (2/0) [ 328.245411][ T975] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 328.269892][ T975] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 328.278881][ T975] usb 2-1: media controller created [ 328.295733][ T975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 328.838896][ T30] audit: type=1400 audit(1756917463.900:474): avc: denied { write } for pid=9278 comm="syz.1.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 329.059407][ T975] usb 2-1: selecting invalid altsetting 6 [ 329.066442][ T975] usb 2-1: digital interface selection failed (-22) [ 329.078850][ T30] audit: type=1400 audit(1756917463.930:475): avc: denied { audit_read } for pid=9278 comm="syz.1.822" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 329.111590][ T975] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 329.131128][ T975] usb 2-1: setting power OFF [ 329.141626][ T975] dvb-usb: bulk message failed: -22 (2/0) [ 329.299521][ T975] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 329.314314][ T975] (NULL device *): no alternate interface [ 329.861258][ T975] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 330.424839][ T975] usb 2-1: USB disconnect, device number 25 [ 330.471519][ T5962] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 330.642464][ T5962] usb 5-1: Using ep0 maxpacket: 16 [ 330.730188][ T9326] sg_write: data in/out 32731/154 bytes for SCSI command 0x0-- guessing data in; [ 330.730188][ T9326] program syz.2.833 not setting count and/or reply_len properly [ 330.784271][ T9325] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 330.792177][ T9325] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 330.800560][ T9325] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 330.809783][ T9325] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 330.819267][ T5962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 331.935091][ T5962] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 332.051884][ T30] audit: type=1326 audit(1756917467.015:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6818ebe9 code=0x7ffc0000 [ 332.499320][ T30] audit: type=1326 audit(1756917467.015:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6818ebe9 code=0x7ffc0000 [ 332.538424][ T5962] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 332.688858][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.705842][ T5962] usb 5-1: config 0 descriptor?? [ 332.721866][ T5962] usb 5-1: can't set config #0, error -71 [ 332.828322][ T5962] usb 5-1: USB disconnect, device number 36 [ 332.848570][ T30] audit: type=1326 audit(1756917467.015:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fcd6818ebe9 code=0x7ffc0000 [ 333.299894][ T30] audit: type=1326 audit(1756917467.015:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6818ebe9 code=0x7ffc0000 [ 333.323732][ T30] audit: type=1326 audit(1756917467.015:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6818ebe9 code=0x7ffc0000 [ 333.346936][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.465517][ T30] audit: type=1326 audit(1756917467.015:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcd6818ebe9 code=0x7ffc0000 [ 333.873447][ T30] audit: type=1326 audit(1756917467.015:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6818ebe9 code=0x7ffc0000 [ 333.896657][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.918121][ T30] audit: type=1326 audit(1756917467.015:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6818ebe9 code=0x7ffc0000 [ 334.017988][ T30] audit: type=1326 audit(1756917467.015:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcd6818ebe9 code=0x7ffc0000 [ 334.045114][ T30] audit: type=1326 audit(1756917467.015:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6818ebe9 code=0x7ffc0000 [ 334.201552][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 334.379996][ T10] usb 3-1: device descriptor read/64, error -71 [ 335.136416][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 335.271447][ T10] usb 3-1: device descriptor read/64, error -71 [ 335.484091][ T10] usb usb3-port1: attempt power cycle [ 336.030405][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 336.103184][ T10] usb 3-1: device descriptor read/8, error -71 [ 336.401824][ T9388] FAULT_INJECTION: forcing a failure. [ 336.401824][ T9388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.464334][ T9390] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 336.502632][ T9388] CPU: 1 UID: 0 PID: 9388 Comm: syz.2.847 Not tainted syzkaller #0 PREEMPT(full) [ 336.502659][ T9388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.502670][ T9388] Call Trace: [ 336.502676][ T9388] [ 336.502682][ T9388] dump_stack_lvl+0x16c/0x1f0 [ 336.502708][ T9388] should_fail_ex+0x512/0x640 [ 336.502733][ T9388] _copy_from_iter+0x29f/0x1720 [ 336.502762][ T9388] ? __pfx__copy_from_iter+0x10/0x10 [ 336.502784][ T9388] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 336.502810][ T9388] ? __local_bh_enable_ip+0xa4/0x120 [ 336.502835][ T9388] bcm_sendmsg+0xa20/0x45f0 [ 336.502866][ T9388] ? __pfx_bcm_sendmsg+0x10/0x10 [ 336.502886][ T9388] ? __might_fault+0xe3/0x190 [ 336.502920][ T9388] ____sys_sendmsg+0xa95/0xc70 [ 336.502946][ T9388] ? copy_msghdr_from_user+0x10a/0x160 [ 336.502966][ T9388] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.502987][ T9388] ? ex_handler_uaccess+0xfa/0x230 [ 336.503014][ T9388] ? kernelmode_fixup_or_oops.constprop.0+0x77/0xe0 [ 336.503037][ T9388] ___sys_sendmsg+0x134/0x1d0 [ 336.503058][ T9388] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.503110][ T9388] __sys_sendmsg+0x16d/0x220 [ 336.503130][ T9388] ? __pfx___sys_sendmsg+0x10/0x10 [ 336.503149][ T9388] ? __pfx_bpf_trace_run2+0x10/0x10 [ 336.503176][ T9388] ? syscall_trace_enter+0x1cb/0x240 [ 336.503199][ T9388] ? rcu_is_watching+0x12/0xc0 [ 336.503224][ T9388] do_syscall_64+0xcd/0x4c0 [ 336.503247][ T9388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.503264][ T9388] RIP: 0033:0x7fb64958ebe9 [ 336.503279][ T9388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.503296][ T9388] RSP: 002b:00007fb64a32b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.503314][ T9388] RAX: ffffffffffffffda RBX: 00007fb6497c5fa0 RCX: 00007fb64958ebe9 [ 336.503325][ T9388] RDX: 000000002404c000 RSI: 0000200000000480 RDI: 0000000000000003 [ 336.503336][ T9388] RBP: 00007fb64a32b090 R08: 0000000000000000 R09: 0000000000000000 [ 336.503346][ T9388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.503355][ T9388] R13: 00007fb6497c6038 R14: 00007fb6497c5fa0 R15: 00007ffc704949d8 [ 336.503379][ T9388] [ 337.551840][ T9397] sg_write: data in/out 32731/154 bytes for SCSI command 0x0-- guessing data in; [ 337.551840][ T9397] program syz.2.849 not setting count and/or reply_len properly [ 337.869648][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 337.869664][ T30] audit: type=1400 audit(1756917472.935:495): avc: denied { getopt } for pid=9396 comm="syz.0.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 337.911621][ T9403] capability: warning: `syz.3.853' uses deprecated v2 capabilities in a way that may be insecure [ 337.951082][ T9405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.996824][ T9407] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.854'. [ 338.221734][ T30] audit: type=1400 audit(1756917473.265:496): avc: denied { connect } for pid=9408 comm="syz.0.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 338.908942][ T10] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 338.997453][ T30] audit: type=1400 audit(1756917474.065:497): avc: denied { read append } for pid=9409 comm="syz.4.855" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 339.076851][ T9420] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 339.122991][ T9420] cramfs: wrong magic [ 339.126064][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.220103][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 339.231029][ T10] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 339.250338][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.282449][ T10] usb 1-1: config 0 descriptor?? [ 339.306661][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 339.327969][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 339.338215][ T30] audit: type=1400 audit(1756917474.405:498): avc: denied { read append } for pid=9431 comm="syz.2.861" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 339.371117][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 339.402386][ T9436] trusted_key: encrypted_key: master key parameter '' is invalid [ 339.416008][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 339.423831][ T30] audit: type=1400 audit(1756917474.405:499): avc: denied { open } for pid=9431 comm="syz.2.861" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 339.448379][ T10] usb 1-1: media controller created [ 339.456867][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 339.484432][ T30] audit: type=1400 audit(1756917474.405:500): avc: denied { ioctl } for pid=9431 comm="syz.2.861" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 339.519642][ T9416] dibusb: i2c wr: len=61 is too big! [ 339.519642][ T9416] [ 339.536580][ T9416] netlink: 'syz.0.856': attribute type 7 has an invalid length. [ 339.547711][ T9416] netlink: 'syz.0.856': attribute type 8 has an invalid length. [ 339.580422][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 339.595084][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 339.699662][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 340.401759][ T30] audit: type=1400 audit(1756917474.465:501): avc: denied { write } for pid=9431 comm="syz.2.861" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 340.434746][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 340.506649][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 340.662647][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 340.669899][ T5912] dvb-usb: error while querying for an remote control event. [ 340.863259][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 340.883966][ T5912] dvb-usb: error while querying for an remote control event. [ 341.089573][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 341.112133][ T5912] dvb-usb: error while querying for an remote control event. [ 341.301999][ T30] audit: type=1400 audit(1756917476.355:502): avc: denied { firmware_load } for pid=9452 comm="syz.3.867" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 342.069199][ T9457] syz.3.867 (9457) used greatest stack depth: 18904 bytes left [ 342.441372][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 342.447140][ T10] dvb-usb: error while querying for an remote control event. [ 342.611435][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 342.635863][ T9461] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 343.195234][ T10] dvb-usb: error while querying for an remote control event. [ 343.452707][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 343.493849][ T9] dvb-usb: error while querying for an remote control event. [ 343.930126][ T48] usb 1-1: USB disconnect, device number 29 [ 343.976290][ T48] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 344.198589][ T30] audit: type=1400 audit(1756917479.105:503): avc: denied { execmem } for pid=9470 comm="syz.0.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 344.365077][ T9475] macsec0: entered promiscuous mode [ 344.371647][ T9475] macsec0: entered allmulticast mode [ 344.376941][ T9475] veth1_macvtap: entered allmulticast mode [ 344.956258][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 345.423947][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 345.445455][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.262026][ T9] usb 2-1: Product: syz [ 346.268893][ T9] usb 2-1: Manufacturer: syz [ 346.281486][ T9] usb 2-1: SerialNumber: syz [ 346.861446][ T30] audit: type=1400 audit(1756917481.925:504): avc: denied { getopt } for pid=9468 comm="syz.1.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 347.180851][ T30] audit: type=1400 audit(1756917482.245:505): avc: denied { append } for pid=9501 comm="syz.4.881" name="nbd4" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 347.869852][ T9509] overlayfs: failed to clone upperpath [ 347.880345][ T30] audit: type=1400 audit(1756917482.945:506): avc: denied { create } for pid=9508 comm="syz.3.883" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 347.901139][ T975] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 347.918494][ T9] rtl8150 2-1:1.0: couldn't reset the device [ 347.948490][ T30] audit: type=1400 audit(1756917482.945:507): avc: denied { link } for pid=9508 comm="syz.3.883" name="file1" dev="tmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 347.976978][ T9] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 348.131752][ T975] usb 1-1: device descriptor read/64, error -71 [ 348.160249][ T9] usb 2-1: USB disconnect, device number 26 [ 348.266017][ T30] audit: type=1400 audit(1756917483.335:508): avc: denied { unlink } for pid=5843 comm="syz-executor" name="file0" dev="tmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 348.399802][ T9516] overlayfs: failed to clone upperpath [ 348.441474][ T975] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 349.052541][ T975] usb 1-1: device descriptor read/64, error -71 [ 349.714047][ T975] usb usb1-port1: attempt power cycle [ 350.448750][ T975] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 350.492284][ T975] usb 1-1: device descriptor read/8, error -71 [ 350.513497][ T9539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.888'. [ 351.478843][ T30] audit: type=1400 audit(1756917486.545:509): avc: denied { create } for pid=9555 comm="syz.3.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 351.635192][ T9562] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 352.631993][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.831125][ T9564] infiniband syz!: set down [ 353.852633][ T9564] infiniband syz!: added team_slave_0 [ 353.902581][ T9564] syz!: rxe_create_cq: returned err = -12 [ 353.921984][ T9564] infiniband syz!: Couldn't create ib_mad CQ [ 353.931652][ T9564] infiniband syz!: Couldn't open port 1 [ 353.969410][ T9564] RDS/IB: syz!: added [ 353.973539][ T5912] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 353.981618][ T975] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 353.994690][ T9564] smc: adding ib device syz! with port count 1 [ 354.001122][ T9564] smc: ib device syz! port 1 has pnetid [ 354.131466][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 354.151437][ T975] usb 3-1: device descriptor read/64, error -71 [ 354.162217][ T5912] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 354.170610][ T5912] usb 1-1: config 0 has no interface number 0 [ 354.186258][ T5912] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 354.225383][ T5912] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 354.253868][ T5912] usb 1-1: config 0 interface 41 has no altsetting 0 [ 354.275955][ T5912] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 354.287769][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.313363][ T5912] usb 1-1: Product: syz [ 354.325655][ T5912] usb 1-1: Manufacturer: syz [ 354.354359][ T5912] usb 1-1: SerialNumber: syz [ 354.375935][ T5912] usb 1-1: config 0 descriptor?? [ 354.394331][ T9583] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 354.403417][ T9583] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 354.451400][ T975] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 354.641458][ T9583] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 354.668565][ T9583] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 355.191183][ T975] usb 3-1: device descriptor read/64, error -71 [ 355.311923][ T975] usb usb3-port1: attempt power cycle [ 355.405444][ T5912] Error reading MAC address [ 355.414459][ T9583] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 355.426561][ T9583] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 355.661502][ T975] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 356.115575][ T975] usb 3-1: device descriptor read/8, error -71 [ 356.381487][ T975] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 356.412207][ T975] usb 3-1: device descriptor read/8, error -71 [ 356.580900][ T975] usb usb3-port1: unable to enumerate USB device [ 356.630698][ T5912] sr9700 1-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.0-1, CoreChip SR9700 USB Ethernet, 9e:ca:a7:d9:00:61 [ 356.695500][ T5912] usb 1-1: USB disconnect, device number 34 [ 356.714483][ T5912] sr9700 1-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.0-1, CoreChip SR9700 USB Ethernet [ 358.369050][ T30] audit: type=1400 audit(1756917493.325:510): avc: denied { map } for pid=9627 comm="syz.1.912" path="socket:[25282]" dev="sockfs" ino=25282 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 361.021232][ T9664] sg_write: data in/out 32731/154 bytes for SCSI command 0x0-- guessing data in; [ 361.021232][ T9664] program syz.0.919 not setting count and/or reply_len properly [ 361.240190][ T9668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9668 comm=syz.2.921 [ 361.279816][ T30] audit: type=1800 audit(1756917496.345:511): pid=9668 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.921" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 361.300901][ C1] vkms_vblank_simulate: vblank timer overrun [ 361.661384][ T975] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 361.886981][ T975] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 361.961520][ T975] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.122963][ T975] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 362.193426][ T975] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 362.201784][ T975] usb 3-1: Product: syz [ 362.206030][ T975] usb 3-1: Manufacturer: syz [ 362.210670][ T975] usb 3-1: SerialNumber: syz [ 362.217695][ T975] usb 3-1: config 0 descriptor?? [ 362.226898][ T975] usb 3-1: selecting invalid altsetting 0 [ 362.592089][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.926'. [ 362.854235][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.926'. [ 364.604970][ T10] usb 3-1: USB disconnect, device number 29 [ 365.271381][ T30] audit: type=1400 audit(1756917500.335:512): avc: denied { audit_write } for pid=9706 comm="syz.1.929" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 365.419188][ T30] audit: type=1400 audit(1756917500.375:513): avc: denied { watch watch_reads } for pid=9706 comm="syz.1.929" path="/proc/659/ns" dev="proc" ino=25870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 365.745741][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.939'. [ 365.851919][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 365.892958][ T5962] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 365.921407][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 366.058321][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.371107][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.381273][ T5962] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 366.386978][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.390525][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.401529][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.401559][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 366.401596][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 366.401617][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.403545][ T9] usb 1-1: config 0 descriptor?? [ 366.458355][ T5962] usb 3-1: config 0 descriptor?? [ 366.471576][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 366.480907][ T10] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 366.489238][ T10] usb 5-1: config 0 has no interface number 0 [ 366.495641][ T10] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 366.508987][ T10] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 366.519007][ T10] usb 5-1: config 0 interface 41 has no altsetting 0 [ 366.528809][ T10] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 366.537973][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.546102][ T10] usb 5-1: Product: syz [ 366.550629][ T10] usb 5-1: Manufacturer: syz [ 366.559654][ T10] usb 5-1: SerialNumber: syz [ 366.576679][ T10] usb 5-1: config 0 descriptor?? [ 366.584737][ T9732] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 366.597836][ T9732] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 366.811604][ T9732] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 366.811674][ T9732] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 366.975922][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 366.986569][ T9753] FAULT_INJECTION: forcing a failure. [ 366.986569][ T9753] name failslab, interval 1, probability 0, space 0, times 0 [ 366.999494][ T5962] usbhid 3-1:0.0: can't add hid device: -32 [ 367.003749][ T9753] CPU: 0 UID: 0 PID: 9753 Comm: syz.1.943 Not tainted syzkaller #0 PREEMPT(full) [ 367.003770][ T9753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 367.003779][ T9753] Call Trace: [ 367.003787][ T9753] [ 367.003793][ T9753] dump_stack_lvl+0x16c/0x1f0 [ 367.003815][ T9753] should_fail_ex+0x512/0x640 [ 367.003832][ T9753] ? __kmalloc_noprof+0xbf/0x510 [ 367.003849][ T9753] ? lsm_blob_alloc+0x68/0x90 [ 367.003864][ T9753] should_failslab+0xc2/0x120 [ 367.003880][ T9753] __kmalloc_noprof+0xd2/0x510 [ 367.003900][ T9753] lsm_blob_alloc+0x68/0x90 [ 367.003915][ T9753] security_sk_alloc+0x30/0x270 [ 367.003935][ T9753] sk_prot_alloc+0xfb/0x2a0 [ 367.003957][ T9753] sk_alloc+0x36/0xc20 [ 367.003972][ T9753] unix_create1+0xa6/0x700 [ 367.003991][ T9753] unix_stream_connect+0x282/0x1a20 [ 367.004009][ T9753] ? find_held_lock+0x2b/0x80 [ 367.004030][ T9753] ? __local_bh_enable_ip+0xa4/0x120 [ 367.004049][ T9753] ? lockdep_hardirqs_on+0x7c/0x110 [ 367.004064][ T9753] ? __pfx_unix_stream_connect+0x10/0x10 [ 367.004084][ T9753] ? selinux_socket_connect+0x6b/0x80 [ 367.004105][ T9753] ? __pfx_unix_stream_connect+0x10/0x10 [ 367.004121][ T9753] __sys_connect_file+0x13e/0x1a0 [ 367.004145][ T9753] __sys_connect+0x13b/0x160 [ 367.004166][ T9753] ? __pfx___sys_connect+0x10/0x10 [ 367.004196][ T9753] ? syscall_trace_enter+0x1cb/0x240 [ 367.004217][ T9753] __x64_sys_connect+0x72/0xb0 [ 367.004239][ T9753] do_syscall_64+0xcd/0x4c0 [ 367.004257][ T9753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.004271][ T9753] RIP: 0033:0x7f66dd58ebe9 [ 367.004284][ T9753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.004302][ T9753] RSP: 002b:00007f66de3e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 367.004317][ T9753] RAX: ffffffffffffffda RBX: 00007f66dd7c6090 RCX: 00007f66dd58ebe9 [ 367.004326][ T9753] RDX: 000000000000006e RSI: 0000200000000080 RDI: 0000000000000006 [ 367.004334][ T9753] RBP: 00007f66de3e0090 R08: 0000000000000000 R09: 0000000000000000 [ 367.004343][ T9753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.004352][ T9753] R13: 00007f66dd7c6128 R14: 00007f66dd7c6090 R15: 00007ffd67ea7da8 [ 367.004372][ T9753] [ 367.028148][ T9] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 367.032145][ T5962] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 367.092130][ T9] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 367.312511][ T10] Error reading MAC address [ 367.325104][ T9732] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 367.332588][ T9732] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 367.427396][ T5962] usb 3-1: USB disconnect, device number 30 [ 367.657702][ T9] usb 1-1: USB disconnect, device number 35 [ 369.003062][ T10] sr9700 5-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.4-1, CoreChip SR9700 USB Ethernet, be:84:00:d5:57:e8 [ 369.041574][ T10] usb 5-1: USB disconnect, device number 37 [ 369.049009][ T10] sr9700 5-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.4-1, CoreChip SR9700 USB Ethernet [ 369.300119][ T9773] fuse: Bad value for 'user_id' [ 369.310420][ T9773] fuse: Bad value for 'user_id' [ 369.820662][ T9785] ALSA: mixer_oss: invalid index 40000 [ 369.916131][ T9786] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 371.639822][ T30] audit: type=1400 audit(1756917506.675:514): avc: denied { lock } for pid=9780 comm="syz.3.951" path="socket:[26023]" dev="sockfs" ino=26023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 371.677109][ T30] audit: type=1400 audit(1756917506.695:515): avc: denied { name_bind } for pid=9780 comm="syz.3.951" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 372.156029][ T30] audit: type=1400 audit(1756917506.985:516): avc: denied { getopt } for pid=9803 comm="syz.2.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 372.331382][ T5962] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 372.580221][ T5962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.591548][ T5962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.603726][ T5962] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 372.928215][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.991762][ T5962] usb 1-1: config 0 descriptor?? [ 373.062636][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.964'. [ 373.200188][ T9832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.967'. [ 373.271148][ T5962] usbhid 1-1:0.0: can't add hid device: -71 [ 373.277419][ T5962] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 373.296854][ T5962] usb 1-1: USB disconnect, device number 36 [ 373.931372][ T9841] fuse: Unknown parameter 'mex_readH;2000òƲg4õdV!gÿv1' [ 374.057313][ T9848] netlink: 32 bytes leftover after parsing attributes in process `syz.2.968'. [ 374.322115][ T9848] ieee802154 phy0 wpan0: encryption failed: -22 [ 374.377893][ T30] audit: type=1400 audit(1756917509.395:517): avc: denied { write } for pid=9839 comm="syz.2.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 375.041408][ T5962] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 375.453783][ T5962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.554754][ T5962] usb 5-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 375.571620][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.975932][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.975'. [ 375.985734][ T9863] netlink: 24 bytes leftover after parsing attributes in process `syz.1.975'. [ 376.270919][ T5962] usb 5-1: config 0 descriptor?? [ 376.964774][ T5962] smartjoyplus 0003:0925:0005.000A: hidraw0: USB HID v7f.ff Device [HID 0925:0005] on usb-dummy_hcd.4-1/input0 [ 376.988219][ T5962] smartjoyplus 0003:0925:0005.000A: Force feedback for SmartJoy PLUS PS2/USB adapter [ 377.190318][ T30] audit: type=1400 audit(1756917512.245:518): avc: denied { map } for pid=9875 comm="syz.1.981" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 377.336621][ T9850] mkiss: ax0: crc mode is auto. [ 378.351574][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.358729][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.911671][ T30] audit: type=1400 audit(1756917512.245:519): avc: denied { execute } for pid=9875 comm="syz.1.981" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 380.027444][ T30] audit: type=1400 audit(1756917513.965:520): avc: denied { remove_name } for pid=9849 comm="syz.4.972" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 380.064727][ T30] audit: type=1400 audit(1756917513.975:521): avc: denied { unlink } for pid=9849 comm="syz.4.972" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 380.116722][ T10] usb 5-1: USB disconnect, device number 38 [ 380.173462][ T30] audit: type=1400 audit(1756917515.225:522): avc: denied { write } for pid=9898 comm="syz.0.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 380.339052][ T9905] 9pnet_fd: Insufficient options for proto=fd [ 380.460920][ T30] audit: type=1400 audit(1756917515.405:523): avc: denied { read } for pid=9898 comm="syz.0.986" dev="sockfs" ino=26702 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 382.091189][ T9935] binder_alloc: 9933: binder_alloc_buf, no vma [ 383.011392][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 383.171434][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 383.287780][ T9949] Unsupported ieee802154 address type: 0 [ 383.293806][ T30] audit: type=1400 audit(1756917518.355:524): avc: denied { bind } for pid=9948 comm="syz.2.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 383.321638][ T9] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 383.329817][ T9] usb 5-1: config 0 has no interface number 0 [ 383.338075][ T9] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 383.348074][ T30] audit: type=1400 audit(1756917518.405:525): avc: denied { write } for pid=9940 comm="syz.0.998" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 383.377708][ T9] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 383.377936][ T30] audit: type=1400 audit(1756917518.415:526): avc: denied { map } for pid=9940 comm="syz.0.998" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 383.412067][ T30] audit: type=1400 audit(1756917518.415:527): avc: denied { execute } for pid=9940 comm="syz.0.998" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 383.462630][ T9] usb 5-1: config 0 interface 41 has no altsetting 0 [ 383.488522][ T9] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 383.502246][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.534061][ T9] usb 5-1: Product: syz [ 383.548439][ T9] usb 5-1: Manufacturer: syz [ 383.570316][ T9] usb 5-1: SerialNumber: syz [ 383.585250][ T9] usb 5-1: config 0 descriptor?? [ 383.658788][ T9943] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 383.681721][ T9943] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 383.927551][ T9943] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 384.026841][ T9943] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 384.149024][ T9956] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1002'. [ 384.540074][ T9] Error reading MAC address [ 384.563199][ T9943] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 384.589048][ T9943] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 384.927379][ T9973] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 385.631989][ T9968] binder_alloc: 9965: binder_alloc_buf, no vma [ 385.659334][ T9] sr9700 5-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.4-1, CoreChip SR9700 USB Ethernet, 2e:d7:bd:db:bd:11 [ 385.677961][ T9] usb 5-1: USB disconnect, device number 39 [ 385.685449][ T9] sr9700 5-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.4-1, CoreChip SR9700 USB Ethernet [ 386.751515][ T5926] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 387.126067][ T5926] usb 1-1: config 1 has an invalid interface number: 236 but max is 1 [ 387.139034][ T5926] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.239290][ T5926] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 387.291409][ T5926] usb 1-1: config 1 has no interface number 2 [ 387.304294][ T9997] netlink: 'syz.4.1015': attribute type 1 has an invalid length. [ 387.313203][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1015'. [ 387.325097][ T9997] dlm: no local IP address has been set [ 387.330775][ T9997] dlm: cannot start dlm midcomms -107 [ 387.346616][ T5926] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 387.451369][ T5926] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 387.495848][ T5926] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 387.541398][ T5926] usb 1-1: config 1 interface 1 has no altsetting 0 [ 387.550131][ T5926] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 387.578334][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.594781][ T5926] usb 1-1: Product: syz [ 387.623063][ T5926] usb 1-1: Manufacturer: syz [ 387.659730][T10014] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1021'. [ 387.859464][ T5926] usb 1-1: SerialNumber: syz [ 387.884579][ T9987] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 387.905229][ T5926] cdc_ncm 1-1:1.0: skipping garbage [ 387.910437][ T5926] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 387.934543][ T5926] cdc_ncm 1-1:1.0: bind() failure [ 387.974838][ T5926] cdc_ncm 1-1:1.236: CDC Union missing and no IAD found [ 388.012299][ T5926] cdc_ncm 1-1:1.236: bind() failure [ 388.262630][T10018] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 390.284969][ T5926] usb 1-1: USB disconnect, device number 37 [ 390.301740][T10036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=10036 comm=syz.2.1028 [ 390.360560][ T5962] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 390.553111][ T5962] usb 2-1: Using ep0 maxpacket: 16 [ 390.587367][ T5962] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 390.596812][T10050] overlayfs: failed to clone upperpath [ 390.613408][ T5962] usb 2-1: config 0 has no interface number 0 [ 390.629717][ T5962] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 390.663644][ T5962] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 390.694771][ T5962] usb 2-1: config 0 interface 41 has no altsetting 0 [ 390.746507][ T5962] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 390.812478][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.821345][ T5962] usb 2-1: Product: syz [ 390.830069][ T5962] usb 2-1: Manufacturer: syz [ 390.834974][ T5962] usb 2-1: SerialNumber: syz [ 390.889862][ T5962] usb 2-1: config 0 descriptor?? [ 390.901221][T10031] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 390.927804][T10031] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 391.154014][T10031] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 391.161727][T10031] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 391.901154][ T5962] Error reading MAC address [ 392.426641][T10031] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 393.236671][T10031] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 393.402318][ T5962] sr9700 2-1:0.41: probe with driver sr9700 failed with error -71 [ 393.552998][ T5962] usb 2-1: USB disconnect, device number 27 [ 393.588573][ T30] audit: type=1400 audit(1756917528.645:528): avc: denied { map } for pid=10072 comm="syz.2.1039" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 395.051433][ T975] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 395.101505][ T5962] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 395.201524][ T975] usb 5-1: Using ep0 maxpacket: 16 [ 395.208321][ T975] usb 5-1: config 1 has an invalid descriptor of length 166, skipping remainder of the config [ 395.240221][ T975] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 395.289657][ T5962] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 395.343012][ T975] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 395.361751][ T5962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.414865][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.469756][ T975] usb 5-1: Product: syz [ 395.495344][ T5962] usb 2-1: config 0 descriptor?? [ 395.531089][ T975] usb 5-1: Manufacturer: syz [ 395.538044][ T5962] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 395.560165][ T975] usb 5-1: SerialNumber: syz [ 395.826742][T10096] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 396.654300][ T5962] gspca_cpia1: usb_control_msg 05, error -71 [ 396.695481][ T5962] gspca_cpia1: usb_control_msg 01, error -71 [ 396.728038][ T5962] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 396.877838][ T5962] usb 2-1: USB disconnect, device number 28 [ 397.472179][ T975] usb 5-1: 0:2 : does not exist [ 397.480726][ T975] usb 5-1: unit 9 not found! [ 397.489937][ T975] usb 5-1: 4:0: cannot get min/max values for control 1 (id 4) [ 397.520057][ T975] usb 5-1: 4:0: cannot get min/max values for control 2 (id 4) [ 397.531479][ T5934] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 397.821409][ T30] audit: type=1400 audit(1756917532.795:529): avc: denied { mount } for pid=10112 comm="syz.3.1051" name="/" dev="configfs" ino=1166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 397.850317][ T30] audit: type=1400 audit(1756917532.795:530): avc: denied { search } for pid=10112 comm="syz.3.1051" name="/" dev="configfs" ino=1166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 397.875070][ T975] usb 5-1: 4:0: cannot get min/max values for control 3 (id 4) [ 397.942666][ T975] usb 5-1: 4:0: cannot get min/max values for control 4 (id 4) [ 397.959545][ T975] usb 5-1: 4:0: cannot get min/max values for control 5 (id 4) [ 397.979567][ T975] usb 5-1: 4:0: cannot get min/max values for control 6 (id 4) [ 397.998833][ T975] usb 5-1: USB disconnect, device number 40 [ 398.007268][ T8983] udevd[8983]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.021365][ T5934] usb 3-1: Using ep0 maxpacket: 16 [ 398.022884][ T5934] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 398.022909][ T5934] usb 3-1: config 0 has no interface number 0 [ 398.022943][ T5934] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 398.022967][ T5934] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 398.022989][ T5934] usb 3-1: config 0 interface 41 has no altsetting 0 [ 398.025283][ T5934] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 398.025309][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.025328][ T5934] usb 3-1: Product: syz [ 398.025341][ T5934] usb 3-1: Manufacturer: syz [ 398.025354][ T5934] usb 3-1: SerialNumber: syz [ 398.052557][ T5934] usb 3-1: config 0 descriptor?? [ 398.058758][T10110] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 398.058829][T10110] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 398.080111][T10127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1049'. [ 398.331752][T10110] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 398.331861][T10110] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 398.467348][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1054'. [ 398.467445][T10130] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 398.467466][T10130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.468143][T10131] netlink: 'syz.0.1054': attribute type 1 has an invalid length. [ 398.503152][T10131] 8021q: adding VLAN 0 to HW filter on device bond1 [ 398.686295][T10130] bond1: (slave gretap1): making interface the new active one [ 398.687490][T10130] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 398.723090][ T975] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 398.779335][ T5934] Error reading MAC address [ 398.936377][ T5962] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 399.084819][T10110] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 399.101449][T10110] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 399.157566][ T975] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.167912][ T5962] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 399.176978][ T5962] usb 5-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 399.196233][ T5962] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 399.208831][ T5962] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 399.223264][ T975] usb 1-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 399.225812][T10136] comedi comedi0: c6xdigio: I/O port conflict (0x7,3) [ 399.232539][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.248295][ T975] usb 1-1: Product: syz [ 399.252783][ T975] usb 1-1: Manufacturer: syz [ 399.257710][ T975] usb 1-1: SerialNumber: syz [ 399.263522][ T5962] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 399.273974][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 399.275789][T10136] ================================================================== [ 399.282719][ T975] usb 1-1: config 0 descriptor?? [ 399.290010][T10136] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 399.290039][T10136] Read of size 8 at addr ffff88807e852230 by task syz.1.1056/10136 [ 399.290052][T10136] [ 399.290060][T10136] CPU: 0 UID: 0 PID: 10136 Comm: syz.1.1056 Not tainted syzkaller #0 PREEMPT(full) [ 399.290079][T10136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 399.290088][T10136] Call Trace: [ 399.290095][T10136] [ 399.290102][T10136] dump_stack_lvl+0x116/0x1f0 [ 399.290120][T10136] print_report+0xcd/0x630 [ 399.290137][T10136] ? __virt_addr_valid+0x81/0x610 [ 399.290157][T10136] ? __phys_addr+0xe8/0x180 [ 399.290177][T10136] ? sysfs_remove_file_ns+0x63/0x70 [ 399.290193][T10136] kasan_report+0xe0/0x110 [ 399.290210][T10136] ? sysfs_remove_file_ns+0x63/0x70 [ 399.290229][T10136] sysfs_remove_file_ns+0x63/0x70 [ 399.290246][T10136] driver_remove_file+0x4a/0x60 [ 399.290266][T10136] bus_remove_driver+0x224/0x2c0 [ 399.290281][T10136] driver_unregister+0x76/0xb0 [ 399.290298][T10136] comedi_device_detach_locked+0x12f/0xa50 [ 399.290319][T10136] comedi_device_detach+0x67/0xb0 [ 399.290335][T10136] comedi_device_attach+0x43d/0x900 [ 399.290354][T10136] do_devconfig_ioctl+0x1b1/0x710 [ 399.290374][T10136] ? __mutex_lock+0x1c5/0x1060 [ 399.290392][T10136] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 399.290419][T10136] ? find_held_lock+0x2b/0x80 [ 399.290439][T10136] comedi_unlocked_ioctl+0x165d/0x2f00 [ 399.290465][T10136] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 399.290490][T10136] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 399.290508][T10136] ? do_vfs_ioctl+0x128/0x14f0 [ 399.290530][T10136] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 399.290552][T10136] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 399.290578][T10136] ? hook_file_ioctl_common+0x145/0x410 [ 399.290596][T10136] ? selinux_file_ioctl+0x180/0x270 [ 399.290616][T10136] ? selinux_file_ioctl+0xb4/0x270 [ 399.290636][T10136] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 399.290659][T10136] __x64_sys_ioctl+0x18e/0x210 [ 399.290682][T10136] do_syscall_64+0xcd/0x4c0 [ 399.290700][T10136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.290715][T10136] RIP: 0033:0x7f66dd58ebe9 [ 399.290728][T10136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.290748][T10136] RSP: 002b:00007f66de401038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 399.290763][T10136] RAX: ffffffffffffffda RBX: 00007f66dd7c5fa0 RCX: 00007f66dd58ebe9 [ 399.290774][T10136] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000004 [ 399.290783][T10136] RBP: 00007f66dd611e19 R08: 0000000000000000 R09: 0000000000000000 [ 399.290792][T10136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.290802][T10136] R13: 00007f66dd7c6038 R14: 00007f66dd7c5fa0 R15: 00007ffd67ea7da8 [ 399.290817][T10136] [ 399.290822][T10136] [ 399.298750][ T5962] usb 5-1: Product: syz [ 399.302921][T10136] Allocated by task 9990: [ 399.302934][T10136] kasan_save_stack+0x33/0x60 [ 399.302959][T10136] kasan_save_track+0x14/0x30 [ 399.311159][ T5962] usb 5-1: Manufacturer: syz [ 399.313125][T10136] __kasan_kmalloc+0xaa/0xb0 [ 399.313144][T10136] connmark_init_net+0x56/0x270 [ 399.313167][T10136] ops_init+0x1df/0x5f0 [ 399.313183][T10136] setup_net+0x10f/0x380 [ 399.313198][T10136] copy_net_ns+0x2a6/0x5f0 [ 399.337011][ T975] mvusb_mdio 1-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 399.338768][T10136] create_new_namespaces+0x3ea/0xa90 [ 399.632780][T10136] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 399.638401][T10136] ksys_unshare+0x45b/0xa40 [ 399.642887][T10136] __x64_sys_unshare+0x31/0x40 [ 399.647643][T10136] do_syscall_64+0xcd/0x4c0 [ 399.652126][T10136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.657996][T10136] [ 399.660293][T10136] Freed by task 6743: [ 399.664261][T10136] kasan_save_stack+0x33/0x60 [ 399.668914][T10136] kasan_save_track+0x14/0x30 [ 399.673576][T10136] kasan_save_free_info+0x3b/0x60 [ 399.678585][T10136] __kasan_slab_free+0x60/0x70 [ 399.683328][T10136] kfree+0x2b4/0x4d0 [ 399.687202][T10136] connmark_exit_net+0x13e/0x3b0 [ 399.692122][T10136] ops_undo_list+0x360/0xab0 [ 399.696690][T10136] cleanup_net+0x408/0x890 [ 399.701083][T10136] process_one_work+0x9cc/0x1b70 [ 399.705997][T10136] worker_thread+0x6c8/0xf10 [ 399.710561][T10136] kthread+0x3c2/0x780 [ 399.714601][T10136] ret_from_fork+0x5d4/0x6f0 [ 399.719167][T10136] ret_from_fork_asm+0x1a/0x30 [ 399.723909][T10136] [ 399.726210][T10136] The buggy address belongs to the object at ffff88807e852200 [ 399.726210][T10136] which belongs to the cache kmalloc-256 of size 256 [ 399.740238][T10136] The buggy address is located 48 bytes inside of [ 399.740238][T10136] freed 256-byte region [ffff88807e852200, ffff88807e852300) [ 399.753918][T10136] [ 399.756220][T10136] The buggy address belongs to the physical page: [ 399.762600][T10136] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e852 [ 399.771333][T10136] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 399.779801][T10136] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 399.787316][T10136] page_type: f5(slab) [ 399.791275][T10136] raw: 00fff00000000040 ffff88801b841b40 ffffea0000d54c80 dead000000000002 [ 399.799834][T10136] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 399.808392][T10136] head: 00fff00000000040 ffff88801b841b40 ffffea0000d54c80 dead000000000002 [ 399.817047][T10136] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 399.825691][T10136] head: 00fff00000000001 ffffea0001fa1481 00000000ffffffff 00000000ffffffff [ 399.834339][T10136] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 399.842979][T10136] page dumped because: kasan: bad access detected [ 399.849359][T10136] page_owner tracks the page as allocated [ 399.855043][T10136] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5844, tgid 5844 (syz-executor), ts 71136084772, free_ts 70979384925 [ 399.876374][T10136] post_alloc_hook+0x1c0/0x230 [ 399.881128][T10136] get_page_from_freelist+0x132b/0x38e0 [ 399.886648][T10136] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 399.892521][T10136] alloc_pages_mpol+0x1fb/0x550 [ 399.897392][T10136] new_slab+0x247/0x330 [ 399.901526][T10136] ___slab_alloc+0xcf2/0x1740 [ 399.906195][T10136] __slab_alloc.constprop.0+0x56/0xb0 [ 399.911548][T10136] __kmalloc_noprof+0x2f2/0x510 [ 399.916371][T10136] fib_create_info+0x53f/0x46b0 [ 399.921204][T10136] fib_table_insert+0x177/0x1c40 [ 399.926117][T10136] fib_magic+0x4d4/0x5c0 [ 399.930339][T10136] fib_add_ifaddr+0x3a1/0x580 [ 399.934996][T10136] fib_netdev_event+0x38a/0x710 [ 399.939825][T10136] notifier_call_chain+0xb9/0x410 [ 399.944845][T10136] call_netdevice_notifiers_info+0xbe/0x140 [ 399.950717][T10136] __dev_notify_flags+0x12c/0x2e0 [ 399.955713][T10136] page last free pid 5945 tgid 5945 stack trace: [ 399.962026][T10136] __free_frozen_pages+0x7d5/0x10f0 [ 399.967207][T10136] qlist_free_all+0x4d/0x120 [ 399.971770][T10136] kasan_quarantine_reduce+0x195/0x1e0 [ 399.977201][T10136] __kasan_slab_alloc+0x69/0x90 [ 399.982027][T10136] __kmalloc_noprof+0x1d4/0x510 [ 399.986850][T10136] tomoyo_realpath_from_path+0xc2/0x6e0 [ 399.992388][T10136] tomoyo_path_perm+0x274/0x460 [ 399.997239][T10136] security_inode_getattr+0x116/0x290 [ 400.002610][T10136] vfs_fstat+0x4b/0xe0 [ 400.006662][T10136] __do_sys_newfstat+0x87/0x100 [ 400.011491][T10136] do_syscall_64+0xcd/0x4c0 [ 400.015984][T10136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.021853][T10136] [ 400.024150][T10136] Memory state around the buggy address: [ 400.029757][T10136] ffff88807e852100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 400.037792][T10136] ffff88807e852180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 400.045837][T10136] >ffff88807e852200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 400.053870][T10136] ^ [ 400.059470][T10136] ffff88807e852280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 400.067503][T10136] ffff88807e852300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 400.075536][T10136] ================================================================== [ 400.092250][T10136] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 400.099474][T10136] CPU: 1 UID: 0 PID: 10136 Comm: syz.1.1056 Not tainted syzkaller #0 PREEMPT(full) [ 400.108845][T10136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 400.118887][T10136] Call Trace: [ 400.122145][T10136] [ 400.125056][T10136] dump_stack_lvl+0x3d/0x1f0 [ 400.129632][T10136] vpanic+0x6e8/0x7a0 [ 400.133701][T10136] ? __pfx_vpanic+0x10/0x10 [ 400.138277][T10136] ? sysfs_remove_file_ns+0x63/0x70 [ 400.143456][T10136] panic+0xca/0xd0 [ 400.147162][T10136] ? __pfx_panic+0x10/0x10 [ 400.151565][T10136] ? sysfs_remove_file_ns+0x63/0x70 [ 400.156746][T10136] ? preempt_schedule_common+0x44/0xc0 [ 400.162183][T10136] ? preempt_schedule_thunk+0x16/0x30 [ 400.167538][T10136] check_panic_on_warn+0xab/0xb0 [ 400.172451][T10136] end_report+0x107/0x170 [ 400.176762][T10136] kasan_report+0xee/0x110 [ 400.181154][T10136] ? sysfs_remove_file_ns+0x63/0x70 [ 400.186347][T10136] sysfs_remove_file_ns+0x63/0x70 [ 400.191371][T10136] driver_remove_file+0x4a/0x60 [ 400.196223][T10136] bus_remove_driver+0x224/0x2c0 [ 400.201146][T10136] driver_unregister+0x76/0xb0 [ 400.205895][T10136] comedi_device_detach_locked+0x12f/0xa50 [ 400.211685][T10136] comedi_device_detach+0x67/0xb0 [ 400.216690][T10136] comedi_device_attach+0x43d/0x900 [ 400.221872][T10136] do_devconfig_ioctl+0x1b1/0x710 [ 400.226878][T10136] ? __mutex_lock+0x1c5/0x1060 [ 400.231624][T10136] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 400.237158][T10136] ? find_held_lock+0x2b/0x80 [ 400.241816][T10136] comedi_unlocked_ioctl+0x165d/0x2f00 [ 400.247279][T10136] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 400.253073][T10136] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 400.258944][T10136] ? do_vfs_ioctl+0x128/0x14f0 [ 400.263694][T10136] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 400.268705][T10136] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 400.275540][T10136] ? hook_file_ioctl_common+0x145/0x410 [ 400.281064][T10136] ? selinux_file_ioctl+0x180/0x270 [ 400.286242][T10136] ? selinux_file_ioctl+0xb4/0x270 [ 400.291338][T10136] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 400.297128][T10136] __x64_sys_ioctl+0x18e/0x210 [ 400.301878][T10136] do_syscall_64+0xcd/0x4c0 [ 400.306361][T10136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.312232][T10136] RIP: 0033:0x7f66dd58ebe9 [ 400.316624][T10136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.336213][T10136] RSP: 002b:00007f66de401038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.344600][T10136] RAX: ffffffffffffffda RBX: 00007f66dd7c5fa0 RCX: 00007f66dd58ebe9 [ 400.352548][T10136] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000004 [ 400.360493][T10136] RBP: 00007f66dd611e19 R08: 0000000000000000 R09: 0000000000000000 [ 400.368436][T10136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.376385][T10136] R13: 00007f66dd7c6038 R14: 00007f66dd7c5fa0 R15: 00007ffd67ea7da8 [ 400.384354][T10136] [ 400.387585][T10136] Kernel Offset: disabled [ 400.391897][T10136] Rebooting in 86400 seconds..