last executing test programs: 16.459413363s ago: executing program 2 (id=2889): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x25dfdbfe, {0x7a, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x40}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x44}}, 0x0) semget$private(0x0, 0x1, 0x5db) listen(0xffffffffffffffff, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x54, r4, 0x1, 0x70bd2d, 0xfffffffc, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 16.335231679s ago: executing program 1 (id=2890): keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x9e0eadae347b960d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x0, &(0x7f0000000200)={0x80000002, 0x6}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdir(0x0, 0xe8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) clock_nanosleep(0xa, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x116, &(0x7f0000000100)={0x0, 0x86c0, 0x8, 0x3, 0x320}, &(0x7f0000000040), &(0x7f0000000dc0)) get_robust_list(0x0, &(0x7f0000000340)=&(0x7f0000000300)={&(0x7f00000000c0), 0x0, &(0x7f0000000280)={&(0x7f0000000240)}}, &(0x7f0000000380)=0x18) io_uring_enter(r1, 0xf3, 0x80ffff, 0x49, 0x0, 0x40) getpid() r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000015000103"], 0x14}}, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r7, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f00006db000/0x3000)=nil, 0x3000) 16.157106712s ago: executing program 4 (id=2891): socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) r1 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x1) close(r1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/bus/input/handlers\x00', 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) 15.482763877s ago: executing program 4 (id=2893): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x102080, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.836588472s ago: executing program 4 (id=2897): openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) migrate_pages(0x0, 0x7, &(0x7f0000000000)=0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000240)={0x6}) syz_open_procfs(0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0x7, 0xb, 0x4, 0x0, 0x89, {}, {0x1, 0x8, 0x3, 0x6a, 0x9, 0x5, "a8ed9837"}, 0xfff, 0x2, {&(0x7f00000000c0)=[{0x0, 0x8002, {0x0}, 0xa}, {0x9fb, 0xd4, {0x0}}]}, 0x5}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000010800164000000004"], 0x6c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000003010104000000000000002002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x4048000) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13.011492891s ago: executing program 1 (id=2899): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500d8b294740061107300000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10}, 0x94) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_open_dev$usbfs(&(0x7f00000001c0), 0x8, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000600)="27050200340f14000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b000000000000025743ce554b6df654cb0173677c4e2eaa2eb5035d135958831197684b763f499a2fafc724413afe7af5b53e61532895bae8d3f0f02cc4e729883f078a2552275a1486218834476323059f91a91c500e035c5c70afee9d16b5acd7cd4b94e3600c9c69aeb79e259488e089b1c59bc6fca826d38a7b3229ccd5b1bde01e63f1edd3c0f933e5c02936de55f2a4ee254bbe8aed1d2260c97783b615850d488b7f0c4a80715bed3cf1adb2dafbb7672328e2300fa2623704da7b9889a57e231be318f5eb6d294a302e753e75b741b63e898748f228e6752d15bf99e02c3d366fa091326029d899c493df701ad6c37c55598f3a19e748f58475398fda5f6153cb11a4ffde399dc21f96bed56d31fd6bfa0a75d0df449393aaf7c449", 0x163}, {&(0x7f0000002180)="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", 0xdf7}], 0x2}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000700)=@ethtool_per_queue_op={0x4b, 0xf, [0x2000f68f, 0x8, 0x9, 0x10001ff, 0x8, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x203, 0x3d, 0x5e, 0x1000, 0x1, 0xf557, 0x2, 0x5, 0x9b5, 0xce, 0x2, 0x3, 0xe52f, 0xaa8, 0x80000000, 0x1, 0xe9c4, 0xcd8, 0x6c, 0x6, 0x67a, 0xd, 0x7, 0x81, 0x6, 0x6, 0x3da, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x800, 0xfffff801, 0x2b, 0xa, 0x0, 0x6, 0x3, 0x5, 0x0, 0x6, 0x8, 0x23, 0xff, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x6000004, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x3ff, 0x80000000, 0x8000, 0x3, 0x5, 0x2, 0x0, 0xdb4bf975, 0x9, 0xd, 0x4, 0x2, 0x0, 0xd, 0x6, 0x3, 0x0, 0x10, 0x1, 0xfffffffc, 0x9, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0xb, 0x4, 0x1, 0x9, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x401, 0x5, 0x7fff, 0x8, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x9, 0x7, 0x200, 0x9, 0xe, 0x81, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1, 0xfffffffa], "354d52859e67242784b2d116258cd674e6f7a8a6a4121e789c83baf4c3a50a398640a4dc2fc81b58dbb571267492b55e6c08c88024448cb2ef70a24171f84c9efbacb6b98c218e44bd5e54b7fcfbb9df68a48f2a788ee358d1"}}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000008700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.967049411s ago: executing program 2 (id=2900): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019240)='./file0\x00', &(0x7f0000019300)={[&(0x7f0000000380)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x03\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\xdch\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc', &(0x7f0000000000)='.-+\x00']}, &(0x7f0000019100)={[&(0x7f000001d340)='\x1a\xf8\xf9e\ai\xa1>z\x06 \xbb\x05`\t<\x9c\xa3\xba\x02\xb6\x80\n\xdc\xa8\x7f^R\xcas\xb7\x13\x15\xf7\x8a\xa7\xc45\x86M\x8f\xe8\xcdj\x18\xde\xc7_\x8b}\xb9\x82o\xd3\xd8]x+h\x8d\xed\x95/C\xeaxC\xa4\xdd\xc7\xb9\xb4}\xcce;\xb1MlvB\xe5\xfd\x92\x12\xbb\xa3b\x9a$s\xc4\x91j\xb6\x12\xd7\xb4\x16TAq\xb6_\xbfU\xf1\xa1\xc4\t\'3pT\xc2\xd4p@\xd2\x8a\xa7\x9aiWlx\xd00\x035WP`\xb9W\xab\x11\xc9\xd34\xff\xc4\xb2\xca\xd5Xh\x05\xcdVH\x98\xe2\xa2\x00\'-\xbd9\xd4*q9f\xe8\xd1\aG\x1b\xce\xbd\xcd\x13g\xc7T\xf9QT\xe0#\xe2\t\xb6\xe1c\x11\x13)s\xc6&[\xf6\xb8\x85\x8b}\x84\xf5\xe3\x7fCHX\xb8\x1f\x80(s\xae\xeb\xe2Kd\xbb\x19\x11\xa0\x95\x86\xc4\xdc\x1aH,$\xb8\xf56\xa3\v\r\x12\xc56w\xc2\xee%\aY\xd7\xa9\x01?7||\xc2o\xf3\xf6\xf4S\x94L\x80,\xdf\xf7\'B\xfa\x8e[\x94c\xf7/\xa5ZuDyp&\xaai@V\x06v.\xec*\x94\x90e\xd6\x10\xac\xa1\f~*:\x9d\xb0\xca\x00\xaa\xc2\xaa[Yb\n\x01\xb7\xde\xcd\xf0e\r,\x02\x84\xe3W\x12\b\x04\x8cA\x06f']}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80, 0xff}, 'port1\x00', 0xf3, 0xb1815, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) socket$packet(0x11, 0x2, 0x300) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f000001d540)=ANY=[@ANYRESHEX, @ANYRESDEC=r2, @ANYRESOCT=r0], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x44840) 11.363224357s ago: executing program 1 (id=2901): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="01002bbd700000000000010000009c0008809800008044000980400000800600010002000000080002007f0000010500030000000000060001000a0000001400020000000000000000000000000000000000050003000200000008000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000200eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db7172400030000000000000000000000000000000000000000000000000000000000000000001400020077673000000000000000000000000000cf59fa85ad9c"], 0xe8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r7, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000"]) socket(0x80000000000000a, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 11.27603858s ago: executing program 2 (id=2902): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000940)}, 0xc811) getegid() bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4f26, 0xfffffffd, @loopback}, 0x1c) close(0xffffffffffffffff) close(0xffffffffffffffff) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010200000010f3b100000000010203010902240001010330050904000801030101000921ff00"], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x4004010) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023893) shutdown(r4, 0x2) recvmmsg(r5, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000003780)=""/4078, 0xfee}, 0x4}], 0x1, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa080006"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) 10.238582591s ago: executing program 3 (id=2904): pipe2(0x0, 0xb1dc326431916e94) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10) sync() sync() 9.474661264s ago: executing program 3 (id=2905): mount(0x0, 0x0, 0x0, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 9.135116426s ago: executing program 0 (id=2906): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e23, 0x3, 'lc\x00', 0x8, 0xd48, 0x55}, {@remote, 0x4e27, 0x2000, 0x3, 0x12d5c, 0x12d5c}}, 0x44) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e65740000"], 0x60}}, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000000000)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "c8444943470da91b", "42f3ac0e0b8a32be8fe91c368e60693800000000d6e5394b00", "e7198360", "f7a5c1777af05eaa"}, 0x38) sendto$inet6(r4, &(0x7f0000000340), 0x0, 0x8000, 0x0, 0x0) syz_open_procfs(0x0, 0x0) inotify_init1(0x0) 8.244076418s ago: executing program 4 (id=2907): pipe(&(0x7f0000000040)) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x840) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000140)=0xfffffdfb) unshare(0x4a010500) socket$inet6(0xa, 0x80001, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r4 = socket(0x80000000000000a, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x10, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x8383}}, {{0xa, 0x0, 0x40000, @remote}}}, 0x108) preadv(r3, &(0x7f0000001ac0)=[{0x0}, {&(0x7f0000000040)=""/3, 0x3}, {&(0x7f0000001840)=""/212, 0xd4}], 0x3, 0x5f, 0xfffffffc) 8.243413122s ago: executing program 3 (id=2908): socket(0x25, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = getpgid(0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x578410eb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='prq_report\x00', r3, 0x0, 0x45f0}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4, r6}) ioctl$DMA_BUF_SET_NAME_A(r8, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r8, 0xc0086202, &(0x7f0000000540)=0x1) close_range(r1, r8, 0x0) 7.779384343s ago: executing program 1 (id=2909): keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x9e0eadae347b960d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x0, &(0x7f0000000200)={0x80000002, 0x6}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdir(0x0, 0xe8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) clock_nanosleep(0xa, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x116, &(0x7f0000000100)={0x0, 0x86c0, 0x8, 0x3, 0x320}, &(0x7f0000000040), &(0x7f0000000dc0)) get_robust_list(0x0, &(0x7f0000000340)=&(0x7f0000000300)={&(0x7f00000000c0), 0x0, &(0x7f0000000280)={&(0x7f0000000240)}}, &(0x7f0000000380)=0x18) io_uring_enter(r1, 0xf3, 0x80ffff, 0x49, 0x0, 0x40) getpid() r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000015000103"], 0x14}}, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r7, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f00006db000/0x3000)=nil, 0x3000) 6.303328882s ago: executing program 2 (id=2910): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = open(0x0, 0x64842, 0x389b0d52417bb201) pwritev2(r3, 0x0, 0x0, 0x7000, 0x0, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) r4 = getpgrp(0x0) syz_open_procfs(r4, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7}) r6 = syz_open_dev$vbi(0x0, 0x1, 0x2) r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000380)={0x4, @raw_data="2add710a22c961b2f82e5dc17f3a6fc80195ff7a61756e12851e87fd7af1edc26be1d0e482523e894b55231ab2a3568d98b806958c4bc37a03838a294ca25ce6f322abd3d5dd50406f7416d92da50e0fd534139bc9d1ed1d04add8a55f0493dbdb13d85c9b090405de50aadb19ea3cc0ebda11e055bbf9a777064bda4845e4d8588369d40dfcc74aa0bbaf7e23d6ee66645e984d55c8ae11abdcea9ab765a1c28844e8b70bc36411df618dac639b26c74312b3e410f2d946121a075e50658816bc63125157ed5a1f"}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) ioctl$VIDIOC_QBUF(r6, 0xc058565d, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 5.887379532s ago: executing program 0 (id=2911): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f0000000280)={0xb6c, 0x5, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x83}]}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001740), r5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000001880)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x11080100}, 0xc, &(0x7f0000001840)={&(0x7f0000001780)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000000}, 0x40000) r7 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000"], 0x48) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r8, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000480)={r9, r0, 0x4, r1}, 0x10) 4.929085712s ago: executing program 0 (id=2912): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80000009}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) 4.835350103s ago: executing program 3 (id=2913): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019240)='./file0\x00', &(0x7f0000019300)={[&(0x7f0000000380)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x03\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\xdch\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc', &(0x7f0000000000)='.-+\x00']}, &(0x7f0000019100)={[&(0x7f000001d340)='\x1a\xf8\xf9e\ai\xa1>z\x06 \xbb\x05`\t<\x9c\xa3\xba\x02\xb6\x80\n\xdc\xa8\x7f^R\xcas\xb7\x13\x15\xf7\x8a\xa7\xc45\x86M\x8f\xe8\xcdj\x18\xde\xc7_\x8b}\xb9\x82o\xd3\xd8]x+h\x8d\xed\x95/C\xeaxC\xa4\xdd\xc7\xb9\xb4}\xcce;\xb1MlvB\xe5\xfd\x92\x12\xbb\xa3b\x9a$s\xc4\x91j\xb6\x12\xd7\xb4\x16TAq\xb6_\xbfU\xf1\xa1\xc4\t\'3pT\xc2\xd4p@\xd2\x8a\xa7\x9aiWlx\xd00\x035WP`\xb9W\xab\x11\xc9\xd34\xff\xc4\xb2\xca\xd5Xh\x05\xcdVH\x98\xe2\xa2\x00\'-\xbd9\xd4*q9f\xe8\xd1\aG\x1b\xce\xbd\xcd\x13g\xc7T\xf9QT\xe0#\xe2\t\xb6\xe1c\x11\x13)s\xc6&[\xf6\xb8\x85\x8b}\x84\xf5\xe3\x7fCHX\xb8\x1f\x80(s\xae\xeb\xe2Kd\xbb\x19\x11\xa0\x95\x86\xc4\xdc\x1aH,$\xb8\xf56\xa3\v\r\x12\xc56w\xc2\xee%\aY\xd7\xa9\x01?7||\xc2o\xf3\xf6\xf4S\x94L\x80,\xdf\xf7\'B\xfa\x8e[\x94c\xf7/\xa5ZuDyp&\xaai@V\x06v.\xec*\x94\x90e\xd6\x10\xac\xa1\f~*:\x9d\xb0\xca\x00\xaa\xc2\xaa[Yb\n\x01\xb7\xde\xcd\xf0e\r,\x02\x84\xe3W\x12\b\x04\x8cA\x06f']}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80, 0xff}, 'port1\x00', 0xf3, 0xb1815, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) socket$inet_udplite(0x2, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f000001d540)=ANY=[@ANYRESHEX, @ANYRESDEC=r2, @ANYRESOCT=r0], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x44840) 4.244727886s ago: executing program 3 (id=2914): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f000040b000/0x1000)=nil, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x6, &(0x7f0000000180)) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0xea100, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000040)={0x3, r5}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) socket$netlink(0x10, 0x3, 0x6) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f000019e000/0x1000)=nil, 0x1000}, 0x1}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 4.210484679s ago: executing program 0 (id=2915): socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) r1 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x1) close(r1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/bus/input/handlers\x00', 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) socketpair(0x5f, 0x4, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$netlink(r11, &(0x7f0000000140), &(0x7f0000000180)=0xc) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@getchain={0x54, 0x66, 0x800, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff1, 0xb}, {0xc, 0x6}, {0xf, 0xc}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x400}]}, 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x4000010) 4.115951239s ago: executing program 4 (id=2916): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f00000001c0)=""/4103, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0xfffffff8, @loopback, 0x401}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x500, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x7, 0x6, 0xffff, 0x8251c, 0xcfab, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3506, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_PHYS_PORT_ID={0x9, 0x22, "576b07a651"}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}]}, 0x3c}}, 0x24040000) getdents64(r7, &(0x7f0000001f00)=""/4093, 0xffd) openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) 3.407328586s ago: executing program 0 (id=2917): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000024002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x13, r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0xef92, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000180)=[{&(0x7f0000000080)="a1", 0x1}], 0x1, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000300)={'dummy0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x14, 0x80000000, 0xffff2a05, 0x7, 0x7f, 0x7, 0x1, 0x89, 0x8, 0x40, 0x4ac0, 0x5, 0xf402, 0x8, 0x6, 0x5, [0xff, 0x40]}}) syz_open_dev$I2C(&(0x7f0000000340), 0x0, 0x0) close(0x3) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0}, 0x40800) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) 2.573026874s ago: executing program 2 (id=2918): openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) migrate_pages(0x0, 0x7, &(0x7f0000000000)=0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000280)=@x86={0xa, 0xf, 0x5, 0x0, 0xce, 0xe, 0x8, 0x1, 0x7c, 0x1, 0x7, 0x2, 0x0, 0x101, 0x9, 0x9, 0x0, 0x3c, 0x3, '\x00', 0xb, 0x42}) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000240)={0x6}) syz_open_procfs(0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0x7, 0xb, 0x4, 0x0, 0x89, {}, {0x1, 0x8, 0x3, 0x6a, 0x9, 0x5, "a8ed9837"}, 0xfff, 0x2, {&(0x7f00000000c0)=[{0x0, 0x8002, {0x0}, 0xa}, {0x9fb, 0xd4, {0x0}}]}, 0x5}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000010800164000000004"], 0x6c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000003010104000000000000002002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x4048000) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.391861211s ago: executing program 1 (id=2919): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="01002bbd700000000000010000009c0008809800008044000980400000800600010002000000080002007f0000010500030000000000060001000a0000001400020000000000000000000000000000000000050003000200000008000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000200eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db7172400030000000000000000000000000000000000000000000000000000000000000000001400020077673000000000000000000000000000cf59fa85ad9c"], 0xe8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r7, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000"]) socket(0x80000000000000a, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.443791983s ago: executing program 4 (id=2920): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000940)}, 0xc811) getegid() bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4f26, 0xfffffffd, @loopback}, 0x1c) close(0xffffffffffffffff) close(0xffffffffffffffff) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010200000010f3b100000000010203010902240001010330050904000801030101000921ff00"], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x4004010) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023893) shutdown(r4, 0x2) recvmmsg(r5, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000003780)=""/4078, 0xfee}, 0x4}], 0x1, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa080006"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) 811.917914ms ago: executing program 3 (id=2921): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e23, 0x3, 'lc\x00', 0x8, 0xd48, 0x55}, {@remote, 0x4e27, 0x2000, 0x3, 0x12d5c, 0x12d5c}}, 0x44) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e65740000000005000500"], 0x60}}, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000000000)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "c8444943470da91b", "42f3ac0e0b8a32be8fe91c368e60693800000000d6e5394b00", "e7198360", "f7a5c1777af05eaa"}, 0x38) sendto$inet6(r4, &(0x7f0000000340), 0x0, 0x8000, 0x0, 0x0) syz_open_procfs(0x0, 0x0) inotify_init1(0x0) 396.343873ms ago: executing program 0 (id=2922): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019240)='./file0\x00', &(0x7f0000019300)={[&(0x7f0000000380)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x03\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\xdch\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc', &(0x7f0000000000)='.-+\x00']}, &(0x7f0000019100)={[&(0x7f000001d340)='\x1a\xf8\xf9e\ai\xa1>z\x06 \xbb\x05`\t<\x9c\xa3\xba\x02\xb6\x80\n\xdc\xa8\x7f^R\xcas\xb7\x13\x15\xf7\x8a\xa7\xc45\x86M\x8f\xe8\xcdj\x18\xde\xc7_\x8b}\xb9\x82o\xd3\xd8]x+h\x8d\xed\x95/C\xeaxC\xa4\xdd\xc7\xb9\xb4}\xcce;\xb1MlvB\xe5\xfd\x92\x12\xbb\xa3b\x9a$s\xc4\x91j\xb6\x12\xd7\xb4\x16TAq\xb6_\xbfU\xf1\xa1\xc4\t\'3pT\xc2\xd4p@\xd2\x8a\xa7\x9aiWlx\xd00\x035WP`\xb9W\xab\x11\xc9\xd34\xff\xc4\xb2\xca\xd5Xh\x05\xcdVH\x98\xe2\xa2\x00\'-\xbd9\xd4*q9f\xe8\xd1\aG\x1b\xce\xbd\xcd\x13g\xc7T\xf9QT\xe0#\xe2\t\xb6\xe1c\x11\x13)s\xc6&[\xf6\xb8\x85\x8b}\x84\xf5\xe3\x7fCHX\xb8\x1f\x80(s\xae\xeb\xe2Kd\xbb\x19\x11\xa0\x95\x86\xc4\xdc\x1aH,$\xb8\xf56\xa3\v\r\x12\xc56w\xc2\xee%\aY\xd7\xa9\x01?7||\xc2o\xf3\xf6\xf4S\x94L\x80,\xdf\xf7\'B\xfa\x8e[\x94c\xf7/\xa5ZuDyp&\xaai@V\x06v.\xec*\x94\x90e\xd6\x10\xac\xa1\f~*:\x9d\xb0\xca\x00\xaa\xc2\xaa[Yb\n\x01\xb7\xde\xcd\xf0e\r,\x02\x84\xe3W\x12\b\x04\x8cA\x06f']}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80, 0xff}, 'port1\x00', 0xf3, 0xb1815, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0xf5, r3}, 0x14) r4 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f000001d540)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYRESOCT=r0], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x44840) 289.579289ms ago: executing program 2 (id=2923): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f0000000280)={0xb6c, 0x5, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x83}]}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001740), r5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000001880)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x11080100}, 0xc, &(0x7f0000001840)={&(0x7f0000001780)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000000}, 0x40000) r7 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000"], 0x48) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r8, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000480)={r9, r0, 0x4, r1}, 0x10) 0s ago: executing program 1 (id=2924): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESDEC], 0x14}, 0x1, 0x8000000000000, 0x0, 0x8040}, 0x8004) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x5608, 0x3) kernel console output (not intermixed with test programs): 1342][ T9728] usb 5-1: USB disconnect, device number 123 [ 859.708291][ T9728] mcba_usb 5-1:0.0 can0: device disconnected [ 860.509658][T14308] fuse: Unknown parameter 'group_i00000000000000000000' [ 861.563150][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2242'. [ 861.619178][T14320] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.2242'. [ 864.307635][ T9711] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 864.533175][ T9711] usb 2-1: Using ep0 maxpacket: 32 [ 864.560598][ T9711] usb 2-1: config 2 has an invalid interface number: 45 but max is 0 [ 864.560638][ T9711] usb 2-1: config 2 has no interface number 0 [ 864.560683][ T9711] usb 2-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 864.560711][ T9711] usb 2-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 864.567390][ T9711] usb 2-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 864.567421][ T9711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.567443][ T9711] usb 2-1: Product: syz [ 864.567458][ T9711] usb 2-1: Manufacturer: syz [ 864.567474][ T9711] usb 2-1: SerialNumber: syz [ 864.574095][ T9711] kobil_sct 2-1:2.45: KOBIL USB smart card terminal converter detected [ 864.590266][ T9711] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 865.453163][ T9711] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 865.499667][T14382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2252'. [ 865.521701][T14382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2252'. [ 865.546382][T14382] geneve2: entered promiscuous mode [ 865.557201][T14382] geneve2: entered allmulticast mode [ 865.572861][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 865.623275][ T9711] usb 5-1: Using ep0 maxpacket: 8 [ 865.623886][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 865.642906][ T9711] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.669428][ T9711] usb 5-1: config 0 has no interfaces? [ 865.681007][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 865.698411][ T9711] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 865.720538][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 865.778429][ T9711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.844079][ T9711] usb 5-1: config 0 descriptor?? [ 866.234177][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 866.234198][ T30] audit: type=1326 audit(1757472877.315:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14373 comm="syz.4.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d8f8eba9 code=0x7ffc0000 [ 866.414964][ T30] audit: type=1326 audit(1757472877.315:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14373 comm="syz.4.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9d8f8d510 code=0x7ffc0000 [ 866.461027][ T30] audit: type=1326 audit(1757472877.315:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14373 comm="syz.4.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9d8f8d510 code=0x7ffc0000 [ 866.483442][ C1] vkms_vblank_simulate: vblank timer overrun [ 866.503100][ T30] audit: type=1326 audit(1757472877.315:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14373 comm="syz.4.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d8f8eba9 code=0x7ffc0000 [ 866.529145][ T30] audit: type=1326 audit(1757472877.315:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14373 comm="syz.4.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7ff9d8f8eba9 code=0x7ffc0000 [ 866.563105][ T30] audit: type=1326 audit(1757472877.315:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14373 comm="syz.4.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d8f8eba9 code=0x7ffc0000 [ 866.585471][ C1] vkms_vblank_simulate: vblank timer overrun [ 866.596246][ T30] audit: type=1326 audit(1757472877.315:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14373 comm="syz.4.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff9d8f8eba9 code=0x7ffc0000 [ 866.618405][ C1] vkms_vblank_simulate: vblank timer overrun [ 866.759316][ T30] audit: type=1400 audit(1757472877.315:144): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14373 comm="syz.4.2253" [ 866.841311][ T30] audit: type=1326 audit(1757472877.315:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14373 comm="syz.4.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d8f8eba9 code=0x7ffc0000 [ 866.916536][ T30] audit: type=1326 audit(1757472877.325:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14373 comm="syz.4.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9d8f8eba9 code=0x7ffc0000 [ 866.958113][T14390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2255'. [ 867.044529][T14390] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.2255'. [ 867.145166][ T10] usb 2-1: USB disconnect, device number 110 [ 867.215868][ T10] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 867.258173][ T10] kobil_sct 2-1:2.45: device disconnected [ 870.111260][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.117707][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.126999][ T9711] usb 5-1: USB disconnect, device number 124 [ 870.546539][T14432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2266'. [ 870.561137][T14432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2266'. [ 870.600192][T14432] geneve3: entered promiscuous mode [ 870.605771][T14432] geneve3: entered allmulticast mode [ 870.620156][ T36] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 870.630368][ T36] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 870.644012][ T36] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 870.683956][ T36] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 871.124372][T14440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2268'. [ 871.137677][T14440] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.2268'. [ 872.883343][ T9711] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 873.075951][ T9711] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.097098][ T9711] usb 1-1: config 0 has no interfaces? [ 873.115625][ T9711] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 873.130538][ T9711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.153119][ T9711] usb 1-1: Product: syz [ 873.157402][ T9711] usb 1-1: Manufacturer: syz [ 873.172265][ T9711] usb 1-1: SerialNumber: syz [ 873.181066][ T9711] usb 1-1: config 0 descriptor?? [ 873.677607][ T9711] usb 1-1: USB disconnect, device number 100 [ 875.244671][T14490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2281'. [ 875.995429][T14490] netlink: 'syz.0.2281': attribute type 72 has an invalid length. [ 876.023726][T14490] netlink: 1016 bytes leftover after parsing attributes in process `syz.0.2281'. [ 877.632308][T14518] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2288'. [ 878.478731][T14532] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 878.843105][ T9711] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 879.043121][ T9711] usb 3-1: Using ep0 maxpacket: 32 [ 879.277502][ T9711] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 879.294076][ T9711] usb 3-1: config 0 has no interface number 0 [ 879.300461][ T9711] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 880.274781][ T9711] usb 3-1: config 0 interface 85 has no altsetting 0 [ 880.308132][ T9711] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 881.090428][ T9711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.147508][ T9711] usb 3-1: Product: syz [ 881.174236][ T9711] usb 3-1: Manufacturer: syz [ 881.182346][ T9711] usb 3-1: SerialNumber: syz [ 881.202567][ T9711] usb 3-1: config 0 descriptor?? [ 881.371517][ T9711] appletouch 3-1:0.85: Failed to read mode from device. [ 881.389119][ T9711] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 881.441850][T10402] usb 5-1: new low-speed USB device number 125 using dummy_hcd [ 881.470843][ T9711] usb 3-1: USB disconnect, device number 99 [ 881.513094][ T10] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 881.615269][T10402] usb 5-1: unable to get BOS descriptor or descriptor too short [ 881.630811][T10402] usb 5-1: config 9 has an invalid interface number: 198 but max is 0 [ 881.643023][T10402] usb 5-1: config 9 has no interface number 0 [ 881.712313][T10402] usb 5-1: config 9 interface 198 has no altsetting 0 [ 881.733134][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 881.747079][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 881.760682][T10402] usb 5-1: string descriptor 0 read error: -22 [ 881.773520][T10402] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 881.819900][ T10] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 881.836887][T10402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.848653][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.861681][ T10] usb 1-1: Product: syz [ 881.869166][T10402] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 881.884552][ T10] usb 1-1: Manufacturer: syz [ 881.889285][T10402] dvb-usb: bulk message failed: -22 (3/0) [ 881.903077][ T10] usb 1-1: SerialNumber: syz [ 881.927251][ T10] usb 1-1: config 0 descriptor?? [ 881.949496][T10402] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 881.962061][T10402] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 882.052556][T10402] usb 5-1: media controller created [ 882.074323][T14553] 9pnet_fd: Insufficient options for proto=fd [ 882.979794][ T10] gs_usb 1-1:0.0: Configuring for 2 interfaces [ 883.018550][T10402] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 883.157330][ T10] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 1 (-EPIPE) [ 883.239683][T10402] DVB: Unable to find symbol mt352_attach() [ 883.251307][T10402] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 883.262896][ T10] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -32 [ 883.299443][T10402] dvb-usb: bulk message failed: -22 (3/0) [ 883.386083][T10402] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 883.387873][ T9711] usb 1-1: USB disconnect, device number 101 [ 884.250570][T10402] usb 5-1: USB disconnect, device number 125 [ 884.326748][T10402] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 885.515506][ T10] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 886.140886][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 886.705949][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 886.717033][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 886.728178][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 886.743142][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.842517][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 887.825121][ T10] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 887.850283][T14530] udevd[14530]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 888.093311][ T10] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 888.143145][T14615] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2312'. [ 888.263631][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 888.284217][ T10] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 888.297128][T14618] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2313'. [ 888.311292][ T10] usb 4-1: config 0 has no interface number 0 [ 888.415860][ T10] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 888.429886][ T10] usb 4-1: config 0 interface 85 has no altsetting 0 [ 888.445888][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 888.459196][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.470785][ T10] usb 4-1: Product: syz [ 888.478494][ T10] usb 4-1: Manufacturer: syz [ 888.487026][ T10] usb 4-1: SerialNumber: syz [ 888.509443][ T10] usb 4-1: config 0 descriptor?? [ 888.875081][ T9728] usb 2-1: USB disconnect, device number 111 [ 888.942035][ T10] appletouch 4-1:0.85: Geyser mode initialized. [ 889.138740][ T10] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input57 [ 889.873586][ T10] usb 4-1: USB disconnect, device number 102 [ 889.873716][ C1] appletouch 4-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 890.051019][T14632] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 890.394811][ T10] appletouch 4-1:0.85: input: appletouch disconnected [ 890.673399][ T9728] usb 3-1: new low-speed USB device number 100 using dummy_hcd [ 890.885805][ T9728] usb 3-1: unable to get BOS descriptor or descriptor too short [ 891.057471][ T9728] usb 3-1: config 9 has an invalid interface number: 198 but max is 0 [ 891.081313][ T9728] usb 3-1: config 9 has no interface number 0 [ 891.092652][ T9728] usb 3-1: config 9 interface 198 has no altsetting 0 [ 891.106517][ T9728] usb 3-1: string descriptor 0 read error: -22 [ 891.122369][ T9728] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 891.155002][ T9728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.199090][T14650] vlan2: entered allmulticast mode [ 891.232379][ T9728] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 891.332812][ T9728] dvb-usb: bulk message failed: -22 (3/0) [ 892.026540][ T9728] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 892.037639][T14633] 9pnet_fd: Insufficient options for proto=fd [ 892.044930][ T9728] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 892.182837][ T9728] usb 3-1: media controller created [ 892.206286][ T9728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 892.474049][ T9728] DVB: Unable to find symbol mt352_attach() [ 892.483057][ T9728] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 892.498547][ T9728] dvb-usb: bulk message failed: -22 (3/0) [ 892.533325][ T9728] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 892.559394][ T9728] usb 3-1: USB disconnect, device number 100 [ 892.646323][ T9728] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 892.763103][ T10] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 892.765071][T14672] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2327'. [ 893.273444][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 893.314425][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 893.327207][T10402] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 893.466129][ T10] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 893.480557][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.516190][ T10] usb 5-1: Product: syz [ 893.529295][ T10] usb 5-1: Manufacturer: syz [ 893.553280][T10402] usb 1-1: Using ep0 maxpacket: 8 [ 893.608949][T10402] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 893.769077][ T10] usb 5-1: SerialNumber: syz [ 893.799191][T10402] usb 1-1: config 0 has no interfaces? [ 893.807913][ T10] usb 5-1: config 0 descriptor?? [ 893.829907][T10402] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 893.863029][T10402] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.874555][T10402] usb 1-1: config 0 descriptor?? [ 894.934349][ T9728] usb 5-1: USB disconnect, device number 126 [ 895.049956][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 895.049976][ T30] audit: type=1326 audit(1757472906.095:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a658eba9 code=0x7ffc0000 [ 895.106874][ T30] audit: type=1326 audit(1757472906.095:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a658eba9 code=0x7ffc0000 [ 895.130110][ T30] audit: type=1326 audit(1757472906.095:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0a658d510 code=0x7ffc0000 [ 895.170549][ T30] audit: type=1326 audit(1757472906.095:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0a658d510 code=0x7ffc0000 [ 895.195170][ T30] audit: type=1326 audit(1757472906.095:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a658eba9 code=0x7ffc0000 [ 895.266189][ T30] audit: type=1326 audit(1757472906.095:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a658eba9 code=0x7ffc0000 [ 895.367499][ T30] audit: type=1326 audit(1757472906.095:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fc0a658eba9 code=0x7ffc0000 [ 895.608873][ T30] audit: type=1326 audit(1757472906.095:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a658eba9 code=0x7ffc0000 [ 895.631573][ T30] audit: type=1326 audit(1757472906.105:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a658eba9 code=0x7ffc0000 [ 895.816432][ T30] audit: type=1326 audit(1757472906.105:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc0a658eba9 code=0x7ffc0000 [ 897.241298][ T9711] usb 1-1: USB disconnect, device number 102 [ 899.424797][T14739] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2342'. [ 900.856808][T14737] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.2341'. [ 900.867169][T14737] openvswitch: netlink: Key type 112 is out of range max 32 [ 901.763280][ T9711] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 901.923278][ T9711] usb 4-1: Using ep0 maxpacket: 8 [ 901.945733][ T9711] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.956168][ T9711] usb 4-1: config 0 has no interfaces? [ 901.972560][ T9711] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 902.014113][ T9711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.026445][ T9711] usb 4-1: config 0 descriptor?? [ 902.385300][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 902.386890][ T30] audit: type=1326 audit(1757472913.475:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.3.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 902.536287][ T30] audit: type=1326 audit(1757472913.475:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.3.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab2e38d510 code=0x7ffc0000 [ 902.558627][ C0] vkms_vblank_simulate: vblank timer overrun [ 902.661750][ T30] audit: type=1326 audit(1757472913.475:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.3.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab2e38d510 code=0x7ffc0000 [ 902.753024][ T30] audit: type=1326 audit(1757472913.485:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.3.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 902.775483][ C0] vkms_vblank_simulate: vblank timer overrun [ 902.909000][ T30] audit: type=1326 audit(1757472913.485:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.3.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 903.098850][ T30] audit: type=1326 audit(1757472913.485:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.3.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 903.403414][ T30] audit: type=1326 audit(1757472913.485:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.3.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 903.425743][ C0] vkms_vblank_simulate: vblank timer overrun [ 903.434697][ T30] audit: type=1400 audit(1757472913.485:182): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14763 comm="syz.3.2350" [ 903.454184][ T30] audit: type=1326 audit(1757472913.485:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.3.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 903.476528][ C0] vkms_vblank_simulate: vblank timer overrun [ 903.482997][ T30] audit: type=1326 audit(1757472913.485:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.3.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 906.160328][ T9711] usb 4-1: USB disconnect, device number 103 [ 906.428934][T14807] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2360'. [ 906.803128][ T9711] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 906.895791][T14814] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.2361'. [ 906.906740][T14814] openvswitch: netlink: Key type 112 is out of range max 32 [ 907.017931][ T9711] usb 4-1: Using ep0 maxpacket: 8 [ 907.036657][ T9711] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 907.058525][ T9711] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.077359][ T9711] usb 4-1: config 0 has no interface number 0 [ 907.083863][ T9711] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 907.093411][ T9711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.151324][ T9711] usb 4-1: config 0 descriptor?? [ 907.174689][ T9711] ldusb 4-1:0.55: Interrupt in endpoint not found [ 909.324633][T14838] fuse: Bad value for 'fd' [ 909.613314][T10402] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 909.628342][ T10] usb 4-1: USB disconnect, device number 104 [ 909.830181][T10402] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 909.846677][T10402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.881096][T10402] usb 3-1: config 0 descriptor?? [ 910.121622][T10402] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 910.329091][T10402] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 910.336045][T10402] [drm] Initialized udl on minor 2 [ 910.745271][T10402] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffe0 [ 910.773276][T10402] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 910.783216][ T10] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 910.866064][ T10] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 910.874415][T10402] usb 3-1: USB disconnect, device number 101 [ 910.891472][ T10] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 913.763971][T14883] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 915.458117][T14899] netlink: 146780 bytes leftover after parsing attributes in process `syz.3.2379'. [ 915.554606][T14902] fuse: Bad value for 'fd' [ 915.576816][T14899] openvswitch: netlink: Key type 112 is out of range max 32 [ 917.294243][T14919] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2385'. [ 920.083050][ T10] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 920.404625][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 920.439401][ T10] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 921.119710][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.128289][ T10] usb 4-1: Product: syz [ 921.147556][ T10] usb 4-1: Manufacturer: syz [ 921.152188][ T10] usb 4-1: SerialNumber: syz [ 921.315329][ T10] usb 4-1: config 0 descriptor?? [ 921.635763][ T9711] usb 4-1: USB disconnect, device number 105 [ 923.047668][T14970] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2397'. [ 923.578223][T14981] fuse: Bad value for 'fd' [ 923.967179][T14987] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 924.187761][T14984] netlink: 146780 bytes leftover after parsing attributes in process `syz.3.2401'. [ 924.205301][T14984] openvswitch: netlink: Key type 112 is out of range max 32 [ 930.816395][T15048] netlink: 'syz.1.2416': attribute type 1 has an invalid length. [ 930.843045][T15048] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2416'. [ 931.536807][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.543686][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.068044][T15062] sg_write: data in/out 91/70 bytes for SCSI command 0x0-- guessing data in; [ 932.068044][T15062] program syz.3.2419 not setting count and/or reply_len properly [ 932.373130][ T9711] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 932.414628][T15072] netlink: 146780 bytes leftover after parsing attributes in process `syz.4.2418'. [ 932.424127][T15072] openvswitch: netlink: Key type 112 is out of range max 32 [ 932.548414][ T9711] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 932.557747][ T9711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.566895][ T9711] usb 1-1: Product: syz [ 932.571320][ T9711] usb 1-1: Manufacturer: syz [ 932.579203][ T9711] usb 1-1: SerialNumber: syz [ 932.673815][ T9711] usb 1-1: config 0 descriptor?? [ 932.723111][ T9728] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 932.913016][ T9728] usb 2-1: Using ep0 maxpacket: 16 [ 932.934820][ T9728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 932.982792][ T9728] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 932.989544][T10402] usb 1-1: USB disconnect, device number 103 [ 933.107751][ T9728] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 933.142998][ T9728] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 933.165839][ T9728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.183055][ T9728] usb 2-1: Product: syz [ 933.192440][ T9728] usb 2-1: Manufacturer: syz [ 933.199963][ T9728] usb 2-1: SerialNumber: syz [ 933.238063][ T9728] usb 2-1: config 0 descriptor?? [ 933.254171][T15074] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 933.292643][ T9728] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 933.300735][ T9728] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 933.313767][ T9728] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 933.325812][ T9728] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 933.342213][ T9728] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 933.353025][ T9711] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 933.513040][ T9711] usb 4-1: Using ep0 maxpacket: 8 [ 933.520419][ T9711] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.533949][ T9711] usb 4-1: config 0 has no interfaces? [ 933.669712][ T9711] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 933.700619][ T9711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.790521][ T9711] usb 4-1: config 0 descriptor?? [ 934.433547][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 934.433563][ T30] audit: type=1326 audit(1757472945.515:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.3.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 934.643128][ T30] audit: type=1326 audit(1757472945.515:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.3.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab2e38d510 code=0x7ffc0000 [ 934.808734][ T30] audit: type=1326 audit(1757472945.515:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.3.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab2e38d510 code=0x7ffc0000 [ 934.903597][ T30] audit: type=1326 audit(1757472945.515:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.3.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 935.008145][ T30] audit: type=1326 audit(1757472945.525:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.3.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 935.589809][ T30] audit: type=1326 audit(1757472945.525:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.3.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 935.653100][ T30] audit: type=1326 audit(1757472945.525:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.3.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 935.723057][ T30] audit: type=1400 audit(1757472945.525:198): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=15078 comm="syz.3.2424" [ 935.753081][ T30] audit: type=1326 audit(1757472945.525:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.3.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 935.780404][ T30] audit: type=1326 audit(1757472945.525:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.3.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 936.124472][T10402] usb 4-1: USB disconnect, device number 106 [ 936.405172][ T10] usb 2-1: USB disconnect, device number 112 [ 936.426355][ T10] mcba_usb 2-1:0.0 can0: device disconnected [ 936.480976][T15120] netlink: 'syz.2.2430': attribute type 1 has an invalid length. [ 937.046500][T15120] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2430'. [ 937.288465][T15126] syzkaller0: entered promiscuous mode [ 937.339964][T15126] syzkaller0: entered allmulticast mode [ 937.991043][ T9728] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 938.033808][T15148] debugfs: 'ttyS3' already exists in 'caif_serial' [ 938.532515][T15159] netlink: 146780 bytes leftover after parsing attributes in process `syz.2.2437'. [ 938.542222][T15159] openvswitch: netlink: Key type 112 is out of range max 32 [ 938.556514][ T9728] usb 2-1: Using ep0 maxpacket: 8 [ 938.570728][ T9728] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 938.581685][ T9728] usb 2-1: config 135 has 0 interfaces, different from the descriptor's value: 1 [ 938.593884][ T9728] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 938.603083][ T9712] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 938.616642][ T9728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.625516][ T9728] usb 2-1: Product: syz [ 938.637592][ T9728] usb 2-1: Manufacturer: syz [ 938.646439][ T9728] usb 2-1: SerialNumber: syz [ 938.773197][ T9712] usb 1-1: Using ep0 maxpacket: 32 [ 938.781331][ T9712] usb 1-1: unable to get BOS descriptor or descriptor too short [ 938.799369][ T9712] usb 1-1: config 1 has an invalid interface number: 48 but max is 0 [ 938.818130][ T9712] usb 1-1: config 1 has no interface number 0 [ 938.838972][ T9712] usb 1-1: config 1 interface 48 altsetting 9 bulk endpoint 0xF has invalid maxpacket 64 [ 938.896831][ T9728] usb 2-1: USB disconnect, device number 113 [ 938.996268][ T9712] usb 1-1: config 1 interface 48 has no altsetting 0 [ 939.026763][ T9712] usb 1-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=f3.9e [ 939.060052][ T9712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.078056][ T9712] usb 1-1: Product: syz [ 939.083189][ T9712] usb 1-1: Manufacturer: syz [ 939.100595][ T9712] usb 1-1: SerialNumber: syz [ 939.122077][T15148] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 940.063924][ T9728] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 940.313350][ T9728] usb 5-1: Using ep0 maxpacket: 8 [ 940.621960][ T9728] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.641396][ T9712] ti_usb_3410_5052 1-1:1.48: TI USB 3410 1 port adapter converter detected [ 940.655371][ T9728] usb 5-1: config 0 has no interfaces? [ 940.660908][ T9728] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 940.678111][ T9712] usb 1-1: USB disconnect, device number 104 [ 940.702774][ T9728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.733801][ T9728] usb 5-1: config 0 descriptor?? [ 941.812300][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 941.812318][ T30] audit: type=1326 audit(1757472952.915:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15166 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d8f8eba9 code=0x7ffc0000 [ 942.823768][T10402] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 942.833104][ T30] audit: type=1326 audit(1757472952.915:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15166 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9d8f8d510 code=0x7ffc0000 [ 942.858170][ T30] audit: type=1326 audit(1757472952.915:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15166 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9d8f8d510 code=0x7ffc0000 [ 943.036001][ T30] audit: type=1326 audit(1757472952.915:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15166 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d8f8eba9 code=0x7ffc0000 [ 943.084560][T10402] usb 1-1: Using ep0 maxpacket: 16 [ 943.141329][ T30] audit: type=1326 audit(1757472952.915:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15166 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7ff9d8f8eba9 code=0x7ffc0000 [ 943.177078][T10402] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 943.217393][T10402] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 943.267684][ T30] audit: type=1326 audit(1757472952.915:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15166 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d8f8eba9 code=0x7ffc0000 [ 943.300217][T10402] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 943.383643][T10402] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 943.421907][ T30] audit: type=1326 audit(1757472952.915:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15166 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff9d8f8eba9 code=0x7ffc0000 [ 943.477785][T10402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.508245][ T30] audit: type=1400 audit(1757472952.915:216): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=15166 comm="syz.4.2441" [ 943.537823][T10402] usb 1-1: Product: syz [ 943.550208][T10402] usb 1-1: Manufacturer: syz [ 943.613076][ T30] audit: type=1326 audit(1757472952.915:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15166 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d8f8eba9 code=0x7ffc0000 [ 943.613083][T10402] usb 1-1: SerialNumber: syz [ 943.613140][ T30] audit: type=1326 audit(1757472952.915:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15166 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9d8f8eba9 code=0x7ffc0000 [ 943.935614][T10402] usb 1-1: config 0 descriptor?? [ 944.255906][ T10] usb 5-1: USB disconnect, device number 127 [ 944.604655][T15204] syzkaller0: entered promiscuous mode [ 944.683660][T15204] syzkaller0: entered allmulticast mode [ 944.898628][T10402] usb 1-1: can't set config #0, error -71 [ 944.934739][T10402] usb 1-1: USB disconnect, device number 105 [ 945.013096][ T9712] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 945.443144][ T9712] usb 5-1: Using ep0 maxpacket: 8 [ 945.596270][ T9712] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 945.610481][ T9712] usb 5-1: config 135 has 0 interfaces, different from the descriptor's value: 1 [ 945.648594][ T9712] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 945.673853][ T9712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.693458][ T9712] usb 5-1: Product: syz [ 945.706471][ T9712] usb 5-1: Manufacturer: syz [ 945.729846][ T9712] usb 5-1: SerialNumber: syz [ 945.990310][ T9712] usb 5-1: USB disconnect, device number 2 [ 947.518461][T15232] sg_write: data in/out 91/70 bytes for SCSI command 0x0-- guessing data in; [ 947.518461][T15232] program syz.4.2460 not setting count and/or reply_len properly [ 947.973226][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 948.123045][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 948.211065][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 948.221877][ T10] usb 5-1: config 0 has no interfaces? [ 948.229777][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 948.988547][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.062501][ T10] usb 5-1: config 0 descriptor?? [ 949.084236][T15246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2463'. [ 949.491842][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 949.491861][ T30] audit: type=1326 audit(1757472960.565:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15235 comm="syz.4.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d8f8eba9 code=0x7ffc0000 [ 949.642388][ T30] audit: type=1326 audit(1757472960.565:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15235 comm="syz.4.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9d8f8d510 code=0x7ffc0000 [ 949.699831][ T30] audit: type=1326 audit(1757472960.565:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15235 comm="syz.4.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9d8f8d510 code=0x7ffc0000 [ 949.724958][ C0] vkms_vblank_simulate: vblank timer overrun [ 949.903375][ T10] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 950.119406][ T30] audit: type=1326 audit(1757472960.565:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15235 comm="syz.4.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d8f8eba9 code=0x7ffc0000 [ 950.725259][ T30] audit: type=1326 audit(1757472960.565:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15235 comm="syz.4.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7ff9d8f8eba9 code=0x7ffc0000 [ 950.750158][ T10] usb 2-1: device descriptor read/64, error -71 [ 950.752444][ T30] audit: type=1326 audit(1757472960.565:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15235 comm="syz.4.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d8f8eba9 code=0x7ffc0000 [ 950.790587][ T30] audit: type=1326 audit(1757472960.565:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15235 comm="syz.4.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff9d8f8eba9 code=0x7ffc0000 [ 950.992678][ T30] audit: type=1400 audit(1757472960.565:234): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=15235 comm="syz.4.2461" [ 951.113650][ T10] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 951.483222][ T30] audit: type=1326 audit(1757472960.565:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15235 comm="syz.4.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d8f8eba9 code=0x7ffc0000 [ 951.626213][ T30] audit: type=1326 audit(1757472960.565:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15235 comm="syz.4.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9d8f8eba9 code=0x7ffc0000 [ 951.649020][ T10] usb 2-1: device descriptor read/64, error -71 [ 951.783700][ T10] usb usb2-port1: attempt power cycle [ 951.864397][T15275] vlan3: entered allmulticast mode [ 952.153050][ T10] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 952.248742][ T10] usb 2-1: device descriptor read/8, error -71 [ 952.513540][ T10] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 952.618409][ T9712] usb 5-1: USB disconnect, device number 3 [ 952.952131][ T10] usb 2-1: device descriptor read/8, error -71 [ 953.146919][ T10] usb usb2-port1: unable to enumerate USB device [ 953.794648][ T9712] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 953.987962][ T9712] usb 5-1: Using ep0 maxpacket: 32 [ 954.044525][ T9712] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 954.068773][ T9712] usb 5-1: config 0 has no interface number 0 [ 954.088324][ T9712] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 954.120477][ T9712] usb 5-1: config 0 interface 85 has no altsetting 0 [ 954.324548][ T9712] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 954.344746][ T9712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.363161][ T9712] usb 5-1: Product: syz [ 954.367385][ T9712] usb 5-1: Manufacturer: syz [ 954.372007][ T9712] usb 5-1: SerialNumber: syz [ 954.954003][ T9712] usb 5-1: config 0 descriptor?? [ 955.266782][ T9712] appletouch 5-1:0.85: Failed to read mode from device. [ 955.298745][ T9712] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 955.499192][ T9712] usb 5-1: USB disconnect, device number 4 [ 957.213703][ T10] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 957.366530][ T10] usb 2-1: device descriptor read/64, error -71 [ 957.440396][ T9712] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 957.603516][ T10] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 957.643196][ T9712] usb 4-1: Using ep0 maxpacket: 8 [ 957.649610][ T9712] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 957.661361][ T9712] usb 4-1: config 0 has no interfaces? [ 957.663579][T10402] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 957.668327][ T9712] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 957.712826][ T9712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.730909][ T9712] usb 4-1: config 0 descriptor?? [ 957.733289][ T10] usb 2-1: device descriptor read/64, error -71 [ 957.846087][T10402] usb 1-1: Using ep0 maxpacket: 16 [ 957.855377][ T10] usb usb2-port1: attempt power cycle [ 958.223105][ T10] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 958.429122][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 958.429142][ T30] audit: type=1326 audit(1757472969.515:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15332 comm="syz.3.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 958.457699][ C1] vkms_vblank_simulate: vblank timer overrun [ 958.523344][ T30] audit: type=1326 audit(1757472969.515:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15332 comm="syz.3.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab2e38d510 code=0x7ffc0000 [ 958.755394][ T30] audit: type=1326 audit(1757472969.515:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15332 comm="syz.3.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab2e38d510 code=0x7ffc0000 [ 958.843888][ T10] usb 2-1: device descriptor read/8, error -71 [ 958.871824][ T30] audit: type=1326 audit(1757472969.515:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15332 comm="syz.3.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 959.019792][ T30] audit: type=1326 audit(1757472969.515:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15332 comm="syz.3.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 959.042191][ C1] vkms_vblank_simulate: vblank timer overrun [ 959.093119][ T10] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 959.113354][ T30] audit: type=1326 audit(1757472969.515:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15332 comm="syz.3.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 959.204101][ T10] usb 2-1: device descriptor read/8, error -71 [ 959.254136][ T30] audit: type=1326 audit(1757472969.515:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15332 comm="syz.3.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 959.280653][ T30] audit: type=1400 audit(1757472969.515:252): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=15332 comm="syz.3.2483" [ 959.305495][ T30] audit: type=1326 audit(1757472969.515:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15332 comm="syz.3.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 959.333129][ T30] audit: type=1326 audit(1757472969.515:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15332 comm="syz.3.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 959.361509][ T10] usb usb2-port1: unable to enumerate USB device [ 960.014815][T15354] ======================================================= [ 960.014815][T15354] WARNING: The mand mount option has been deprecated and [ 960.014815][T15354] and is ignored by this kernel. Remove the mand [ 960.014815][T15354] option from the mount to silence this warning. [ 960.014815][T15354] ======================================================= [ 960.657225][T15359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2488'. [ 961.460353][ T10] usb 4-1: USB disconnect, device number 107 [ 961.548286][T10402] usb 1-1: unable to get BOS descriptor or descriptor too short [ 961.599949][T10402] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 961.626541][T10402] usb 1-1: can't read configurations, error -71 [ 962.174318][ T10] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 962.953131][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 962.999719][ T10] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 963.010075][ T10] usb 4-1: config 0 has no interface number 0 [ 963.016499][ T10] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 963.051173][ T10] usb 4-1: config 0 interface 85 has no altsetting 0 [ 963.065228][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 963.074821][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.082809][ T10] usb 4-1: Product: syz [ 963.093977][ T10] usb 4-1: Manufacturer: syz [ 963.098824][ T10] usb 4-1: SerialNumber: syz [ 963.115023][ T10] usb 4-1: config 0 descriptor?? [ 963.347357][ T10] appletouch 4-1:0.85: Failed to read mode from device. [ 963.371896][ T10] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 963.438416][ T10] usb 4-1: USB disconnect, device number 108 [ 963.536940][T15392] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2496'. [ 964.923039][ T9728] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 965.113273][ T9728] usb 4-1: Using ep0 maxpacket: 8 [ 965.122624][ T9728] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 965.149236][ T9728] usb 4-1: config 0 has no interfaces? [ 965.169492][ T9728] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 965.182962][ T9728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.223710][ T9728] usb 4-1: config 0 descriptor?? [ 965.605095][ T9728] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 965.683063][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 965.683081][ T30] audit: type=1326 audit(1757472976.685:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15399 comm="syz.3.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 965.737858][ T30] audit: type=1326 audit(1757472976.685:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15399 comm="syz.3.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab2e38d510 code=0x7ffc0000 [ 965.784955][ T30] audit: type=1326 audit(1757472976.685:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15399 comm="syz.3.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab2e38d510 code=0x7ffc0000 [ 965.827113][ T30] audit: type=1326 audit(1757472976.685:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15399 comm="syz.3.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 965.863390][T15411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2503'. [ 965.880574][ T30] audit: type=1326 audit(1757472976.685:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15399 comm="syz.3.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 965.926199][ T30] audit: type=1326 audit(1757472976.685:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15399 comm="syz.3.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 965.966196][ T9728] usb 3-1: Using ep0 maxpacket: 16 [ 966.012338][ T30] audit: type=1326 audit(1757472976.685:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15399 comm="syz.3.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 966.101988][ T30] audit: type=1400 audit(1757472976.695:270): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=15399 comm="syz.3.2500" [ 966.227925][ T30] audit: type=1326 audit(1757472976.695:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15399 comm="syz.3.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 966.331283][ T30] audit: type=1326 audit(1757472976.695:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15399 comm="syz.3.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 969.145183][T15445] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2513'. [ 969.593535][ T9712] usb 4-1: USB disconnect, device number 109 [ 969.850674][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2514'. [ 971.063090][ T9728] usb 3-1: unable to get BOS descriptor or descriptor too short [ 971.095450][ T9728] usb 3-1: unable to read config index 0 descriptor/start: -32 [ 971.147479][ T9728] usb 3-1: chopping to 0 config(s) [ 971.152634][ T9728] usb 3-1: can't read configurations, error -32 [ 971.288164][T15455] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2516'. [ 971.347152][T15455] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2516'. [ 973.221206][T15481] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2525'. [ 974.413041][T10402] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 974.570909][T10402] usb 5-1: unable to get BOS descriptor or descriptor too short [ 974.589770][T10402] usb 5-1: config 9 has an invalid interface number: 198 but max is 0 [ 974.622300][T10402] usb 5-1: config 9 has no interface number 0 [ 974.795139][T10402] usb 5-1: config 9 interface 198 has no altsetting 0 [ 975.282315][T10402] usb 5-1: string descriptor 0 read error: -22 [ 975.293124][T10402] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 975.302972][T10402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.341463][T10402] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 975.552614][T10402] dvb-usb: bulk message failed: -22 (3/0) [ 975.553123][ T9728] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 975.566455][T15489] 9pnet_fd: Insufficient options for proto=fd [ 975.717180][T10402] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 976.473117][ T9728] usb 1-1: Using ep0 maxpacket: 16 [ 976.529815][T10402] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 976.745648][T15512] fuse: Bad value for 'fd' [ 976.975412][T10402] usb 5-1: media controller created [ 977.043588][T10402] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 977.826390][T10402] DVB: Unable to find symbol mt352_attach() [ 977.839112][T10402] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 977.884019][T10402] dvb-usb: bulk message failed: -22 (3/0) [ 977.948176][T10402] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 977.993948][T10402] usb 5-1: USB disconnect, device number 5 [ 978.283887][T10402] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 978.611403][T15535] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2538'. [ 978.642269][ T9728] usb 1-1: unable to get BOS descriptor or descriptor too short [ 978.741889][ T9728] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 978.768625][ T9728] usb 1-1: can't read configurations, error -71 [ 980.083256][ T9728] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 980.866260][ T9728] usb 1-1: Using ep0 maxpacket: 8 [ 980.878230][ T9728] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 980.910454][ T9728] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.095744][ T9728] usb 1-1: config 0 has no interface number 0 [ 981.146019][ T9728] usb 1-1: config 0 interface 31 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 981.192071][ T9728] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 981.210045][ T9728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.233018][ T9728] usb 1-1: Product: syz [ 981.237217][ T9728] usb 1-1: Manufacturer: syz [ 981.270454][ T9728] usb 1-1: SerialNumber: syz [ 981.281427][ T9728] usb 1-1: config 0 descriptor?? [ 981.333003][ T10] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 981.663181][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 981.670719][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.686378][ T9728] redrat3 1-1:0.31: Couldn't find all endpoints [ 981.699731][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 981.727334][ T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 981.767419][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.770092][ T9728] usb 1-1: USB disconnect, device number 109 [ 981.960493][ T10] usb 4-1: config 0 descriptor?? [ 981.979363][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 983.973265][ T10] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 984.060289][T10402] usb 4-1: USB disconnect, device number 110 [ 984.123301][ T10] usb 1-1: device descriptor read/64, error -71 [ 984.395074][ T10] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 984.543245][ T9728] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 985.282528][ T10] usb 1-1: device descriptor read/64, error -71 [ 985.413375][ T10] usb usb1-port1: attempt power cycle [ 985.510878][ T9728] usb 4-1: Using ep0 maxpacket: 16 [ 985.717652][T15589] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2553'. [ 985.774036][ T10] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 985.807303][ T10] usb 1-1: device descriptor read/8, error -71 [ 986.063519][ T10] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 986.085271][ T10] usb 1-1: device descriptor read/8, error -71 [ 986.195233][ T10] usb usb1-port1: unable to enumerate USB device [ 987.223471][ T9711] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 987.393122][ T9711] usb 1-1: Using ep0 maxpacket: 8 [ 987.399980][ T9711] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 987.408749][ T9711] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 987.443437][ T9711] usb 1-1: config 0 has no interface number 0 [ 987.463192][ T9711] usb 1-1: config 0 interface 31 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 987.523052][ T9711] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 987.552441][ T9711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.622143][ T9711] usb 1-1: Product: syz [ 987.651758][ T9711] usb 1-1: Manufacturer: syz [ 987.656584][ T9711] usb 1-1: SerialNumber: syz [ 987.703406][ T9711] usb 1-1: config 0 descriptor?? [ 987.947254][ T9711] redrat3 1-1:0.31: Couldn't find all endpoints [ 987.987759][ T9711] usb 1-1: USB disconnect, device number 114 [ 988.777200][ T9728] usb 4-1: unable to get BOS descriptor or descriptor too short [ 988.855301][ T9728] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 989.818303][ T9728] usb 4-1: can't read configurations, error -71 [ 990.223828][ T9728] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 990.353280][ T9727] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 990.383184][ T9728] usb 4-1: Using ep0 maxpacket: 8 [ 990.394879][ T9728] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 990.423120][ T9728] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 990.447940][ T9728] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 990.493488][ T9728] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 990.513109][ T9727] usb 2-1: Using ep0 maxpacket: 32 [ 990.553747][ T9728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.564007][ T9727] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 990.583216][ T9727] usb 2-1: config 0 has no interface number 0 [ 990.623831][ T9727] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 990.645537][ T9728] usbtmc 4-1:16.0: bulk endpoints not found [ 990.673157][ T9727] usb 2-1: config 0 interface 85 has no altsetting 0 [ 990.692195][ T9727] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 990.701891][ T9727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.771653][ T9727] usb 2-1: Product: syz [ 990.850909][T15620] netlink: 'syz.3.2563': attribute type 10 has an invalid length. [ 990.883198][ T9727] usb 2-1: Manufacturer: syz [ 990.898272][ T9727] usb 2-1: SerialNumber: syz [ 990.913559][ T9727] usb 2-1: config 0 descriptor?? [ 991.277433][ T9727] appletouch 2-1:0.85: Failed to read mode from device. [ 991.432442][ T9727] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 991.542518][ T9727] usb 2-1: USB disconnect, device number 122 [ 991.949371][ T9728] usb 4-1: USB disconnect, device number 112 [ 992.153206][ T9727] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 992.965192][ T9727] usb 1-1: Using ep0 maxpacket: 32 [ 992.976583][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.982851][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.019731][ T9727] usb 1-1: config 0 interface 0 has no altsetting 0 [ 993.036298][ T9727] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 993.046022][ T9727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.054445][ T9727] usb 1-1: Product: syz [ 993.069345][ T9727] usb 1-1: Manufacturer: syz [ 993.083110][ T9727] usb 1-1: SerialNumber: syz [ 993.094107][ T9727] usb 1-1: config 0 descriptor?? [ 993.527191][ T9727] gs_usb 1-1:0.0: Configuring for 2 interfaces [ 994.519876][ T9727] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 1 (-EREMOTEIO) [ 994.555494][ T9728] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 994.590613][ T9727] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 994.763017][ T9728] usb 5-1: Using ep0 maxpacket: 8 [ 994.763703][T10402] usb 1-1: USB disconnect, device number 115 [ 994.820950][ T9728] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 994.895915][ T9728] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 995.125271][ T9728] usb 5-1: config 0 has no interface number 0 [ 995.131625][ T9728] usb 5-1: config 0 interface 31 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 995.173277][ T9728] usb 5-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 995.222944][ T9728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.247192][ T9728] usb 5-1: Product: syz [ 995.257304][ T9728] usb 5-1: Manufacturer: syz [ 995.286402][ T9728] usb 5-1: SerialNumber: syz [ 995.300384][ T9728] usb 5-1: config 0 descriptor?? [ 995.737961][ T9728] redrat3 5-1:0.31: Couldn't find all endpoints [ 995.788310][ T9728] usb 5-1: USB disconnect, device number 6 [ 997.835424][ T9728] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 998.041409][ T9728] usb 1-1: Using ep0 maxpacket: 8 [ 998.064504][ T9728] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 998.141162][ T9728] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 998.145023][T15697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2583'. [ 998.163318][ T9728] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 998.192488][ T9728] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 998.209898][ T9728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.290388][ T9728] usbtmc 1-1:16.0: bulk endpoints not found [ 998.498832][T15686] netlink: 'syz.0.2580': attribute type 10 has an invalid length. [ 1000.467578][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2587'. [ 1000.583579][ T9728] usb 1-1: USB disconnect, device number 116 [ 1001.011953][T15727] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2592'. [ 1002.743123][T10402] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1002.920420][T10402] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1002.935715][T10402] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1002.971617][T10402] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1003.027231][T10402] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1003.049627][T10402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.092236][T10402] usb 5-1: Product: syz [ 1003.104036][T10402] usb 5-1: Manufacturer: syz [ 1003.112535][T10402] usb 5-1: SerialNumber: syz [ 1003.260355][T10402] usb 5-1: config 0 descriptor?? [ 1003.271332][T15737] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1003.279344][T15737] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1003.288345][T10402] usb 5-1: ucan: probing device on interface #0 [ 1005.031140][T10402] ucan 5-1:0.0 can0: registered device [ 1005.104708][T10402] ucan 5-1:0.0 can0: firmware string: L>z^ɉw{f,=}̫eRJ(=#gE}ut+|H!R$8g[- }q>ArŴ, [ 1005.166407][ T10] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1005.352061][ T9728] usb 5-1: USB disconnect, device number 7 [ 1006.003158][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1006.052088][ T10] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1006.129449][ T10] usb 3-1: config 0 has no interface number 0 [ 1006.163002][ T10] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1006.220188][ T10] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1006.244558][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1006.254119][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.276375][ T10] usb 3-1: Product: syz [ 1006.286966][ T10] usb 3-1: Manufacturer: syz [ 1006.293142][ T10] usb 3-1: SerialNumber: syz [ 1006.303598][ T10] usb 3-1: config 0 descriptor?? [ 1006.443015][T10402] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1006.503167][ T9728] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1006.542197][ T10] appletouch 3-1:0.85: Failed to read mode from device. [ 1006.571206][ T10] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 1006.608543][T10402] usb 4-1: Using ep0 maxpacket: 8 [ 1006.618559][T10402] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1006.635073][T10402] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.652021][T10402] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1006.670583][T10402] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1006.680207][T10402] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.693448][ T9728] usb 5-1: Using ep0 maxpacket: 8 [ 1007.535958][T10402] usbtmc 4-1:16.0: bulk endpoints not found [ 1007.591938][ T9728] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.660511][ T10] usb 3-1: USB disconnect, device number 104 [ 1007.670064][ T9728] usb 5-1: config 0 has no interfaces? [ 1007.692341][ T9728] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1007.721657][ T9728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.743784][T15764] netlink: 'syz.3.2602': attribute type 10 has an invalid length. [ 1007.761350][ T9728] usb 5-1: config 0 descriptor?? [ 1008.092748][T15781] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2607'. [ 1008.220891][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1008.220916][ T30] audit: type=1326 audit(1757473019.295:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15762 comm="syz.4.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d8f8eba9 code=0x7ffc0000 [ 1008.311399][ T30] audit: type=1326 audit(1757473019.295:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15762 comm="syz.4.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9d8f8d510 code=0x7ffc0000 [ 1008.511989][T15789] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2608'. [ 1008.821183][ T30] audit: type=1326 audit(1757473019.305:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15762 comm="syz.4.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9d8f8d510 code=0x7ffc0000 [ 1009.168382][T10402] usb 4-1: USB disconnect, device number 113 [ 1009.199879][ T30] audit: type=1326 audit(1757473019.305:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15762 comm="syz.4.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d8f8eba9 code=0x7ffc0000 [ 1009.383221][ T30] audit: type=1326 audit(1757473019.305:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15762 comm="syz.4.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7ff9d8f8eba9 code=0x7ffc0000 [ 1009.406694][ T30] audit: type=1326 audit(1757473019.305:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15762 comm="syz.4.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d8f8eba9 code=0x7ffc0000 [ 1009.429311][ T30] audit: type=1326 audit(1757473019.305:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15762 comm="syz.4.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff9d8f8eba9 code=0x7ffc0000 [ 1009.451931][ T30] audit: type=1400 audit(1757473019.315:288): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=15762 comm="syz.4.2603" [ 1009.563785][ T30] audit: type=1326 audit(1757473019.315:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15762 comm="syz.4.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d8f8eba9 code=0x7ffc0000 [ 1009.627554][ T30] audit: type=1326 audit(1757473019.315:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15762 comm="syz.4.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9d8f8eba9 code=0x7ffc0000 [ 1012.329787][T15807] tipc: Enabled bearer , priority 0 [ 1012.364723][T15807] syzkaller0: entered promiscuous mode [ 1012.384328][T15807] syzkaller0: entered allmulticast mode [ 1012.813132][ T9728] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1012.921149][ T9727] usb 5-1: USB disconnect, device number 8 [ 1012.963356][ T9728] usb 4-1: Using ep0 maxpacket: 8 [ 1012.977183][ T9728] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.124527][ T9728] usb 4-1: config 135 has 0 interfaces, different from the descriptor's value: 1 [ 1013.283802][ T9728] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1013.467315][ T9728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.564686][ T9728] usb 4-1: Product: syz [ 1013.572522][ T9728] usb 4-1: Manufacturer: syz [ 1013.577476][ T9728] usb 4-1: SerialNumber: syz [ 1013.816507][ T9728] usb 4-1: USB disconnect, device number 114 [ 1013.825638][ T9727] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1013.837505][T15806] tipc: Resetting bearer [ 1013.975101][T15806] tipc: Disabling bearer [ 1014.573429][ T9727] usb 5-1: Using ep0 maxpacket: 8 [ 1014.584540][ T9727] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1014.633894][ T9727] usb 5-1: config 0 has no interface number 0 [ 1014.647915][ T9727] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1014.675669][ T9727] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1014.697589][ T9727] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1014.729115][ T9727] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1014.742464][ T9727] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1014.871277][ T9727] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1014.921500][ T9727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.961208][ T9727] usb 5-1: config 0 descriptor?? [ 1015.016715][ T9727] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1015.217557][T15825] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -90 [ 1015.233053][T10402] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1015.492418][T10402] usb 1-1: Using ep0 maxpacket: 8 [ 1015.509837][T10402] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1015.518925][T10402] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.557165][T10402] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1015.590905][T10402] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1015.610343][T10402] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.635264][T10402] usbtmc 1-1:16.0: bulk endpoints not found [ 1015.902019][T15841] netlink: 'syz.0.2620': attribute type 10 has an invalid length. [ 1015.934465][T10402] usb 5-1: USB disconnect, device number 9 [ 1015.949450][T10402] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1017.015697][T15860] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2625'. [ 1017.583230][ T10] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1017.853273][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1017.867221][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.888187][ T10] usb 3-1: config 0 has no interfaces? [ 1017.906302][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1018.489276][ T9728] usb 1-1: USB disconnect, device number 117 [ 1018.525561][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.539939][ T10] usb 3-1: config 0 descriptor?? [ 1022.651162][ T9728] usb 3-1: USB disconnect, device number 105 [ 1022.778414][T15899] tipc: Enabled bearer , priority 0 [ 1022.807220][T15891] syzkaller0: entered promiscuous mode [ 1022.817916][T15891] syzkaller0: entered allmulticast mode [ 1023.183400][ T10] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1023.339146][T10402] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1023.367127][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1023.374539][ T10] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.388107][ T10] usb 2-1: config 135 has 0 interfaces, different from the descriptor's value: 1 [ 1023.431402][ T10] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1023.441124][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.451223][ T10] usb 2-1: Product: syz [ 1023.457132][ T10] usb 2-1: Manufacturer: syz [ 1023.461981][ T10] usb 2-1: SerialNumber: syz [ 1023.497095][T10402] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1023.506393][T10402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.539941][T10402] usb 1-1: Product: syz [ 1023.553148][T10402] usb 1-1: Manufacturer: syz [ 1023.566681][T10402] usb 1-1: SerialNumber: syz [ 1023.610666][T10402] usb 1-1: config 0 descriptor?? [ 1023.687593][T10402] usb 2-1: USB disconnect, device number 123 [ 1023.743991][T15888] tipc: Resetting bearer [ 1023.829168][ T9728] usb 1-1: USB disconnect, device number 118 [ 1023.849905][T15888] tipc: Disabling bearer [ 1024.823541][T10402] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1025.563174][T10402] usb 1-1: Using ep0 maxpacket: 32 [ 1025.572638][T10402] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 1025.580995][T10402] usb 1-1: config 0 has no interface number 0 [ 1025.603261][T10402] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1025.693325][T10402] usb 1-1: config 0 interface 85 has no altsetting 0 [ 1025.712733][T10402] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1025.733026][T10402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.783088][T10402] usb 1-1: Product: syz [ 1025.787299][T10402] usb 1-1: Manufacturer: syz [ 1025.791911][T10402] usb 1-1: SerialNumber: syz [ 1025.953507][T10402] usb 1-1: config 0 descriptor?? [ 1026.604062][T10402] appletouch 1-1:0.85: Failed to read mode from device. [ 1026.611273][T10402] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 1026.867948][T10402] usb 1-1: USB disconnect, device number 119 [ 1027.013272][ T9728] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1027.213627][ T9728] usb 2-1: Using ep0 maxpacket: 8 [ 1027.224774][ T9728] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.253149][ T9728] usb 2-1: config 0 has no interfaces? [ 1027.268833][ T9728] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1027.312591][ T9728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.362620][ T9728] usb 2-1: config 0 descriptor?? [ 1029.586796][ T5867] kworker/0:3 (5867) used greatest stack depth: 14152 bytes left [ 1029.842080][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1029.842095][ T30] audit: type=1326 audit(1757473040.925:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.1.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9418eba9 code=0x7ffc0000 [ 1029.912539][ T30] audit: type=1326 audit(1757473040.935:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.1.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf9418d510 code=0x7ffc0000 [ 1029.946247][T15960] tipc: Enabled bearer , priority 0 [ 1029.953993][T15960] syzkaller0: entered promiscuous mode [ 1030.034492][T15960] syzkaller0: entered allmulticast mode [ 1030.133453][ T30] audit: type=1326 audit(1757473040.935:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.1.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf9418d510 code=0x7ffc0000 [ 1030.274959][ T30] audit: type=1326 audit(1757473040.935:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.1.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9418eba9 code=0x7ffc0000 [ 1030.343207][ T10] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1030.366988][ T30] audit: type=1326 audit(1757473040.935:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.1.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7faf9418eba9 code=0x7ffc0000 [ 1030.413059][ T9727] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1030.508224][ T10] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1030.520471][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.537622][ T10] usb 3-1: Product: syz [ 1030.557366][ T10] usb 3-1: Manufacturer: syz [ 1030.575693][ T10] usb 3-1: SerialNumber: syz [ 1030.605689][ T9727] usb 4-1: Using ep0 maxpacket: 8 [ 1030.612491][ T30] audit: type=1326 audit(1757473040.935:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.1.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9418eba9 code=0x7ffc0000 [ 1030.663170][ T10] usb 3-1: config 0 descriptor?? [ 1030.733621][ T9727] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.877804][ T9727] usb 4-1: config 135 has 0 interfaces, different from the descriptor's value: 1 [ 1030.889585][ T10] usb 3-1: USB disconnect, device number 106 [ 1030.943088][ T30] audit: type=1326 audit(1757473040.935:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.1.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faf9418eba9 code=0x7ffc0000 [ 1030.977619][ T9727] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1031.060348][ T9727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.075259][ T9727] usb 4-1: Product: syz [ 1031.083202][ T9727] usb 4-1: Manufacturer: syz [ 1031.088318][ T30] audit: type=1400 audit(1757473040.935:306): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=15938 comm="syz.1.2644" [ 1031.113175][ T9727] usb 4-1: SerialNumber: syz [ 1031.153107][ T30] audit: type=1326 audit(1757473040.935:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.1.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9418eba9 code=0x7ffc0000 [ 1031.227328][ T30] audit: type=1326 audit(1757473040.945:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.1.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf9418eba9 code=0x7ffc0000 [ 1031.342173][T15960] tipc: Resetting bearer [ 1031.354277][ T9727] usb 4-1: USB disconnect, device number 115 [ 1031.383013][T15959] tipc: Resetting bearer [ 1031.453910][T15959] tipc: Disabling bearer [ 1031.565215][ T10] usb 2-1: USB disconnect, device number 124 [ 1031.824076][T15976] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2656'. [ 1031.834704][T15976] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2656'. [ 1033.527586][ T10] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1035.175930][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1035.481541][ T10] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1035.503052][ T10] usb 3-1: config 0 has no interface number 0 [ 1035.534560][ T10] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1035.575451][ T10] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1035.600782][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1035.610628][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.623283][ T10] usb 3-1: Product: syz [ 1035.627467][ T10] usb 3-1: Manufacturer: syz [ 1035.691220][ T10] usb 3-1: SerialNumber: syz [ 1035.731479][ T10] usb 3-1: config 0 descriptor?? [ 1035.751273][ T10] usb 3-1: can't set config #0, error -71 [ 1035.782075][ T10] usb 3-1: USB disconnect, device number 107 [ 1035.861309][T10402] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1035.869065][ T9745] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1036.023194][ T9745] usb 4-1: Using ep0 maxpacket: 8 [ 1036.032076][T10402] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1036.063964][ T9745] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.183919][T10402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.204128][ T9745] usb 4-1: config 0 has no interfaces? [ 1036.769863][T10402] usb 1-1: Product: syz [ 1036.882537][ T9745] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1036.903008][T10402] usb 1-1: Manufacturer: syz [ 1036.907778][T10402] usb 1-1: SerialNumber: syz [ 1036.912527][ T9745] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.927804][T10402] usb 1-1: config 0 descriptor?? [ 1037.063445][ T9745] usb 4-1: config 0 descriptor?? [ 1037.733098][T10402] usb 1-1: USB disconnect, device number 120 [ 1037.903798][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1037.903815][ T30] audit: type=1326 audit(1757473048.995:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16009 comm="syz.3.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 1037.983400][ T30] audit: type=1326 audit(1757473048.995:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16009 comm="syz.3.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab2e38d510 code=0x7ffc0000 [ 1038.058313][ T30] audit: type=1326 audit(1757473049.005:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16009 comm="syz.3.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab2e38d510 code=0x7ffc0000 [ 1038.091703][T16027] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2669'. [ 1038.128955][T16027] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2669'. [ 1038.235417][ T30] audit: type=1326 audit(1757473049.005:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16009 comm="syz.3.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 1038.435537][ T30] audit: type=1326 audit(1757473049.005:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16009 comm="syz.3.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 1038.509531][ T30] audit: type=1326 audit(1757473049.005:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16009 comm="syz.3.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 1038.609592][ T30] audit: type=1326 audit(1757473049.005:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16009 comm="syz.3.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 1038.632974][ T30] audit: type=1400 audit(1757473049.005:324): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16009 comm="syz.3.2665" [ 1038.671347][ T30] audit: type=1326 audit(1757473049.005:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16009 comm="syz.3.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 1038.694643][ T30] audit: type=1326 audit(1757473049.005:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16009 comm="syz.3.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 1039.167310][T16037] tipc: Enabled bearer , priority 0 [ 1039.175566][T16037] syzkaller0: entered promiscuous mode [ 1039.181115][T16037] syzkaller0: entered allmulticast mode [ 1039.523049][T10402] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1039.774423][T16042] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2673'. [ 1039.813017][T10402] usb 2-1: Using ep0 maxpacket: 8 [ 1039.828881][T10402] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.858340][T10402] usb 2-1: config 135 has 0 interfaces, different from the descriptor's value: 1 [ 1040.091360][T10402] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1040.121709][T10402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.140387][T10402] usb 2-1: Product: syz [ 1040.458181][T10402] usb 2-1: Manufacturer: syz [ 1040.465690][T10402] usb 2-1: SerialNumber: syz [ 1041.327850][T16037] tipc: Resetting bearer [ 1041.428243][T10402] usb 2-1: USB disconnect, device number 125 [ 1042.036491][T16036] tipc: Resetting bearer [ 1042.084195][ T9707] usb 4-1: USB disconnect, device number 116 [ 1042.118136][T16036] tipc: Disabling bearer [ 1044.367325][T16061] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1045.377106][T16073] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2681'. [ 1045.392740][T16073] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2681'. [ 1045.793087][ T9727] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1045.952999][ T9727] usb 4-1: Using ep0 maxpacket: 16 [ 1045.961800][ T9727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1045.972536][ T9727] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1045.998119][ T9727] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1046.087782][T16089] fuse: Unknown parameter 'user_id00000000000000000000' [ 1046.137014][ T9727] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1046.153134][ T9711] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1046.178151][ T9727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.258257][ T9727] usb 4-1: Product: syz [ 1046.272304][ T9727] usb 4-1: Manufacturer: syz [ 1046.281012][ T9727] usb 4-1: SerialNumber: syz [ 1046.312527][ T9727] usb 4-1: config 0 descriptor?? [ 1046.323933][ T9711] usb 2-1: Using ep0 maxpacket: 8 [ 1046.346107][T16074] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1046.355922][ T9711] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.378900][ T9711] usb 2-1: config 0 has no interfaces? [ 1046.392544][ T9711] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1046.449652][ T9727] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 1046.456001][ T9727] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 1046.466242][ T9711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.493494][ T9727] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 1046.532808][ T9711] usb 2-1: config 0 descriptor?? [ 1046.540042][ T9727] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 1046.563136][ T9727] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 1046.896047][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1046.896065][ T30] audit: type=1326 audit(1757473057.985:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.1.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9418eba9 code=0x7ffc0000 [ 1047.068079][ T30] audit: type=1326 audit(1757473057.985:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.1.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf9418d510 code=0x7ffc0000 [ 1047.193411][ T30] audit: type=1326 audit(1757473057.985:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.1.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf9418d510 code=0x7ffc0000 [ 1047.283838][ T30] audit: type=1326 audit(1757473057.985:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.1.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9418eba9 code=0x7ffc0000 [ 1047.313364][ T30] audit: type=1326 audit(1757473057.985:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.1.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7faf9418eba9 code=0x7ffc0000 [ 1047.343979][ T30] audit: type=1326 audit(1757473057.985:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.1.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9418eba9 code=0x7ffc0000 [ 1047.372845][ T30] audit: type=1326 audit(1757473057.995:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.1.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faf9418eba9 code=0x7ffc0000 [ 1047.487700][ T30] audit: type=1400 audit(1757473057.995:341): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16085 comm="syz.1.2686" [ 1047.531389][ T30] audit: type=1326 audit(1757473057.995:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.1.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9418eba9 code=0x7ffc0000 [ 1047.577843][ T30] audit: type=1326 audit(1757473057.995:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.1.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf9418eba9 code=0x7ffc0000 [ 1050.433113][ T9711] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1050.653039][ T9711] usb 5-1: Using ep0 maxpacket: 16 [ 1050.715910][ T9727] usb 4-1: USB disconnect, device number 117 [ 1050.745800][ T9727] mcba_usb 4-1:0.0 can0: device disconnected [ 1050.810781][T16132] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2692'. [ 1051.883788][T10402] usb 2-1: USB disconnect, device number 126 [ 1053.740255][ T9711] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1053.821069][ T9711] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1053.843296][ T9711] usb 5-1: can't read configurations, error -71 [ 1054.422983][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.430492][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.803576][T16182] fuse: Unknown parameter 'user_id00000000000000000000' [ 1057.741621][T16196] 9pnet_fd: Insufficient options for proto=fd [ 1057.833072][T10402] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1058.655079][T10402] usb 2-1: config 0 has no interfaces? [ 1058.683116][T10402] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1058.706012][T10402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.728750][T10402] usb 2-1: Product: syz [ 1058.738392][T10402] usb 2-1: Manufacturer: syz [ 1058.743515][T10402] usb 2-1: SerialNumber: syz [ 1058.751781][T10402] usb 2-1: config 0 descriptor?? [ 1059.052195][ T9728] usb 2-1: USB disconnect, device number 127 [ 1060.112488][T16213] tipc: Enabled bearer , priority 0 [ 1060.215658][T16216] syzkaller0: entered promiscuous mode [ 1060.222270][T16216] syzkaller0: entered allmulticast mode [ 1060.233070][ T9728] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1060.316850][T16213] tipc: Resetting bearer [ 1060.346670][T16212] tipc: Resetting bearer [ 1060.371307][T16212] tipc: Disabling bearer [ 1060.423157][ T9728] usb 2-1: Using ep0 maxpacket: 16 [ 1063.179386][T16238] fuse: Unknown parameter 'user_id00000000000000000000' [ 1063.373010][T10402] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 1063.536148][T10402] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 1063.545354][T10402] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.619325][T10402] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1063.701610][T10402] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1063.755724][T10402] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.801718][ T9728] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1064.080588][ T9728] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1064.088229][T10402] usb 5-1: config 0 descriptor?? [ 1064.343167][ T9728] usb 2-1: can't read configurations, error -71 [ 1064.387799][ T9727] usb 5-1: USB disconnect, device number 12 [ 1064.685676][ T9728] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1064.863698][ T9728] usb 2-1: config 0 has no interfaces? [ 1064.871575][ T9728] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1065.098392][ T9728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.125637][ T9728] usb 2-1: Product: syz [ 1065.146775][ T9728] usb 2-1: Manufacturer: syz [ 1065.161899][ T9728] usb 2-1: SerialNumber: syz [ 1065.190728][ T9728] usb 2-1: config 0 descriptor?? [ 1065.545347][T10402] usb 2-1: USB disconnect, device number 3 [ 1065.663638][T16259] sg_write: data in/out 91/42 bytes for SCSI command 0x0-- guessing data in; [ 1065.663638][T16259] program syz.3.2723 not setting count and/or reply_len properly [ 1066.033314][T16269] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2722'. [ 1066.149381][T16272] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2725'. [ 1066.368071][T16272] caif0: left allmulticast mode [ 1071.276003][T16315] sg_write: data in/out 91/42 bytes for SCSI command 0x0-- guessing data in; [ 1071.276003][T16315] program syz.1.2735 not setting count and/or reply_len properly [ 1071.953255][ T9707] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1072.133063][ T9728] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1072.217161][ T9707] usb 1-1: config 0 has no interfaces? [ 1072.224981][ T9707] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1072.237098][ T9707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.246312][ T9707] usb 1-1: Product: syz [ 1072.250483][ T9707] usb 1-1: Manufacturer: syz [ 1072.315448][T16325] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2739'. [ 1072.352968][ T9728] usb 3-1: Using ep0 maxpacket: 16 [ 1072.596783][ T9707] usb 1-1: SerialNumber: syz [ 1072.691835][ T9707] usb 1-1: config 0 descriptor?? [ 1072.919817][T16307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2736'. [ 1072.952003][T10402] usb 1-1: USB disconnect, device number 121 [ 1075.787579][ T9728] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1075.798934][ T9728] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1075.832757][ T9728] usb 3-1: can't read configurations, error -71 [ 1075.931606][T16356] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2745'. [ 1075.983020][T10402] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1075.996624][T16356] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2745'. [ 1076.340580][T10402] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1076.356435][T10402] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1076.366999][T10402] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1076.377186][T10402] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1076.386620][T10402] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.402561][T10402] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1076.452822][T10402] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1076.497295][T15842] udevd[15842]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1080.132977][ T9707] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1080.302584][ T9707] usb 3-1: config 0 has no interfaces? [ 1080.315785][ T9707] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1080.342956][ T9707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.406290][T16395] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1080.431028][ T9707] usb 3-1: Product: syz [ 1080.450143][ T9707] usb 3-1: Manufacturer: syz [ 1080.476045][ T9707] usb 3-1: SerialNumber: syz [ 1080.513704][ T9707] usb 3-1: config 0 descriptor?? [ 1080.756408][T16384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2752'. [ 1080.779529][ T9728] usb 3-1: USB disconnect, device number 110 [ 1081.327336][ T9707] usb 2-1: USB disconnect, device number 4 [ 1085.150858][T16454] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1086.133067][ T9745] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1086.591215][ T9745] usb 2-1: config 0 has no interfaces? [ 1086.598965][ T9745] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1086.608166][ T9745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.616602][ T9745] usb 2-1: Product: syz [ 1086.620786][ T9745] usb 2-1: Manufacturer: syz [ 1086.625910][ T9745] usb 2-1: SerialNumber: syz [ 1086.855932][ T9745] usb 2-1: config 0 descriptor?? [ 1087.142011][T16460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2769'. [ 1087.154555][ T9728] usb 2-1: USB disconnect, device number 5 [ 1088.522964][ T9711] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1088.693220][ T9711] usb 1-1: Using ep0 maxpacket: 16 [ 1088.989285][ T9711] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1089.068968][ T9711] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1089.803086][ T9711] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1089.836423][ T9711] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1089.863165][ T9711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.878277][ T9711] usb 1-1: Product: syz [ 1089.882484][ T9711] usb 1-1: Manufacturer: syz [ 1089.913969][ T9711] usb 1-1: SerialNumber: syz [ 1090.037675][ T9711] usb 1-1: config 0 descriptor?? [ 1090.414126][T16483] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1091.091039][ T9711] mcba_usb 1-1:0.0 can0: failed tx_urb -90 [ 1091.119555][ T9711] mcba_usb 1-1:0.0 can0: Failed to send cmd (169) [ 1091.138606][ T9711] mcba_usb 1-1:0.0 can0: failed tx_urb -90 [ 1091.144615][ T9711] mcba_usb 1-1:0.0 can0: Failed to send cmd (169) [ 1091.151592][ T9711] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 1091.283111][ T9745] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1091.479284][ T9745] usb 4-1: Using ep0 maxpacket: 8 [ 1091.492064][ T9745] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.508593][ T9745] usb 4-1: config 0 has no interfaces? [ 1091.639638][ T9745] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1091.663023][ T9745] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.683602][ T9745] usb 4-1: config 0 descriptor?? [ 1092.300258][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1092.300276][ T30] audit: type=1326 audit(1757473103.385:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16519 comm="syz.3.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 1092.438633][ T30] audit: type=1326 audit(1757473103.385:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16519 comm="syz.3.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab2e38d510 code=0x7ffc0000 [ 1093.022571][ T30] audit: type=1326 audit(1757473103.385:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16519 comm="syz.3.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab2e38d510 code=0x7ffc0000 [ 1093.218857][ T30] audit: type=1326 audit(1757473103.385:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16519 comm="syz.3.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 1093.310043][ T30] audit: type=1326 audit(1757473103.385:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16519 comm="syz.3.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 1093.400963][ T30] audit: type=1326 audit(1757473103.385:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16519 comm="syz.3.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 1093.488538][ T30] audit: type=1326 audit(1757473103.385:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16519 comm="syz.3.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 1093.558194][ T30] audit: type=1400 audit(1757473103.385:359): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16519 comm="syz.3.2783" [ 1093.577486][ T9727] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1093.638405][ T30] audit: type=1326 audit(1757473103.385:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16519 comm="syz.3.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 1093.679657][ T30] audit: type=1326 audit(1757473103.385:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16519 comm="syz.3.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab2e38eba9 code=0x7ffc0000 [ 1093.768059][ T9727] usb 5-1: config 0 has no interfaces? [ 1093.780776][ T9727] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1093.790231][ T9727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.802602][ T9727] usb 5-1: Product: syz [ 1093.808635][ T9727] usb 5-1: Manufacturer: syz [ 1093.808710][ T9745] usb 1-1: USB disconnect, device number 122 [ 1093.813302][ T9727] usb 5-1: SerialNumber: syz [ 1093.833372][ T9727] usb 5-1: config 0 descriptor?? [ 1094.099420][ T9745] mcba_usb 1-1:0.0 can0: device disconnected [ 1094.838713][ T9707] usb 5-1: USB disconnect, device number 13 [ 1096.983308][ T9727] usb 4-1: USB disconnect, device number 118 [ 1098.159009][T16601] fuse: Unknown parameter '0x000000000000000d' [ 1098.292023][T16605] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2798'. [ 1098.902948][ T9745] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1099.057287][ T9745] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1099.075329][ T9745] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1099.109625][ T9745] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1099.162399][ T9745] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1099.220999][ T9745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.250385][ T9745] usb 3-1: Product: syz [ 1099.264574][ T9745] usb 3-1: Manufacturer: syz [ 1099.281125][ T9745] usb 3-1: SerialNumber: syz [ 1099.418351][ T9745] usb 3-1: config 0 descriptor?? [ 1099.573390][T16609] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1099.580936][T16609] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1099.601149][ T9745] usb 3-1: ucan: probing device on interface #0 [ 1099.622974][ T9727] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1099.800675][ T9727] usb 1-1: config 0 has no interfaces? [ 1099.956460][ T9727] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1099.972103][ T9727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.012744][ T9727] usb 1-1: Product: syz [ 1100.024015][ T9727] usb 1-1: Manufacturer: syz [ 1100.071734][ T9727] usb 1-1: SerialNumber: syz [ 1100.114597][ T9727] usb 1-1: config 0 descriptor?? [ 1100.293472][ T9745] ucan 3-1:0.0 can0: registered device [ 1100.333483][ T9727] usb 1-1: USB disconnect, device number 123 [ 1100.489098][ T9745] ucan 3-1:0.0 can0: firmware string: L>z^ɉw{f,=}̫eRJ(=#gE}ut+|H!R$8g[- }q>ArŴ,xp| [ 1100.764616][ T9727] usb 3-1: USB disconnect, device number 111 [ 1101.473480][T16636] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2805'. [ 1101.893062][ T9727] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 1103.265800][ T9727] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 1103.298162][ T9727] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.328550][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1103.328567][ T30] audit: type=1326 audit(1757473114.425:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16650 comm="syz.4.2811" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff9d8f8eba9 code=0x0 [ 1103.351146][ T9727] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1103.432274][ T9727] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1103.477745][T16662] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2812'. [ 1103.520207][T16658] nvme_fabrics: missing parameter 'transport=%s' [ 1103.526932][T16658] nvme_fabrics: missing parameter 'nqn=%s' [ 1103.625508][ T9727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.636762][ T9727] usb 2-1: config 0 descriptor?? [ 1104.373037][ T9745] usb 1-1: new low-speed USB device number 124 using dummy_hcd [ 1105.133097][ T9711] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1105.145198][ T9745] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1105.160566][ T9745] usb 1-1: config 9 has an invalid interface number: 198 but max is 0 [ 1105.180511][ T9745] usb 1-1: config 9 has no interface number 0 [ 1105.202401][ T9745] usb 1-1: config 9 interface 198 has no altsetting 0 [ 1105.245666][T10402] usb 2-1: USB disconnect, device number 6 [ 1105.313148][ T9711] usb 3-1: Using ep0 maxpacket: 32 [ 1105.322109][ T9711] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1105.331798][ T9711] usb 3-1: config 1 has an invalid interface number: 48 but max is 0 [ 1105.340111][ T9711] usb 3-1: config 1 has no interface number 0 [ 1105.349796][ T9711] usb 3-1: config 1 interface 48 altsetting 9 bulk endpoint 0xF has invalid maxpacket 64 [ 1105.389032][ T9711] usb 3-1: config 1 interface 48 has no altsetting 0 [ 1105.417317][ T9711] usb 3-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=f3.9e [ 1105.430954][ T9711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.488775][ T9711] usb 3-1: Product: syz [ 1105.569011][ T9711] usb 3-1: Manufacturer: syz [ 1105.580166][ T9711] usb 3-1: SerialNumber: syz [ 1105.592212][T16671] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1105.613079][ T9727] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1105.835522][ T9727] usb 4-1: config 0 has no interfaces? [ 1105.846131][ T9727] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1105.870200][ T9727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.925302][ T9727] usb 4-1: Product: syz [ 1106.026040][ T9727] usb 4-1: Manufacturer: syz [ 1106.040995][ T9727] usb 4-1: SerialNumber: syz [ 1106.060204][ T9727] usb 4-1: config 0 descriptor?? [ 1106.370788][ T9727] usb 4-1: USB disconnect, device number 119 [ 1107.670357][ T9711] ti_usb_3410_5052 3-1:1.48: TI USB 3410 1 port adapter converter detected [ 1107.777116][ T9745] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 1107.801610][ T9745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.851253][ T9711] usb 3-1: USB disconnect, device number 112 [ 1107.885073][ T9745] usb 1-1: can't set config #9, error -71 [ 1108.211175][ T9745] usb 1-1: USB disconnect, device number 124 [ 1110.335707][ T9745] usb 1-1: new low-speed USB device number 125 using dummy_hcd [ 1110.518210][ T9745] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 1110.528139][T16718] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1110.563039][ T9745] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.577968][ T9745] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1110.587445][ T9745] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1110.603401][ T9745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.629873][ T9745] usb 1-1: config 0 descriptor?? [ 1111.643301][ T9728] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1111.693137][ T9745] usb 4-1: new low-speed USB device number 120 using dummy_hcd [ 1112.385675][ T9728] usb 2-1: config 0 has no interfaces? [ 1112.399812][ T9728] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1112.417459][ T9728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.526084][ T9745] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1112.543203][ T9728] usb 2-1: Product: syz [ 1112.547403][ T9728] usb 2-1: Manufacturer: syz [ 1112.552011][ T9728] usb 2-1: SerialNumber: syz [ 1112.568038][ T9745] usb 4-1: config 9 has an invalid interface number: 198 but max is 0 [ 1112.598517][ T9728] usb 2-1: config 0 descriptor?? [ 1112.606466][ T9745] usb 4-1: config 9 has no interface number 0 [ 1112.628105][ T9745] usb 4-1: config 9 interface 198 has no altsetting 0 [ 1113.142617][T16725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2830'. [ 1113.216506][ T9707] usb 2-1: USB disconnect, device number 7 [ 1113.280072][ T9727] usb 1-1: USB disconnect, device number 125 [ 1114.469028][ T9745] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 1114.553489][ T9745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.613947][ T9745] usb 4-1: can't set config #9, error -71 [ 1115.566125][ T9745] usb 4-1: USB disconnect, device number 120 [ 1115.573402][T16762] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1115.628937][T16770] tipc: Enabling of bearer rejected, already enabled [ 1115.867611][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.883610][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.536428][T16779] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2843'. [ 1118.773005][ T9728] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1118.942997][ T9728] usb 5-1: Using ep0 maxpacket: 32 [ 1118.955608][ T9728] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1119.003820][ T9728] usb 5-1: config 1 has an invalid interface number: 48 but max is 0 [ 1119.042527][ T9728] usb 5-1: config 1 has no interface number 0 [ 1119.060950][ T9728] usb 5-1: config 1 interface 48 altsetting 9 bulk endpoint 0xF has invalid maxpacket 64 [ 1119.073046][ T9745] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 1119.107677][ T9728] usb 5-1: config 1 interface 48 has no altsetting 0 [ 1119.132232][ T9728] usb 5-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=f3.9e [ 1119.151359][ T9728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.176302][ T9728] usb 5-1: Product: syz [ 1119.191852][ T9728] usb 5-1: Manufacturer: syz [ 1119.203945][ T9728] usb 5-1: SerialNumber: syz [ 1119.229849][T16792] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1119.249099][ T9745] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 1119.278468][T16804] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2848'. [ 1119.340033][ T9745] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.393002][ T9745] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1119.429077][ T9745] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1119.450336][ T9745] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.495542][ T9745] usb 2-1: config 0 descriptor?? [ 1119.864886][ T9727] usb 1-1: new low-speed USB device number 126 using dummy_hcd [ 1120.045327][ T9727] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1120.063948][ T9727] usb 1-1: config 9 has an invalid interface number: 198 but max is 0 [ 1120.086868][ T9727] usb 1-1: config 9 has no interface number 0 [ 1120.111965][ T9727] usb 1-1: config 9 interface 198 has no altsetting 0 [ 1120.136406][ T9727] usb 1-1: string descriptor 0 read error: -22 [ 1120.148873][ T9727] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 1120.169928][ T9727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.204004][ T9727] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1120.226652][ T9727] dvb-usb: bulk message failed: -22 (3/0) [ 1120.410618][T16808] 9pnet_fd: Insufficient options for proto=fd [ 1121.407557][ T9727] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1122.342361][ T9728] ti_usb_3410_5052 5-1:1.48: TI USB 3410 1 port adapter converter detected [ 1122.373867][ T9727] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 1122.382108][ T9727] usb 1-1: media controller created [ 1122.476340][ T9711] usb 2-1: USB disconnect, device number 8 [ 1122.482438][ T9728] usb 5-1: USB disconnect, device number 14 [ 1122.622780][ T9727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1123.466888][ T9727] DVB: Unable to find symbol mt352_attach() [ 1123.479955][ T9727] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 1123.489362][ T9727] dvb-usb: bulk message failed: -22 (3/0) [ 1123.571921][ T9727] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 1123.709976][ T9727] usb 1-1: USB disconnect, device number 126 [ 1124.243116][ T9745] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1124.303220][ T9727] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 1124.413609][ T9745] usb 3-1: Using ep0 maxpacket: 8 [ 1124.420463][ T9745] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1124.428903][ T9745] usb 3-1: config 0 has no interface number 0 [ 1124.452049][ T9745] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1124.500488][ T9745] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1124.553101][T16867] tipc: Enabling of bearer rejected, already enabled [ 1124.716620][ T9745] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1124.756204][ T9745] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1124.809690][ T9745] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1124.852499][ T9745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.881838][ T9745] usb 3-1: config 0 descriptor?? [ 1124.899257][ T9745] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1125.513167][ T9745] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1125.663834][ T9745] usb 4-1: Using ep0 maxpacket: 16 [ 1125.721773][ T9745] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.733596][ T9745] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1125.754295][ T9745] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1125.767887][ T9745] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.790508][ T9745] usb 4-1: config 0 descriptor?? [ 1125.869443][ T9745] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1127.022325][ T9727] usb 3-1: USB disconnect, device number 113 [ 1127.041121][ T9727] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1128.154064][ T9745] usb 4-1: USB disconnect, device number 121 [ 1129.380273][T16888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2864'. [ 1130.338081][T16890] bridge5: port 1(veth11) entered blocking state [ 1130.360755][T16890] bridge5: port 1(veth11) entered disabled state [ 1130.393198][T16890] veth11: entered allmulticast mode [ 1130.953227][T16890] veth11: entered promiscuous mode [ 1135.438239][T16935] tipc: Enabling of bearer rejected, already enabled [ 1143.786319][T17003] tipc: Enabling of bearer rejected, already enabled [ 1145.013154][ T9727] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1145.183025][ T9727] usb 1-1: Using ep0 maxpacket: 8 [ 1145.190061][ T9727] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.202069][ T9727] usb 1-1: config 0 has no interfaces? [ 1145.343691][ T9727] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1145.967228][ T9727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.139523][ T9727] usb 1-1: config 0 descriptor?? [ 1146.500362][ T30] audit: type=1326 audit(1757473157.595:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.0.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a658eba9 code=0x7ffc0000 [ 1146.601910][ T30] audit: type=1326 audit(1757473157.595:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.0.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a658eba9 code=0x7ffc0000 [ 1146.656755][ T30] audit: type=1326 audit(1757473157.595:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.0.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0a658d510 code=0x7ffc0000 [ 1146.836561][ T30] audit: type=1326 audit(1757473157.595:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.0.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0a658d510 code=0x7ffc0000 [ 1146.955104][ T30] audit: type=1326 audit(1757473157.595:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.0.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a658eba9 code=0x7ffc0000 [ 1146.977480][ C1] vkms_vblank_simulate: vblank timer overrun [ 1147.021053][ T30] audit: type=1326 audit(1757473157.605:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.0.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fc0a658eba9 code=0x7ffc0000 [ 1147.043448][ C1] vkms_vblank_simulate: vblank timer overrun [ 1147.231180][ T30] audit: type=1326 audit(1757473157.605:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.0.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a658eba9 code=0x7ffc0000 [ 1148.442327][ T30] audit: type=1326 audit(1757473157.605:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.0.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a658eba9 code=0x7ffc0000 [ 1148.469111][ T30] audit: type=1326 audit(1757473157.605:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.0.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc0a658eba9 code=0x7ffc0000 [ 1148.495844][ T30] audit: type=1400 audit(1757473157.605:378): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=17012 comm="syz.0.2894" [ 1150.146722][ T9745] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1150.343121][ T9745] usb 3-1: Using ep0 maxpacket: 16 [ 1150.758288][ T9711] usb 1-1: USB disconnect, device number 127 [ 1151.991415][T17079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2906'. [ 1153.585884][ T9745] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1153.635321][ T9745] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1153.703240][ T9745] usb 3-1: can't read configurations, error -71 [ 1159.073181][ T9711] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1159.253038][ T9711] usb 5-1: Using ep0 maxpacket: 16 [ 1159.458318][T17140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2921'. [ 1160.697562][T17151] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000b2: 0000 [#1] SMP KASAN PTI [ 1160.697589][T17151] KASAN: null-ptr-deref in range [0x0000000000000590-0x0000000000000597] [ 1160.697612][T17151] CPU: 1 UID: 0 PID: 17151 Comm: syz.1.2924 Not tainted syzkaller #0 PREEMPT(full) [ 1160.697636][T17151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1160.697654][T17151] RIP: 0010:vc_deallocate+0x303/0x3e0 [ 1160.697702][T17151] Code: e8 d2 0a d7 fc 49 c7 07 00 00 00 00 eb 0e e8 f4 07 73 fc eb 05 e8 ed 07 73 fc 31 db 4c 8d b3 90 05 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 ae 09 d7 fc 4d 8b 3e 4d 85 ff 74 [ 1160.697720][T17151] RSP: 0018:ffffc9000af1fbe0 EFLAGS: 00010206 [ 1160.697740][T17151] RAX: ffffffff854ca423 RBX: 0000000000000000 RCX: 0000000000080000 [ 1160.697756][T17151] RDX: ffffc9000f0a4000 RSI: 0000000000000392 RDI: 0000000000000393 [ 1160.697771][T17151] RBP: ffffc9000af1fc90 R08: ffffffff8fc3c8cf R09: 1ffffffff1f87919 [ 1160.697787][T17151] R10: dffffc0000000000 R11: fffffbfff1f8791a R12: 00000000000000b2 [ 1160.697803][T17151] R13: dffffc0000000000 R14: 0000000000000590 R15: ffffffff9a034aa0 [ 1160.697818][T17151] FS: 00007faf94f366c0(0000) GS:ffff888125af1000(0000) knlGS:0000000000000000 [ 1160.697836][T17151] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1160.697850][T17151] CR2: 000000110c409f50 CR3: 0000000057742000 CR4: 00000000003526f0 [ 1160.697868][T17151] Call Trace: [ 1160.697877][T17151] [ 1160.697887][T17151] ? vt_disallocate+0x10/0xa0 [ 1160.697917][T17151] ? __pfx_vc_deallocate+0x10/0x10 [ 1160.697949][T17151] ? is_console_locked+0x9/0x20 [ 1160.697970][T17151] vt_disallocate+0x49/0xa0 [ 1160.697999][T17151] vt_ioctl+0x13f5/0x1f20 [ 1160.698031][T17151] ? __pfx_vt_ioctl+0x10/0x10 [ 1160.698066][T17151] ? __fget_files+0x2a/0x420 [ 1160.698096][T17151] ? tty_jobctrl_ioctl+0x369/0xb70 [ 1160.698125][T17151] ? __fget_files+0x3a0/0x420 [ 1160.698151][T17151] ? __fget_files+0x2a/0x420 [ 1160.698180][T17151] tty_ioctl+0x929/0xde0 [ 1160.698201][T17151] ? __pfx_tty_ioctl+0x10/0x10 [ 1160.698222][T17151] __se_sys_ioctl+0xfc/0x170 [ 1160.698263][T17151] do_syscall_64+0xfa/0xfa0 [ 1160.698282][T17151] ? lockdep_hardirqs_on+0x9c/0x150 [ 1160.698313][T17151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.698335][T17151] ? clear_bhb_loop+0x60/0xb0 [ 1160.698360][T17151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.698381][T17151] RIP: 0033:0x7faf9418eba9 [ 1160.698405][T17151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1160.698423][T17151] RSP: 002b:00007faf94f36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1160.698447][T17151] RAX: ffffffffffffffda RBX: 00007faf943d6180 RCX: 00007faf9418eba9 [ 1160.698464][T17151] RDX: 0000000000000003 RSI: 0000000000005608 RDI: 0000000000000006 [ 1160.698478][T17151] RBP: 00007faf94211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1160.698493][T17151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1160.698506][T17151] R13: 00007faf943d6218 R14: 00007faf943d6180 R15: 00007ffc3588c208 [ 1160.698532][T17151] [ 1160.698545][T17151] Modules linked in: [ 1160.698605][T17151] ---[ end trace 0000000000000000 ]--- [ 1160.698742][T17151] RIP: 0010:vc_deallocate+0x303/0x3e0 [ 1160.698777][T17151] Code: e8 d2 0a d7 fc 49 c7 07 00 00 00 00 eb 0e e8 f4 07 73 fc eb 05 e8 ed 07 73 fc 31 db 4c 8d b3 90 05 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 ae 09 d7 fc 4d 8b 3e 4d 85 ff 74 [ 1160.698797][T17151] RSP: 0018:ffffc9000af1fbe0 EFLAGS: 00010206 [ 1160.698817][T17151] RAX: ffffffff854ca423 RBX: 0000000000000000 RCX: 0000000000080000 [ 1160.698834][T17151] RDX: ffffc9000f0a4000 RSI: 0000000000000392 RDI: 0000000000000393 [ 1160.698850][T17151] RBP: ffffc9000af1fc90 R08: ffffffff8fc3c8cf R09: 1ffffffff1f87919 [ 1160.698888][T17151] R10: dffffc0000000000 R11: fffffbfff1f8791a R12: 00000000000000b2 [ 1160.698905][T17151] R13: dffffc0000000000 R14: 0000000000000590 R15: ffffffff9a034aa0 [ 1160.698921][T17151] FS: 00007faf94f366c0(0000) GS:ffff888125af1000(0000) knlGS:0000000000000000 [ 1160.698941][T17151] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1160.698956][T17151] CR2: 000000110c409f50 CR3: 0000000057742000 CR4: 00000000003526f0 [ 1160.698977][T17151] Kernel panic - not syncing: Fatal exception [ 1160.699304][T17151] Kernel Offset: disabled