last executing test programs: 24.363642535s ago: executing program 0 (id=2150): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0180c200000e080045ba002800650102020690780a010102ac1414bb4e244e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5108fffd9078005754108f1a25b7d98d14addf91d0d9c57083565f393836a111fe7986e3697200f9a9e529b229640de090dd47eb4b54f31fcd6aef3b1051a868da99f3554428c97b5008a20487d585bbb72a89838bc13d855ca050e77620ec0ef63485b571dff772d7a75aa7c15504972601d87524efa423e585cedf9ed4c6899404ec5c7009fcdf1a"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000140)=0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f00000006c0)=@v2={0x2000000, [{0x4e, 0x6}, {0x5, 0x2}]}, 0x14, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) landlock_create_ruleset(0x0, 0x0, 0x3) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000) readv(r0, &(0x7f0000000480), 0x0) 20.812092716s ago: executing program 0 (id=2155): r0 = openat$comedi(0xffffff9c, 0x0, 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'mpc624\x00', [0x3c4, 0x13, 0xff, 0x1000, 0x14000000, 0x0, 0xfffffffc, 0x6, 0x8, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x3, 0x403, 0x9, 0x200, 0x1, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6, 0x1000000]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x100) syz_open_dev$vim2m(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) 19.07047414s ago: executing program 0 (id=2158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020880) 17.987902892s ago: executing program 0 (id=2162): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x52) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x21) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r3, &(0x7f00000002c0)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) 17.256913776s ago: executing program 4 (id=2164): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) 17.210333027s ago: executing program 1 (id=2165): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000240)=@other={'trylock', ' ', 'mem'}, 0xc) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) socket$kcm(0xa, 0x2, 0x3a) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x0, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x6, 0x0, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r8, @ANYBLOB="0a0006000802110000000000380050800800030005ac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc000) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 16.288693135s ago: executing program 4 (id=2167): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') umount2(&(0x7f0000000340)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32}, {0x0, 0x0, 0x5, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0x7f, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0xffffffff, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x3, 0x4}, @addr={0xcd, 0x9}}, {0x0, 0x1, 0x0, 0x0, @tick, {0x0, 0x3}, {0x0, 0x1}, @quote={{0x1, 0xfe}}}, {0x0, 0x40, 0x0, 0x5, @time={0x5, 0x1000}, {}, {0x0, 0x9}, @addr={0x2, 0xf}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @control={0x3, 0x9, 0x3}}], 0xc4) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000140)) 14.601089979s ago: executing program 0 (id=2170): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000240)=@other={'trylock', ' ', 'mem'}, 0xc) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) socket$kcm(0xa, 0x2, 0x3a) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x0, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x6, 0x0, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r8, @ANYBLOB="0a0006000802110000000000380050800800030005ac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc000) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 12.376375673s ago: executing program 2 (id=2172): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r1, 0x2285, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32}, {0x0, 0x0, 0x5, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0x7f, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0xffffffff, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x3, 0x4}, @addr={0xcd, 0x9}}, {0x0, 0x1, 0x0, 0x0, @tick, {0x0, 0x3}, {0x0, 0x1}, @quote={{0x1, 0xfe}}}, {0x0, 0x40, 0x0, 0x5, @time={0x5, 0x1000}, {}, {0x0, 0x9}, @addr={0x2, 0xf}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @control={0x3, 0x9, 0x3}}], 0xc4) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000140)) 11.673136957s ago: executing program 2 (id=2173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020880) 11.596287979s ago: executing program 4 (id=2174): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffcf61}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18) socket(0x2, 0x80805, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001400)=""/4097, 0x1001, 0x9) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 11.469116451s ago: executing program 1 (id=2175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') umount2(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="09032dbd7000fedbdf251f"], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = getpgrp(0x0) ptrace$setsig(0x4203, r4, 0x20e, &(0x7f0000000380)={0x31, 0x3, 0x6}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) fcntl$setown(r3, 0x8, r5) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r6, 0x2285, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r7, &(0x7f0000000200), 0x0) read$snapshot(r7, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000000140)) 11.04470786s ago: executing program 2 (id=2177): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x300a088, &(0x7f0000000080)=ANY=[], 0x85, 0x68b, &(0x7f0000000800)="$eJzs3c1vHGcdB/DvbDabbCipmyZtgiolaiRARE3sWCmYSwNCKIcKVeXA2UqcxMomDY6L3ApBeClce8gfUA6+cUBI3CPKhQvcevWxEoJLLzWnRTM7u16/22nqtcPnU43nmXnmeeb3/HbedrfRBvi/de1Cmo9T5NqFNxfK5aXFyc7S4uTdfjnJkSSNpNmbpfi82+1+nFxNb8qZcmXdXbG69/vP90uPZqfe/uSzpU97S816qrZvrG+3Ww/rKeeSHKrnT6u/69v1d3S77orBCMuEne8nDkbtcJJu5d+Pemt++vfnBjVD2hu13vbIBw6AonffXGcsOVaf6OVzQO+u2LtnH2gPRx0AAAAA7IHnl7OchRwfdRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwkNS//1/UU6NfPpei//v/rXpd6vL+cnZ3mz/+suIAAAAAAAAAgD10djnLWcjx/nK3qL7zf7VaOFn9/UrezYPMZC4Xs5DpzGc+c5lIMjbUUWthen5+bmLQsv9/BqxveXnDlpe3CfRIPW8/jVEDAAAAAAAAwEHzebfb3XKDX+fayvf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwHxTJod6smk72y2NpNJMcTdIqt3uY/LNfPqjOvJY8HnUQAAAA8AV0d7jd88tZzkKOD9oV1Xv+l6r3/Ufzbu5lPrOZTyczuVF9FtB7199YWpzsLC1O3i2n9f1+7z+7CrfqMb3PHjbe8+lqi3ZuZrZaczHX806K4kYaVcvS6X48G8f1qzKm4o2ewzuM7EY9L0f+YT1fq7mrsW5qlx+mjFUZOTzIyHgdW5mNF7bOxC5fnbV7mkhjEOzJNXtaM4hVOX9jh/s7Vs/L8fxuk5yPxtpMXB46+l7aOufJN/7yx5/c7ty7c/vmgwv7Z0g7c6ie964r7fWZmBzKxMvPcibWGa8ycWqwfC0/zI9zIefyVuYym59lOvOZybn8oCpN18dzMXTKD2WqMdT11VU7emu7SFr1Edp7sVbHlG1ierVqezyz+VHeyY3M5PXqv8uZyLdzJVcyNfQKn9rBlbaxyVnf/eqGwZ//Zl1oJ/l9Pa/cekrX1ydW5vWFobwOX3PHqrrhNStZOrGL+1E/S3/aOpTm1+pCuY/fZPXhMlprMzExlIkXt87EH6rLyoPOvTtzt6fv72x3Jz6sC+V59MG+ukuUx8uJwXPB6qOjrHuxV1c9gwznq1V/49Jr11hXd2pQ1ztTH256prbqZ7j1PV2u6l7esG6yqjs9VLf2easzeB466F/+ADyzPmglx751rNX+V/sf7Y/av23fbr959PtHvnPklVYO/+3wd5vjh77eeKX4cz7KL1be/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE/uwXvv35nudGbm1hS63e4vN6k6yIX+z5nt4U7PPJeMasitJPsj8//tdrv1mmI/xLN1oVs6ku4TNv9rkp1t3EyyUdXZ0Sdhi4uGH4CCZ8Kl+bv3Lz147/3XZu9O35q5NXNv6sqVqfGpK69PXro525kZ7/0ddZTAl2Hlpj/qSAAAAAAAAAAAAICd2ot/TrD53o/u5VABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAA+rahTQfp8jE+MXxcnlpcbJTTv3yypbNJI0kxc+T4uPkanpTxoa6Kzbbz6PZqbc/+Wzp05W+mv3tG1u125mH9ZRzSQ7V86fV3/Uv3F8xGGGZsPP9xMGo/S8AAP//fgkLLw==") r0 = creat(&(0x7f0000000580)='\x00', 0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x4020400) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000004000000040000000a000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=r4, @ANYBLOB], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r5, 0x50, 0x0}, 0x10) r6 = fanotify_init(0xf00, 0x0) fanotify_mark(r6, 0x105, 0x40009975, r0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r7, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000440), 0x1000a) sendfile(r7, r8, &(0x7f0000000000)=0x5, 0x20001) r9 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r10 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$binfmt_register(r10, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xffffffffffffffff, 0x3a, 'allow_other', 0x3a, '', 0x3a, './cgroup.cpu/cpuset.cpus', 0x3a, [0x50, 0x43]}, 0x45) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r9, 0x40305829, &(0x7f00000002c0)={0x17c04, 0xffffffffffffffff, 0x8006, 0x8a, 0x0, 0x8001}) 10.586341549s ago: executing program 4 (id=2178): write$binfmt_misc(0xffffffffffffffff, &(0x7f00000005c0), 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) read$msr(r0, &(0x7f0000001b00)=""/102392, 0x18ff8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) 10.367957603s ago: executing program 1 (id=2179): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1002}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000180)) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba701f71864ced67f1ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0x0, 0x7, 0x0, '\x00', {0x7ff, 0x7, 0x4, 0x2, r5, 0xffffffffffffffff, 0xc000, '\x00', 0x1, 0x80000000, 0xb4e7, 0x2, {0x8003, 0x8}, {0x100000006, 0x10001}, {0x100000000, 0x7}, {0x9, 0xa80}, 0x8000, 0xb, 0x4, 0x5}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r4}, 0x50) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) socket$inet6(0xa, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r7) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r8, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x48840) 9.266096685s ago: executing program 2 (id=2180): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0180c200000e080045ba002800650102020690780a010102ac1414bb4e244e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5108fffd9078005754108f1a25b7d98d14addf91d0d9c57083565f393836a111fe7986e3697200f9a9e529b229640de090dd47eb4b54f31fcd6aef3b1051a868da99f3554428c97b5008a20487d585bbb72a89838bc13d855ca050e77620ec0ef63485b571dff772d7a75aa7c15504972601d87524efa423e585cedf9ed4c6899404ec5c7009fcdf1a"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4}) 9.218970926s ago: executing program 4 (id=2181): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socketpair(0xf, 0x5, 0x7, &(0x7f0000000200)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x12b001) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000140)={"524ebce3", 0x3, 0x5, 0x81, 0x3, 0x16dc, "0d0767fcf850456f2290e729cf77f1", "2eb4fea5", "44b4dd9e", "ad2e21d3", ["d4150c57d062e240fbe214a9", "850f3d04d42a166156600360", "82621ecad17be13010ccc10d", "6631cbd8c92f5461e2ea90f9"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe, 0x1, 0x6, 0xe30, 0x7fffffff, "c2a0da871813beebb98f6cd3d5e10363", 0x0, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfc}) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d888f1d1c4e5ad85ce4966dbd0000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce2d712d2828da0a9423debbb86f9dba4a2dba4dbe076c292c2800c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100024db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d68143be79a8614b52dd4b961cc1dbf6db57ce940be783c3"], 0xe0}], 0x1}, 0x0) read$FUSE(r2, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r6, {0x7, 0x2b, 0x3ff7400, 0x12008010}}, 0x50) r7 = openat(0xffffffffffffff9c, 0x0, 0x4842, 0x0) writev(r7, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) 8.667359847s ago: executing program 3 (id=2182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x110, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) pread64(0xffffffffffffffff, &(0x7f0000001400)=""/4097, 0x1001, 0x9) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 7.674668127s ago: executing program 3 (id=2183): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r1, 0x2285, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32}, {0x0, 0x0, 0x5, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0x7f, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0xffffffff, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x3, 0x4}, @addr={0xcd, 0x9}}, {0x0, 0x1, 0x0, 0x0, @tick, {0x0, 0x3}, {0x0, 0x1}, @quote={{0x1, 0xfe}}}, {0x0, 0x40, 0x0, 0x5, @time={0x5, 0x1000}, {}, {0x0, 0x9}, @addr={0x2, 0xf}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @control={0x3, 0x9, 0x3}}], 0xc4) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000140)) 6.979641081s ago: executing program 3 (id=2184): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x260d}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000007c0)=""/4112, 0x1010}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f00000000c0)=""/115, 0x73}, {&(0x7f00000003c0)=""/83, 0x53}, {&(0x7f0000000240)=""/95, 0x5f}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f0000001800)=""/203, 0xcb}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f0000001980)=""/229, 0xe5}], 0x9}, 0x4d9}, {{0x0, 0x0, 0x0}, 0x20c78}], 0x8, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @bcast, @bpq0, 0x0, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x1, 0x20, 0x80000000, 0x7, {{0x2d, 0x4, 0x3, 0x9, 0xb4, 0x65, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@generic={0x94, 0xe, "47d4daf30d60e76f1661e343"}, @cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x5, 0xb, "010f8bf5ea79d5f3a5"}, {0x6, 0x5, "834c96"}, {0x9, 0xe, "fd9ee2c5024bc875d4e2a08a"}, {0x0, 0xb, "91aa36f27c90608902"}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xf9, 0x3, 0x3, [{@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x100}, {@multicast1}]}, @timestamp={0x44, 0x14, 0xff, 0x0, 0xd, [0x101, 0x80000001, 0x7, 0x4]}, @timestamp_addr={0x44, 0x24, 0xe2, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x13}, 0x5}, {@loopback, 0x5}, {@loopback, 0xf}, {@multicast2, 0x4}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x70, [@multicast1]}, @end]}}}}}) sendmsg$kcm(r0, &(0x7f0000002b00)={&(0x7f00000005c0)=@ll={0x11, 0x1, r5, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000002a80)=[{&(0x7f00000001c0)="e95944e07d40a24596512108a44e1d23d383faa8eb7162", 0x17}, {&(0x7f0000000640)="cd4c7dbbf5b638d8049fcd606fa57748b4dfa4e3fb43488854b26490dcdc5d3e0351ed16c2667d8c4319c2818253cbea8cc0a1e1584d919e3e477974f6e47102ca8b707ca2c8bd0c3aa885935594253f65710bec0b383e92da82fa9f5a5fe872bfb2681736ab7e9ee5a658306edb1d92201540f90683a5713599fa16382af55403fca5f53de0a419c0b09e65236a0d8cb0b01bf19473d92e6220e83278ef634aaba008987d4945622b312b6af491c9ce971e37e2a24fac8eb465dbf4cbbff6527453cfeccbf04f3c27874706d4a333e9d4432347237df7ec4789c2a670f34166b4ee7dbdfbaacf02ab451b50fdfb29fe9008", 0xf2}, {&(0x7f0000001a80)="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", 0x1000}, {&(0x7f00000002c0)="0a874f40e6d3807a827c86bc05c951b8165d7a55b9d6f7279aec5da19a5aac55b5787b2f427ba195b3c9fb9e40850c", 0x2f}, {&(0x7f0000000740)="4a430cad60b7e6a2a022be60e1a0e1e8e811df95448d5b25aeacb6ff636a2e2e7d44c041e46f0750c134ac29beb800f246ed8e364bc161b5f2f91af7193739b32af1bc86c8ecc84d99", 0x49}], 0x5, &(0x7f0000002e00)=[{0xc8, 0x10c, 0x0, "32e63991f48eed4d376c2fac8883cd0f50fc400b8e68854f6d91926490041ac25aa5d52668e4b75a9615d8e82ae455b63002d6f2eac47d0c6f94bba55c3e2a6daa0ee5bb50a594f326e90b12ebd34cd7fda0ffebe153d1c09bbe2ee5f1fa7facc59be8dd4e646a829eb2ddbc703460222660cfa6930411e7bfd8918da53a3c1ffdde23a1ab23d574fc0060564eee234277c306bf482af6651b70af86ca8d42eac964c993a1620e2d15b0f3daa5033e21fa4929d9b05ac1d6"}, {0x108, 0x117, 0x7f, "c632cd63549a1abcc5bdff29cda2990f6c13964b5e591dc4223129aa91b091a5764c50536dd4109fee20cc401cd93ef8c2b5869d5d8c4d89e101e4846652e2c08a57552bf55f4d10faad86dc23fe681f10c8bad4e03e45703449bbf55ac6e0152fe53d85a75cb2c0d05bc15493f0ba0f0fc10c478ea4eb475285bc1aeb7e87648f1537dba8c5f164a78283474f8dfed4a4ec9e19143867cab487b8ecaa690223f2f55219ec09a2415859b7553e7ec61199219c33a9f2f3f4ae113f00be30287b72b750a8e703ff8c532a01d695d42ef3caa25f11880f399c61bc03ffcaa119f92a4a1d3e2450a7df6f855a851704bf8b36b8e25a57"}], 0x1d0}, 0x40000) connect$rose(r4, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) chown(&(0x7f0000000000)='./file0\x00', 0xee01, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r6, 0x400, 0x0) 6.961021181s ago: executing program 1 (id=2185): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') umount2(&(0x7f0000000340)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32}, {0x0, 0x0, 0x5, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0x7f, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0xffffffff, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x3, 0x4}, @addr={0xcd, 0x9}}, {0x0, 0x1, 0x0, 0x0, @tick, {0x0, 0x3}, {0x0, 0x1}, @quote={{0x1, 0xfe}}}, {0x0, 0x40, 0x0, 0x5, @time={0x5, 0x1000}, {}, {0x0, 0x9}, @addr={0x2, 0xf}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @control={0x3, 0x9, 0x3}}], 0xc4) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000140)) 4.084987538s ago: executing program 3 (id=2186): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e7400"], 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) read$msr(r0, &(0x7f0000002700)=""/102376, 0x18fe8) syz_open_dev$dri(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) 3.644134157s ago: executing program 0 (id=2187): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e05, 0x1, @mcast1, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/7, 0x7}, 0x1}], 0x40000000000025b, 0x40000002, 0x0) 3.460280511s ago: executing program 4 (id=2188): syz_open_dev$dri(0x0, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x5053, &(0x7f0000000140)={0x0, 0xfffffffc, 0x3681, 0x0, 0x23b}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1800001e7400560023", @ANYRES32=0x0], 0x18}}, 0x20008050) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1000000000000002) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0xffbfffc0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0xc0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(r2, 0x8925, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x19b002, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x24000100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x4001040) 1.870715352s ago: executing program 2 (id=2189): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffcf61}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18) socket(0x2, 0x80805, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001400)=""/4097, 0x1001, 0x9) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 1.562983038s ago: executing program 1 (id=2190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x110, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) pread64(0xffffffffffffffff, &(0x7f0000001400)=""/4097, 0x1001, 0x9) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 1.257396885s ago: executing program 3 (id=2191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, 0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) pread64(0xffffffffffffffff, &(0x7f0000001400)=""/4097, 0x1001, 0x9) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 2.14382ms ago: executing program 2 (id=2192): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000001000000000300060000000e0002000000e0000009000000000000000002000100000000000000000200000000030005000000000002000004e00000010000000000000000"], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) write$P9_RRENAMEAT(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000280), 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r5, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x28, &(0x7f0000000b80)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7f9a2b55966c93735ea0a25b04702000014000000b703000000", @ANYBLOB="0000000000000000b702000000000000850000008600000018590000090000000000000000000000180000000e00000000000000070000004dadf8ff04000000181500", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x4d, &(0x7f0000000380)=""/77, 0x41000, 0x16, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000400)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0xc, 0x6, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[r6, r5, r5, r5, r5, r5], 0x0, 0x10, 0xff}, 0x94) 549.98µs ago: executing program 1 (id=2193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x582c952b5e63b23f, 0xffffffffffffffff, 0x892c4000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r3, 0x0, &(0x7f00000000c0)) 0s ago: executing program 3 (id=2194): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r1, 0x2285, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32}, {0x0, 0x0, 0x5, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0x7f, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0xffffffff, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x3, 0x4}, @addr={0xcd, 0x9}}, {0x0, 0x1, 0x0, 0x0, @tick, {0x0, 0x3}, {0x0, 0x1}, @quote={{0x1, 0xfe}}}, {0x0, 0x40, 0x0, 0x5, @time={0x5, 0x1000}, {}, {0x0, 0x9}, @addr={0x2, 0xf}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @control={0x3, 0x9, 0x3}}], 0xc4) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000140)) kernel console output (not intermixed with test programs): 752] dvb-usb: bulk message failed: -22 (1/0) [ 892.173976][ T8752] dvb-usb: error while querying for an remote control event. [ 892.733667][T10241] usb 2-1: USB disconnect, device number 34 [ 893.292143][T10241] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 895.298544][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1640'. [ 895.604378][T10280] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 897.464662][ T8692] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 897.988097][ T8692] usb 1-1: Using ep0 maxpacket: 16 [ 898.016711][ T8692] usb 1-1: config 0 has an invalid interface number: 222 but max is 0 [ 898.054839][ T8692] usb 1-1: config 0 has no interface number 0 [ 898.110120][ T8692] usb 1-1: New USB device found, idVendor=0458, idProduct=707f, bcdDevice=4f.37 [ 898.148401][ T8692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.167804][T10307] mkiss: ax0: crc mode is auto. [ 898.182304][ T8692] usb 1-1: Product: syz [ 898.206859][ T8692] usb 1-1: Manufacturer: syz [ 898.221290][ T8692] usb 1-1: SerialNumber: syz [ 898.244322][ T8692] usb 1-1: config 0 descriptor?? [ 898.469744][ T8692] usb 1-1: USB disconnect, device number 60 [ 898.974158][T10316] loop3: detected capacity change from 0 to 1024 [ 900.190534][ T8692] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 900.198171][ T4334] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 900.397917][ T4311] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 900.406892][ T8692] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 900.417497][ T4334] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.442843][ T8692] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 900.442883][ T4334] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 900.462818][ T4334] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 900.474843][ T4334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.495224][ T8692] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 900.505928][ T4334] usb 5-1: config 0 descriptor?? [ 900.511475][ T8692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.520941][ T4334] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 900.540713][ T4334] dvb-usb: bulk message failed: -22 (3/0) [ 900.556000][ T4334] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 900.571418][ T4334] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 900.586713][ T4334] usb 5-1: media controller created [ 900.605672][ T4334] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 900.617187][ T4311] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.647932][ T4311] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 900.691426][ T4334] dvb-usb: bulk message failed: -22 (6/0) [ 900.698907][ T4311] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 900.710168][ T4334] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 900.717351][ T4311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.731235][ T4334] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input71 [ 900.844644][ T4311] usb 1-1: config 0 descriptor?? [ 900.881562][ T4311] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 900.896827][ T4334] dvb-usb: schedule remote query interval to 150 msecs. [ 901.418672][ T4311] dvb-usb: bulk message failed: -22 (3/0) [ 901.424531][ T4334] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 901.441530][ T6233] usb 4-1: USB disconnect, device number 44 [ 901.821098][T10331] rdma_rxe: already configured on vxcan1 [ 901.838941][ T4326] dvb-usb: bulk message failed: -22 (1/0) [ 901.845882][ T4326] dvb-usb: error while querying for an remote control event. [ 901.856172][T10332] rdma_rxe: rxe_register_device failed with error -23 [ 901.863135][T10332] rdma_rxe: failed to add vxcan1 [ 901.882757][ T4311] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 901.942579][ T4311] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 902.080258][ T4311] usb 1-1: media controller created [ 902.097257][ T4311] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 902.121621][ T4311] dvb-usb: bulk message failed: -22 (6/0) [ 902.130165][ T4311] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 902.137778][ T4326] dvb-usb: bulk message failed: -22 (1/0) [ 902.146507][ T4326] dvb-usb: error while querying for an remote control event. [ 902.174550][ T4311] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input72 [ 902.218472][ T4311] dvb-usb: schedule remote query interval to 150 msecs. [ 902.244839][ T4311] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 902.357784][ T4311] dvb-usb: bulk message failed: -22 (1/0) [ 902.370200][ T4311] dvb-usb: error while querying for an remote control event. [ 902.434698][ T4311] dvb-usb: bulk message failed: -22 (1/0) [ 902.507080][ T4311] dvb-usb: error while querying for an remote control event. [ 902.587956][ T4311] dvb-usb: bulk message failed: -22 (1/0) [ 902.596621][ T4311] dvb-usb: error while querying for an remote control event. [ 903.661350][ T8740] dvb-usb: bulk message failed: -22 (1/0) [ 905.247758][ T8740] dvb-usb: error while querying for an remote control event. [ 905.296498][ T8692] dvb-usb: bulk message failed: -22 (1/0) [ 905.306096][ T4326] usb 1-1: USB disconnect, device number 61 [ 905.321931][ T4311] usb 5-1: USB disconnect, device number 46 [ 905.335627][ T8692] dvb-usb: error while querying for an remote control event. [ 905.574089][ T7878] dvb-usb: bulk message failed: -22 (1/0) [ 905.618603][ T7878] dvb-usb: error while querying for an remote control event. [ 905.826269][ T4326] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 905.835294][ T4311] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 907.852215][ T8692] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 907.935840][ T4374] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 908.215408][ T4374] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.225816][ T4374] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 908.235758][ T4374] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 908.245205][ T4374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.277957][ T4374] usb 3-1: config 0 descriptor?? [ 908.278115][ T4326] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 908.285454][ T4374] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 908.305662][ T4374] dvb-usb: bulk message failed: -22 (3/0) [ 908.360831][ T4374] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 908.376548][ T4374] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 908.396076][ T4374] usb 3-1: media controller created [ 908.424799][ T8692] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 908.444534][ T8692] usb 4-1: can't read configurations, error -71 [ 908.540390][ T7878] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 908.550392][ T4374] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 908.682034][ T4374] dvb-usb: bulk message failed: -22 (6/0) [ 908.689076][ T4374] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 908.886557][T10376] rdma_rxe: rxe_register_device failed with error -23 [ 908.895243][T10376] rdma_rxe: failed to add vxcan1 [ 908.987596][ T4374] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input73 [ 909.267769][ T4374] dvb-usb: schedule remote query interval to 150 msecs. [ 909.274912][ T4374] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 909.427736][ T4374] dvb-usb: bulk message failed: -22 (1/0) [ 909.433644][ T4374] dvb-usb: error while querying for an remote control event. [ 909.948271][ T4374] dvb-usb: bulk message failed: -22 (1/0) [ 909.955671][ T4374] dvb-usb: error while querying for an remote control event. [ 910.346569][T10241] dvb-usb: bulk message failed: -22 (1/0) [ 910.352592][ T6233] usb 3-1: USB disconnect, device number 40 [ 910.360985][T10241] dvb-usb: error while querying for an remote control event. [ 910.947052][ T6233] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 910.982860][T10391] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1673'. [ 911.314460][T10398] tmpfs: Unknown parameter 'grpquota/#/msr' [ 911.367093][T10398] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 911.367093][T10398] program syz.0.1675 not setting count and/or reply_len properly [ 911.477816][ T7878] usb 2-1: device descriptor read/64, error -71 [ 912.347768][ T7878] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 912.481732][T10411] loop4: detected capacity change from 0 to 1024 [ 912.557807][ T7878] usb 2-1: Using ep0 maxpacket: 32 [ 912.569506][ T7878] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 913.379581][ T7878] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 913.451381][ T7878] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 913.493097][ T7878] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 913.524245][ T7878] usb 2-1: config 0 interface 0 has no altsetting 0 [ 913.589435][ T7878] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 913.618253][ T7878] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 913.637318][ T7878] usb 2-1: Product: syz [ 913.655282][ T7878] usb 2-1: Manufacturer: syz [ 913.674463][ T7878] usb 2-1: SerialNumber: syz [ 913.693910][ T7878] usb 2-1: config 0 descriptor?? [ 913.712031][ T7878] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 913.870911][ T7878] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 914.522252][T10419] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 914.815752][ T6233] usb 2-1: USB disconnect, device number 36 [ 914.828592][ T6233] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 916.727939][ T7878] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 916.928314][ T7878] usb 3-1: Using ep0 maxpacket: 16 [ 916.987229][ T7878] usb 3-1: config 0 has an invalid interface number: 222 but max is 0 [ 917.087810][ T7878] usb 3-1: config 0 has no interface number 0 [ 917.120145][ T7878] usb 3-1: New USB device found, idVendor=0458, idProduct=707f, bcdDevice=4f.37 [ 917.166946][ T7878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.389874][ T7878] usb 3-1: Product: syz [ 917.419018][ T7878] usb 3-1: Manufacturer: syz [ 917.472886][ T7878] usb 3-1: SerialNumber: syz [ 917.584429][ T7878] usb 3-1: config 0 descriptor?? [ 917.899573][ T7878] usb 3-1: USB disconnect, device number 41 [ 918.056941][T10448] loop1: detected capacity change from 0 to 1024 [ 918.171182][ T6383] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 920.019250][T10456] loop4: detected capacity change from 0 to 512 [ 920.074872][T10464] overlayfs: failed to resolve './file1': -2 [ 920.196766][T10456] EXT4-fs: Ignoring removed mblk_io_submit option [ 920.388275][T10456] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 920.593252][T10456] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 920.785259][T10475] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 920.785259][T10475] program syz.2.1697 not setting count and/or reply_len properly [ 921.070190][T10456] System zones: 1-12 [ 921.116466][T10456] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.1692: corrupted in-inode xattr [ 921.319575][T10456] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1692: couldn't read orphan inode 15 (err -117) [ 921.367766][ T7878] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 921.449702][T10456] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 921.898701][ T7878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 921.974250][ T7878] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 922.147840][ T7878] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 922.198052][ T7878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.212592][ T7878] usb 2-1: config 0 descriptor?? [ 922.234365][ T7878] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 922.247764][ T7878] dvb-usb: bulk message failed: -22 (3/0) [ 922.260142][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 922.266405][ T7878] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 922.286207][ T7878] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 922.304912][ T7878] usb 2-1: media controller created [ 922.318175][ T7878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 922.356652][ T7878] dvb-usb: bulk message failed: -22 (6/0) [ 922.368350][ T7878] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 922.528091][ T7878] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input74 [ 922.715737][ T7878] dvb-usb: schedule remote query interval to 150 msecs. [ 922.725342][ T7878] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 922.877950][ T7878] dvb-usb: bulk message failed: -22 (1/0) [ 922.886467][ T7878] dvb-usb: error while querying for an remote control event. [ 923.350590][ T7878] dvb-usb: bulk message failed: -22 (1/0) [ 923.360555][ T7878] dvb-usb: error while querying for an remote control event. [ 923.540655][T10498] tmpfs: Unknown parameter 'grpquota/#/msr' [ 923.801577][T10496] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 923.801577][T10496] program syz.4.1702 not setting count and/or reply_len properly [ 923.877763][ T7878] dvb-usb: bulk message failed: -22 (1/0) [ 923.883724][ T7878] dvb-usb: error while querying for an remote control event. [ 924.078795][ T7878] dvb-usb: bulk message failed: -22 (1/0) [ 924.112124][T10503] tmpfs: Unknown parameter 'grpquota/#/msr' [ 924.205237][ T7878] dvb-usb: error while querying for an remote control event. [ 924.345446][T10503] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 924.345446][T10503] program syz.3.1704 not setting count and/or reply_len properly [ 924.502975][ T4326] usb 2-1: USB disconnect, device number 37 [ 924.524185][ T4326] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 924.666779][T10505] tmpfs: Unknown parameter 'grpquota/#/msr' [ 924.919703][T10506] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 924.919703][T10506] program syz.4.1705 not setting count and/or reply_len properly [ 925.151171][T10509] tmpfs: Unknown parameter 'grpquota/#/msr' [ 925.197496][T10509] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 925.197496][T10509] program syz.1.1706 not setting count and/or reply_len properly [ 926.820434][ T4326] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 927.098667][ T4326] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.166491][ T4326] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 927.253621][ T4326] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 927.274965][ T4326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.300293][ T4326] usb 4-1: config 0 descriptor?? [ 927.327583][ T4326] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 927.336828][ T4326] dvb-usb: bulk message failed: -22 (3/0) [ 927.432296][ T4326] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 927.472858][ T4326] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 927.482408][ T4326] usb 4-1: media controller created [ 927.489021][ T4326] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 927.600437][ T4326] dvb-usb: bulk message failed: -22 (6/0) [ 927.606282][ T4326] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 927.617334][ T4335] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 927.655052][ T4326] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input75 [ 928.651330][ T4326] dvb-usb: schedule remote query interval to 150 msecs. [ 928.658486][ T4326] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 928.927927][ T4326] dvb-usb: bulk message failed: -22 (1/0) [ 928.933845][ T4326] dvb-usb: error while querying for an remote control event. [ 929.613653][ T4374] usb 4-1: USB disconnect, device number 47 [ 930.183635][ T4334] dvb-usb: bulk message failed: -22 (1/0) [ 930.189701][ T4334] dvb-usb: error while querying for an remote control event. [ 930.326305][ T4335] usb 5-1: unable to read config index 0 descriptor/all [ 930.357774][ T4335] usb 5-1: can't read configurations, error -71 [ 930.483342][ T4374] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 931.130036][T10549] tmpfs: Unknown parameter 'grpquota/#/msr' [ 931.199354][T10549] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 931.199354][T10549] program syz.3.1717 not setting count and/or reply_len properly [ 931.429434][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.439489][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.267879][ T4335] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 933.467973][ T4335] usb 4-1: Using ep0 maxpacket: 32 [ 933.481733][ T4335] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 933.494188][ T4335] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 933.506172][ T4335] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 933.517827][ T4335] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 933.553588][ T4335] usb 4-1: config 0 interface 0 has no altsetting 0 [ 933.594118][ T4335] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 933.613602][ T4335] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 933.633803][ T4335] usb 4-1: Product: syz [ 933.643936][ T4335] usb 4-1: Manufacturer: syz [ 933.677949][ T4335] usb 4-1: SerialNumber: syz [ 933.700074][ T4335] usb 4-1: config 0 descriptor?? [ 933.841409][ T4335] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 933.852878][ T4335] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 938.708178][ T4779] usb 4-1: USB disconnect, device number 48 [ 938.718797][ T4779] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 940.207761][ T7878] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 940.439188][T10614] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1731'. [ 940.487761][ T7878] usb 4-1: Using ep0 maxpacket: 16 [ 940.597884][ T7878] usb 4-1: config 0 has an invalid interface number: 222 but max is 0 [ 940.677098][T10617] tmpfs: Unknown parameter 'grpquota/#/msr' [ 940.730558][T10617] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 940.730558][T10617] program syz.0.1732 not setting count and/or reply_len properly [ 941.127890][ T7878] usb 4-1: config 0 has no interface number 0 [ 941.154858][ T7878] usb 4-1: New USB device found, idVendor=0458, idProduct=707f, bcdDevice=4f.37 [ 941.183275][ T7878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.217944][ T7878] usb 4-1: Product: syz [ 941.464461][ T7878] usb 4-1: Manufacturer: syz [ 941.484368][ T7878] usb 4-1: SerialNumber: syz [ 941.516469][ T7878] usb 4-1: config 0 descriptor?? [ 941.873794][ T7878] usb 4-1: USB disconnect, device number 49 [ 943.187865][ T7878] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 943.876489][T10641] tmpfs: Unknown parameter 'grpquota/#/msr' [ 943.972160][T10641] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 943.972160][T10641] program syz.1.1738 not setting count and/or reply_len properly [ 944.276086][T10642] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1737'. [ 944.467932][ T7878] usb 4-1: Using ep0 maxpacket: 32 [ 944.505235][ T7878] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 944.666348][T10642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1737'. [ 944.677772][ T7878] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 944.697723][ T7878] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 944.709388][ T7878] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 944.723545][ T7878] usb 4-1: config 0 interface 0 has no altsetting 0 [ 945.354046][ T7878] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 945.393830][ T7878] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 945.403052][ T7878] usb 4-1: Product: syz [ 945.407319][ T7878] usb 4-1: Manufacturer: syz [ 945.412148][ T7878] usb 4-1: SerialNumber: syz [ 945.426124][ T7878] usb 4-1: config 0 descriptor?? [ 945.493726][ T7878] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 945.577837][ T7878] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 947.301648][T10660] binder: BINDER_SET_CONTEXT_MGR already set [ 947.309377][T10660] binder: 10651:10660 ioctl 4018620d 200000000040 returned -16 [ 949.048340][ T4488] usb 4-1: USB disconnect, device number 50 [ 949.471345][ T4488] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 949.749270][ T5026] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 950.177911][ T5026] usb 2-1: Using ep0 maxpacket: 16 [ 950.220876][T10688] tmpfs: Unknown parameter 'grpquota/#/msr' [ 950.310580][T10688] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 950.310580][T10688] program syz.3.1746 not setting count and/or reply_len properly [ 950.601229][ T5026] usb 2-1: config 0 has an invalid interface number: 222 but max is 0 [ 950.617907][ T5026] usb 2-1: config 0 has no interface number 0 [ 950.626904][ T5026] usb 2-1: New USB device found, idVendor=0458, idProduct=707f, bcdDevice=4f.37 [ 950.701107][ T5026] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.727125][ T5026] usb 2-1: Product: syz [ 950.732130][ T5026] usb 2-1: Manufacturer: syz [ 950.736720][ T5026] usb 2-1: SerialNumber: syz [ 950.753258][ T5026] usb 2-1: config 0 descriptor?? [ 950.979319][ T6233] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 951.493363][ T5026] usb 2-1: USB disconnect, device number 38 [ 952.232390][ T6233] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 952.253000][ T6233] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 952.289119][ T6233] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 952.308068][ T6233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.335326][ T6233] usb 4-1: config 0 descriptor?? [ 952.355276][ T6233] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 952.432894][ T6233] dvb-usb: bulk message failed: -22 (3/0) [ 952.449415][ T6233] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 952.458955][ T6233] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 952.466842][ T6233] usb 4-1: media controller created [ 952.474351][ T6233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 952.479902][T10707] mkiss: ax0: crc mode is auto. [ 953.792006][ T6233] dvb-usb: bulk message failed: -22 (6/0) [ 953.968018][ T6233] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 954.065649][T10717] rdma_rxe: rxe_register_device failed with error -23 [ 954.073303][T10717] rdma_rxe: failed to add vxcan1 [ 954.678238][ T6233] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input76 [ 954.694822][ T6233] dvb-usb: schedule remote query interval to 150 msecs. [ 954.702430][ T6233] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 954.857793][ T6233] dvb-usb: bulk message failed: -22 (1/0) [ 954.863638][ T6233] dvb-usb: error while querying for an remote control event. [ 955.034065][ T6233] dvb-usb: bulk message failed: -22 (1/0) [ 955.049493][ T6233] dvb-usb: error while querying for an remote control event. [ 955.087818][ T4311] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 955.238628][ T6233] dvb-usb: bulk message failed: -22 (1/0) [ 955.278903][ T6233] dvb-usb: error while querying for an remote control event. [ 955.297198][ T4311] usb 1-1: Using ep0 maxpacket: 32 [ 955.339473][ T4311] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 955.652840][ T4311] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 955.665960][ T4311] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 955.725164][ T4311] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 955.738482][ T4311] usb 1-1: config 0 interface 0 has no altsetting 0 [ 955.749821][ T5026] usb 4-1: USB disconnect, device number 51 [ 955.778888][ T4311] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 955.860156][ T4311] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 956.296370][ T4311] usb 1-1: Product: syz [ 956.306728][ T4311] usb 1-1: Manufacturer: syz [ 956.757809][ T4311] usb 1-1: SerialNumber: syz [ 956.798404][ T4311] usb 1-1: config 0 descriptor?? [ 956.817479][ T5026] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 956.839042][ T4311] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 956.877500][ T4311] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 960.716894][ T4408] usb 1-1: USB disconnect, device number 63 [ 960.730520][ T4408] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 960.746351][T10757] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1764'. [ 960.867755][ T4311] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 960.926477][T10757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1764'. [ 960.973095][T10760] netlink: 'syz.3.1764': attribute type 21 has an invalid length. [ 961.004426][T10760] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1764'. [ 961.063535][ T4311] usb 3-1: Using ep0 maxpacket: 16 [ 961.465306][ T4311] usb 3-1: config 0 has an invalid interface number: 222 but max is 0 [ 961.520565][T10760] netlink: 'syz.3.1764': attribute type 4 has an invalid length. [ 961.528453][ T4311] usb 3-1: config 0 has no interface number 0 [ 961.533497][T10767] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 961.533497][T10767] program syz.0.1767 not setting count and/or reply_len properly [ 961.563683][T10760] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1764'. [ 961.576160][ T4311] usb 3-1: New USB device found, idVendor=0458, idProduct=707f, bcdDevice=4f.37 [ 961.674189][ T4311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.829625][ T4311] usb 3-1: Product: syz [ 961.860317][ T4311] usb 3-1: Manufacturer: syz [ 961.913036][ T4311] usb 3-1: SerialNumber: syz [ 962.101144][ T4311] usb 3-1: config 0 descriptor?? [ 962.691813][ T4311] usb 3-1: USB disconnect, device number 42 [ 963.209754][T10784] tmpfs: Unknown parameter 'grpquota/#/msr' [ 963.533779][T10782] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 963.533779][T10782] program syz.0.1772 not setting count and/or reply_len properly [ 964.595453][T10789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1775'. [ 964.902433][T10795] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 964.902433][T10795] program syz.2.1776 not setting count and/or reply_len properly [ 966.535557][T10800] tmpfs: Unknown parameter 'grpquota/#/msr' [ 966.560075][T10800] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 966.560075][T10800] program syz.2.1780 not setting count and/or reply_len properly [ 966.768637][ T7] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 966.902453][ T5026] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 967.571208][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.587804][ T7] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 967.607229][ T7] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 967.616569][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.669500][ T5026] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.689861][ T5026] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 967.716719][ T7] usb 2-1: config 0 descriptor?? [ 967.736322][ T5026] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 967.747497][ T7] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 967.762361][ T5026] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.853553][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 968.263316][ T7] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 968.272561][ T5026] usb 5-1: config 0 descriptor?? [ 968.291361][ T5026] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 968.301406][ T7] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 968.309599][ T5026] dvb-usb: bulk message failed: -22 (3/0) [ 968.318902][ T7] usb 2-1: media controller created [ 968.327556][ T5026] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 968.338502][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 968.439695][T10818] rdma_rxe: rxe_register_device failed with error -23 [ 968.447478][T10818] rdma_rxe: failed to add vxcan1 [ 968.923552][ T5026] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 968.959615][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 968.965734][ T5026] usb 5-1: media controller created [ 969.066370][ T4408] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 969.083098][ T7] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 969.095173][ T5026] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 969.130929][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input78 [ 969.149645][ T5026] dvb-usb: bulk message failed: -22 (6/0) [ 969.156469][ T5026] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 969.247363][T10820] rdma_rxe: already configured on vxcan1 [ 969.732999][ T7] dvb-usb: schedule remote query interval to 150 msecs. [ 969.747203][ T5026] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input79 [ 969.761089][ T7] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 969.811502][ T5026] dvb-usb: schedule remote query interval to 150 msecs. [ 969.823699][ T5026] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 969.831970][ T4408] usb 3-1: Using ep0 maxpacket: 16 [ 969.844129][ T4408] usb 3-1: config 0 has an invalid interface number: 222 but max is 0 [ 969.924710][ T4408] usb 3-1: config 0 has no interface number 0 [ 969.938730][ T4311] dvb-usb: bulk message failed: -22 (1/0) [ 969.944805][ T4311] dvb-usb: error while querying for an remote control event. [ 970.010018][ T4408] usb 3-1: New USB device found, idVendor=0458, idProduct=707f, bcdDevice=4f.37 [ 970.067945][ T4408] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.109107][ T4408] usb 3-1: Product: syz [ 970.124983][ T4408] usb 3-1: Manufacturer: syz [ 970.131010][ T4408] usb 3-1: SerialNumber: syz [ 970.266636][ T4408] usb 3-1: config 0 descriptor?? [ 970.276062][ T4311] dvb-usb: bulk message failed: -22 (1/0) [ 970.282480][ T5026] usb 2-1: USB disconnect, device number 39 [ 971.082262][ T4311] dvb-usb: error while querying for an remote control event. [ 971.095682][ T4408] usb 3-1: can't set config #0, error -71 [ 971.109742][ T4408] usb 3-1: USB disconnect, device number 43 [ 971.125577][ T7] usb 5-1: USB disconnect, device number 49 [ 971.153429][ T5026] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 971.306738][ T7] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 974.595154][T10847] tmpfs: Unknown parameter 'grpquota/#/msr' [ 974.989698][T10841] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1790'. [ 975.488223][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1790'. [ 975.824162][T10841] netlink: 'syz.3.1790': attribute type 21 has an invalid length. [ 975.832976][T10841] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1790'. [ 975.843463][T10841] netlink: 'syz.3.1790': attribute type 4 has an invalid length. [ 975.900884][T10841] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1790'. [ 976.060063][T10858] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1795'. [ 976.409062][ T4408] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 976.805954][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1795'. [ 976.856305][T10865] netlink: 'syz.0.1795': attribute type 21 has an invalid length. [ 976.875965][T10865] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1795'. [ 976.895882][ T4408] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.914181][ T4408] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 976.962318][ T4408] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 976.975603][ T4408] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.986520][T10865] netlink: 'syz.0.1795': attribute type 4 has an invalid length. [ 977.010009][ T4408] usb 2-1: config 0 descriptor?? [ 977.031922][ T4408] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 977.062325][ T4408] dvb-usb: bulk message failed: -22 (3/0) [ 977.188610][ T4408] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 977.943824][ T4408] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 977.950992][ T4408] usb 2-1: media controller created [ 977.957258][ T4408] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 977.969151][ T4408] dvb-usb: bulk message failed: -22 (6/0) [ 977.974959][ T4408] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 978.002111][ T4408] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input80 [ 978.167327][T10865] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1795'. [ 978.285336][T10878] rdma_rxe: rxe_register_device failed with error -23 [ 978.293975][T10878] rdma_rxe: failed to add vxcan1 [ 978.564267][ T4408] dvb-usb: schedule remote query interval to 150 msecs. [ 978.641262][ T4408] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 979.755921][ T4408] usb 2-1: USB disconnect, device number 40 [ 979.823361][ T4408] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 980.032807][T10885] tmpfs: Unknown parameter 'grpquota/#/msr' [ 980.071274][ T4311] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 980.123162][T10885] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 980.123162][T10885] program syz.1.1801 not setting count and/or reply_len properly [ 980.287756][ T4311] usb 3-1: Using ep0 maxpacket: 16 [ 980.294613][ T4311] usb 3-1: config 0 has an invalid interface number: 222 but max is 0 [ 980.340041][ T4311] usb 3-1: config 0 has no interface number 0 [ 980.412859][ T4311] usb 3-1: New USB device found, idVendor=0458, idProduct=707f, bcdDevice=4f.37 [ 980.444960][ T4311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.496003][ T4311] usb 3-1: Product: syz [ 980.502007][ T4311] usb 3-1: Manufacturer: syz [ 980.520880][ T4311] usb 3-1: SerialNumber: syz [ 980.553237][ T4311] usb 3-1: config 0 descriptor?? [ 980.788270][ T4311] usb 3-1: USB disconnect, device number 44 [ 982.352363][T10899] loop2: detected capacity change from 0 to 512 [ 982.481997][T10899] EXT4-fs: Ignoring removed mblk_io_submit option [ 983.191735][T10899] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 983.217329][T10899] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 983.225340][T10899] System zones: 1-12 [ 983.252109][T10899] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.1806: corrupted in-inode xattr [ 983.264709][T10899] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1806: couldn't read orphan inode 15 (err -117) [ 983.285177][T10899] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 983.352839][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 984.080522][T10910] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 984.080522][T10910] program syz.3.1809 not setting count and/or reply_len properly [ 986.521646][T10928] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1812'. [ 987.583785][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1812'. [ 990.284638][T10949] tmpfs: Unknown parameter 'grpquota/#/msr' [ 990.534252][ T7] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 991.029439][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 991.057530][ T7] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 991.089012][ T7] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 991.114081][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.141383][ T7] usb 2-1: config 0 descriptor?? [ 991.155389][ T7] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 991.162843][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 991.177219][ T7] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 991.193270][ T7] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 991.201146][ T7] usb 2-1: media controller created [ 991.214032][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 991.231553][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 991.238121][ T7] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 991.362216][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input82 [ 991.899866][ T7] dvb-usb: schedule remote query interval to 150 msecs. [ 992.028122][ T7] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 992.227846][ T5026] dvb-usb: bulk message failed: -22 (1/0) [ 992.264207][ T5026] dvb-usb: error while querying for an remote control event. [ 992.361326][T10964] rdma_rxe: rxe_register_device failed with error -23 [ 992.369073][T10964] rdma_rxe: failed to add vxcan1 [ 992.913390][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.919775][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.219218][T10971] tmpfs: Unknown parameter 'grpquota/#/msr' [ 993.227709][ T5026] dvb-usb: bulk message failed: -22 (1/0) [ 993.258973][ T5026] dvb-usb: error while querying for an remote control event. [ 993.440534][T10971] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 993.440534][T10971] program syz.4.1825 not setting count and/or reply_len properly [ 994.012900][ T5026] dvb-usb: bulk message failed: -22 (1/0) [ 994.298481][ T5026] dvb-usb: error while querying for an remote control event. [ 994.593325][ T5026] usb 2-1: USB disconnect, device number 41 [ 994.674228][ T5026] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 994.859096][T10983] tmpfs: Unknown parameter 'grpquota/#/msr' [ 994.877173][T10983] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 994.877173][T10983] program syz.1.1826 not setting count and/or reply_len properly [ 995.453204][T10987] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 995.453204][T10987] program syz.4.1827 not setting count and/or reply_len properly [ 997.003157][T11000] input input84: cannot allocate more than FF_MAX_EFFECTS effects [ 997.172891][T11006] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 997.185763][T11006] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 997.193812][T11006] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 997.944726][T11008] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1830'. [ 998.388721][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1830'. [ 998.825633][T11008] netlink: 'syz.3.1830': attribute type 21 has an invalid length. [ 998.887801][ T4311] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 999.097819][ T4311] usb 5-1: Using ep0 maxpacket: 32 [ 999.104265][ T4311] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 999.112598][ T4311] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 999.123692][ T4311] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 999.134898][ T4311] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 999.148255][ T4311] usb 5-1: config 0 interface 0 has no altsetting 0 [ 999.166210][ T4311] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 999.178145][ T4311] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 999.188285][T11008] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1830'. [ 999.190929][ T4311] usb 5-1: Product: syz [ 999.217811][ T4311] usb 5-1: Manufacturer: syz [ 999.222546][ T4311] usb 5-1: SerialNumber: syz [ 999.229279][ T4311] usb 5-1: config 0 descriptor?? [ 999.243926][ T4311] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 999.247900][ T4477] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 999.256622][ T4311] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 999.421005][T11008] netlink: 'syz.3.1830': attribute type 4 has an invalid length. [ 999.461624][ T4477] usb 1-1: Using ep0 maxpacket: 32 [ 999.471587][ T4477] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1001.040725][ T4477] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1001.072470][T11008] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1830'. [ 1001.144803][ T4477] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1001.255584][ T4477] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1001.412672][ T4477] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1001.476317][ T4477] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1001.614376][ T4477] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1001.633355][ T4311] usb 5-1: USB disconnect, device number 50 [ 1001.662324][ T4311] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1001.670997][ T4477] usb 1-1: Product: syz [ 1001.711194][ T4477] usb 1-1: Manufacturer: syz [ 1001.737713][ T4477] usb 1-1: SerialNumber: syz [ 1001.822332][ T4477] usb 1-1: config 0 descriptor?? [ 1001.887584][ T4477] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1002.013447][ T4477] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1002.399374][ T4477] usb 1-1: USB disconnect, device number 64 [ 1002.406787][ T4477] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1003.282604][T11048] tmpfs: Unknown parameter 'grpquota/#/msr' [ 1003.340739][T11048] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 1003.340739][T11048] program syz.1.1842 not setting count and/or reply_len properly [ 1003.397952][ T4477] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1003.568460][T11038] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 1003.597812][ T4477] usb 4-1: Using ep0 maxpacket: 32 [ 1003.611959][ T4477] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1003.621209][ T4477] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1003.633053][ T4477] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1003.748082][ T4477] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1003.761508][ T4477] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1003.771871][ T4477] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1003.781036][ T4477] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1003.795138][ T4477] usb 4-1: Product: syz [ 1003.818126][ T4477] usb 4-1: Manufacturer: syz [ 1003.822764][ T4477] usb 4-1: SerialNumber: syz [ 1003.855366][ T4477] usb 4-1: config 0 descriptor?? [ 1003.876723][T11038] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.891610][T11038] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1003.895802][ T4477] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1003.902450][T11038] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1003.930902][ T4477] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1004.074428][T11038] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.729603][T11038] usb 5-1: config 0 descriptor?? [ 1004.745421][T11038] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1004.782051][T11056] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1004.835257][T11038] dvb-usb: bulk message failed: -22 (3/0) [ 1004.862539][T11038] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1004.897755][ T7898] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 1004.919567][T11038] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1005.121581][T11038] usb 5-1: media controller created [ 1005.127762][ T4477] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1005.179487][T11061] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1005.187175][T11062] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1005.209333][ T7898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.346464][T11038] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1005.356816][ T7898] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1005.914397][T11065] rdma_rxe: already configured on vxcan1 [ 1006.050851][ T7898] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1006.064655][T11038] dvb-usb: bulk message failed: -22 (6/0) [ 1006.070605][T11038] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1006.079858][ T7898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.110229][T11038] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input85 [ 1006.234232][ T7898] usb 1-1: config 0 descriptor?? [ 1006.508544][T11038] dvb-usb: schedule remote query interval to 150 msecs. [ 1006.571040][ T7898] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1006.690428][T11038] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1006.729384][ T7898] dvb-usb: bulk message failed: -22 (3/0) [ 1007.321906][T11069] rdma_rxe: rxe_register_device failed with error -23 [ 1007.329584][T11069] rdma_rxe: failed to add vxcan1 [ 1007.529372][T11038] usb 5-1: USB disconnect, device number 51 [ 1007.580907][ T7898] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1007.742703][ T7898] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1007.911995][ T7898] usb 1-1: media controller created [ 1008.125570][ T7898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1008.565846][ T7898] dvb-usb: bulk message failed: -22 (6/0) [ 1008.575534][ T7898] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1008.577764][ T4477] usb 3-1: device descriptor read/all, error -71 [ 1008.587955][ T4311] usb 4-1: USB disconnect, device number 52 [ 1008.589537][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 1008.713159][ T7898] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input86 [ 1008.928086][ T4311] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1009.360975][T11081] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1009.378880][T11081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1009.386951][T11081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1010.102938][ T7898] dvb-usb: schedule remote query interval to 150 msecs. [ 1010.112598][ T7898] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1010.156123][ T7898] usb 1-1: USB disconnect, device number 65 [ 1010.164660][T11038] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1010.175523][T11086] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1010.194496][ T7898] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1010.425734][T11094] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1010.607893][ T4311] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1010.800474][ T4311] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.811023][ T4311] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1010.820634][ T4311] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1010.830771][ T4311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.849243][ T4311] usb 4-1: config 0 descriptor?? [ 1010.878377][ T4311] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1010.897792][ T4311] dvb-usb: bulk message failed: -22 (3/0) [ 1010.910382][ T4311] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1010.932329][ T4311] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1010.940113][ T4311] usb 4-1: media controller created [ 1010.957918][ T4311] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1010.979946][ T4311] dvb-usb: bulk message failed: -22 (6/0) [ 1011.008141][ T4311] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1011.037546][ T4311] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input87 [ 1011.051505][ T4311] dvb-usb: schedule remote query interval to 150 msecs. [ 1011.058853][ T4311] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1011.217789][T11038] dvb-usb: bulk message failed: -22 (1/0) [ 1011.223559][T11038] dvb-usb: error while querying for an remote control event. [ 1012.060734][ T4311] dvb-usb: bulk message failed: -22 (1/0) [ 1012.097602][ T4311] dvb-usb: error while querying for an remote control event. [ 1012.517236][ T7898] dvb-usb: bulk message failed: -22 (1/0) [ 1012.523794][ T7898] dvb-usb: error while querying for an remote control event. [ 1012.697960][ T7898] dvb-usb: bulk message failed: -22 (1/0) [ 1012.711379][ T7898] dvb-usb: error while querying for an remote control event. [ 1012.940525][ T7898] dvb-usb: bulk message failed: -22 (1/0) [ 1012.956741][ T7898] dvb-usb: error while querying for an remote control event. [ 1013.134845][ T4271] usb 4-1: USB disconnect, device number 53 [ 1013.235568][ T4271] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1016.051998][T11140] tmpfs: Unknown parameter 'grpquota/#/msr' [ 1016.533049][T11135] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 1016.533049][T11135] program syz.0.1864 not setting count and/or reply_len properly [ 1016.710603][T11145] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1016.717764][T11038] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 1016.734060][T11145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1016.742151][T11145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1017.804069][T11038] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.818758][T11038] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1017.832768][T11038] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1017.849442][T11038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.541061][T11038] usb 3-1: config 0 descriptor?? [ 1018.602708][T11038] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1018.616040][T11038] dvb-usb: bulk message failed: -22 (3/0) [ 1019.034984][T11038] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1019.208514][T11038] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1019.303698][T11165] rdma_rxe: rxe_register_device failed with error -23 [ 1019.311401][T11165] rdma_rxe: failed to add vxcan1 [ 1019.848384][T11038] usb 3-1: media controller created [ 1019.860921][T11038] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1019.862454][T11166] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1871'. [ 1019.944590][T11166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1871'. [ 1019.973957][T11166] netlink: 'syz.1.1871': attribute type 21 has an invalid length. [ 1019.983159][T11166] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1871'. [ 1019.993213][T11166] netlink: 'syz.1.1871': attribute type 4 has an invalid length. [ 1020.001189][T11166] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1871'. [ 1020.025360][T11167] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1872'. [ 1020.088742][T11038] dvb-usb: bulk message failed: -22 (6/0) [ 1020.126126][T11038] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1020.165377][T11038] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input90 [ 1020.281623][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1872'. [ 1020.300869][T11038] dvb-usb: schedule remote query interval to 150 msecs. [ 1020.310110][T11038] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1020.418653][ T4477] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 1020.467758][T11038] dvb-usb: bulk message failed: -22 (1/0) [ 1020.473780][T11038] dvb-usb: error while querying for an remote control event. [ 1020.624380][ T4477] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.698399][T11038] dvb-usb: bulk message failed: -22 (1/0) [ 1020.705306][T11038] dvb-usb: error while querying for an remote control event. [ 1020.725963][ T4477] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1020.773506][ T4477] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1020.899078][T11038] usb 3-1: USB disconnect, device number 47 [ 1020.934168][T11038] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1020.968382][ T4477] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.014398][ T4477] usb 5-1: config 0 descriptor?? [ 1021.157327][ T4477] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1021.195252][ T4477] dvb-usb: bulk message failed: -22 (3/0) [ 1022.947263][ T4477] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1022.956346][ T4477] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1022.972038][ T4477] usb 5-1: media controller created [ 1022.978280][ T4477] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1023.003814][ T4477] dvb-usb: bulk message failed: -22 (6/0) [ 1023.268060][T11180] rdma_rxe: already configured on vxcan1 [ 1023.957843][ T4477] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1024.006959][ T4477] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input91 [ 1024.104828][ T4477] dvb-usb: schedule remote query interval to 150 msecs. [ 1024.135224][T11184] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1876'. [ 1024.206472][ T4477] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1024.366713][ T4477] dvb-usb: bulk message failed: -22 (1/0) [ 1024.535277][ T4477] dvb-usb: error while querying for an remote control event. [ 1024.976781][T11038] usb 5-1: USB disconnect, device number 52 [ 1025.072121][T11038] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1025.098343][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1876'. [ 1025.152076][T11191] netlink: 'syz.2.1876': attribute type 21 has an invalid length. [ 1025.177877][T11191] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1876'. [ 1025.201671][T11191] netlink: 'syz.2.1876': attribute type 4 has an invalid length. [ 1025.211926][T11191] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1876'. [ 1025.737915][T11038] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 1025.797430][T11201] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1026.038191][T11038] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.219776][T11038] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1026.238281][T11038] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1026.403737][T11038] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.436082][T11038] usb 5-1: config 0 descriptor?? [ 1026.462322][T11038] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1026.479191][T11038] dvb-usb: bulk message failed: -22 (3/0) [ 1026.502864][T11038] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1026.512569][T11038] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1026.526040][T11038] usb 5-1: media controller created [ 1026.554413][T11038] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1026.583339][T11038] dvb-usb: bulk message failed: -22 (6/0) [ 1026.596574][T11038] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1026.611697][T11038] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input92 [ 1026.629458][T11038] dvb-usb: schedule remote query interval to 150 msecs. [ 1026.637963][T11038] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1026.828686][T10241] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1026.949194][T11213] rdma_rxe: already configured on vxcan1 [ 1027.835655][T10241] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1027.860436][T11038] dvb-usb: bulk message failed: -22 (1/0) [ 1027.871619][T10241] usb 4-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1027.882745][T10241] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1027.882886][T11038] dvb-usb: error while querying for an remote control event. [ 1028.067428][T11038] dvb-usb: bulk message failed: -22 (1/0) [ 1028.078544][T10241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.091076][T11038] dvb-usb: error while querying for an remote control event. [ 1028.279451][T11038] dvb-usb: bulk message failed: -22 (1/0) [ 1028.564900][T10241] usb 4-1: invalid MIDI out EP 0 [ 1028.572017][T11038] dvb-usb: error while querying for an remote control event. [ 1028.676071][T10241] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 1028.700484][T10241] usb 5-1: USB disconnect, device number 53 [ 1028.725713][ T4895] udevd[4895]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1028.905235][T10241] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1029.325809][T10241] usb 4-1: USB disconnect, device number 54 [ 1029.485868][T11228] binder: BINDER_SET_CONTEXT_MGR already set [ 1029.492329][T11228] binder: 11225:11228 ioctl 4018620d 200000000040 returned -16 [ 1034.633898][T11268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1897'. [ 1035.304694][T11279] tmpfs: Unknown parameter 'grpquota/#/msr' [ 1035.335936][T11279] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 1035.335936][T11279] program syz.0.1900 not setting count and/or reply_len properly [ 1039.097349][T11294] tmpfs: Unknown parameter 'grpquota/#/msr' [ 1039.123728][T11294] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 1039.123728][T11294] program syz.3.1902 not setting count and/or reply_len properly [ 1039.847837][ T4319] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1040.066563][ T4319] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.077869][ T4319] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1040.089022][ T4319] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1040.102024][ T4319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.127589][ T4319] usb 2-1: config 0 descriptor?? [ 1040.152995][ T4319] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1040.159906][ T4319] dvb-usb: bulk message failed: -22 (3/0) [ 1040.168506][ T4319] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1040.177898][ T4319] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1040.187236][ T4319] usb 2-1: media controller created [ 1040.218443][ T4319] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1040.329400][ T4319] dvb-usb: bulk message failed: -22 (6/0) [ 1040.335971][ T4319] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1040.391642][ T4319] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input95 [ 1040.424484][ T4319] dvb-usb: schedule remote query interval to 150 msecs. [ 1040.443518][ T4319] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1040.599312][ T4319] dvb-usb: bulk message failed: -22 (1/0) [ 1040.607817][ T4319] dvb-usb: error while querying for an remote control event. [ 1040.767735][ T4319] dvb-usb: bulk message failed: -22 (1/0) [ 1040.773543][ T4319] dvb-usb: error while querying for an remote control event. [ 1041.003664][ T4319] dvb-usb: bulk message failed: -22 (1/0) [ 1041.010647][ T4319] dvb-usb: error while querying for an remote control event. [ 1041.191572][T11311] rdma_rxe: rxe_register_device failed with error -23 [ 1041.199793][T11311] rdma_rxe: failed to add vxcan1 [ 1042.958181][ T4319] dvb-usb: bulk message failed: -22 (1/0) [ 1043.062382][ T4319] dvb-usb: error while querying for an remote control event. [ 1043.123188][T11315] binder_alloc: 11308: binder_alloc_buf, no vma [ 1043.283772][ T4319] dvb-usb: bulk message failed: -22 (1/0) [ 1043.296371][T11317] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1910'. [ 1043.332222][ T4319] dvb-usb: error while querying for an remote control event. [ 1043.651477][ T4319] dvb-usb: bulk message failed: -22 (1/0) [ 1043.657370][ T4319] dvb-usb: error while querying for an remote control event. [ 1045.317281][ T4319] usb 2-1: USB disconnect, device number 42 [ 1045.332084][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1910'. [ 1045.437573][ T4319] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1045.477772][ T4311] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 1046.825274][T11332] loop3: detected capacity change from 0 to 512 [ 1046.832090][T11332] EXT4-fs: Ignoring removed mblk_io_submit option [ 1047.196526][T11332] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1047.217594][T11332] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 1047.226320][T11332] System zones: 1-12 [ 1047.345189][T11332] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.1915: corrupted in-inode xattr [ 1047.358541][T11332] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1915: couldn't read orphan inode 15 (err -117) [ 1047.371912][T11332] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1047.440888][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 1049.027072][T11355] binder_alloc: 11351: binder_alloc_buf, no vma [ 1050.272090][T11365] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1922'. [ 1052.134542][T11365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1922'. [ 1052.447916][ T4271] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1052.542605][T11387] tmpfs: Unknown parameter 'grpquota/#/msr' [ 1052.566738][T11387] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 1052.566738][T11387] program syz.0.1928 not setting count and/or reply_len properly [ 1052.733135][ T4271] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.757791][ T4271] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1052.768060][ T4271] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1052.777374][ T4271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.829794][ T4271] usb 4-1: config 0 descriptor?? [ 1052.857001][ T4271] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1052.864022][ T4271] dvb-usb: bulk message failed: -22 (3/0) [ 1053.090566][ T4271] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1053.238282][ T4271] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1053.245378][ T4271] usb 4-1: media controller created [ 1053.297008][ T4271] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1054.115436][ T4271] dvb-usb: bulk message failed: -22 (6/0) [ 1054.128098][T11395] loop1: detected capacity change from 0 to 512 [ 1054.138528][ T4271] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1054.139534][T11395] EXT4-fs: Ignoring removed mblk_io_submit option [ 1054.149304][ T4271] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input97 [ 1054.274169][T11395] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1054.289529][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.301518][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.389389][ T5026] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1054.401535][ T4271] dvb-usb: schedule remote query interval to 150 msecs. [ 1054.416785][ T4271] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1054.557730][T11395] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 1054.565791][T11395] System zones: 1-12 [ 1054.591044][ T4271] dvb-usb: bulk message failed: -22 (1/0) [ 1054.596827][ T4271] dvb-usb: error while querying for an remote control event. [ 1054.635150][T11395] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.1929: corrupted in-inode xattr [ 1054.648509][T11395] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1929: couldn't read orphan inode 15 (err -117) [ 1054.661907][T11395] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1054.757882][ T5026] usb 3-1: Using ep0 maxpacket: 32 [ 1054.766790][ T5026] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1054.781453][ T5026] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1054.787922][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 1054.792596][ T5026] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1054.811402][ T5026] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1054.825609][ T5026] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1054.851510][ T5026] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1054.872536][ T5026] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1054.881471][ T8692] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 1054.902801][ T5026] usb 3-1: Product: syz [ 1054.917805][ T5026] usb 3-1: Manufacturer: syz [ 1054.917832][ T4271] dvb-usb: bulk message failed: -22 (1/0) [ 1054.927895][ T5026] usb 3-1: SerialNumber: syz [ 1054.935262][ T5026] usb 3-1: config 0 descriptor?? [ 1054.950984][ T5026] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1054.976813][ T5026] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1055.024017][ T4271] dvb-usb: error while querying for an remote control event. [ 1055.070544][ T8692] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.086163][ T8692] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1055.157796][ T8692] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1055.166872][ T8692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.178293][ T5026] usb 4-1: USB disconnect, device number 55 [ 1055.189431][ T8692] usb 1-1: config 0 descriptor?? [ 1055.221300][ T8692] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1055.228379][ T5026] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1055.258259][ T8692] dvb-usb: bulk message failed: -22 (3/0) [ 1055.282091][ T8692] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1055.493418][T11403] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1055.501607][ T4271] usb 3-1: USB disconnect, device number 48 [ 1055.501675][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 1056.868846][ T4271] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1057.000677][T11407] rdma_rxe: rxe_register_device failed with error -23 [ 1057.007928][T11407] rdma_rxe: failed to add vxcan1 [ 1058.107221][T11410] binder: BINDER_SET_CONTEXT_MGR already set [ 1058.113584][T11410] binder: 11400:11410 ioctl 4018620d 200000000040 returned -16 [ 1058.345976][ T8692] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1058.353219][ T8692] usb 1-1: media controller created [ 1058.359101][ T8692] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1058.369563][ T8692] dvb-usb: bulk message failed: -22 (6/0) [ 1058.377333][ T8692] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1058.424111][ T8692] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input98 [ 1058.802026][ T8692] dvb-usb: schedule remote query interval to 150 msecs. [ 1059.481270][ T8692] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1059.583905][ T8692] usb 1-1: USB disconnect, device number 66 [ 1060.369512][ T8692] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1064.008203][ T4335] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 1064.228006][ T41] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 1064.233479][T11458] binder_alloc: 11454: binder_alloc_buf, no vma [ 1064.253124][T11445] binder_alloc: 11443: binder_alloc_buf, no vma [ 1064.273468][ T4335] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.284975][ T4335] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1064.294890][ T4335] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1064.304088][ T4335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.324880][ T4335] usb 4-1: config 0 descriptor?? [ 1064.349392][ T4335] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1064.356920][ T4335] dvb-usb: bulk message failed: -22 (3/0) [ 1064.390066][ T4335] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1064.405830][ T4335] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1064.413841][ T4335] usb 4-1: media controller created [ 1064.436157][ T41] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.449738][ T4335] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1064.458988][ T41] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1064.472817][ T41] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1064.495546][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.509671][ T4335] dvb-usb: bulk message failed: -22 (6/0) [ 1064.517801][ T4335] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1064.550013][ T4335] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input99 [ 1064.577801][ T41] usb 1-1: config 0 descriptor?? [ 1064.605229][ T41] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1064.620461][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 1064.626550][ T4335] dvb-usb: schedule remote query interval to 150 msecs. [ 1064.633586][ T4335] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1064.736746][ T41] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1064.748969][ T41] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1065.457547][T11466] rdma_rxe: rxe_register_device failed with error -23 [ 1065.465426][T11466] rdma_rxe: failed to add vxcan1 [ 1065.999277][ T41] usb 1-1: media controller created [ 1066.017341][ T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1066.054245][ T4335] dvb-usb: bulk message failed: -22 (1/0) [ 1066.063004][ T4335] dvb-usb: error while querying for an remote control event. [ 1066.111997][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 1066.139421][ T41] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1066.156463][ T41] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input100 [ 1066.170694][T11460] binder_alloc: 11459: binder_alloc_buf, no vma [ 1066.233756][ T41] dvb-usb: schedule remote query interval to 150 msecs. [ 1066.241075][ T41] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1066.303528][ T41] dvb-usb: bulk message failed: -22 (1/0) [ 1066.318174][ T41] dvb-usb: error while querying for an remote control event. [ 1066.473106][ T41] dvb-usb: bulk message failed: -22 (1/0) [ 1066.486227][ T41] dvb-usb: error while querying for an remote control event. [ 1066.592598][T11471] tmpfs: Unknown parameter 'grpquota/#/msr' [ 1066.642748][ T41] usb 4-1: USB disconnect, device number 56 [ 1066.706412][T11471] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 1066.706412][T11471] program syz.4.1947 not setting count and/or reply_len properly [ 1066.874085][ T4335] dvb-usb: bulk message failed: -22 (1/0) [ 1066.879925][ T4335] dvb-usb: error while querying for an remote control event. [ 1066.983483][T11469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1948'. [ 1067.057554][ T953] usb 1-1: USB disconnect, device number 67 [ 1067.059976][ T4335] dvb-usb: bulk message failed: -22 (1/0) [ 1067.932453][ T4335] dvb-usb: error while querying for an remote control event. [ 1068.005413][ T41] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1068.081987][T11477] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1068.152424][ T953] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1069.169664][T11477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1069.468519][T11477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1069.611647][T11493] tmpfs: Unknown parameter 'grpquota/#/msr' [ 1069.691746][T11493] sg_write: data in/out 91/126 bytes for SCSI command 0x7-- guessing data in; [ 1069.691746][T11493] program syz.4.1953 not setting count and/or reply_len properly [ 1070.131469][T11480] binder_alloc: 11479: binder_alloc_buf, no vma [ 1070.894641][T11501] loop4: detected capacity change from 0 to 1024 [ 1071.028921][T11514] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1071.042280][T11514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1071.050715][T11514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1071.433738][ T4283] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1071.898592][T11507] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1072.537990][ T4311] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 1072.753389][ T4311] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.806223][ T4311] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1072.899124][ T4311] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1073.024821][ T4311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.044107][ T4311] usb 4-1: config 0 descriptor?? [ 1073.051965][ T4311] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1073.059076][ T4311] dvb-usb: bulk message failed: -22 (3/0) [ 1073.067625][ T4311] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1073.113095][ T4311] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1073.169710][ T4311] usb 4-1: media controller created [ 1073.199138][ T4311] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1073.294081][ T4311] dvb-usb: bulk message failed: -22 (6/0) [ 1073.476903][ T4311] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1073.509580][ T4311] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input101 [ 1073.808288][T11536] siw: device registration error -23 [ 1074.009243][T11536] smc: removing ib device syz2 [ 1074.200009][T11539] rdma_rxe: rxe_register_device failed with error -23 [ 1074.206907][T11539] rdma_rxe: failed to add vxcan1 [ 1075.305038][ T4311] dvb-usb: schedule remote query interval to 150 msecs. [ 1075.312912][ T4311] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1075.741928][ T953] dvb-usb: bulk message failed: -22 (1/0) [ 1075.749154][ T953] dvb-usb: error while querying for an remote control event. [ 1076.820298][T11542] loop0: detected capacity change from 0 to 512 [ 1076.827074][T11542] EXT4-fs: Ignoring removed mblk_io_submit option [ 1077.019798][ T4311] dvb-usb: bulk message failed: -22 (1/0) [ 1077.026553][T11542] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1077.035564][ T7] usb 4-1: USB disconnect, device number 57 [ 1077.041659][ T4311] dvb-usb: error while querying for an remote control event. [ 1077.063810][ T7] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1077.079087][T11542] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 1077.087330][T11542] System zones: 1-12 [ 1077.312831][T11542] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.1964: corrupted in-inode xattr [ 1077.334131][T11542] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1964: couldn't read orphan inode 15 (err -117) [ 1077.346470][T11542] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1078.372927][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 1078.928312][ T7] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 1079.130129][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.147826][ T7] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1079.187217][ T7] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1079.234191][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.282972][ T7] usb 2-1: config 0 descriptor?? [ 1079.322311][ T7] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1079.329454][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 1079.358587][ T7] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1079.391734][ T7] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1079.419564][ T7] usb 2-1: media controller created [ 1079.425900][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1079.658985][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 1079.664808][ T7] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1079.835347][T11563] vxcan1 speed is unknown, defaulting to 1000 [ 1079.864551][T11563] vxcan1 speed is unknown, defaulting to 1000 [ 1079.877726][T11563] vxcan1 speed is unknown, defaulting to 1000 [ 1080.815192][T11563] infiniband syz2: set active [ 1080.819961][T11563] infiniband syz2: added vxcan1 [ 1080.857855][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input102 [ 1080.946593][ T7] dvb-usb: schedule remote query interval to 150 msecs. [ 1080.990318][ T7] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1081.054589][T11563] RDS/IB: syz2: added [ 1081.058708][T11563] smc: adding ib device syz2 with port count 1 [ 1081.065005][T11563] smc: ib device syz2 port 1 has pnetid [ 1081.071305][T11563] vxcan1 speed is unknown, defaulting to 1000 [ 1081.127156][T11563] vxcan1 speed is unknown, defaulting to 1000 [ 1081.182812][T11563] vxcan1 speed is unknown, defaulting to 1000 [ 1081.237814][T11563] vxcan1 speed is unknown, defaulting to 1000 [ 1081.294460][T11563] vxcan1 speed is unknown, defaulting to 1000 [ 1081.385733][ T4356] vxcan1 speed is unknown, defaulting to 1000 [ 1081.559467][ T953] vxcan1 speed is unknown, defaulting to 1000 [ 1081.653880][ T953] dvb-usb: bulk message failed: -22 (1/0) [ 1081.693050][ T953] dvb-usb: error while querying for an remote control event. [ 1081.867808][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 1081.873781][ T7] dvb-usb: error while querying for an remote control event. [ 1082.003966][T11571] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1082.018656][T11571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1082.026800][T11571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1083.077705][ T5026] usb 2-1: USB disconnect, device number 43 [ 1083.706527][ T5026] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1084.265526][T11586] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1084.745471][T11586] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1084.957374][T11592] binder_alloc: 11590: binder_alloc_buf, no vma [ 1085.664694][ T5026] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 1086.934718][ T5026] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.017619][ T5026] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1087.098899][ T5026] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1087.207337][ T5026] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.628101][ T5026] usb 3-1: config 0 descriptor?? [ 1087.668935][ T5026] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1087.718856][ T5026] dvb-usb: bulk message failed: -22 (3/0) [ 1088.039405][ T5026] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1088.372768][ T5026] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1088.465220][T11628] rdma_rxe: rxe_register_device failed with error -23 [ 1088.472893][T11628] rdma_rxe: failed to add vxcan1 [ 1088.984527][ T5026] usb 3-1: media controller created [ 1088.990879][ T5026] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1089.011873][ T5026] dvb-usb: bulk message failed: -22 (6/0) [ 1089.020048][ T5026] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1089.060109][ T5026] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input105 [ 1090.000682][ T5026] dvb-usb: schedule remote query interval to 150 msecs. [ 1090.015409][ T5026] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1090.083820][ T41] usb 3-1: USB disconnect, device number 49 [ 1090.535196][ T41] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1090.557617][T11639] tmpfs: Unknown parameter 'grpquota/#/msr' [ 1090.579636][T11639] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 1090.579636][T11639] program syz.0.1988 not setting count and/or reply_len properly [ 1091.127942][ T6233] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1091.307766][ T6233] usb 4-1: device descriptor read/64, error -71 [ 1091.587932][ T6233] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1091.647771][ T41] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1091.709131][T11653] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1091.728980][T11653] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1091.767889][ T6233] usb 4-1: device descriptor read/64, error -71 [ 1091.867929][ T41] usb 5-1: Using ep0 maxpacket: 8 [ 1091.895878][ T41] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.907184][ T41] usb 5-1: config 0 has no interfaces? [ 1092.008631][ T6233] usb usb4-port1: attempt power cycle [ 1092.172249][ T41] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1092.181766][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.190872][ T41] usb 5-1: Product: syz [ 1092.195210][ T41] usb 5-1: Manufacturer: syz [ 1092.199948][ T41] usb 5-1: SerialNumber: syz [ 1092.218497][ T41] usb 5-1: config 0 descriptor?? [ 1092.293700][T11659] loop1: detected capacity change from 0 to 1024 [ 1092.342446][ T6383] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1093.265906][ T6233] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1093.714443][ T6233] usb 4-1: device descriptor read/8, error -71 [ 1093.922645][T11666] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 1093.922645][T11666] program syz.1.1995 not setting count and/or reply_len properly [ 1095.142199][T11676] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 1095.142199][T11676] program syz.1.1998 not setting count and/or reply_len properly [ 1095.444950][ T8692] usb 5-1: USB disconnect, device number 55 [ 1096.111570][T11686] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1096.129820][T11686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1096.138383][T11686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1096.146099][T11686] infiniband syz2: set active [ 1096.659800][ T8692] vxcan1 speed is unknown, defaulting to 1000 [ 1098.283616][T11705] siw: device registration error -23 [ 1100.348121][ T5026] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 1100.925274][ T5026] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.966557][ T5026] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1101.006117][ T5026] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1101.066434][ T5026] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.102169][ T5026] usb 3-1: config 0 descriptor?? [ 1101.122050][ T5026] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1101.132031][ T5026] dvb-usb: bulk message failed: -22 (3/0) [ 1101.174055][ T5026] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1101.195271][ T5026] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1101.211970][ T5026] usb 3-1: media controller created [ 1101.222573][ T5026] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1101.255061][ T5026] dvb-usb: bulk message failed: -22 (6/0) [ 1101.271696][ T5026] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1101.299462][ T5026] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input106 [ 1101.410748][ T5026] dvb-usb: schedule remote query interval to 150 msecs. [ 1101.417831][ T5026] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1101.458603][T11727] tmpfs: Unknown parameter 'grpquota/#/msr' [ 1101.596415][T11728] rdma_rxe: rxe_register_device failed with error -23 [ 1101.604063][T11728] rdma_rxe: failed to add vxcan1 [ 1102.117278][ T5026] dvb-usb: bulk message failed: -22 (1/0) [ 1102.127736][ T5026] dvb-usb: error while querying for an remote control event. [ 1102.168328][T11727] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 1102.168328][T11727] program syz.4.2013 not setting count and/or reply_len properly [ 1102.288489][ T5026] dvb-usb: bulk message failed: -22 (1/0) [ 1102.300138][ T5026] dvb-usb: error while querying for an remote control event. [ 1102.604405][T11731] tmpfs: Unknown parameter 'grpquota/#/msr' [ 1102.787090][T11731] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 1102.787090][T11731] program syz.1.2014 not setting count and/or reply_len properly [ 1102.810964][ T7898] dvb-usb: bulk message failed: -22 (1/0) [ 1102.816921][ T7898] dvb-usb: error while querying for an remote control event. [ 1102.992124][ T7898] dvb-usb: bulk message failed: -22 (1/0) [ 1103.206574][ T4335] usb 3-1: USB disconnect, device number 50 [ 1103.382919][ T7898] dvb-usb: error while querying for an remote control event. [ 1103.616349][ T4335] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1103.700913][T11741] siw: device registration error -23 [ 1104.012521][T11743] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1104.054017][T11743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1104.065873][T11743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1105.772046][T11747] tmpfs: Unknown parameter 'grpquota/#/msr' [ 1105.807430][T11747] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 1105.807430][T11747] program syz.1.2018 not setting count and/or reply_len properly [ 1107.007745][ T4335] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1107.330754][ T4335] usb 2-1: Using ep0 maxpacket: 32 [ 1107.469097][ T4335] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1107.477500][ T4335] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1107.489009][ T4335] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1107.501146][ T4335] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1107.627949][ T4335] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1107.647376][ T4335] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1108.284797][ T7898] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1108.293835][ T4335] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1108.302640][ T4335] usb 2-1: Product: syz [ 1108.308355][ T4335] usb 2-1: Manufacturer: syz [ 1108.421754][ T4335] usb 2-1: SerialNumber: syz [ 1108.470546][ T4335] usb 2-1: config 0 descriptor?? [ 1108.502184][ T4335] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1108.627782][ T7898] usb 4-1: Using ep0 maxpacket: 8 [ 1108.634658][ T7898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.375794][ T4335] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1110.390940][ T7898] usb 4-1: config 0 has no interfaces? [ 1110.544900][ T7898] usb 4-1: string descriptor 0 read error: -71 [ 1110.562834][ T7898] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1110.627282][ T7898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.706281][ T7898] usb 4-1: config 0 descriptor?? [ 1110.736857][ T7898] usb 4-1: can't set config #0, error -71 [ 1110.827461][ T7898] usb 4-1: USB disconnect, device number 62 [ 1111.016128][ T4335] usb 2-1: USB disconnect, device number 44 [ 1111.072993][ T4335] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1111.512468][T11785] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 1111.512468][T11785] program syz.2.2029 not setting count and/or reply_len properly [ 1112.695274][T11789] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1115.108462][T11817] siw: device registration error -23 [ 1115.735596][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.743547][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.197758][ T4488] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 1119.336903][ T4477] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 1120.069583][ T4488] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.160584][ T4477] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.170881][ T4488] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1120.180388][ T4477] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1120.189755][ T4488] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1120.201914][ T4477] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1120.211724][ T4488] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.222087][ T4477] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.411399][ T4488] usb 2-1: config 0 descriptor?? [ 1120.423691][ T4477] usb 4-1: config 0 descriptor?? [ 1120.433599][ T4488] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1120.826951][ T4477] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1121.055286][T11861] rdma_rxe: already configured on vxcan1 [ 1121.263286][T11863] rdma_rxe: rxe_register_device failed with error -23 [ 1121.271063][T11863] rdma_rxe: failed to add vxcan1 [ 1121.572129][ T4488] dvb-usb: bulk message failed: -22 (3/0) [ 1121.579460][ T4477] dvb-usb: bulk message failed: -22 (3/0) [ 1121.610113][ T4488] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1121.636377][ T4477] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1121.697134][ T4488] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1121.763374][ T4477] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1121.771382][ T4488] usb 2-1: media controller created [ 1121.796777][ T4477] usb 4-1: media controller created [ 1122.258920][ T4488] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1122.404650][ T4477] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1122.425631][ T4488] dvb-usb: bulk message failed: -22 (6/0) [ 1122.436270][ T4488] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1122.444771][ T4477] dvb-usb: bulk message failed: -22 (6/0) [ 1122.454493][ T4477] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1122.473578][ T4488] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input108 [ 1122.502482][ T4477] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input109 [ 1122.527140][ T4488] dvb-usb: schedule remote query interval to 150 msecs. [ 1122.545654][ T4488] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1122.883677][ T4477] dvb-usb: schedule remote query interval to 150 msecs. [ 1122.891710][ T4477] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1122.943797][ T4488] usb 2-1: USB disconnect, device number 45 [ 1123.313578][ T41] dvb-usb: bulk message failed: -22 (1/0) [ 1123.339551][ T4477] usb 4-1: USB disconnect, device number 63 [ 1123.347177][ T41] dvb-usb: error while querying for an remote control event. [ 1123.496492][ T4488] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1123.521496][ T4477] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1124.061670][T11892] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2055'. [ 1124.778124][T11894] tmpfs: Unknown parameter 'grpquota/#/msr' [ 1124.860519][T11888] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 1124.860519][T11888] program syz.1.2056 not setting count and/or reply_len properly [ 1128.566782][T11917] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1128.581653][T11920] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2063'. [ 1129.697353][T11920] netlink: 'syz.0.2063': attribute type 21 has an invalid length. [ 1129.705404][T11920] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2063'. [ 1129.931148][T11920] netlink: 'syz.0.2063': attribute type 4 has an invalid length. [ 1129.997625][T11920] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2063'. [ 1130.759249][T11940] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2068'. [ 1132.336138][T11952] tmpfs: Unknown parameter 'grpquota/#/msr' [ 1132.353491][T11952] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 1132.353491][T11952] program syz.3.2072 not setting count and/or reply_len properly [ 1132.868051][ T6233] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1133.067800][ T6233] usb 2-1: Using ep0 maxpacket: 8 [ 1133.078498][ T6233] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.134362][ T6233] usb 2-1: config 0 has no interfaces? [ 1133.148975][ T6233] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1133.197761][ T6233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.233884][ T6233] usb 2-1: Product: syz [ 1133.255259][ T6233] usb 2-1: Manufacturer: syz [ 1133.270672][ T6233] usb 2-1: SerialNumber: syz [ 1133.304970][ T6233] usb 2-1: config 0 descriptor?? [ 1133.478364][T11965] tmpfs: Unknown parameter 'grpquota/#/msr' [ 1133.612549][T11965] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 1133.612549][T11965] program syz.2.2076 not setting count and/or reply_len properly [ 1134.582020][T11971] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2077'. [ 1137.645687][T11985] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1137.661560][ T4335] usb 2-1: USB disconnect, device number 46 [ 1137.667945][T11985] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1137.676198][T11985] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1139.487807][ T4335] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1139.535982][T12000] tmpfs: Unknown parameter 'grpquota' [ 1139.606252][T12000] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 1139.606252][T12000] program syz.4.2086 not setting count and/or reply_len properly [ 1139.758177][ T4335] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.013734][ T4335] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1140.033777][ T4335] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1140.109945][ T4335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.135558][ T4335] usb 2-1: config 0 descriptor?? [ 1140.182925][ T4335] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1140.216765][ T4335] dvb-usb: bulk message failed: -22 (3/0) [ 1140.234357][ T4335] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1140.243714][ T4335] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1140.253717][ T4335] usb 2-1: media controller created [ 1141.243376][ T4335] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1141.279711][ T4335] dvb-usb: bulk message failed: -22 (6/0) [ 1141.285875][ T4335] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1141.308773][ T4335] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input111 [ 1141.328630][ T4335] dvb-usb: schedule remote query interval to 150 msecs. [ 1141.337772][ T4335] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1141.393127][ T4335] usb 2-1: USB disconnect, device number 47 [ 1141.560088][ T4335] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1141.651331][T12010] binder_alloc: 12003: binder_alloc_buf, no vma [ 1143.282766][T12017] binder: BINDER_SET_CONTEXT_MGR already set [ 1143.288810][T12017] binder: 12014:12017 ioctl 4018620d 200000000040 returned -16 [ 1143.422103][T12020] binder: BINDER_SET_CONTEXT_MGR already set [ 1143.428174][T12020] binder: 12016:12020 ioctl 4018620d 200000000040 returned -16 [ 1146.092253][T12033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2097'. [ 1146.129370][T12043] tmpfs: Unknown parameter 'grpquota' [ 1146.135857][T12043] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 1146.135857][T12043] program syz.4.2098 not setting count and/or reply_len properly [ 1146.650805][T12030] binder_alloc: 12028: binder_alloc_buf, no vma [ 1147.463072][T11076] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 1148.403414][T11076] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.502786][T11076] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1148.659185][T11076] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1148.769676][T11076] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.785536][T11076] usb 5-1: config 0 descriptor?? [ 1149.517036][T11076] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1149.634569][ T4335] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 1149.825498][T11076] dvb-usb: bulk message failed: -22 (3/0) [ 1149.847714][T11076] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1149.853217][ T4335] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.876933][T12074] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2106'. [ 1149.877351][T11076] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1149.896960][T11076] usb 5-1: media controller created [ 1149.905776][ T4335] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1149.906784][T11076] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1150.715620][T11076] dvb-usb: bulk message failed: -22 (6/0) [ 1150.725269][T11076] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1150.736104][T12081] tmpfs: Unknown parameter 'grpquota' [ 1150.743232][T12081] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 1150.743232][T12081] program syz.3.2109 not setting count and/or reply_len properly [ 1151.694528][ T4335] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1151.695954][T11076] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input112 [ 1151.715667][T11076] dvb-usb: schedule remote query interval to 150 msecs. [ 1151.722706][T11076] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1151.733021][T11076] usb 5-1: USB disconnect, device number 56 [ 1151.869607][ T4335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.270176][T12084] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1152.291828][ T4335] usb 1-1: config 0 descriptor?? [ 1152.300272][T11076] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1152.328108][ T4335] usb 1-1: can't set config #0, error -71 [ 1152.354244][T12084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1152.390150][T12084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1152.395108][ T4335] usb 1-1: USB disconnect, device number 68 [ 1152.668117][ T7] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1153.171630][ T7] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.193540][ T7] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1153.205071][ T7] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1153.214451][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.937874][ T4779] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 1155.062935][ T4477] usb 3-1: USB disconnect, device number 51 [ 1155.183720][ T4779] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.187779][T12118] sg_write: data in/out 91/98 bytes for SCSI command 0x0-- guessing data in; [ 1155.187779][T12118] program syz.3.2119 not setting count and/or reply_len properly [ 1155.417723][ T4779] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1155.432530][ T4779] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1155.572701][ T4779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.624524][ T4779] usb 5-1: config 0 descriptor?? [ 1155.663667][ T4779] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1155.697858][ T4779] dvb-usb: bulk message failed: -22 (3/0) [ 1155.719703][ T4779] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1155.759970][T12122] tmpfs: Unknown parameter 'grpquota/#/msr' [ 1155.770067][T12122] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 1155.770067][T12122] program syz.1.2121 not setting count and/or reply_len properly [ 1155.829238][ T4779] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1155.841815][ T4779] usb 5-1: media controller created [ 1155.853915][ T4779] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1155.871494][ T4779] dvb-usb: bulk message failed: -22 (6/0) [ 1155.879642][ T4779] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1155.893816][ T4779] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input113 [ 1155.929564][ T4779] dvb-usb: schedule remote query interval to 150 msecs. [ 1155.942529][ T4779] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1155.971862][ T4779] usb 5-1: USB disconnect, device number 57 [ 1156.022566][ T4779] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1156.371433][ T5026] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 1156.656303][T12136] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1156.810220][T12139] sg_write: data in/out 91/98 bytes for SCSI command 0x7-- guessing data in; [ 1156.810220][T12139] program syz.4.2126 not setting count and/or reply_len properly [ 1157.136513][ T5026] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.147744][ T5026] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1157.156667][ T5026] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1157.167782][ T5026] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.188148][ T5026] usb 2-1: config 0 descriptor?? [ 1157.205929][ T5026] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1157.233539][ T5026] dvb-usb: bulk message failed: -22 (3/0) [ 1157.291850][ T5026] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1157.452019][ T5026] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1157.590510][ T5026] usb 2-1: media controller created [ 1157.602734][ T5026] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1157.697185][T12148] rdma_rxe: already configured on vxcan1 [ 1158.348473][ T5026] dvb-usb: bulk message failed: -22 (6/0) [ 1158.354378][ T5026] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1158.399230][ T5026] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input114 [ 1158.767056][ T5026] dvb-usb: schedule remote query interval to 150 msecs. [ 1158.774088][ T5026] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1158.928719][ T5026] dvb-usb: bulk message failed: -22 (1/0) [ 1158.934489][ T5026] dvb-usb: error while querying for an remote control event. [ 1159.048358][ T4488] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 1159.137929][T11076] dvb-usb: bulk message failed: -22 (1/0) [ 1159.144295][T11076] dvb-usb: error while querying for an remote control event. [ 1159.257817][ T5026] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 1159.335705][ T4779] usb 2-1: USB disconnect, device number 48 [ 1159.349835][ T4488] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.401747][ T4488] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1159.441868][ T4488] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1159.451239][ T4488] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.459754][ T5026] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.594940][ T4488] usb 4-1: config 0 descriptor?? [ 1159.607824][ T4779] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1159.616926][ T5026] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1159.654700][ T4488] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1159.661542][ T4488] dvb-usb: bulk message failed: -22 (3/0) [ 1159.669180][ T4488] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1159.679525][ T4488] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1159.686695][ T4488] usb 4-1: media controller created [ 1159.693003][ T4488] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1159.715194][ T5026] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1159.733547][ T5026] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.757054][ T4488] dvb-usb: bulk message failed: -22 (6/0) [ 1159.765802][ T5026] usb 5-1: config 0 descriptor?? [ 1159.779405][ T5026] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1159.813459][ T4488] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1159.825337][ T5026] dvb-usb: bulk message failed: -22 (3/0) [ 1159.940302][ T5026] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1159.986957][ T4488] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input115 [ 1159.999720][ T5026] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1160.006863][ T5026] usb 5-1: media controller created [ 1160.212373][T12165] rdma_rxe: rxe_register_device failed with error -23 [ 1160.220082][T12165] rdma_rxe: failed to add vxcan1 [ 1160.408723][T12167] rdma_rxe: rxe_register_device failed with error -23 [ 1160.416531][T12167] rdma_rxe: failed to add vxcan1 [ 1160.528357][ T5026] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1160.968438][ T5026] dvb-usb: bulk message failed: -22 (6/0) [ 1161.224244][ T4488] dvb-usb: schedule remote query interval to 150 msecs. [ 1161.231347][ T4488] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1161.235872][ T5026] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1161.262743][T12169] tmpfs: Unknown parameter 'grpquota/#/msr' [ 1161.280867][T12169] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 1161.280867][T12169] program syz.1.2135 not setting count and/or reply_len properly [ 1161.398043][ T4488] dvb-usb: bulk message failed: -22 (1/0) [ 1161.485892][ T4488] dvb-usb: error while querying for an remote control event. [ 1161.518235][ T5026] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input116 [ 1161.631435][ T5026] dvb-usb: schedule remote query interval to 150 msecs. [ 1161.650227][ T5026] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1161.696885][ T4488] usb 4-1: USB disconnect, device number 64 [ 1161.810253][T11076] dvb-usb: bulk message failed: -22 (1/0) [ 1161.818274][T11076] dvb-usb: error while querying for an remote control event. [ 1162.017985][T11076] dvb-usb: bulk message failed: -22 (1/0) [ 1162.018389][ T4488] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1162.023857][T11076] dvb-usb: error while querying for an remote control event. [ 1162.474778][T11076] usb 5-1: USB disconnect, device number 58 [ 1162.677100][T12185] binder: BINDER_SET_CONTEXT_MGR already set [ 1162.683246][T12185] binder: 12175:12185 ioctl 4018620d 200000000040 returned -16 [ 1162.740132][ T7898] dvb-usb: bulk message failed: -22 (1/0) [ 1162.745977][ T7898] dvb-usb: error while querying for an remote control event. [ 1162.777939][ T4488] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 1163.722752][T11076] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1164.167917][ T4488] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.210053][ T4488] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1164.292141][ T4488] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1164.332269][ T4488] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.385701][ T4488] usb 4-1: config 0 descriptor?? [ 1164.416269][ T4488] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1164.424244][ T4488] dvb-usb: bulk message failed: -22 (3/0) [ 1164.452259][ T4488] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1164.476901][ T4488] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1164.484558][ T4488] usb 4-1: media controller created [ 1164.494035][ T4488] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1164.557342][ T4488] dvb-usb: bulk message failed: -22 (6/0) [ 1164.574720][ T4488] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1164.605656][T12204] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2145'. [ 1164.624509][T12206] tmpfs: Unknown parameter 'grpquota/#/msr' [ 1164.638731][T12206] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 1164.638731][T12206] program syz.0.2147 not setting count and/or reply_len properly [ 1164.668934][ T4488] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input117 [ 1164.740747][ T4488] dvb-usb: schedule remote query interval to 150 msecs. [ 1164.777205][ T4488] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1164.825195][ T4488] usb 4-1: USB disconnect, device number 65 [ 1164.839456][T12204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2145'. [ 1165.005450][ T4488] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1165.022013][T12204] netlink: 'syz.4.2145': attribute type 21 has an invalid length. [ 1166.687922][T12204] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2145'. [ 1167.218647][T12204] netlink: 'syz.4.2145': attribute type 4 has an invalid length. [ 1167.226559][T12204] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2145'. [ 1167.527763][T11076] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 1167.619328][T12223] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2151'. [ 1167.723511][T11076] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.739348][T12223] netlink: 'syz.3.2151': attribute type 21 has an invalid length. [ 1167.756137][T11076] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1167.791117][T11076] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1167.817977][T12223] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2151'. [ 1167.827199][T11076] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.828374][T12223] netlink: 'syz.3.2151': attribute type 4 has an invalid length. [ 1167.869488][T11076] usb 1-1: config 0 descriptor?? [ 1167.897193][T11076] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1167.914519][T12223] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2151'. [ 1167.923528][T11076] dvb-usb: bulk message failed: -22 (3/0) [ 1167.947235][T11076] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1167.996323][T11076] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1168.033686][T11076] usb 1-1: media controller created [ 1168.062259][T11076] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1168.244748][T11076] dvb-usb: bulk message failed: -22 (6/0) [ 1168.250769][T11076] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1168.347406][T12226] rdma_rxe: rxe_register_device failed with error -23 [ 1168.355206][T12226] rdma_rxe: failed to add vxcan1 [ 1168.984032][T11076] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input118 [ 1169.017939][T11076] dvb-usb: schedule remote query interval to 150 msecs. [ 1169.037854][T11076] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1169.207787][T11076] dvb-usb: bulk message failed: -22 (1/0) [ 1169.213731][T11076] dvb-usb: error while querying for an remote control event. [ 1169.387843][T11076] dvb-usb: bulk message failed: -22 (1/0) [ 1169.438203][T11076] dvb-usb: error while querying for an remote control event. [ 1169.598136][T11076] dvb-usb: bulk message failed: -22 (1/0) [ 1169.607363][T11076] dvb-usb: error while querying for an remote control event. [ 1170.329377][T11076] usb 1-1: USB disconnect, device number 69 [ 1170.640012][T11076] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1172.644807][T12251] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 1172.644807][T12251] program syz.1.2159 not setting count and/or reply_len properly [ 1173.177811][T12246] binder_alloc: 12245: binder_alloc_buf, no vma [ 1173.390694][T12259] sg_write: data in/out 91/98 bytes for SCSI command 0x7-- guessing data in; [ 1173.390694][T12259] program syz.1.2161 not setting count and/or reply_len properly [ 1173.973386][T12265] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1174.883206][T12274] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2163'. [ 1174.944691][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2163'. [ 1174.957866][T12283] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2165'. [ 1175.052189][T12284] tmpfs: Unknown parameter 'grpquota/#/msr' [ 1175.091459][T12283] netlink: 'syz.1.2165': attribute type 21 has an invalid length. [ 1175.129951][T12283] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2165'. [ 1175.161411][T12284] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 1175.161411][T12284] program syz.4.2167 not setting count and/or reply_len properly [ 1175.231641][T12283] netlink: 'syz.1.2165': attribute type 4 has an invalid length. [ 1175.261721][T12283] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2165'. [ 1178.663322][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.670537][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.830270][T12304] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2170'. [ 1178.915045][T12305] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 1178.915045][T12305] program syz.2.2172 not setting count and/or reply_len properly [ 1179.555489][T12304] netlink: 'syz.0.2170': attribute type 21 has an invalid length. [ 1179.595045][T12304] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2170'. [ 1179.635082][T12304] netlink: 'syz.0.2170': attribute type 4 has an invalid length. [ 1179.655616][T12304] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2170'. [ 1180.123478][T12320] tmpfs: Unknown parameter 'grpquota/#/msr' [ 1180.549896][T12323] loop2: detected capacity change from 0 to 1024 [ 1180.615238][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2176'. [ 1182.258007][ T5026] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 1182.258047][ T7898] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1182.677763][ T7898] usb 5-1: Using ep0 maxpacket: 32 [ 1182.685350][ T5026] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.708942][ T5026] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1182.719008][ T7898] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1183.345299][ T7898] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1183.363956][ T5026] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1183.464904][ T7898] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1183.486525][ T5026] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.502917][ T7898] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1183.524328][ T5026] usb 3-1: config 0 descriptor?? [ 1183.537444][ T5026] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1183.544479][ T7898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1183.551496][ T5026] dvb-usb: bulk message failed: -22 (3/0) [ 1183.678922][T12345] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 1183.678922][T12345] program syz.3.2183 not setting count and/or reply_len properly [ 1183.879066][ T7898] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1184.008481][ T5026] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1184.143561][ T7898] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1184.193113][ T5026] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1184.207780][ T7898] usb 5-1: Product: syz [ 1184.223144][ T7898] usb 5-1: Manufacturer: syz [ 1184.235209][ T5026] usb 3-1: media controller created [ 1184.251185][ T7898] usb 5-1: SerialNumber: syz [ 1184.266935][ T5026] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1184.291830][ T7898] usb 5-1: config 0 descriptor?? [ 1184.334679][ T7898] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1184.355938][ T5026] dvb-usb: bulk message failed: -22 (6/0) [ 1184.390679][ T5026] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1184.417568][ T7898] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1184.450203][T12352] tmpfs: Unknown parameter 'grpquota/#/msr' [ 1184.481200][ T5026] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input120 [ 1186.131498][ T5026] dvb-usb: schedule remote query interval to 150 msecs. [ 1186.198932][T12352] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 1186.198932][T12352] program syz.1.2185 not setting count and/or reply_len properly [ 1186.247428][ T5026] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1186.547486][ T8692] dvb-usb: bulk message failed: -22 (1/0) [ 1186.562886][ T8692] dvb-usb: error while querying for an remote control event. [ 1186.848638][ T5026] dvb-usb: bulk message failed: -22 (1/0) [ 1186.924119][ T5026] dvb-usb: error while querying for an remote control event. [ 1187.171314][ T5026] dvb-usb: bulk message failed: -22 (1/0) [ 1187.252996][ T5026] dvb-usb: error while querying for an remote control event. [ 1187.564070][ T5026] dvb-usb: bulk message failed: -22 (1/0) [ 1187.607272][ T5026] dvb-usb: error while querying for an remote control event. [ 1187.704751][T11076] usb 5-1: USB disconnect, device number 59 [ 1187.737235][T11076] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1187.831677][ T7898] dvb-usb: bulk message failed: -22 (1/0) [ 1187.847824][ T7898] dvb-usb: error while querying for an remote control event. [ 1187.977745][ T5026] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1188.037823][ T8692] dvb-usb: bulk message failed: -22 (1/0) [ 1188.072834][ T8692] dvb-usb: error while querying for an remote control event. [ 1188.165105][T12372] mkiss: ax0: crc mode is auto. [ 1188.189928][ T5026] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.210270][ T5026] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1188.279235][ T5026] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1188.306701][ T5026] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.388544][ T5026] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 1188.419753][ T5026] dvb-usb: bulk message failed: -22 (1/0) [ 1188.433626][ T5026] dvb-usb: error while querying for an remote control event. [ 1188.502980][ T6383] udevd[6383]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1188.635758][T11076] dvb-usb: bulk message failed: -22 (1/0) [ 1188.642177][T11076] dvb-usb: error while querying for an remote control event. [ 1189.047878][T11076] usb 3-1: USB disconnect, device number 52 [ 1189.066813][ T4319] usb 4-1: USB disconnect, device number 66 [ 1189.110737][T11076] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1192.137073][T12398] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 1192.137073][T12398] program syz.3.2194 not setting count and/or reply_len properly [ 1193.896660][ C0] ------------[ cut here ]------------ [ 1193.903572][ C0] ODEBUG: free active (active state 0) object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 1193.915414][ C0] WARNING: CPU: 0 PID: 15 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x43c/0x530 [ 1193.925398][ C0] Modules linked in: [ 1193.929440][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 1193.936758][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1193.946933][ C0] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530 [ 1193.953368][ C0] Code: ef e8 98 78 c5 fd 4c 8b 45 00 48 c7 c7 00 06 df 8a 48 c7 c6 c0 02 df 8a 48 c7 c2 60 07 df 8a 8b 0c 24 4d 89 e9 e8 a4 81 41 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 95 30 14 [ 1193.973132][ C0] RSP: 0018:ffffc900001478b0 EFLAGS: 00010246 [ 1193.979428][ C0] RAX: 49f6441802c1e500 RBX: ffffffff96f00168 RCX: ffff88813fea3b80 [ 1193.987443][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1193.995488][ C0] RBP: ffffffff8a8de220 R08: dffffc0000000000 R09: fffff52000028ea5 [ 1194.003579][ C0] R10: fffff52000028ea5 R11: 1ffff92000028ea4 R12: ffff8880547fe200 [ 1194.011640][ C0] R13: ffffffff8918f950 R14: ffff8880547fe000 R15: ffff8880547fe090 [ 1194.019695][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1194.028741][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1194.035360][ C0] CR2: 00007fcd35991f98 CR3: 000000007c9b0000 CR4: 00000000003506f0 [ 1194.043430][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1194.051501][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1194.059563][ C0] Call Trace: [ 1194.062878][ C0] [ 1194.065857][ C0] slab_free_freelist_hook+0xd2/0x1a0 [ 1194.071351][ C0] ? rose_timer_expiry+0x4a7/0x5d0 [ 1194.076500][ C0] __kmem_cache_free+0xb6/0x1f0 [ 1194.081484][ C0] rose_timer_expiry+0x4a7/0x5d0 [ 1194.086549][ C0] call_timer_fn+0x1a0/0x670 [ 1194.091221][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 1194.096276][ C0] ? call_timer_fn+0xc1/0x670 [ 1194.101037][ C0] ? __run_timers+0x7c0/0x7c0 [ 1194.105781][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1194.111067][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1194.116309][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 1194.121446][ C0] __run_timers+0x525/0x7c0 [ 1194.126016][ C0] ? detach_timer+0x350/0x350 [ 1194.130816][ C0] ? lock_chain_count+0x20/0x20 [ 1194.135716][ C0] run_timer_softirq+0x63/0xf0 [ 1194.140573][ C0] handle_softirqs+0x2a1/0x920 [ 1194.145385][ C0] ? run_ksoftirqd+0x98/0xf0 [ 1194.150056][ C0] ? do_softirq+0x200/0x200 [ 1194.154609][ C0] run_ksoftirqd+0x98/0xf0 [ 1194.159112][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 1194.164344][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 1194.169814][ C0] ? takeover_tasklets+0x800/0x800 [ 1194.174957][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 1194.180238][ C0] smpboot_thread_fn+0x64a/0xa40 [ 1194.185214][ C0] ? smpboot_thread_fn+0x4c/0xa40 [ 1194.190378][ C0] kthread+0x29d/0x330 [ 1194.194488][ C0] ? cpu_report_death+0x230/0x230 [ 1194.199600][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1194.204230][ C0] ret_from_fork+0x1f/0x30 [ 1194.208763][ C0] [ 1194.211827][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1194.219109][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 1194.226368][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1194.236404][ C0] Call Trace: [ 1194.239668][ C0] [ 1194.242578][ C0] dump_stack_lvl+0x168/0x22e [ 1194.247238][ C0] ? memcpy+0x3c/0x60 [ 1194.251204][ C0] ? show_regs_print_info+0x12/0x12 [ 1194.256382][ C0] ? load_image+0x3b0/0x3b0 [ 1194.260874][ C0] panic+0x2c9/0x710 [ 1194.264756][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1194.269261][ C0] ? ret_from_fork+0x1f/0x30 [ 1194.273881][ C0] __warn+0x2f8/0x4f0 [ 1194.277875][ C0] ? debug_check_no_obj_freed+0x43c/0x530 [ 1194.283582][ C0] ? debug_check_no_obj_freed+0x43c/0x530 [ 1194.289286][ C0] report_bug+0x2ba/0x4f0 [ 1194.293600][ C0] ? debug_check_no_obj_freed+0x43c/0x530 [ 1194.299306][ C0] handle_bug+0x3a/0x70 [ 1194.303449][ C0] exc_invalid_op+0x16/0x40 [ 1194.307935][ C0] asm_exc_invalid_op+0x16/0x20 [ 1194.312775][ C0] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530 [ 1194.319087][ C0] Code: ef e8 98 78 c5 fd 4c 8b 45 00 48 c7 c7 00 06 df 8a 48 c7 c6 c0 02 df 8a 48 c7 c2 60 07 df 8a 8b 0c 24 4d 89 e9 e8 a4 81 41 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 95 30 14 [ 1194.338684][ C0] RSP: 0018:ffffc900001478b0 EFLAGS: 00010246 [ 1194.344738][ C0] RAX: 49f6441802c1e500 RBX: ffffffff96f00168 RCX: ffff88813fea3b80 [ 1194.352693][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1194.360648][ C0] RBP: ffffffff8a8de220 R08: dffffc0000000000 R09: fffff52000028ea5 [ 1194.368606][ C0] R10: fffff52000028ea5 R11: 1ffff92000028ea4 R12: ffff8880547fe200 [ 1194.376565][ C0] R13: ffffffff8918f950 R14: ffff8880547fe000 R15: ffff8880547fe090 [ 1194.384522][ C0] ? rose_transmit_link+0x730/0x730 [ 1194.389739][ C0] slab_free_freelist_hook+0xd2/0x1a0 [ 1194.395099][ C0] ? rose_timer_expiry+0x4a7/0x5d0 [ 1194.400205][ C0] __kmem_cache_free+0xb6/0x1f0 [ 1194.405068][ C0] rose_timer_expiry+0x4a7/0x5d0 [ 1194.410003][ C0] call_timer_fn+0x1a0/0x670 [ 1194.414582][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 1194.419594][ C0] ? call_timer_fn+0xc1/0x670 [ 1194.424272][ C0] ? __run_timers+0x7c0/0x7c0 [ 1194.428939][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1194.434148][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1194.439335][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 1194.444344][ C0] __run_timers+0x525/0x7c0 [ 1194.448834][ C0] ? detach_timer+0x350/0x350 [ 1194.453506][ C0] ? lock_chain_count+0x20/0x20 [ 1194.458348][ C0] run_timer_softirq+0x63/0xf0 [ 1194.463109][ C0] handle_softirqs+0x2a1/0x920 [ 1194.467872][ C0] ? run_ksoftirqd+0x98/0xf0 [ 1194.472458][ C0] ? do_softirq+0x200/0x200 [ 1194.477012][ C0] run_ksoftirqd+0x98/0xf0 [ 1194.481543][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 1194.486738][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 1194.492103][ C0] ? takeover_tasklets+0x800/0x800 [ 1194.497197][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 1194.502378][ C0] smpboot_thread_fn+0x64a/0xa40 [ 1194.507304][ C0] ? smpboot_thread_fn+0x4c/0xa40 [ 1194.512316][ C0] kthread+0x29d/0x330 [ 1194.516369][ C0] ? cpu_report_death+0x230/0x230 [ 1194.521377][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1194.525952][ C0] ret_from_fork+0x1f/0x30 [ 1194.530360][ C0] [ 1194.533602][ C0] Kernel Offset: disabled [ 1194.537986][ C0] Rebooting in 86400 seconds..