last executing test programs: 6m8.85557179s ago: executing program 1 (id=143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, &(0x7f0000002180)) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001440)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x48000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) 6m7.688510334s ago: executing program 1 (id=146): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x646102, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0xfffffffffffffe06, r0, {0x0, 0x800}}, './file1\x00'}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0) r1 = socket(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921d2c19c4, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000000c0)='ocfs2\x00', 0x200084, &(0x7f00000002c0)='\xd0x^\a\x8e\xc1\xed7\x9c]\xee\x8e\x8b=\xfer\fy?\xc2\xfaC\x16\x13\x80K\x0e\x1bNf\xdd\xb6\x10\xe7\xeat\x9d8\x15J\xfa\xfa\x0f\xe4Y\xad3\xa58r\xde\xed\x8am\xe8\xfa\xd6H\xe7V\f\xc5\xec\xd8\xfcxNc\xd2\xa94@\x9dz\xbb\xa8\x80C\x94\xecf\a\xe3\xef\x83\x95\xf7\x9b\xba\x16\xd3?\xff\xd5\xd0\xb5T.\xa4\xf9\xa9\xa4\xfb{3s\xe6\xc5m\xe7\xe3\xe7\x15x\x1c\xdbq\xaa\xab5\xe6:\xc8.kx\xc2\xee8\x10\xae\xc1|\xb0`\x92\x17J\x03\xf1jSq\x87\x04%46@p\x04\xc8\x14\xb47j\xe8\x8f\xa9@\xf3\xbf\x92F\x1fV\xfa\xbb\xb9\xe6\x838wF/k\xaa\xd7v\x89y\x9f\x84\t\xea\x17\x967?\x19\xd0') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$tun(r4, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$unix(r1, &(0x7f0000000400)=@file={0x1, './file1\x00'}, 0x6e) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000280)={0x4403, 0x215, 0x1, 0x2, 0xc9, 0x0, 0x40}, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000580)={'bond0\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0x9, 0xfffffffffffffff8}}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) 6m4.378492179s ago: executing program 1 (id=153): mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x4010, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0804000000c00000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=0x0, @ANYBLOB="040119"], 0x40}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c000140000000000000000034"], 0x118}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe020002000000000800040001000000", 0x24) ioctl$int_in(r2, 0x40000000af01, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000100)) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xb, "eb31b7d2"}]}}, 0x0}, 0x0) 6m2.33666354s ago: executing program 1 (id=157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') umount2(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="09032dbd7000fedbdf251f"], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = getpgrp(0x0) ptrace$setsig(0x4203, r4, 0x20e, &(0x7f0000000380)={0x31, 0x3, 0x6}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) fcntl$setown(r3, 0x8, r5) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r6, 0x2285, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r7, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32}, {0x0, 0x0, 0x5, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0x7f, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0xffffffff, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x3, 0x4}, @addr={0xcd, 0x9}}, {0x0, 0x1, 0x0, 0x0, @tick, {0x0, 0x3}, {0x0, 0x1}, @quote={{0x1, 0xfe}}}, {0x0, 0x40, 0x0, 0x5, @time={0x5, 0x1000}, {}, {0x0, 0x9}, @addr={0x2, 0xf}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @control={0x3, 0x9, 0x3}}], 0xc4) read$snapshot(r7, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000000140)) 6m0.740352932s ago: executing program 1 (id=159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x40, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 6m0.376777049s ago: executing program 1 (id=162): socket$rxrpc(0x21, 0x2, 0x2) syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xffffffffffffffff, 0x8c200) socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) socket(0x15, 0x5, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1400200bce) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) write$dsp(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x0) wait4(0x0, &(0x7f0000000140), 0x80000000, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="2b637075736574205a467de1b3483afc140f23314f84e729bc82c7c13533e680947548de57c49f5edeef70ae3800"/56], 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) connect$nfc_raw(r4, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x7, @loopback={0xff00000000000000}, 0x400}, 0xfffffffffffffe67) sendmmsg$inet6(r6, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1400000000000000290000003e0000007200170000000000"], 0x18}}], 0x2, 0x4000000) 5m45.076878784s ago: executing program 32 (id=162): socket$rxrpc(0x21, 0x2, 0x2) syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xffffffffffffffff, 0x8c200) socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) socket(0x15, 0x5, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1400200bce) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) write$dsp(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x0) wait4(0x0, &(0x7f0000000140), 0x80000000, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="2b637075736574205a467de1b3483afc140f23314f84e729bc82c7c13533e680947548de57c49f5edeef70ae3800"/56], 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) connect$nfc_raw(r4, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x7, @loopback={0xff00000000000000}, 0x400}, 0xfffffffffffffe67) sendmmsg$inet6(r6, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1400000000000000290000003e0000007200170000000000"], 0x18}}], 0x2, 0x4000000) 26.418113425s ago: executing program 0 (id=668): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1002}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000180)) syz_fuse_handle_req(r0, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0x0, 0x7, 0x0, '\x00', {0x7ff, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xc000, '\x00', 0x1, 0x80000000, 0xb4e7, 0x2, {0x8003, 0x8}, {0x100000006, 0x10001}, {0x100000000, 0x7}, {0x9, 0xa80}, 0x8000, 0xb, 0x4, 0x5}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50}, 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r6) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x48840) sendto$inet6(r5, &(0x7f0000001380)="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", 0x573, 0x1, &(0x7f0000000400)={0xa, 0x4e23, 0x9, @remote, 0x5}, 0x1c) 23.687083369s ago: executing program 0 (id=669): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0180c200000e080045ba002800650102020690780a010102ac1414bb4e244e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5108fffd9078005754108f1a25b7d98d14addf91d0d9c57083565f393836a111fe7986e3697200f9a9e529b229640de090dd47eb4b54f31fcd6aef3b1051a868da99f3554428c97b5008a20487d585bbb72a89838bc13d855ca050e77620ec0ef63485b571dff772d7a75aa7c15504972601d87524efa423e585cedf9ed4c6899404ec5c7009fcdf1a"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)=0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f00000006c0)=@v2={0x2000000, [{0x4e, 0x6}, {0x5, 0x2}]}, 0x14, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) landlock_create_ruleset(0x0, 0x0, 0x3) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000) 22.402564435s ago: executing program 4 (id=671): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20044000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0xac}}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000080)={0x0, 0xfff}, 0x8) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 18.945526503s ago: executing program 0 (id=673): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES16, @ANYBLOB="09032dbd7000fedbdf251f"], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ptrace$setsig(0x4203, 0x0, 0x20e, &(0x7f0000000380)={0x31, 0x3, 0x6}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) fcntl$setown(r2, 0x8, r3) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r4, 0x2285, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r5, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32}, {0x7f, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0xffffffff, 0x800}}, {0x0, 0x1, 0x0, 0x0, @tick, {0x0, 0x3}, {0x0, 0x1}, @quote={{0x1, 0xfe}}}, {0x0, 0x40, 0x0, 0x5, @time={0x5, 0x1000}, {}, {0x0, 0x9}, @addr={0x2, 0xf}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @control={0x3, 0x9, 0x3}}], 0x8c) read$snapshot(r5, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f0000000140)) 16.241002727s ago: executing program 3 (id=676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006780), 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x582c952b5e63b23f, 0xffffffffffffffff, 0x892c4000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r5, 0x0, &(0x7f00000000c0)) 15.232183887s ago: executing program 3 (id=677): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x260d}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000007c0)=""/4112, 0x1010}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f00000000c0)=""/115, 0x73}, {&(0x7f00000003c0)=""/83, 0x53}, {&(0x7f0000000240)=""/95, 0x5f}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f0000001800)=""/203, 0xcb}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f0000001980)=""/229, 0xe5}], 0x9}, 0x4d9}, {{0x0, 0x0, 0x0}, 0x20c78}], 0x8, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @bcast, @bpq0, 0x0, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x1, 0x20, 0x80000000, 0x7, {{0x2d, 0x4, 0x3, 0x9, 0xb4, 0x65, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@generic={0x94, 0xe, "47d4daf30d60e76f1661e343"}, @cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x5, 0xb, "010f8bf5ea79d5f3a5"}, {0x6, 0x5, "834c96"}, {0x9, 0xe, "fd9ee2c5024bc875d4e2a08a"}, {0x0, 0xb, "91aa36f27c90608902"}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xf9, 0x3, 0x3, [{@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x100}, {@multicast1}]}, @timestamp={0x44, 0x14, 0xff, 0x0, 0xd, [0x101, 0x80000001, 0x7, 0x4]}, @timestamp_addr={0x44, 0x24, 0xe2, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x13}, 0x5}, {@loopback, 0x5}, {@loopback, 0xf}, {@multicast2, 0x4}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x70, [@multicast1]}, @end]}}}}}) connect$rose(r4, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) chown(&(0x7f0000000000)='./file0\x00', 0xee01, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r5, 0x400, 0x0) 14.756883117s ago: executing program 4 (id=678): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) 13.183416198s ago: executing program 4 (id=680): mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x4010, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, 0x0, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c000140000000000000000034"], 0x118}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe020002000000000800040001000000", 0x24) ioctl$int_in(r2, 0x40000000af01, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000100)) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xb, "eb31b7d2"}]}}, 0x0}, 0x0) 13.109674199s ago: executing program 0 (id=682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="991b426aa37a8c7cb8836369363deb3397f1786dfd2895c1dfa8c6ef17c85102da3c7ab8f0c484fcddc99b913eb1", 0x2e, 0x240008c4, &(0x7f0000000040)={0xa, 0x4e23, 0xd, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffe}, 0x1c) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000240)='posixacl\x00', 0x0, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 13.06812834s ago: executing program 3 (id=683): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r4 = dup3(r1, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x802, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f00000000c0)=0xfff, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 12.545610161s ago: executing program 5 (id=684): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0180c200000e080045ba002800650102020690780a010102ac1414bb4e244e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5108fffd9078005754108f1a25b7d98d14addf91d0d9c57083565f393836a111fe7986e3697200f9a9e529b229640de090dd47eb4b54f31fcd6aef3b1051a868da99f3554428c97b5008a20487d585bbb72a89838bc13d855ca050e77620ec0ef63485b571dff772d7a75aa7c15504972601d87524efa423e585cedf9ed4c6899404ec5c7009fcdf1a"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000140)=0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f00000006c0)=@v2={0x2000000, [{0x4e, 0x6}, {0x5, 0x2}]}, 0x14, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) landlock_create_ruleset(0x0, 0x0, 0x3) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000) readv(r0, &(0x7f0000000480), 0x0) 11.680265938s ago: executing program 3 (id=685): socket$rxrpc(0x21, 0x2, 0x2) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xffffffffffffffff, 0x8c200) socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) socket(0x15, 0x5, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1400200bce) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) write$dsp(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x0) wait4(0x0, &(0x7f0000000140), 0x80000000, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="2b637075736574205a467de1b3483afc140f23314f84e729bc82c7c13533e680947548de57c49f5edeef70ae3800"/56], 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) connect$nfc_raw(r4, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x7, @loopback={0xff00000000000000}, 0x400}, 0xfffffffffffffe67) sendmmsg$inet6(r6, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1400000000000000290000003e0000007200170000000000"], 0x18}}], 0x2, 0x4000000) 10.276767116s ago: executing program 2 (id=687): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x646102, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa10, 0xffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0xfffffffffffffe06, r0, {0x0, 0x800}}, './file1\x00'}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0) r1 = socket(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921d2c19c4, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='ocfs2\x00', 0x200084, &(0x7f00000002c0)='\xd0x^\a\x8e\xc1\xed7\x9c]\xee\x8e\x8b=\xfer\fy?\xc2\xfaC\x16\x13\x80K\x0e\x1bNf\xdd\xb6\x10\xe7\xeat\x9d8\x15J\xfa\xfa\x0f\xe4Y\xad3\xa58r\xde\xed\x8am\xe8\xfa\xd6H\xe7V\f\xc5\xec\xd8\xfcxNc\xd2\xa94@\x9dz\xbb\xa8\x80C\x94\xecf\a\xe3\xef\x83\x95\xf7\x9b\xba\x16\xd3?\xff\xd5\xd0\xb5T.\xa4\xf9\xa9\xa4\xfb{3s\xe6\xc5m\xe7\xe3\xe7\x15x\x1c\xdbq\xaa\xab5\xe6:\xc8.kx\xc2\xee8\x10\xae\xc1|\xb0`\x92\x17J\x03\xf1jSq\x87\x04%46@p\x04\xc8\x14\xb47j\xe8\x8f\xa9@\xf3\xbf\x92F\x1fV\xfa\xbb\xb9\xe6\x838wF/k\xaa\xd7v\x89y\x9f\x84\t\xea\x17\x967?\x19\xd0') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$tun(r4, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$unix(r1, &(0x7f0000000400)=@file={0x1, './file1\x00'}, 0x6e) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000580)={'bond0\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0x9, 0xfffffffffffffff8}}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) 10.085398379s ago: executing program 4 (id=688): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x0) syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b01020301090250"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sched_rr_get_interval(0x0, &(0x7f00000003c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) 8.390733173s ago: executing program 2 (id=689): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r4 = dup3(r1, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f00000000c0)=0xfff, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 8.182992257s ago: executing program 5 (id=690): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = dup3(r1, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x11, &(0x7f00000000c0)=0xfff, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 7.095748939s ago: executing program 2 (id=691): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000180)=0xfff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f0000000240), 0x4003) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, 0x0) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) 5.994220851s ago: executing program 2 (id=692): mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x4010, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, 0x0, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[], 0x118}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe020002000000000800040001000000", 0x24) ioctl$int_in(r2, 0x40000000af01, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000100)) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xb, "eb31b7d2"}]}}, 0x0}, 0x0) 5.916303702s ago: executing program 5 (id=693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x110, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) pread64(0xffffffffffffffff, &(0x7f0000001400)=""/4097, 0x1001, 0x9) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 4.672786617s ago: executing program 5 (id=694): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1002}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000180)) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0x0, 0x7, 0x0, '\x00', {0x7ff, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xc000, '\x00', 0x1, 0x80000000, 0xb4e7, 0x2, {0x8003, 0x8}, {0x100000006, 0x10001}, {0x100000000, 0x7}, {0x9, 0xa80}, 0x8000, 0xb, 0x4, 0x5}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50}, 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r6) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x48840) sendto$inet6(r5, &(0x7f0000001380)="f26f01dee642b0491c8f905a4e6910b785d5a4ad508bf8ba13307092fb923bebcc12f52d8f084291e519cd1ee4e39ac22206da3e6dbc3d59b54db781f51fa7e4f31329f930b6f90d648c576822df0f95e2c1b9d225c7d79e24850ae3410257ca5cf9c56d59196e2e8c4b62009fb425683284e163747b28f01790afe36f206b4d2dd95006dba1a466f7b2ea72bd147fd9b01c6a73d63514dcf86ea5a1fd7cc9ab0fdce4d6529369b6ef20daa08f66cd52d46f824ae8d1f3bd4a4effed8fb291c6737d67221677551aa531e2eda3b6b84a7c7af18e964b6dcd7d39b1246d6a575913d48b18b03de48e0b2ae6a455461328b979dd2051eacd6963f30fb1bc9575f5a5e7d6e9f8c4131130ab1702139ce0167fa4e232562ca02b6550e4451d41d0fb563b67a83448466155c03170d9b5746bd0d2d6c349b3f28dc266a5d08fc9d7fd816e3c6422edc059ea902f4029b4b3c2f117dfe5c2daf5e8357b1003ca9d85b589174bb49d8a8b1b06ff8cc17eb0d41be3e7bcd9d660d5953b1c00ad963f185e9ec1b9de53a17590680fdff44d946092d1ac857baf24bc00b291fc9b00cb35dae98eff33476c0d1578f060aa995400f183927f6185341ae220b3f1b1ac3c1a6c307355dd11f96ca67b879ae7fd62af75005fb7ba5080c30987c99bbdb18170e398a1c071f6728043342d8c41454abb1d7d8e223236c3709382dca89f8b5bb01672bb594bc09de72934fc392df68fd23d927bac15dda81b03f7b78cdcf82ec5ec4c2c5bd68508fb3026019027424486bdb1d5fb150ac9fb3970fbe3c6612fcb15b531eda9561c608cae4dfb754d45af6bc4dd1bde0b04bf03d0e8c7117930bfa532f3f6c52773231178c6d65e6ddb550a8a2dc49c4096459e4b77918853ba9ba12dd8154ce119f2bbae093ae59131013b657900279a91fb2bde2090d513f47953a5faa6b531a931208c0afa1e7a1061189ca26025fb1f0b329b82d3a1adf01f5deb49ffd97bf363a72d83b39065d1a44cf112d6c95939e983372b6b090768b0dd4e5065935bf5e7bbbb723b59d1315b21ff031496a70a4e79b1d9ce89be0ff6cbfa616474c6a07960b35c7d370559ae8486f405411db45a317834eac8e0875545baf99ec38c33c3c034d9a42f93b07942673dbaf222f2d5796ad826fd92999e99913dedac52ee57066456a0380d7558848e92523f942485c47fbeffb70ac33a55529bc613a31f15f0afe7ebdbad5a473f4914254df2c89e89615c0cf49f3dd7ab46f2d5f8e487f79a5e7de76b3dc7256b73049b5effd4a6b42253dacaaf682f83a9a1de23145beae5bb0e61ba89c6b66a6b85e069902791669c9c0dc4bc00c6ea2fe757feb0863a123127435252820b0245a722d53a51889ec32e314ad07e30430eabf0296bceca5292161fb89e68fa818ad4cc15b717f59a4cb80d3c24070c44afff375c03b520c669118468debf007a5d7ac3eaa9e0829a13a40e297320c6dff7dbd2173b895bd6b9121be72b90fc56a471b4ef43503c4a8ad09656b1039311e327afb064a33509a6f61a6c484db71b28b46f246fc382dae30cf52b94bd8cca40e8de13dc7b4dbac1b9ebf547dd00cdd1ffb0a3bcbe220ca73bc4e3097346936ba5ebab55edf9c58bf2844e3826fb89814207e0c2e0c167964244499a09dddb9d60adf27a606055021dc9270f5fd4f460c580e927d35ebace821fdaea496ce85e624a07dcb3390a2d72fb7ba0110a5117f3839794f5258689c2b0960cee2339da5af304ef2c0d37a8fe14c27bd2b995bd0fd28bba66f9a97223ec33ad18bca07c308afebee83882a446d7874d851fa8e61025337c0fe7bb483cb33258fd1cecc35c533fdd0c87b01dc63574fb186db8f1cda52b50240d9202241c234fdb6d4ba70a050fe52b0bf7bdc62967870c249315f8bd57bbb21ce6e37580d87b3f18b17d8c2935c4e82335366044fb85434212bf4629", 0x573, 0x1, &(0x7f0000000400)={0xa, 0x4e23, 0x9, @remote, 0x5}, 0x1c) 4.381128083s ago: executing program 4 (id=695): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') umount2(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="09032dbd7000fedbdf251f"], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = getpgrp(0x0) ptrace$setsig(0x4203, r4, 0x20e, &(0x7f0000000380)={0x31, 0x3, 0x6}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) fcntl$setown(r3, 0x8, r5) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r6, 0x2285, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x1c) write$sndseq(r7, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32}, {0x0, 0x0, 0x5, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0x7f, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0xffffffff, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x3, 0x4}, @addr={0xcd, 0x9}}, {0x0, 0x1, 0x0, 0x0, @tick, {0x0, 0x3}, {0x0, 0x1}, @quote={{0x1, 0xfe}}}, {0x0, 0x40, 0x0, 0x5, @time={0x5, 0x1000}, {}, {0x0, 0x9}, @addr={0x2, 0xf}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @control={0x3, 0x9, 0x3}}], 0xc4) read$snapshot(r7, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000000140)) 3.995626761s ago: executing program 0 (id=696): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000180)=0xfff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f0000000240), 0x4003) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, 0x0) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) 3.065771189s ago: executing program 4 (id=697): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000240)=@other={'trylock', ' ', 'mem'}, 0xc) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) socket$kcm(0xa, 0x2, 0x3a) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x0, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x6, 0x0, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r8, @ANYBLOB="0a0006000802110000000000380050800800030005ac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc000) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 2.843451324s ago: executing program 5 (id=698): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(r0, 0x0, 0x0, 0x0, 0x8) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) r3 = dup2(r2, r2) write$vhost_msg_v2(r3, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000400)={0x80000000, 0x0, 0x0}) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) shutdown(0xffffffffffffffff, 0x1) 2.00274768s ago: executing program 0 (id=699): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = creat(0x0, 0x4b) close(r0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = getpgid(0x0) kcmp(r2, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1.872483543s ago: executing program 2 (id=700): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r4 = dup3(r1, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f00000000c0)=0xfff, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1.252051215s ago: executing program 3 (id=701): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') umount2(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="09032dbd7000fedbdf251f"], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = getpgrp(0x0) ptrace$setsig(0x4203, r4, 0x20e, &(0x7f0000000380)={0x31, 0x3, 0x6}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) fcntl$setown(r3, 0x8, r5) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r6, 0x2285, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r7, 0x0, 0x0) read$snapshot(r7, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000000140)) 669.685687ms ago: executing program 5 (id=702): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x260d}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000007c0)=""/4112, 0x1010}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f00000000c0)=""/115, 0x73}, {&(0x7f00000003c0)=""/83, 0x53}, {&(0x7f0000000240)=""/95, 0x5f}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f0000001800)=""/203, 0xcb}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f0000001980)=""/229, 0xe5}], 0x9}, 0x4d9}, {{0x0, 0x0, 0x0}, 0x20c78}], 0x8, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @bcast, @bpq0, 0x0, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x1, 0x20, 0x80000000, 0x7, {{0x2d, 0x4, 0x3, 0x9, 0xb4, 0x65, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@generic={0x94, 0xe, "47d4daf30d60e76f1661e343"}, @cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x5, 0xb, "010f8bf5ea79d5f3a5"}, {0x6, 0x5, "834c96"}, {0x9, 0xe, "fd9ee2c5024bc875d4e2a08a"}, {0x0, 0xb, "91aa36f27c90608902"}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xf9, 0x3, 0x3, [{@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x100}, {@multicast1}]}, @timestamp={0x44, 0x14, 0xff, 0x0, 0xd, [0x101, 0x80000001, 0x7, 0x4]}, @timestamp_addr={0x44, 0x24, 0xe2, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x13}, 0x5}, {@loopback, 0x5}, {@loopback, 0xf}, {@multicast2, 0x4}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x70, [@multicast1]}, @end]}}}}}) sendmsg$kcm(r0, &(0x7f0000002b00)={&(0x7f00000005c0)=@ll={0x11, 0x1, r5, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000002a80)=[{&(0x7f00000001c0)="e95944e07d40a24596512108a44e1d23d383faa8eb7162", 0x17}, {&(0x7f0000000640)="cd4c7dbbf5b638d8049fcd606fa57748b4dfa4e3fb43488854b26490dcdc5d3e0351ed16c2667d8c4319c2818253cbea8cc0a1e1584d919e3e477974f6e47102ca8b707ca2c8bd0c3aa885935594253f65710bec0b383e92da82fa9f5a5fe872bfb2681736ab7e9ee5a658306edb1d92201540f90683a5713599fa16382af55403fca5f53de0a419c0b09e65236a0d8cb0b01bf19473d92e6220e83278ef634aaba008987d4945622b312b6af491c9ce971e37e2a24fac8eb465dbf4cbbff6527453cfeccbf04f3c27874706d4a333e9d4432347237df7ec4789c2a670f34166b4ee7dbdfbaacf02ab451b50fdfb29fe9008", 0xf2}, {&(0x7f0000001a80)="07015dc103b9c59236ae18692e4696648ad5e463c1644572b5a9401d585f3d09818c2b42929bd466314efec351ccc2e0eb2abb988d0470b2c73ff5ecea760a7fbec6d0396a1b4100e89c3b32619b94eeb93401b4a02bbc2c10648353a75b4bdcbfcb320b3cb810893f0dfb330a0e33e2972008b25dce91cabcb2dc7ce12888e7ce845afc73a3bf54d27e20168b396657e7829ef325ad5433f4289436c8fef1bdb3b587b94a747289eb9ba3c4425a51e411033ab765a1f92603f789541ead613a81f556ef313a0fe19d3106fde6060b673b96bb15a1beee5cc2aa86d68f8a4d23760d630170081bce30a3cd0a56a46f7f61577de5c679b9f1bc8eedb846337fc386fb385d3658710aaf4cdf3a3953d5eb24bc3cedea5e497976ecb89e1b2650f794cbe9b2fa58e397a1966070b8edb5b783ee908da819b0b6272d5bec550d91b4092879387e3b85a8bdebba77da220e2168180bb0b7aabd869639be44d6b0b8b8c23d2eaaa0118d77d90231d0d06250011597cfd2d89c27b60088c2dad7ee09762b2075ba16edab6e27fab62d69f8ebef645bc873bef425121fbc0be1b76d92b3e886c0e56c9aa339a4f6f220a745a1b97bbfef2f3edec906af2b0114d02f668a22a4ddbcb204fc590f76b63bbd36e30db91fdbfd4862a8eaff30511b3edf0d8f0cadcb5510b8f7195216ad827c84c82ec88fce139fd52b86dbbc537e254838e2588fba9ecef8f1a955063a8dc0deb0c808e8266a89a04c03d47ee3fd711bf62598b370a2c9de29096fc9610b6d08f14046d0f271fa002d86ca8a6ba494001132af7036194f4f89a3f78de1496912083c830bd3be53cf3980d1bc7cc37abf8d1622c6d90e6a7c3df335afa3ed8a6d14438ea7a0f00ee6844221191f8a2f0e6cd28e40da626dad035904fe4c14a79acef5a1e7b803bf87a073ad1de6a1a47477a9b53594338efff50dae5bee6c7c4b5b4ce7ea3a601128c6b49d2849997bf2216085adca2ce84f670914aa5e0c220411fdab2b563b8b44cfb80cebf29864451eb292131c4ea007b67a691f46dd55a437f511aba0f10265ebeb41e64d76816d427ce350491887115e17227e8196d9762c49e692471f40c81ff4a0de5b593a211931be5fd858a49882ea34da7bc9047d8332bc54c91261b83bebb4f6a0f196ba2c674ea9d1627915cf5d299895c248037f728a2d55fc9209404632e445277ce8d68e37bc680a16c5d9e9cdb1f6b51750abb1d25fb4c36db3f6b4e0ed4dbf13db64a80e78599a48f27d25d9828ad878e4c6efc01ecd827b1e632a865feaa121384ed81e1a1f373e442f5d5e6894c1c4b396e0c1c1e54bdd4c868c476d9fc51d35041e891695db729ea09fb7cff91afcccf436f8547fa3c910066791d78436fb2c7b3c1d20e66d2836b2f7b2c3195c904f35830d5b86da42c619d6377400fe4ae758207bd2910c8ba69e90e13306f5bb2227bd3cd38088f751180d43249251c53f014feec44ffa233c222e6b571a18901d2fd351995d20ba4d82811b86f5baa9110c90df87a9daca58d18d0262791c765fe9f5f71cbd7138a59caa1a7d16ba0a80e6d80244cb23f584b2964d6d7205062db1df775e26f2ab63c8ad67b0af68d10d76436543017da296bd657d41f8bac8041bab7800e9539b767948b044261ed989177560f6381cd205c25bb767a954b32a74d1e3f2d9730678c4011adb2b0f8051c9b9a69bd04fc81b40bb3beb5a2a32317893c52906a4c1f7e1c2b9d65a2928699e8276d2b7ed51cc690b65deeb2cd0c9211c24d623a5f4c8aa60149964bed008f8ebb8a28e15da38d4c83125e17d4aa6333f0ab532a234515a3cb92bcd82e7dd83ac6b07ff68d75e5b2db8a230b556d73cac7b44ffda3ef3f42e1a5df07e5eaed0c1e66de8fd2870c7eba162634b5fe1061d3b7f79ab3fb643137450d8fa8ab8dbcc454135458396bcbf299b14f03137cacd6a49640cec15795374a8c6ac27205f703e4fb6cb8a2d4efd87e37ab4e5544032972f556235dd82715c1d338e75f46c6a554a6362696ad3a3e046076e2258fba2a2b5f3cb26124bf43ffd8f263d8ab8ac8e4cfcf038df6291b3109143602c039c185b5e3d03becf20a988ab6d0597d9860b1fc44f963e1dbb4444afd20dee595ea14455320bb5f6ef6a507f0d641ea24036430d62ea242609c8a95a287167e9baac9dee6c6261c41c36d1eafeb24ec4bd55a091a541d4f1110cb245ca4edc147b01eaaac878dec5ed043cd82be2d1145acd62b22811f0eaa7f134b981ce9331dd1d6d482ac44246fe60a260ae32b70182efcd8b0451de4625477b45941db276179fc5c92c969ba400e3bcedd92f3287b891b94487480e43e4ab8fc156ca56f3b1099c6f70180daf69837d9e24c6f1e51fba400920ba076b84d3d53aa9ee5ee9638613bb9b070615ee20f70011ef0830fde76ed9e84fd8a99962b2039653ee692f0ab43fa753018dc94263796250d76f68df1ad801d3c0244c62a143737121425287f4735fc50f86cdff6a62885b2564b955da612738cd10ae5714a43337d9f086320fb613dbaf2640e4f4b9db7a3a2090557cedb787a21d000790fb1c302be18ae65c44529c2296abe866db6d33ec5e8a4db8d8fc95e2e92bcbf069a8f504ed3830f007a7f1bb50ff4156f28a89c67ee980ab832363980b7824421faa5566f60c37226fbf56ab1aff5015fd2c71a05ee11e9f2da08af1c95ca2147243b16cdf02fd9194827b3d3c5e419b0e20049a18da1ff19a98e1e0f851cce7c8fd05cd0f219e33ec48d6fe1adfd4abd0c462c92a2ea5bb583f32c4c53f8934e83249bad59b474b7bc5fdc82b1e41285e2ab6b35ea87fc07fc9d5a2fe15adbd175eb790090797357c0dde5531816a9530b868de8b989dea57ddca99b3671407d984e157c8076f48a5873a84c250ace63ae1bdf0867ed32e00eff33d41d951753719077dd639ebb4b9f07657c2c689b2fd00b30ab1eda9aaabda91b9dedaef9738e95c8c4b00cfa3ebe4b18cd1537b4afecdc79744247c3e53f2cb18c419a99b7e63f273812b876e18e58527b441490f41d2f91a234cacc9c8b09348bd27b296df4c09851b60ccc968a67f4fdfce997a405415c6c7ac65b0b9a67365e52e93fb1cdcb436783547681c5eda28de59f32c96fbb4064fffee29373d271c23625b1940ed76d9e1caf46ee7eedad6c4a9fb770e1765d07367548bd3c4d341acd6ad037f2981a9646844ef3098d6850b82934be1dd509db0c348a05637144ada0556a43f1e17514211ab59865fe3e087d35f1418c88d1155af764831f55fe31d2502af7c8ed02720903312d653f08107833ccbd888f177e5b653c3b68db19aa32568cc266f22f65c39e21c0a71ea1887de445220940fc045a0da30cb23b2c13b28681f7d35a7b71e763433522fa1f259a90e6277f99e1203d7a775269f87a227bcd1452c71fddba40aa9f01b64d32af3a58d8e04133867106918a4c5fd88687aaabe0223355802fef89d6d57ab61c46526848586a6a33220f8e1ca8b7ff7e5a0039c13d7eb62ab1287225de98ee9421c74785946b28ed5ba0069220f71e0a43366be6dbbc08444d371f9e90e4e0210a0ee72bc2484c49a83835adf871178cfd6d76a5b48e7aa60be4ef734e92c362f2aaeb02669a2e84280e7cc0398b824a91f11084747618263ac9dfaf10e2fbd8b015f4d61d933412ecf9f51b3dbacf5ef96b54154299019fa7e7deccfd194e3e31c0dba99858e4ead8ffa243afad50b9d809be51ed601ecd7c7b4e980b705a77411e70fa2003a262d36f1a53422466ce2ccab1f457c7e76754bee8b61669cf64a69b16fcf46e07cafc84eb555cbad1db104e33dc678609f8468df0d0488778a5abcf6f4bdd0eacd9c277b36f15f23c326dd0ec203e97819245da767f9b010a7ac26ea12dde6d10685f8be50ea0e7dd7a669cf0b57a54f38aa3586c9d1c88ec1c072cde1fec2d0864cf03821b38f81b4e73f33e98e98d8bb3dd0cbeb773d613a5728ca040057fdedfa5fac782f7110495a9285c8f114df7bc90d7455b4f2738ee8531b88175fac32f6cb0128ceb5e2716a62af62cd8a5bdca597148e814bb231017229002332792dc9bec61e4207e6dfbde872b2fab79de090be3a53aa99ddb69271dfb0fde6641341863dfd1a7517e9c59913968c30d06146be69037c8813c774650876f8ce6df55c2b9eb241ee17379a6fd17d953f68d6d8e8ab6bc0c6b5c5a58f49355d5a8721e5244310d8283a38c582241572f278a2ec125bae892000151cd0eb7139fc878b1cfb051d8e9937b3cf68f8303e4fe3adaa90a1af6c4ee2a7ca4bf65e0f6adeb749144e2b8fcf51f63c6a31d004331ad385448ea5785ef145190ec4b970343b0adb36b19577f73546da5ac5dddcecb9a90081820a62bd5a5266ce0ade0ea3a3b535c976976425d317c24f118844d7e3f00667c4eb361cb7f31158d46b86524ff56029f2f31593c48208d9dc85490addd9eb18b5fa076e3d16096b99991b9ca0df60778b3deb62bd87d6a37a26f75f69c8c0de812e0c4a33a2eb24e77570bf72ff31e60f1ddf287e035d29a75d9f88e86874d9176e84d6d1fa53a82a6a03248d1565d30de56595d153454075670c5e465ee89a0ec3c8ded0af4aad92c615ad19a6d9ddb890d0cf8de2e1c7ef31eeb773fdd70b8766832a90821c80d7c8761fcb9276f845f67a196c94acae88bcd6700a6220292153b4075aabb2325feea1ef01b6fa007b7f049b22182328d0c8a3e84e6068839eab45879ee16dc56da2c3adf23fa1bfd16c19df9401bb35da62845edc4eebbc934860f2e7938990310f4b145d2fe13e88777ab8d09f32454262045f0d8dc62c14693177cd1babd2dddddc47f8d7399891e46c18b797a98e338aaefb1769ecd5cc3f305ef1a6daf12c9186a3925f93c2074fe4eebb9d049b87b5ffcc9c189745759168915a7f75862aca8f19b6b1273bf859766ab58ee2c65b2522a0041dd4a026b77e434c64c525f0724e707288e526972939dfc895495e441ef7e60e606443e03418e4960147ea3de8005cadcf2875bdc9559a612bf2eefe6d07dff5a47b216305bd30df1124f6e3e6175d91f0876339fa7bef3f1f2ed647d1e11992edc956ae049f04b13ee80f9a09c42b746a5c6ea02c447d3b6e4966f5acf1a75a9dcf436e3ebbfb875f4cb294e9cd621525623ae82318b1e823fdbb60354365e8e2746fe400d66cfde9adf6ffb297406ae8c378c18b6066bea87670afbaca96f0f858bba2f3a2c76a1e66b36d422e52b04d33636c31650376b4f5eb7a70696a9498c657ad3e6c9ce1cdf6d9070e074fc1fd4189398b242d136259520c74d46cf3a2cadd36ffc8b380bffa7b5f76c1c27f64955fde12193cca22083f4ce8d2b83832666755a3736c82b3b931d3b4de6ae540477460c05d96e7f32bef47dd71e8c522a940e442a02695b5d41d59019195f45b778806c89b8f842552995eef455ebc7a8a952701d84b9f8acdc19d5d7efac06bcb82e67fd42ce69206d84088c138284b76e3d42356d50058ee212e6ccbbd3ad095143ae858288f340dd56f6a5ad8c5354e848d9c2a725d9b555da90225451ce2e3efeee89cf88420127ebea29be5a0d26b62230713ff472b6ee3127367bdd692b82a28bcd337c826544016f2a00aa09c0ac7accc234c96ff4426fbc585c79a75d74fcf28f63c3b1413393b0b6d14dc872955f26b02f248be35372fe9bbcc432d3a5bc2a217804b294e2e060e71d82c6c39629f0e710be2a51334d1d28b6517ccf46db7", 0x1000}, {&(0x7f00000002c0)="0a874f40e6d3807a827c86bc05c951b8165d7a55b9d6f7279aec5da19a5aac55b5787b2f427ba195b3c9fb9e40850c", 0x2f}, {&(0x7f0000000740)="4a430cad60b7e6a2a022be60e1a0e1e8e811df95448d5b25aeacb6ff636a2e2e7d44c041e46f0750c134ac29beb800f246ed8e364bc161b5f2f91af7193739b32af1bc86c8ecc84d99", 0x49}], 0x5, &(0x7f0000002e00)=[{0xc8, 0x10c, 0x0, "32e63991f48eed4d376c2fac8883cd0f50fc400b8e68854f6d91926490041ac25aa5d52668e4b75a9615d8e82ae455b63002d6f2eac47d0c6f94bba55c3e2a6daa0ee5bb50a594f326e90b12ebd34cd7fda0ffebe153d1c09bbe2ee5f1fa7facc59be8dd4e646a829eb2ddbc703460222660cfa6930411e7bfd8918da53a3c1ffdde23a1ab23d574fc0060564eee234277c306bf482af6651b70af86ca8d42eac964c993a1620e2d15b0f3daa5033e21fa4929d9b05ac1d6"}, {0x108, 0x117, 0x7f, "c632cd63549a1abcc5bdff29cda2990f6c13964b5e591dc4223129aa91b091a5764c50536dd4109fee20cc401cd93ef8c2b5869d5d8c4d89e101e4846652e2c08a57552bf55f4d10faad86dc23fe681f10c8bad4e03e45703449bbf55ac6e0152fe53d85a75cb2c0d05bc15493f0ba0f0fc10c478ea4eb475285bc1aeb7e87648f1537dba8c5f164a78283474f8dfed4a4ec9e19143867cab487b8ecaa690223f2f55219ec09a2415859b7553e7ec61199219c33a9f2f3f4ae113f00be30287b72b750a8e703ff8c532a01d695d42ef3caa25f11880f399c61bc03ffcaa119f92a4a1d3e2450a7df6f855a851704bf8b36b8e25a57"}], 0x1d0}, 0x40000) connect$rose(r4, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) chown(&(0x7f0000000000)='./file0\x00', 0xee01, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r6, 0x400, 0x0) 31.61264ms ago: executing program 3 (id=703): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000240)=@other={'trylock', ' ', 'mem'}, 0xc) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) socket$kcm(0xa, 0x2, 0x3a) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x0, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x6, 0x0, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r8, @ANYBLOB="0a0006000802110000000000380050800800030005ac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc000) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 2 (id=704): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES16, @ANYBLOB="09032dbd7000fedbdf251f"], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ptrace$setsig(0x4203, 0x0, 0x20e, &(0x7f0000000380)={0x31, 0x3, 0x6}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) fcntl$setown(r2, 0x8, r3) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r4, 0x2285, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r5, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32}, {0x0, 0x0, 0x5, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0x7f, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0xffffffff, 0x800}}, {0x0, 0x1, 0x0, 0x0, @tick, {0x0, 0x3}, {0x0, 0x1}, @quote={{0x1, 0xfe}}}, {0x0, 0x40, 0x0, 0x5, @time={0x5, 0x1000}, {}, {0x0, 0x9}, @addr={0x2, 0xf}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @control={0x3, 0x9, 0x3}}], 0xa8) read$snapshot(r5, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(r5, 0x227c, 0x0) kernel console output (not intermixed with test programs): e. [ 242.290836][ T4392] dvb-usb: bulk message failed: -22 (3/0) [ 242.314710][ T4392] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 242.324088][ T4392] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 242.460494][ T4387] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 242.696021][ T4387] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.825329][ T4387] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 243.042137][ T4387] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 243.051642][ T4387] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.070624][ T4387] usb 4-1: config 0 descriptor?? [ 243.091167][ T4392] usb 3-1: media controller created [ 243.101701][ T4387] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 243.108690][ T4387] dvb-usb: bulk message failed: -22 (3/0) [ 243.148887][ T4392] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 243.364646][ T4392] dvb-usb: bulk message failed: -22 (6/0) [ 243.415607][ T4392] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 243.618470][ T4392] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input23 [ 243.755759][ T4392] dvb-usb: schedule remote query interval to 150 msecs. [ 243.763133][ T4392] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 243.920586][ T4335] dvb-usb: bulk message failed: -22 (1/0) [ 243.929671][ T4335] dvb-usb: error while querying for an remote control event. [ 244.008257][ T4387] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 244.132260][ T5475] rdma_rxe: already configured on vxcan1 [ 244.540688][ T4335] dvb-usb: bulk message failed: -22 (1/0) [ 244.566676][ T4335] dvb-usb: error while querying for an remote control event. [ 245.610834][ T14] usb 3-1: USB disconnect, device number 6 [ 245.625435][ T4387] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 245.696121][ T4387] usb 4-1: media controller created [ 245.751202][ T4387] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 246.285062][ T5487] loop3: detected capacity change from 0 to 512 [ 246.318111][ T5487] EXT4-fs: Ignoring removed mblk_io_submit option [ 247.043890][ T5487] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 247.061304][ T4387] dvb-usb: bulk message failed: -22 (6/0) [ 247.067218][ T4387] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 247.078021][ T5487] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 247.086143][ T5487] System zones: 1-12 [ 247.114713][ T4387] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24 [ 247.117861][ T14] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 247.143664][ T5487] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.250: corrupted in-inode xattr [ 247.157098][ T5487] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.250: couldn't read orphan inode 15 (err -117) [ 247.169502][ T4387] dvb-usb: schedule remote query interval to 150 msecs. [ 247.169968][ T5487] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 247.193143][ T4387] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 247.208669][ T4387] usb 4-1: USB disconnect, device number 7 [ 247.272717][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 247.360921][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 247.381743][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 247.417350][ T4387] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 247.491684][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 247.527728][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 247.558453][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 247.639107][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 247.669945][ T5103] device veth0_vlan entered promiscuous mode [ 247.680462][ T14] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 248.131124][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.145225][ T5103] device veth1_vlan entered promiscuous mode [ 248.161276][ T14] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 248.191130][ T14] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 248.219606][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 248.304777][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 248.335364][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.349861][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.373036][ T14] usb 3-1: config 0 descriptor?? [ 248.387719][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.400953][ T14] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 248.407596][ T14] dvb-usb: bulk message failed: -22 (3/0) [ 248.416406][ T5103] device veth0_macvtap entered promiscuous mode [ 248.430989][ T14] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 248.441592][ T14] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 248.448701][ T14] usb 3-1: media controller created [ 248.458997][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 248.461972][ T4387] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 248.478307][ T5103] device veth1_macvtap entered promiscuous mode [ 248.482929][ T14] dvb-usb: bulk message failed: -22 (6/0) [ 248.491033][ T14] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 248.509032][ T14] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input25 [ 248.532629][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.542252][ T14] dvb-usb: schedule remote query interval to 150 msecs. [ 248.550064][ T14] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 248.568548][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.600198][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.637200][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.700964][ T4335] dvb-usb: bulk message failed: -22 (1/0) [ 248.706761][ T4335] dvb-usb: error while querying for an remote control event. [ 248.765615][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.830364][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.861255][ T4387] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 248.880486][ T4335] dvb-usb: bulk message failed: -22 (1/0) [ 248.883176][ T4387] usb 1-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 248.897229][ T4387] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 248.902060][ T4335] dvb-usb: error while querying for an remote control event. [ 248.913745][ T4387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.695889][ T4387] usb 1-1: invalid MIDI out EP 0 [ 249.701403][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.761438][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.782788][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.795367][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 249.808376][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 249.830569][ T4313] dvb-usb: bulk message failed: -22 (1/0) [ 249.837229][ T4313] dvb-usb: error while querying for an remote control event. [ 249.846804][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.857460][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.906697][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.100817][ T14] dvb-usb: bulk message failed: -22 (1/0) [ 250.402640][ T14] dvb-usb: error while querying for an remote control event. [ 250.411002][ T4387] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 250.439414][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.451737][ T4286] udevd[4286]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.469722][ T4387] usb 1-1: USB disconnect, device number 8 [ 250.483576][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.590975][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.600980][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.611605][ T14] dvb-usb: bulk message failed: -22 (1/0) [ 250.617420][ T14] dvb-usb: error while querying for an remote control event. [ 250.628792][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.641149][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.757032][ T14] usb 3-1: USB disconnect, device number 7 [ 250.803329][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 250.964816][ T5522] tmpfs: Unknown parameter 'grpquota/#/msr' [ 251.019261][ T5522] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 251.019261][ T5522] program syz.3.251 not setting count and/or reply_len properly [ 251.282070][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 251.304818][ T5103] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.404272][ T5528] tmpfs: Unknown parameter 'grpquota/#/msr' [ 251.459432][ T5528] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 251.459432][ T5528] program syz.2.255 not setting count and/or reply_len properly [ 251.600480][ T5103] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.609297][ T5103] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.806089][ T5103] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.877522][ T14] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 254.301687][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 254.338388][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 254.346353][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 254.497174][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 254.690737][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 254.721465][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 254.826133][ T5551] tmpfs: Unknown parameter 'grpquota/#/msr' [ 254.978742][ T5551] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 254.978742][ T5551] program syz.2.260 not setting count and/or reply_len properly [ 255.368067][ T5546] vxcan1 speed is unknown, defaulting to 1000 [ 256.093197][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.104333][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.116982][ T5561] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 256.520310][ T4610] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 256.777084][ T4610] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.787972][ T4610] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 256.790277][ T4278] Bluetooth: hci1: command 0x0409 tx timeout [ 256.797250][ T4610] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 256.858058][ T4610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.979765][ T4610] usb 5-1: config 0 descriptor?? [ 256.994355][ T4610] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 257.001127][ T4610] dvb-usb: bulk message failed: -22 (3/0) [ 257.017564][ T4610] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 257.077684][ T4610] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 257.106492][ T4610] usb 5-1: media controller created [ 257.117701][ T4610] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 257.165462][ T4610] dvb-usb: bulk message failed: -22 (6/0) [ 257.191674][ T4610] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 257.256640][ T4610] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input26 [ 257.306026][ T4610] dvb-usb: schedule remote query interval to 150 msecs. [ 257.327679][ T4610] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 257.350254][ T4864] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 257.480326][ T22] dvb-usb: bulk message failed: -22 (1/0) [ 257.486574][ T22] dvb-usb: error while querying for an remote control event. [ 257.551844][ T5578] rdma_rxe: rxe_register_device failed with error -23 [ 257.559896][ T5578] rdma_rxe: failed to add vxcan1 [ 257.652020][ T22] dvb-usb: bulk message failed: -22 (1/0) [ 257.747986][ T22] dvb-usb: error while querying for an remote control event. [ 257.814688][ T4864] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.027156][ T4864] usb 4-1: config 0 has no interfaces? [ 258.090216][ T4864] usb 4-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 258.109947][ T4864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.199142][ T4864] usb 4-1: Product: syz [ 258.285378][ T4864] usb 4-1: Manufacturer: syz [ 258.369204][ T4864] usb 4-1: SerialNumber: syz [ 258.567507][ T4864] usb 4-1: config 0 descriptor?? [ 258.607705][ T22] dvb-usb: bulk message failed: -22 (1/0) [ 258.614119][ T22] dvb-usb: error while querying for an remote control event. [ 258.833848][ T22] usb 4-1: USB disconnect, device number 8 [ 258.860244][ T4278] Bluetooth: hci1: command 0x041b tx timeout [ 258.877291][ T4864] dvb-usb: bulk message failed: -22 (1/0) [ 258.895521][ T4864] dvb-usb: error while querying for an remote control event. [ 258.907185][ T4482] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.098222][ T4482] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.100435][ T22] dvb-usb: bulk message failed: -22 (1/0) [ 259.115123][ T22] dvb-usb: error while querying for an remote control event. [ 259.231089][ T4482] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.280360][ T22] dvb-usb: bulk message failed: -22 (1/0) [ 259.287832][ T22] dvb-usb: error while querying for an remote control event. [ 259.361292][ T4369] usb 5-1: USB disconnect, device number 9 [ 259.381752][ T5546] chnl_net:caif_netlink_parms(): no params data found [ 259.536681][ T4482] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.579092][ T4369] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 259.720215][ T4335] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 260.082882][ T4335] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.098767][ T5611] netlink: 88 bytes leftover after parsing attributes in process `syz.2.271'. [ 260.108840][ T4335] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 260.137124][ T4335] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 260.163285][ T4335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.173297][ T4335] usb 1-1: config 0 descriptor?? [ 260.183741][ T4335] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 260.492118][ T4335] dvb-usb: bulk message failed: -22 (3/0) [ 260.508344][ T4335] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 260.537222][ T4335] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 260.557681][ T5546] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.960396][ T4278] Bluetooth: hci1: command 0x040f tx timeout [ 261.222306][ T5546] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.261812][ T4335] usb 1-1: media controller created [ 261.273695][ T5546] device bridge_slave_0 entered promiscuous mode [ 261.283413][ T4335] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 261.295749][ T5546] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.343981][ T4335] dvb-usb: bulk message failed: -22 (6/0) [ 261.350307][ T4335] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 261.367067][ T4335] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input27 [ 261.367774][ T5546] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.392943][ T4335] dvb-usb: schedule remote query interval to 150 msecs. [ 261.426115][ T4335] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 261.469042][ T5546] device bridge_slave_1 entered promiscuous mode [ 261.580449][ T4335] dvb-usb: bulk message failed: -22 (1/0) [ 261.586581][ T4335] dvb-usb: error while querying for an remote control event. [ 261.707299][ T5546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.750370][ T14] dvb-usb: bulk message failed: -22 (1/0) [ 261.763984][ T14] dvb-usb: error while querying for an remote control event. [ 261.832681][ T5546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.940364][ T14] dvb-usb: bulk message failed: -22 (1/0) [ 261.946338][ T14] dvb-usb: error while querying for an remote control event. [ 261.981450][ T5546] team0: Port device team_slave_0 added [ 262.049808][ T5546] team0: Port device team_slave_1 added [ 262.112321][ T14] dvb-usb: bulk message failed: -22 (1/0) [ 262.118362][ T14] dvb-usb: error while querying for an remote control event. [ 262.239022][ T5546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.272467][ T5546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.340249][ T14] dvb-usb: bulk message failed: -22 (1/0) [ 262.346184][ T14] dvb-usb: error while querying for an remote control event. [ 262.380678][ T4864] usb 1-1: USB disconnect, device number 9 [ 262.441761][ T5546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.501032][ T4864] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 262.689237][ T5546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.699146][ T5546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.725146][ C1] vkms_vblank_simulate: vblank timer overrun [ 262.774549][ T5546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.849648][ T5546] device hsr_slave_0 entered promiscuous mode [ 262.865501][ T5546] device hsr_slave_1 entered promiscuous mode [ 262.894622][ T5546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.917676][ T5546] Cannot create hsr debugfs directory [ 262.996123][ T5638] tmpfs: Unknown parameter 'grpquota/#/msr' [ 263.023222][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 263.024689][ T5638] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 263.024689][ T5638] program syz.3.274 not setting count and/or reply_len properly [ 263.654345][ T4482] device hsr_slave_0 left promiscuous mode [ 263.690460][ T4482] device hsr_slave_1 left promiscuous mode [ 264.041054][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.058986][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.101852][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.233690][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.593214][ T4482] device bridge_slave_1 left promiscuous mode [ 264.601055][ T4482] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.613035][ T4482] device bridge_slave_0 left promiscuous mode [ 264.619789][ T4482] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.860732][ T4482] device veth1_macvtap left promiscuous mode [ 264.866832][ T4482] device veth0_macvtap left promiscuous mode [ 264.893597][ T4482] device veth1_vlan left promiscuous mode [ 264.899478][ T4482] device veth0_vlan left promiscuous mode [ 267.124691][ T5668] tmpfs: Unknown parameter 'grpquota/#/msr' [ 268.093882][ T4482] team0 (unregistering): Port device team_slave_1 removed [ 268.134977][ T4482] team0 (unregistering): Port device team_slave_0 removed [ 268.187324][ T4482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.708319][ T4482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.936446][ T4482] bond0 (unregistering): Released all slaves [ 272.481982][ T5546] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 272.581343][ T5546] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 272.833000][ T5546] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 272.854214][ T5546] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 273.553398][ T5546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.698351][ T5732] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 273.710559][ T5732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.718484][ T5732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 274.612627][ T5732] bond0: (slave bond_slave_0): Releasing backup interface [ 274.749610][ T5732] bond0: (slave bond_slave_1): Releasing backup interface [ 277.304183][ T5732] team0: Port device team_slave_0 removed [ 277.441361][ T5732] team0: Port device team_slave_1 removed [ 277.470828][ T5732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.489771][ T5732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.509242][ T5732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.528017][ T5732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.677388][ T5546] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.839899][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.273646][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.355613][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.565308][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.576120][ T4443] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.583235][ T4443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.610379][ T22] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 278.828148][ T22] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 278.840198][ T22] usb 3-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 278.850963][ T22] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 278.860645][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.354673][ T22] usb 3-1: invalid MIDI out EP 0 [ 279.652196][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 279.690799][ T22] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 279.709308][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 279.741781][ T4451] udevd[4451]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.783615][ T4443] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.790789][ T4443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.837575][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 279.894803][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 279.947386][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 280.151439][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 280.240097][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 281.184166][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 281.272877][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 281.323474][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 281.900721][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 281.953520][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 281.987353][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 282.009901][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 282.043707][ T5546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 282.261115][ T5794] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 282.261115][ T5794] program syz.0.309 not setting count and/or reply_len properly [ 282.600064][ T4256] usb 3-1: USB disconnect, device number 8 [ 283.475167][ T5808] tmpfs: Unknown parameter 'grpquota/#/msr' [ 283.552731][ T5808] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 283.552731][ T5808] program syz.2.311 not setting count and/or reply_len properly [ 285.570478][ T14] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 286.289745][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 286.525302][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.535983][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 286.570577][ T14] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 286.575766][ T5546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.579485][ T14] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 286.614011][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.657573][ T14] usb 1-1: config 0 descriptor?? [ 286.674277][ T14] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 286.690371][ T14] dvb-usb: bulk message failed: -22 (3/0) [ 286.733287][ T14] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 286.787027][ T5837] netlink: 88 bytes leftover after parsing attributes in process `syz.2.317'. [ 286.805429][ T14] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 286.816256][ T14] usb 1-1: media controller created [ 286.838839][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 287.041664][ T14] dvb-usb: bulk message failed: -22 (6/0) [ 287.168358][ T5846] rdma_rxe: rxe_register_device failed with error -23 [ 287.176219][ T5846] rdma_rxe: failed to add vxcan1 [ 287.814233][ T14] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 287.901493][ T14] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input32 [ 288.023837][ T14] dvb-usb: schedule remote query interval to 150 msecs. [ 288.253946][ T14] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 288.437114][ T14] dvb-usb: bulk message failed: -22 (1/0) [ 288.492620][ T14] dvb-usb: error while querying for an remote control event. [ 288.710372][ T14] dvb-usb: bulk message failed: -22 (1/0) [ 288.716208][ T14] dvb-usb: error while querying for an remote control event. [ 288.883997][ T4864] usb 1-1: USB disconnect, device number 10 [ 288.936529][ T4864] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 289.970256][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 289.998027][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 290.054409][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 290.088048][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 290.235431][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 290.354935][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 290.495108][ T5546] device veth0_vlan entered promiscuous mode [ 290.663566][ T5876] tmpfs: Unknown parameter 'grpquota/#/msr' [ 291.038419][ T5546] device veth1_vlan entered promiscuous mode [ 291.716696][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 291.779529][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 291.819963][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 291.845648][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 291.870328][ T5876] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 291.870328][ T5876] program syz.0.323 not setting count and/or reply_len properly [ 291.888644][ T5546] device veth0_macvtap entered promiscuous mode [ 291.920565][ T5546] device veth1_macvtap entered promiscuous mode [ 291.982380][ T5891] netlink: 88 bytes leftover after parsing attributes in process `syz.2.325'. [ 292.104399][ T5546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.143586][ T5546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.253942][ T5896] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 292.253942][ T5896] program syz.3.326 not setting count and/or reply_len properly [ 292.642952][ T5546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.674708][ T5546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.703543][ T5546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.738213][ T5546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.842030][ T5546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.932154][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.325'. [ 292.961043][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 293.321052][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 293.364931][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 293.856366][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 293.897923][ T5546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.227784][ T5546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.263451][ T5546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.289200][ T5546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.571241][ T5546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.790259][ T5546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.811739][ T5546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.830014][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 294.869108][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 294.912890][ T5546] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.931913][ T5546] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.956048][ T5546] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.113468][ T5546] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.697375][ T4625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.726156][ T4625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.791423][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 297.827480][ T4601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.867729][ T4601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.938767][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 298.170299][ T4387] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 298.360276][ T4387] usb 1-1: Using ep0 maxpacket: 32 [ 298.376260][ T4387] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 298.384625][ T4387] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 298.397521][ T4387] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 298.411880][ T4387] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 298.425523][ T4387] usb 1-1: config 0 interface 0 has no altsetting 0 [ 298.453697][ T4387] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 298.463218][ T4387] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 298.474707][ T4387] usb 1-1: Product: syz [ 298.479006][ T4387] usb 1-1: Manufacturer: syz [ 298.486493][ T4387] usb 1-1: SerialNumber: syz [ 298.505705][ T4387] usb 1-1: config 0 descriptor?? [ 298.534230][ T4387] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 298.564905][ T4387] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 300.287886][ T4313] usb 1-1: USB disconnect, device number 11 [ 300.339559][ T4313] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 300.364036][ T5937] netlink: 88 bytes leftover after parsing attributes in process `syz.3.335'. [ 300.811428][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.335'. [ 301.136195][ T5948] netlink: 'syz.3.335': attribute type 21 has an invalid length. [ 301.255181][ T5948] netlink: 128 bytes leftover after parsing attributes in process `syz.3.335'. [ 301.266903][ T5948] netlink: 'syz.3.335': attribute type 4 has an invalid length. [ 301.321877][ T5948] netlink: 3 bytes leftover after parsing attributes in process `syz.3.335'. [ 302.381682][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 302.394755][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 302.402842][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 302.415353][ T5967] device bridge_slave_0 left promiscuous mode [ 302.425620][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.691399][ T5967] device bridge_slave_1 left promiscuous mode [ 303.697633][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.122160][ T5967] bond0: (slave bond_slave_0): Releasing backup interface [ 304.166630][ T5967] bond0: (slave bond_slave_1): Releasing backup interface [ 304.261960][ T5967] team0: Port device team_slave_0 removed [ 304.356806][ T5967] team0: Port device team_slave_1 removed [ 304.373849][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.409719][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.446631][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.492181][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.062718][ T5982] netlink: 88 bytes leftover after parsing attributes in process `syz.2.340'. [ 305.207233][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.340'. [ 305.245399][ T5987] netlink: 'syz.2.340': attribute type 21 has an invalid length. [ 305.327280][ T5987] netlink: 128 bytes leftover after parsing attributes in process `syz.2.340'. [ 305.340669][ T5987] netlink: 'syz.2.340': attribute type 4 has an invalid length. [ 305.348592][ T5987] netlink: 3 bytes leftover after parsing attributes in process `syz.2.340'. [ 306.247322][ T6003] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 306.570231][ T951] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 307.232314][ T951] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.296012][ T951] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 307.372340][ T951] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 307.417340][ T951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.472749][ T951] usb 1-1: config 0 descriptor?? [ 307.491679][ T951] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 307.498301][ T951] dvb-usb: bulk message failed: -22 (3/0) [ 307.545888][ T951] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 307.605411][ T951] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 307.620739][ T951] usb 1-1: media controller created [ 307.638415][ T951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.038027][ T6025] rdma_rxe: rxe_register_device failed with error -23 [ 308.046475][ T6025] rdma_rxe: failed to add vxcan1 [ 309.731559][ T6024] tmpfs: Unknown parameter 'grpquota/#/msr' [ 309.928522][ T6024] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 309.928522][ T6024] program syz.4.348 not setting count and/or reply_len properly [ 310.301168][ T951] dvb-usb: bulk message failed: -22 (6/0) [ 310.310347][ T951] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 310.328040][ T951] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input35 [ 310.426003][ T951] dvb-usb: schedule remote query interval to 150 msecs. [ 310.433793][ T951] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 310.448533][ T951] usb 1-1: USB disconnect, device number 12 [ 310.606128][ T6030] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 310.606128][ T6030] program syz.3.349 not setting count and/or reply_len properly [ 310.999759][ T951] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 311.550328][ T951] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 311.570331][ T4321] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 311.782971][ T951] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.793319][ T4321] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.824076][ T4321] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 311.833847][ T951] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 311.867193][ T4321] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 311.880208][ T951] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 311.909651][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.918821][ T951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.944872][ T4321] usb 5-1: config 0 descriptor?? [ 311.954565][ T951] usb 1-1: config 0 descriptor?? [ 311.989028][ T4321] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 312.003269][ T951] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 312.020309][ T4321] dvb-usb: bulk message failed: -22 (3/0) [ 312.028861][ T951] dvb-usb: bulk message failed: -22 (3/0) [ 312.039520][ T4321] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 312.053970][ T951] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 312.067919][ T4321] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 312.076043][ T4321] usb 5-1: media controller created [ 312.081754][ T951] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 312.088838][ T951] usb 1-1: media controller created [ 312.096021][ T4321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 312.251488][ T4313] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 312.262478][ T951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 312.273714][ T4321] dvb-usb: bulk message failed: -22 (6/0) [ 312.279526][ T4321] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 312.289716][ T951] dvb-usb: bulk message failed: -22 (6/0) [ 312.295668][ T951] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 312.305700][ T4321] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input36 [ 312.320943][ T951] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input37 [ 313.310764][ T4321] dvb-usb: schedule remote query interval to 150 msecs. [ 313.320391][ T4313] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.737122][ T6062] rdma_rxe: rxe_register_device failed with error -23 [ 313.744865][ T6062] rdma_rxe: failed to add vxcan1 [ 314.105494][ T4313] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 314.145510][ T4321] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 314.303441][ T951] dvb-usb: schedule remote query interval to 150 msecs. [ 314.370561][ T951] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 314.385546][ T4313] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 314.541372][ T6066] tmpfs: Unknown parameter 'grpquota/#/msr' [ 314.914134][ T4864] usb 5-1: USB disconnect, device number 10 [ 315.031248][ T4313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.041337][ T951] usb 1-1: USB disconnect, device number 13 [ 315.048613][ T4313] usb 4-1: config 0 descriptor?? [ 315.073523][ T4864] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 315.093246][ T951] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 315.119038][ T4313] usb 4-1: can't set config #0, error -71 [ 315.142082][ T4313] usb 4-1: USB disconnect, device number 9 [ 315.168380][ T6069] loop0: detected capacity change from 0 to 1024 [ 316.951155][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.150420][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.374791][ T6085] tmpfs: Unknown parameter 'grpquota/#/msr' [ 318.483891][ T6090] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 319.436577][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 319.449375][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 319.457475][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 319.465309][ T6101] infiniband syz2: set active [ 319.521711][ T6101] device bridge_slave_0 left promiscuous mode [ 319.528683][ T6101] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.764008][ T6101] device bridge_slave_1 left promiscuous mode [ 319.770873][ T6101] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.810373][ T6101] bond0: (slave bond_slave_0): Releasing backup interface [ 320.413401][ T6101] bond0: (slave bond_slave_1): Releasing backup interface [ 320.427059][ T6106] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 320.427059][ T6106] program syz.2.366 not setting count and/or reply_len properly [ 321.383688][ T6101] team0: Port device team_slave_0 removed [ 321.507541][ T6101] team0: Port device team_slave_1 removed [ 321.544162][ T6101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.564412][ T6101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.593901][ T6101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.613297][ T6101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.649388][ T4312] vxcan1 speed is unknown, defaulting to 1000 [ 322.030253][ T4312] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 322.370299][ T4864] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 322.408244][ T4312] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.415910][ T6134] loop5: detected capacity change from 0 to 1024 [ 322.429780][ T4312] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 322.470221][ T4312] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 322.498286][ T4312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.560244][ T4864] usb 3-1: Using ep0 maxpacket: 32 [ 322.576360][ T4864] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 322.598720][ T4312] usb 1-1: config 0 descriptor?? [ 322.653285][ T4864] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 322.711263][ T4312] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 322.737112][ T4312] dvb-usb: bulk message failed: -22 (3/0) [ 322.749854][ T4864] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 322.833312][ T4312] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 322.858949][ T4864] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 322.882703][ T4312] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 322.893159][ T4864] usb 3-1: config 0 interface 0 has no altsetting 0 [ 322.910362][ T4312] usb 1-1: media controller created [ 322.916509][ T4864] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 322.936818][ T4312] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 322.945462][ T4864] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 322.955183][ T4864] usb 3-1: Product: syz [ 322.959632][ T4864] usb 3-1: Manufacturer: syz [ 322.982393][ T4864] usb 3-1: SerialNumber: syz [ 323.002295][ T4312] dvb-usb: bulk message failed: -22 (6/0) [ 323.008123][ T4312] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 323.017110][ T4864] usb 3-1: config 0 descriptor?? [ 323.025069][ T4864] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 323.027087][ T5255] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 323.350424][ T4312] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input40 [ 323.839168][ T4864] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 325.912814][ T4312] dvb-usb: schedule remote query interval to 150 msecs. [ 325.919819][ T4312] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 327.162902][ T4864] usb 3-1: USB disconnect, device number 9 [ 327.184184][ T4864] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 327.237474][ T4312] usb 1-1: USB disconnect, device number 14 [ 327.489551][ T4312] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 328.956097][ T6168] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 329.875743][ T6180] tmpfs: Unknown parameter 'grpquota/#/msr' [ 329.932093][ T6180] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 329.932093][ T6180] program syz.2.377 not setting count and/or reply_len properly [ 330.365269][ T6185] netlink: 88 bytes leftover after parsing attributes in process `syz.4.379'. [ 331.949142][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.379'. [ 332.011311][ T6198] netlink: 'syz.4.379': attribute type 21 has an invalid length. [ 332.169257][ T6204] loop3: detected capacity change from 0 to 1024 [ 332.177773][ T6198] netlink: 128 bytes leftover after parsing attributes in process `syz.4.379'. [ 332.248056][ T6198] netlink: 'syz.4.379': attribute type 4 has an invalid length. [ 332.359284][ T5255] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 332.513679][ T6198] netlink: 3 bytes leftover after parsing attributes in process `syz.4.379'. [ 332.537340][ T6194] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 333.107490][ T6194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 333.174547][ T6194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 333.716768][ T6210] netlink: 88 bytes leftover after parsing attributes in process `syz.2.382'. [ 333.764030][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'. [ 333.780770][ T6216] netlink: 'syz.2.382': attribute type 21 has an invalid length. [ 333.824006][ T6216] netlink: 128 bytes leftover after parsing attributes in process `syz.2.382'. [ 333.857211][ T6216] netlink: 'syz.2.382': attribute type 4 has an invalid length. [ 333.916969][ T6216] netlink: 3 bytes leftover after parsing attributes in process `syz.2.382'. [ 334.225889][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 334.238647][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 334.246608][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 335.270636][ T6232] bond0: (slave bond_slave_0): Releasing backup interface [ 335.421646][ T6232] bond0: (slave bond_slave_1): Releasing backup interface [ 335.525830][ T6232] team0: Port device team_slave_0 removed [ 335.579355][ T6232] team0: Port device team_slave_1 removed [ 335.608597][ T6232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.639745][ T6232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.677499][ T6232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.693867][ T6237] input input42: cannot allocate more than FF_MAX_EFFECTS effects [ 335.703341][ T6232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.059576][ T6271] netlink: 88 bytes leftover after parsing attributes in process `syz.4.392'. [ 339.285790][ T6276] mkiss: ax0: crc mode is auto. [ 339.296733][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'. [ 339.359128][ T6277] netlink: 'syz.4.392': attribute type 21 has an invalid length. [ 339.367375][ T6277] netlink: 128 bytes leftover after parsing attributes in process `syz.4.392'. [ 339.411014][ T6277] netlink: 'syz.4.392': attribute type 4 has an invalid length. [ 339.418993][ T6277] netlink: 3 bytes leftover after parsing attributes in process `syz.4.392'. [ 339.533254][ T6287] loop5: detected capacity change from 0 to 1024 [ 341.797494][ T6303] tmpfs: Unknown parameter 'grpquota/#/msr' [ 341.856110][ T6303] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 341.856110][ T6303] program syz.5.397 not setting count and/or reply_len properly [ 343.601734][ T6325] tmpfs: Unknown parameter 'grpquota/#/msr' [ 343.680775][ T6325] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 343.680775][ T6325] program syz.0.401 not setting count and/or reply_len properly [ 343.974960][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'. [ 345.576127][ T951] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 347.102426][ T951] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.420349][ T951] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 347.480986][ T951] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 347.506024][ T951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.548037][ T6355] loop4: detected capacity change from 0 to 1024 [ 347.575762][ T951] usb 3-1: config 0 descriptor?? [ 347.599092][ T951] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 347.620930][ T5255] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 347.655392][ T951] dvb-usb: bulk message failed: -22 (3/0) [ 347.677405][ T951] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 348.266729][ T6367] rdma_rxe: rxe_register_device failed with error -23 [ 348.274853][ T6367] rdma_rxe: failed to add vxcan1 [ 348.655609][ T951] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 348.664035][ T951] usb 3-1: media controller created [ 348.670617][ T951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 348.688654][ T951] dvb-usb: bulk message failed: -22 (6/0) [ 348.700580][ T951] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 348.716104][ T951] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input45 [ 348.739761][ T951] dvb-usb: schedule remote query interval to 150 msecs. [ 348.750304][ T951] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 348.910177][ T4321] dvb-usb: bulk message failed: -22 (1/0) [ 348.916100][ T4321] dvb-usb: error while querying for an remote control event. [ 349.154293][ T4321] dvb-usb: bulk message failed: -22 (1/0) [ 349.193448][ T4321] dvb-usb: error while querying for an remote control event. [ 350.000017][ T4321] dvb-usb: bulk message failed: -22 (1/0) [ 350.005880][ T4321] dvb-usb: error while querying for an remote control event. [ 350.018603][ T4321] usb 3-1: USB disconnect, device number 10 [ 350.036553][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.409'. [ 350.527674][ T6377] netlink: 'syz.5.409': attribute type 21 has an invalid length. [ 350.536035][ T6377] netlink: 128 bytes leftover after parsing attributes in process `syz.5.409'. [ 350.548135][ T6377] netlink: 'syz.5.409': attribute type 4 has an invalid length. [ 350.556568][ T4321] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 350.666998][ T6377] netlink: 3 bytes leftover after parsing attributes in process `syz.5.409'. [ 350.682724][ T6390] tmpfs: Unknown parameter 'grpquota/#/msr' [ 350.717334][ T6390] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 350.717334][ T6390] program syz.4.414 not setting count and/or reply_len properly [ 350.810977][ T4352] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 350.844816][ T6389] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 351.022654][ T4352] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.065321][ T4352] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 351.204462][ T4352] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 351.215538][ T4352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.554087][ T4352] usb 1-1: config 0 descriptor?? [ 351.603233][ T4352] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 351.609913][ T4352] dvb-usb: bulk message failed: -22 (3/0) [ 351.706877][ T4352] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 351.777810][ T4352] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 352.079337][ T6405] rdma_rxe: rxe_register_device failed with error -23 [ 352.087101][ T6405] rdma_rxe: failed to add vxcan1 [ 352.646889][ T4352] usb 1-1: media controller created [ 352.676792][ T4352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 352.700370][ T951] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 352.712935][ T4352] dvb-usb: bulk message failed: -22 (6/0) [ 352.720943][ T4352] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 352.746444][ T4352] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input46 [ 352.776950][ T4352] dvb-usb: schedule remote query interval to 150 msecs. [ 352.792136][ T4352] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 352.920623][ T951] usb 3-1: Using ep0 maxpacket: 32 [ 352.927677][ T951] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 352.950289][ T4352] dvb-usb: bulk message failed: -22 (1/0) [ 352.956296][ T4352] dvb-usb: error while querying for an remote control event. [ 352.985676][ T951] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 353.097177][ T951] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 353.120223][ T4352] dvb-usb: bulk message failed: -22 (1/0) [ 353.126080][ T4352] dvb-usb: error while querying for an remote control event. [ 353.188981][ T951] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 353.258420][ T951] usb 3-1: config 0 interface 0 has no altsetting 0 [ 353.310190][ T4352] dvb-usb: bulk message failed: -22 (1/0) [ 353.318455][ T4352] dvb-usb: error while querying for an remote control event. [ 353.332530][ T951] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 353.417671][ T951] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 353.464816][ T951] usb 3-1: Product: syz [ 353.493745][ T951] usb 3-1: Manufacturer: syz [ 353.500422][ T4352] dvb-usb: bulk message failed: -22 (1/0) [ 353.509089][ T4352] dvb-usb: error while querying for an remote control event. [ 353.532558][ T951] usb 3-1: SerialNumber: syz [ 353.587572][ T951] usb 3-1: config 0 descriptor?? [ 353.632349][ T951] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 353.722618][ T4352] dvb-usb: bulk message failed: -22 (1/0) [ 353.728505][ T4352] dvb-usb: error while querying for an remote control event. [ 353.760481][ T4352] usb 1-1: USB disconnect, device number 15 [ 353.785597][ T4352] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 353.844563][ T951] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 355.415041][ T951] usb 3-1: USB disconnect, device number 11 [ 355.605103][ T951] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 356.645554][ T6426] mkiss: ax0: crc mode is auto. [ 357.384623][ T6438] tmpfs: Unknown parameter 'grpquota/#/msr' [ 357.411182][ T6438] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 357.411182][ T6438] program syz.5.422 not setting count and/or reply_len properly [ 358.004172][ T6446] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 358.020335][ T6446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 358.028268][ T6446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 358.036014][ T6446] infiniband syz2: set active [ 358.076571][ T4352] vxcan1 speed is unknown, defaulting to 1000 [ 360.207013][ T6463] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 360.290319][ T951] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 360.398703][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.426'. [ 360.515643][ T6464] tmpfs: Unknown parameter 'grpquota/#/msr' [ 360.588559][ T6464] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 360.588559][ T6464] program syz.5.429 not setting count and/or reply_len properly [ 360.742238][ T951] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.787287][ T951] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 360.797664][ T951] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 360.816809][ T951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.880684][ T951] usb 3-1: config 0 descriptor?? [ 360.911372][ T951] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 360.925452][ T951] dvb-usb: bulk message failed: -22 (3/0) [ 360.940925][ T951] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 360.956813][ T951] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 360.964304][ T951] usb 3-1: media controller created [ 360.981770][ T951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 361.100275][ T951] dvb-usb: bulk message failed: -22 (6/0) [ 361.106404][ T951] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 361.394575][ T951] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input47 [ 361.419664][ T951] dvb-usb: schedule remote query interval to 150 msecs. [ 361.471296][ T951] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 361.581386][ T6479] rdma_rxe: rxe_register_device failed with error -23 [ 361.589480][ T6479] rdma_rxe: failed to add vxcan1 [ 361.835830][ T4369] dvb-usb: bulk message failed: -22 (1/0) [ 361.845876][ T4369] dvb-usb: error while querying for an remote control event. [ 362.157315][ T951] dvb-usb: bulk message failed: -22 (1/0) [ 362.181673][ T951] dvb-usb: error while querying for an remote control event. [ 363.756319][ T5951] dvb-usb: bulk message failed: -22 (1/0) [ 363.762507][ T5951] dvb-usb: error while querying for an remote control event. [ 363.960316][ T5951] dvb-usb: bulk message failed: -22 (1/0) [ 363.966258][ T5951] dvb-usb: error while querying for an remote control event. [ 364.028766][ T6487] netlink: 88 bytes leftover after parsing attributes in process `syz.3.433'. [ 364.141158][ T5951] dvb-usb: bulk message failed: -22 (1/0) [ 364.148159][ T5951] dvb-usb: error while querying for an remote control event. [ 364.251718][ T5951] usb 3-1: USB disconnect, device number 12 [ 364.302405][ T5951] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 364.350240][ T4352] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 364.516523][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 364.554462][ T4352] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.581467][ T6487] netlink: 'syz.3.433': attribute type 21 has an invalid length. [ 364.599849][ T4352] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 364.609734][ T6487] netlink: 128 bytes leftover after parsing attributes in process `syz.3.433'. [ 364.625324][ T6487] netlink: 'syz.3.433': attribute type 4 has an invalid length. [ 364.633482][ T6487] netlink: 3 bytes leftover after parsing attributes in process `syz.3.433'. [ 364.685639][ T4352] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 364.699575][ T4352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.728704][ T4352] usb 1-1: config 0 descriptor?? [ 364.740170][ T5951] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 364.742340][ T4352] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 364.808690][ T4352] dvb-usb: bulk message failed: -22 (3/0) [ 364.869338][ T4352] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 364.928467][ T4352] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 364.946645][ T4352] usb 1-1: media controller created [ 364.962260][ T5951] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.131497][ T4352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 365.164432][ T5951] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 365.260222][ T6503] rdma_rxe: rxe_register_device failed with error -23 [ 365.267917][ T6503] rdma_rxe: failed to add vxcan1 [ 365.935406][ T5951] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 365.946220][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.972107][ T4352] dvb-usb: bulk message failed: -22 (6/0) [ 365.989393][ T5951] usb 3-1: config 0 descriptor?? [ 366.003512][ T4352] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 366.003638][ T5951] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 366.050570][ T5951] dvb-usb: bulk message failed: -22 (3/0) [ 366.061273][ T5951] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 366.066541][ T4352] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input49 [ 366.091102][ T5951] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 366.106049][ T5951] usb 3-1: media controller created [ 366.116766][ T5951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 366.155814][ T5951] dvb-usb: bulk message failed: -22 (6/0) [ 366.172567][ T5951] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 366.200736][ T5951] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input51 [ 366.362042][ T5951] dvb-usb: schedule remote query interval to 150 msecs. [ 366.375637][ T5951] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 366.414907][ T4352] dvb-usb: schedule remote query interval to 150 msecs. [ 366.553354][ T6508] rdma_rxe: rxe_register_device failed with error -23 [ 366.561255][ T6508] rdma_rxe: failed to add vxcan1 [ 367.040960][ T5951] dvb-usb: bulk message failed: -22 (1/0) [ 367.095998][ T5951] dvb-usb: error while querying for an remote control event. [ 367.124764][ T4352] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 367.222244][ T4352] usb 1-1: USB disconnect, device number 16 [ 367.290338][ T951] dvb-usb: bulk message failed: -22 (1/0) [ 367.313168][ T951] dvb-usb: error while querying for an remote control event. [ 367.530200][ T5951] dvb-usb: bulk message failed: -22 (1/0) [ 367.536377][ T5951] dvb-usb: error while querying for an remote control event. [ 367.572281][ T6516] netlink: 88 bytes leftover after parsing attributes in process `syz.0.439'. [ 367.739322][ T5951] dvb-usb: bulk message failed: -22 (1/0) [ 367.778523][ T5951] dvb-usb: error while querying for an remote control event. [ 368.228319][ T4352] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 368.430764][ T4864] usb 3-1: USB disconnect, device number 13 [ 368.621754][ T4864] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 369.018704][ T6529] mkiss: ax0: crc mode is auto. [ 369.023830][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 372.025817][ T6558] binder: BINDER_SET_CONTEXT_MGR already set [ 372.032444][ T6558] binder: 6552:6558 ioctl 4018620d 200000000040 returned -16 [ 372.390354][ T951] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 372.631776][ T951] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.924930][ T951] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 373.050273][ T951] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 373.098944][ T951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.180957][ T951] usb 6-1: config 0 descriptor?? [ 373.196256][ T951] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 373.240172][ T951] dvb-usb: bulk message failed: -22 (3/0) [ 373.277167][ T951] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 373.295724][ T951] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 373.323660][ T951] usb 6-1: media controller created [ 373.353778][ T951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 373.620367][ T4352] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 373.683688][ T6580] rdma_rxe: rxe_register_device failed with error -23 [ 373.691504][ T6580] rdma_rxe: failed to add vxcan1 [ 374.300883][ T951] dvb-usb: bulk message failed: -22 (6/0) [ 374.306741][ T951] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 374.543740][ T4352] usb 4-1: Using ep0 maxpacket: 32 [ 374.593700][ T4352] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 374.624746][ T951] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input52 [ 374.639881][ T951] dvb-usb: schedule remote query interval to 150 msecs. [ 374.647074][ T951] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 374.713522][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.451'. [ 374.800555][ T951] dvb-usb: bulk message failed: -22 (1/0) [ 374.807563][ T4352] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 374.810218][ T951] dvb-usb: error while querying for an remote control event. [ 375.012938][ T951] dvb-usb: bulk message failed: -22 (1/0) [ 375.063235][ T951] dvb-usb: error while querying for an remote control event. [ 375.110325][ T4352] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 375.159178][ T4352] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 375.223674][ T4352] usb 4-1: config 0 interface 0 has no altsetting 0 [ 375.250243][ T951] dvb-usb: bulk message failed: -22 (1/0) [ 375.256231][ T951] dvb-usb: error while querying for an remote control event. [ 375.263671][ T4352] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 375.263702][ T4352] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 375.263724][ T4352] usb 4-1: Product: syz [ 375.264349][ T4352] usb 4-1: Manufacturer: syz [ 375.422740][ T4352] usb 4-1: SerialNumber: syz [ 375.431039][ T4352] usb 4-1: config 0 descriptor?? [ 375.440408][ T951] dvb-usb: bulk message failed: -22 (1/0) [ 375.446191][ T951] dvb-usb: error while querying for an remote control event. [ 375.446399][ T126] usb 6-1: USB disconnect, device number 2 [ 375.467950][ T4352] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 375.478969][ T4352] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 375.569308][ T126] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 376.670414][ T6600] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 376.679043][ T5951] usb 4-1: USB disconnect, device number 10 [ 376.679108][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 376.697858][ T5951] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 378.386241][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.393501][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.490186][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 380.512909][ T6617] tmpfs: Unknown parameter 'grpquota/#/msr' [ 380.745815][ T6614] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 380.745815][ T6614] program syz.5.457 not setting count and/or reply_len properly [ 381.594583][ T6625] tmpfs: Unknown parameter 'grpquota/#/msr' [ 381.618447][ T6625] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 381.618447][ T6625] program syz.3.459 not setting count and/or reply_len properly [ 383.001289][ T6637] binder: BINDER_SET_CONTEXT_MGR already set [ 383.007493][ T6637] binder: 6631:6637 ioctl 4018620d 200000000040 returned -16 [ 384.040318][ T4312] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 384.367956][ T6645] binder_alloc: 6642: binder_alloc_buf, no vma [ 384.368019][ T4312] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.368077][ T4312] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 384.514309][ T6644] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 384.673939][ T6651] tmpfs: Unknown parameter 'grpquota/#/msr' [ 384.690888][ T6651] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 384.690888][ T6651] program syz.3.467 not setting count and/or reply_len properly [ 384.735045][ T4312] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 384.744329][ T4312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.764361][ T4312] usb 6-1: config 0 descriptor?? [ 384.799759][ T4312] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 384.806780][ T4312] dvb-usb: bulk message failed: -22 (3/0) [ 385.121174][ T6633] binder_alloc: 6630: binder_alloc_buf, no vma [ 385.250629][ T4312] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 385.300583][ T4312] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 385.308255][ T4312] usb 6-1: media controller created [ 385.467817][ T6654] rdma_rxe: rxe_register_device failed with error -23 [ 385.474860][ T6654] rdma_rxe: failed to add vxcan1 [ 386.072982][ T4312] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 386.084589][ T4312] dvb-usb: bulk message failed: -22 (6/0) [ 386.090468][ T4312] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 386.100645][ T4312] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input53 [ 386.114225][ T4312] dvb-usb: schedule remote query interval to 150 msecs. [ 386.139399][ T4312] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 386.204228][ T6658] overlayfs: missing 'lowerdir' [ 386.280761][ T6661] tmpfs: Unknown parameter 'grpquota/#/msr' [ 386.296211][ T4864] dvb-usb: bulk message failed: -22 (1/0) [ 386.301928][ T6661] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 386.301928][ T6661] program syz.4.468 not setting count and/or reply_len properly [ 386.603966][ T4864] dvb-usb: error while querying for an remote control event. [ 386.770621][ T4864] dvb-usb: bulk message failed: -22 (1/0) [ 386.778539][ T4864] dvb-usb: error while querying for an remote control event. [ 387.050271][ T4864] dvb-usb: bulk message failed: -22 (1/0) [ 387.114812][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 387.130656][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 387.138517][ T5951] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 387.147046][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 387.960536][ T4864] dvb-usb: error while querying for an remote control event. [ 387.968389][ T4864] usb 6-1: USB disconnect, device number 3 [ 388.104241][ T4864] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 388.272752][ T6671] binder: BINDER_SET_CONTEXT_MGR already set [ 388.278966][ T6671] binder: 6668:6671 ioctl 4018620d 200000000040 returned -16 [ 388.612759][ T5951] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.658221][ T5951] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 389.721233][ T5951] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 389.982035][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.022806][ T6683] binder: BINDER_SET_CONTEXT_MGR already set [ 390.045611][ T6683] binder: 6672:6683 ioctl 4018620d 200000000040 returned -16 [ 390.066202][ T5951] usb 1-1: config 0 descriptor?? [ 390.130290][ T5951] usb 1-1: can't set config #0, error -71 [ 390.163826][ T5951] usb 1-1: USB disconnect, device number 17 [ 390.357464][ T6689] binder: BINDER_SET_CONTEXT_MGR already set [ 390.363741][ T6689] binder: 6684:6689 ioctl 4018620d 200000000040 returned -16 [ 391.097894][ T6700] overlayfs: missing 'workdir' [ 391.170262][ T4312] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 391.406819][ T4312] usb 6-1: Using ep0 maxpacket: 32 [ 391.461398][ T4312] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 391.471359][ T951] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 391.481056][ T6707] tmpfs: Unknown parameter 'grpquota/#/msr' [ 391.483129][ T4312] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 391.543567][ T4312] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 391.556433][ T4312] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 391.570283][ T4312] usb 6-1: config 0 interface 0 has no altsetting 0 [ 391.582134][ T6707] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 391.582134][ T6707] program syz.2.483 not setting count and/or reply_len properly [ 391.610387][ T126] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 391.618650][ T4312] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 391.630896][ T4312] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 391.639467][ T4312] usb 6-1: Product: syz [ 391.643895][ T4312] usb 6-1: Manufacturer: syz [ 391.648602][ T4312] usb 6-1: SerialNumber: syz [ 391.664609][ T4312] usb 6-1: config 0 descriptor?? [ 391.696473][ T4312] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 391.715784][ T4312] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 391.721134][ T951] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.854758][ T126] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.911312][ T126] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 391.922929][ T126] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 391.933747][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.941885][ T951] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 391.941932][ T951] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 391.992046][ T126] usb 5-1: config 0 descriptor?? [ 392.030242][ T126] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 392.037875][ T126] dvb-usb: bulk message failed: -22 (3/0) [ 392.069569][ T126] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 392.084380][ T126] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 392.093637][ T126] usb 5-1: media controller created [ 392.109886][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 392.131039][ T126] dvb-usb: bulk message failed: -22 (6/0) [ 392.137087][ T126] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 392.151552][ T126] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input54 [ 393.696736][ T126] dvb-usb: schedule remote query interval to 150 msecs. [ 393.901121][ T126] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 394.431542][ T6725] rdma_rxe: rxe_register_device failed with error -23 [ 394.439331][ T6725] rdma_rxe: failed to add vxcan1 [ 394.942811][ T951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.945561][ T4256] dvb-usb: bulk message failed: -22 (1/0) [ 394.957090][ T4256] dvb-usb: error while querying for an remote control event. [ 394.979758][ T951] usb 4-1: config 0 descriptor?? [ 395.115566][ T951] usb 4-1: can't set config #0, error -71 [ 395.170821][ T951] usb 4-1: USB disconnect, device number 11 [ 395.200187][ T4256] dvb-usb: bulk message failed: -22 (1/0) [ 395.206076][ T4256] dvb-usb: error while querying for an remote control event. [ 395.453564][ T4256] dvb-usb: bulk message failed: -22 (1/0) [ 395.459518][ T4256] dvb-usb: error while querying for an remote control event. [ 395.497199][ T4256] usb 6-1: USB disconnect, device number 4 [ 396.441236][ T6734] binder: BINDER_SET_CONTEXT_MGR already set [ 396.447391][ T6734] binder: 6726:6734 ioctl 4018620d 200000000040 returned -16 [ 396.777942][ T4335] usb 5-1: USB disconnect, device number 11 [ 396.778730][ T4256] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 396.793537][ T4312] dvb-usb: bulk message failed: -22 (1/0) [ 396.799323][ T4312] dvb-usb: error while querying for an remote control event. [ 396.935407][ T6739] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 396.948977][ T6739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 396.956971][ T6739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 396.965226][ T6739] infiniband syz2: set active [ 397.646355][ T4335] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 398.107468][ T4864] vxcan1 speed is unknown, defaulting to 1000 [ 398.637569][ T6760] siw: device registration error -23 [ 398.645669][ T6760] smc: removing ib device syz2 [ 399.462491][ T6757] overlayfs: missing 'workdir' [ 402.507681][ T6780] tmpfs: Unknown parameter 'grpquota/#/msr' [ 402.531114][ T6780] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 402.531114][ T6780] program syz.5.498 not setting count and/or reply_len properly [ 402.925476][ T6759] binder_alloc: 6758: binder_alloc_buf, no vma [ 403.640222][ T4335] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 403.832900][ T4335] usb 5-1: Using ep0 maxpacket: 32 [ 403.856291][ T4335] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 404.344159][ T6804] binder: BINDER_SET_CONTEXT_MGR already set [ 404.350564][ T6804] binder: 6800:6804 ioctl 4018620d 200000000040 returned -16 [ 404.566211][ T4335] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 404.628511][ T4335] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 404.646046][ T4335] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 404.671384][ T4335] usb 5-1: config 0 interface 0 has no altsetting 0 [ 404.712822][ T4335] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 404.726097][ T4335] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 404.739009][ T4335] usb 5-1: Product: syz [ 404.747264][ T4335] usb 5-1: Manufacturer: syz [ 404.752782][ T4335] usb 5-1: SerialNumber: syz [ 404.767266][ T4335] usb 5-1: config 0 descriptor?? [ 404.775700][ T4335] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 404.797048][ T4335] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 408.223238][ T126] usb 5-1: USB disconnect, device number 12 [ 408.419425][ T126] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 409.174202][ T6824] overlayfs: missing 'workdir' [ 409.580385][ T126] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 409.639426][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 409.653532][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 409.661649][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 410.592165][ T126] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.675653][ T6839] tmpfs: Unknown parameter 'grpquota/#/msr' [ 410.724002][ T6839] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 410.724002][ T6839] program syz.5.513 not setting count and/or reply_len properly [ 411.084801][ T126] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 411.140256][ T126] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 411.227198][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.246401][ T126] usb 5-1: config 0 descriptor?? [ 411.287527][ T126] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 411.310383][ T126] dvb-usb: bulk message failed: -22 (3/0) [ 411.360703][ T126] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 411.413856][ T126] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 411.430458][ T126] usb 5-1: media controller created [ 411.444726][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 411.821509][ T6849] vxcan1 speed is unknown, defaulting to 1000 [ 411.859332][ T6849] vxcan1 speed is unknown, defaulting to 1000 [ 411.872403][ T6849] vxcan1 speed is unknown, defaulting to 1000 [ 412.975213][ T6849] infiniband syz2: set active [ 412.979940][ T6849] infiniband syz2: added vxcan1 [ 413.002453][ T4335] vxcan1 speed is unknown, defaulting to 1000 [ 413.435015][ T126] dvb-usb: bulk message failed: -22 (6/0) [ 413.442914][ T126] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 413.486124][ T126] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input56 [ 413.514721][ T6849] RDS/IB: syz2: added [ 413.518926][ T6849] smc: adding ib device syz2 with port count 1 [ 413.525255][ T6849] smc: ib device syz2 port 1 has pnetid [ 413.531720][ T6849] vxcan1 speed is unknown, defaulting to 1000 [ 413.608555][ T6849] vxcan1 speed is unknown, defaulting to 1000 [ 413.684086][ T6849] vxcan1 speed is unknown, defaulting to 1000 [ 413.760881][ T6849] vxcan1 speed is unknown, defaulting to 1000 [ 413.836321][ T6849] vxcan1 speed is unknown, defaulting to 1000 [ 413.910913][ T4335] vxcan1 speed is unknown, defaulting to 1000 [ 414.488605][ T126] dvb-usb: schedule remote query interval to 150 msecs. [ 414.516653][ T126] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 414.556207][ T126] usb 5-1: USB disconnect, device number 13 [ 414.598970][ T6847] binder_alloc: 6846: binder_alloc_buf, no vma [ 414.637775][ T126] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 414.723229][ T4352] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 414.960193][ T4352] usb 1-1: Using ep0 maxpacket: 32 [ 414.968614][ T4352] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 414.996618][ T4352] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 415.132991][ T4352] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 415.603446][ T4352] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 415.617117][ T4352] usb 1-1: config 0 interface 0 has no altsetting 0 [ 415.673426][ T4352] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 415.714045][ T4352] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 415.737716][ T4352] usb 1-1: Product: syz [ 415.740640][ T4335] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 415.766201][ T4352] usb 1-1: Manufacturer: syz [ 415.782641][ T4352] usb 1-1: SerialNumber: syz [ 415.804977][ T4352] usb 1-1: config 0 descriptor?? [ 415.831148][ T4352] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 415.880253][ T4352] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 415.950198][ T4335] usb 6-1: Using ep0 maxpacket: 32 [ 415.974272][ T4335] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 416.006961][ T4335] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 416.021762][ T4335] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 416.041522][ T4335] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 416.059722][ T4335] usb 6-1: config 0 interface 0 has no altsetting 0 [ 416.159931][ T6875] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 416.159931][ T6875] program syz.3.523 not setting count and/or reply_len properly [ 416.647913][ T4335] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 416.672822][ T4335] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 416.699783][ T4335] usb 6-1: Product: syz [ 416.717881][ T4335] usb 6-1: Manufacturer: syz [ 416.871691][ T6878] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 417.385585][ T4335] usb 6-1: SerialNumber: syz [ 418.275944][ T4335] usb 6-1: config 0 descriptor?? [ 418.336834][ T4313] usb 1-1: USB disconnect, device number 18 [ 418.337005][ C1] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 418.413509][ T4313] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 418.435217][ T4335] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 418.567319][ T4335] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 418.701509][ T4335] usb 6-1: USB disconnect, device number 5 [ 418.818998][ T4335] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 420.287929][ T6891] tmpfs: Unknown parameter 'grpquota/#/msr' [ 420.333012][ T6891] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 420.333012][ T6891] program syz.2.526 not setting count and/or reply_len properly [ 420.910168][ T6898] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 420.910168][ T6898] program syz.3.527 not setting count and/or reply_len properly [ 422.483308][ T6911] netlink: 88 bytes leftover after parsing attributes in process `syz.0.530'. [ 422.670157][ T4312] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 422.778858][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.530'. [ 422.970305][ T4312] usb 5-1: Using ep0 maxpacket: 8 [ 423.557261][ T4312] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.600225][ T4312] usb 5-1: config 0 has no interfaces? [ 423.612056][ T4312] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 423.629184][ T4312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.669492][ T4312] usb 5-1: Product: syz [ 423.674029][ T4312] usb 5-1: Manufacturer: syz [ 423.838977][ T4312] usb 5-1: SerialNumber: syz [ 425.916671][ T4312] usb 5-1: config 0 descriptor?? [ 425.986438][ T4312] usb 5-1: can't set config #0, error -71 [ 426.038848][ T4312] usb 5-1: USB disconnect, device number 14 [ 426.350361][ T4256] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 426.540251][ T4256] usb 4-1: Using ep0 maxpacket: 32 [ 426.698114][ T4256] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 426.735645][ T4256] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 426.791281][ T4256] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 426.802973][ T4256] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 426.819197][ T4256] usb 4-1: config 0 interface 0 has no altsetting 0 [ 426.867560][ T4256] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 426.900891][ T4256] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 426.940179][ T4256] usb 4-1: Product: syz [ 426.944458][ T4256] usb 4-1: Manufacturer: syz [ 426.949081][ T4256] usb 4-1: SerialNumber: syz [ 427.047115][ T4256] usb 4-1: config 0 descriptor?? [ 427.109634][ T4256] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 427.181828][ T4256] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 429.729992][ T6938] netlink: 88 bytes leftover after parsing attributes in process `syz.5.538'. [ 430.253816][ T6938] netlink: 'syz.5.538': attribute type 21 has an invalid length. [ 430.479300][ T6947] tmpfs: Unknown parameter 'grpquota/#/msr' [ 430.507183][ T6947] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 430.507183][ T6947] program syz.2.539 not setting count and/or reply_len properly [ 430.877791][ T6938] netlink: 128 bytes leftover after parsing attributes in process `syz.5.538'. [ 430.889772][ T6938] netlink: 'syz.5.538': attribute type 4 has an invalid length. [ 430.898103][ T6938] netlink: 3 bytes leftover after parsing attributes in process `syz.5.538'. [ 431.133629][ T4388] usb 4-1: USB disconnect, device number 12 [ 431.158824][ T4388] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 431.621661][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 435.419082][ T4335] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 435.730409][ T4335] usb 5-1: device descriptor read/64, error -71 [ 437.850288][ T4335] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 438.266065][ T6999] tmpfs: Unknown parameter 'grpquota/#/msr' [ 438.337119][ T6999] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 438.337119][ T6999] program syz.0.551 not setting count and/or reply_len properly [ 438.910132][ T5951] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 438.920240][ T4335] usb 5-1: device descriptor read/64, error -71 [ 439.086646][ T4335] usb usb5-port1: attempt power cycle [ 439.433246][ T5951] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.452148][ T5951] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 439.464017][ T5951] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 439.480263][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.509452][ T5951] usb 4-1: config 0 descriptor?? [ 439.520155][ T5951] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 439.536679][ T5951] dvb-usb: bulk message failed: -22 (3/0) [ 439.562926][ T5951] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 439.583341][ T5951] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 439.600183][ T5951] usb 4-1: media controller created [ 439.615887][ T5951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 439.649866][ T5951] dvb-usb: bulk message failed: -22 (6/0) [ 439.678073][ T5951] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 439.697580][ T5951] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input59 [ 439.760135][ T4335] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 439.822102][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.828868][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.017814][ T7016] rdma_rxe: rxe_register_device failed with error -23 [ 440.025867][ T7016] rdma_rxe: failed to add vxcan1 [ 441.897342][ T5951] dvb-usb: schedule remote query interval to 150 msecs. [ 442.078225][ T5951] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 442.324862][ T4393] dvb-usb: bulk message failed: -22 (1/0) [ 442.331373][ T4393] dvb-usb: error while querying for an remote control event. [ 442.476137][ T4335] usb 5-1: device descriptor read/8, error -71 [ 442.500170][ T4393] dvb-usb: bulk message failed: -22 (1/0) [ 442.506553][ T4393] dvb-usb: error while querying for an remote control event. [ 442.745250][ T4393] dvb-usb: bulk message failed: -22 (1/0) [ 442.751369][ T4393] dvb-usb: error while querying for an remote control event. [ 442.977724][ T4369] dvb-usb: bulk message failed: -22 (1/0) [ 443.753098][ T4369] dvb-usb: error while querying for an remote control event. [ 443.761642][ T4393] usb 4-1: USB disconnect, device number 13 [ 443.783681][ T4393] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 445.170682][ T7037] siw: device registration error -23 [ 446.450299][ T4369] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 446.595958][ T7049] tmpfs: Unknown parameter 'grpquota/#/msr' [ 446.664898][ T7049] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 446.664898][ T7049] program syz.4.566 not setting count and/or reply_len properly [ 446.962489][ T7048] netlink: 88 bytes leftover after parsing attributes in process `syz.3.565'. [ 447.020297][ T4369] usb 3-1: device descriptor read/64, error -71 [ 447.112344][ T7048] netlink: 'syz.3.565': attribute type 21 has an invalid length. [ 447.162246][ T7048] netlink: 128 bytes leftover after parsing attributes in process `syz.3.565'. [ 447.304076][ T7048] netlink: 'syz.3.565': attribute type 4 has an invalid length. [ 447.402843][ T4369] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 447.420592][ T7048] netlink: 3 bytes leftover after parsing attributes in process `syz.3.565'. [ 447.861355][ T4335] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 447.985151][ T4369] usb 3-1: device descriptor read/64, error -71 [ 448.129652][ T7064] tmpfs: Unknown parameter 'grpquota/#/msr' [ 448.178363][ T7064] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 448.178363][ T7064] program syz.0.569 not setting count and/or reply_len properly [ 448.213862][ T4369] usb usb3-port1: attempt power cycle [ 448.552423][ T4335] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.566440][ T4335] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 448.575565][ T4335] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 448.587373][ T4335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.608169][ T4335] usb 5-1: config 0 descriptor?? [ 448.634221][ T4335] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 448.643612][ T4335] dvb-usb: bulk message failed: -22 (3/0) [ 448.673899][ T4335] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 448.705290][ T4335] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 448.744500][ T4335] usb 5-1: media controller created [ 448.751758][ T4335] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 448.777987][ T4335] dvb-usb: bulk message failed: -22 (6/0) [ 448.784413][ T4335] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 448.812503][ T4335] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input61 [ 448.835700][ T4335] dvb-usb: schedule remote query interval to 150 msecs. [ 448.844405][ T4335] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 448.980507][ T7067] loop0: detected capacity change from 0 to 1024 [ 449.027959][ T4393] dvb-usb: bulk message failed: -22 (1/0) [ 449.034147][ T4393] dvb-usb: error while querying for an remote control event. [ 449.052787][ T6861] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 449.090125][ T4369] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 449.139502][ T7069] rdma_rxe: already configured on vxcan1 [ 449.200353][ T4393] dvb-usb: bulk message failed: -22 (1/0) [ 449.211119][ T4393] dvb-usb: error while querying for an remote control event. [ 449.642419][ T4393] dvb-usb: bulk message failed: -22 (1/0) [ 449.648251][ T4393] dvb-usb: error while querying for an remote control event. [ 449.669243][ T4369] usb 3-1: device descriptor read/8, error -71 [ 450.335897][ T7079] tmpfs: Unknown parameter 'grpquota/#/msr' [ 450.357576][ T7079] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 450.357576][ T7079] program syz.0.574 not setting count and/or reply_len properly [ 450.801174][ T4335] dvb-usb: bulk message failed: -22 (1/0) [ 450.806979][ T4335] dvb-usb: error while querying for an remote control event. [ 450.825748][ T4393] usb 5-1: USB disconnect, device number 19 [ 451.070174][ T4335] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 452.860241][ T4335] usb 6-1: Using ep0 maxpacket: 8 [ 453.484296][ T4393] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 453.493006][ T4335] usb 6-1: device descriptor read/all, error -71 [ 453.717135][ T7091] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 453.717135][ T7091] program syz.2.576 not setting count and/or reply_len properly [ 454.194278][ T7096] tmpfs: Unknown parameter 'grpquota/#/msr' [ 454.210591][ T7096] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 454.210591][ T7096] program syz.5.578 not setting count and/or reply_len properly [ 455.226355][ T7098] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 455.342038][ T7098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 455.349466][ T7098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 455.610466][ T7102] mkiss: ax0: crc mode is auto. [ 455.779264][ T7111] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 455.793091][ T7111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 455.802130][ T7111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 457.502886][ T7114] netlink: 68 bytes leftover after parsing attributes in process `syz.2.581'. [ 457.726920][ T7118] loop3: detected capacity change from 0 to 1024 [ 457.975289][ T6830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 460.924276][ T7144] tmpfs: Unknown parameter 'grpquota/#/msr' [ 460.974385][ T7144] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 460.974385][ T7144] program syz.3.590 not setting count and/or reply_len properly [ 461.307760][ T14] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 461.526911][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.570140][ T14] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 461.611210][ T14] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 461.620882][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.649486][ T14] usb 1-1: config 0 descriptor?? [ 461.670306][ T4369] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 461.699679][ T14] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 461.714768][ T14] dvb-usb: bulk message failed: -22 (3/0) [ 461.736113][ T14] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 461.754937][ T14] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 461.782037][ T14] usb 1-1: media controller created [ 461.871906][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 461.882300][ T4369] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.019710][ T4369] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 462.035256][ T14] dvb-usb: bulk message failed: -22 (6/0) [ 462.041232][ T14] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 462.098956][ T4369] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 462.180285][ T7154] rdma_rxe: rxe_register_device failed with error -23 [ 462.188331][ T7154] rdma_rxe: failed to add vxcan1 [ 463.265445][ T14] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input62 [ 463.317754][ T4369] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.331510][ T14] dvb-usb: schedule remote query interval to 150 msecs. [ 463.346593][ T4369] usb 5-1: config 0 descriptor?? [ 463.354482][ T14] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 463.365722][ T4369] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 463.401933][ T4369] dvb-usb: bulk message failed: -22 (3/0) [ 463.425315][ T4369] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 463.441597][ T4369] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 463.449808][ T4369] usb 5-1: media controller created [ 463.457420][ T4369] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 463.478336][ T4369] dvb-usb: bulk message failed: -22 (6/0) [ 463.484894][ T4369] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 463.501889][ T4369] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input63 [ 463.530306][ T4369] dvb-usb: schedule remote query interval to 150 msecs. [ 463.537442][ T4369] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 463.556297][ T4335] dvb-usb: bulk message failed: -22 (1/0) [ 463.562240][ T4335] dvb-usb: error while querying for an remote control event. [ 463.690138][ T4335] dvb-usb: bulk message failed: -22 (1/0) [ 463.696044][ T4335] dvb-usb: error while querying for an remote control event. [ 463.787005][ T4335] usb 5-1: USB disconnect, device number 20 [ 463.841249][ T14] dvb-usb: bulk message failed: -22 (1/0) [ 463.847065][ T14] dvb-usb: error while querying for an remote control event. [ 463.885687][ T4335] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 463.987564][ T126] usb 1-1: USB disconnect, device number 19 [ 464.175609][ T126] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 464.180367][ T14] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 465.121147][ T7170] loop4: detected capacity change from 0 to 1024 [ 465.182280][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.256280][ T14] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 465.446842][ T14] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 465.518047][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.648292][ T14] usb 3-1: config 0 descriptor?? [ 466.761090][ T14] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 466.827148][ T14] dvb-usb: bulk message failed: -22 (3/0) [ 467.065539][ T14] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 467.102796][ T14] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 467.256043][ T14] usb 3-1: media controller created [ 467.311245][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 467.847028][ T14] dvb-usb: bulk message failed: -22 (6/0) [ 468.016647][ T14] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 468.851425][ T14] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input64 [ 468.976799][ T14] dvb-usb: schedule remote query interval to 150 msecs. [ 469.011011][ T7195] tmpfs: Unknown parameter 'grpquota/#/msr' [ 469.070104][ T7195] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 469.070104][ T7195] program syz.0.602 not setting count and/or reply_len properly [ 469.448817][ T14] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 470.401238][ T14] usb 3-1: USB disconnect, device number 18 [ 470.486749][ T14] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 471.283002][ T7208] mkiss: ax0: crc mode is auto. [ 471.662627][ T7216] sg_write: data in/out 91/98 bytes for SCSI command 0x0-- guessing data in; [ 471.662627][ T7216] program syz.0.609 not setting count and/or reply_len properly [ 473.482891][ T4335] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 473.862363][ T4335] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.886684][ T4335] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 473.896945][ T4335] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 473.918065][ T4335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.949428][ T4335] usb 4-1: config 0 descriptor?? [ 473.975391][ T4335] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 473.999549][ T4335] dvb-usb: bulk message failed: -22 (3/0) [ 474.024390][ T4335] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 474.052405][ T4335] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 474.078318][ T4335] usb 4-1: media controller created [ 474.099702][ T4335] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 474.133054][ T4335] dvb-usb: bulk message failed: -22 (6/0) [ 474.155506][ T4335] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 474.172112][ T4335] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input65 [ 474.206225][ T4335] dvb-usb: schedule remote query interval to 150 msecs. [ 474.213406][ T4335] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 474.362734][ T7233] loop2: detected capacity change from 0 to 1024 [ 474.370299][ T4335] dvb-usb: bulk message failed: -22 (1/0) [ 474.376058][ T4335] dvb-usb: error while querying for an remote control event. [ 474.639148][ T7235] netlink: 68 bytes leftover after parsing attributes in process `syz.0.613'. [ 474.669356][ T4335] dvb-usb: bulk message failed: -22 (1/0) [ 474.677922][ T4335] dvb-usb: error while querying for an remote control event. [ 474.838903][ T7237] rdma_rxe: rxe_register_device failed with error -23 [ 474.847801][ T7237] rdma_rxe: failed to add vxcan1 [ 475.356720][ T6861] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 475.497941][ T14] dvb-usb: bulk message failed: -22 (1/0) [ 475.504311][ T14] dvb-usb: error while querying for an remote control event. [ 475.994775][ T14] dvb-usb: bulk message failed: -22 (1/0) [ 476.028066][ T14] dvb-usb: error while querying for an remote control event. [ 476.074883][ T7243] tmpfs: Unknown parameter 'grpquota/#/msr' [ 476.144040][ T7243] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 476.144040][ T7243] program syz.5.615 not setting count and/or reply_len properly [ 476.296059][ T4335] dvb-usb: bulk message failed: -22 (1/0) [ 476.302201][ T4335] dvb-usb: error while querying for an remote control event. [ 476.381547][ T4312] usb 4-1: USB disconnect, device number 14 [ 477.156743][ T4312] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 482.673003][ T7286] siw: device registration error -23 [ 484.038061][ T7283] binder_alloc: 7277: binder_alloc_buf, no vma [ 484.850406][ T4335] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 485.122615][ T4335] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.199252][ T7303] netlink: 68 bytes leftover after parsing attributes in process `syz.3.632'. [ 485.640554][ T4335] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 485.762055][ T4335] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 485.873669][ T4335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.907380][ T4335] usb 1-1: config 0 descriptor?? [ 485.935377][ T4335] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 486.037405][ T4335] dvb-usb: bulk message failed: -22 (3/0) [ 486.088379][ T4335] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 486.107668][ T4335] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 486.545312][ T7310] rdma_rxe: rxe_register_device failed with error -23 [ 486.552415][ T7310] rdma_rxe: failed to add vxcan1 [ 486.678892][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 486.696834][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 486.705351][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 487.214177][ T4335] usb 1-1: media controller created [ 487.220701][ T4335] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 487.242503][ T4335] dvb-usb: bulk message failed: -22 (6/0) [ 487.248450][ T4335] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 487.307500][ T4335] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input67 [ 487.363921][ T4335] dvb-usb: schedule remote query interval to 150 msecs. [ 487.417992][ T4335] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 487.613494][ T5951] dvb-usb: bulk message failed: -22 (1/0) [ 487.658335][ T5951] dvb-usb: error while querying for an remote control event. [ 487.946074][ T4335] usb 1-1: USB disconnect, device number 20 [ 487.991263][ T4335] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 488.104384][ T4256] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 488.170190][ T5951] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 488.310714][ T4256] usb 3-1: Using ep0 maxpacket: 32 [ 488.328547][ T4256] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 488.360354][ T4256] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 488.395346][ T4256] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 488.508084][ T4256] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 488.534515][ T4256] usb 3-1: config 0 interface 0 has no altsetting 0 [ 488.583828][ T4256] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 488.637027][ T7322] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 488.650171][ T4256] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 488.658859][ T4256] usb 3-1: Product: syz [ 488.664856][ T4256] usb 3-1: Manufacturer: syz [ 488.670639][ T4256] usb 3-1: SerialNumber: syz [ 488.692641][ T5951] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.710302][ T5951] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 488.721651][ T4256] usb 3-1: config 0 descriptor?? [ 488.738888][ T5951] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 488.756088][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.780718][ T4256] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 488.788986][ T5951] usb 5-1: config 0 descriptor?? [ 488.797395][ T5951] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 488.807360][ T5951] dvb-usb: bulk message failed: -22 (3/0) [ 488.838635][ T4256] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 488.839322][ T5951] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 488.864834][ T5951] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 488.892837][ T5951] usb 5-1: media controller created [ 488.899304][ T5951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 488.969610][ T5951] dvb-usb: bulk message failed: -22 (6/0) [ 489.737944][ T7332] rdma_rxe: already configured on vxcan1 [ 491.563651][ T5951] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 491.885503][ T5951] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input68 [ 492.184836][ T5951] dvb-usb: schedule remote query interval to 150 msecs. [ 492.316839][ T5951] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 492.530319][ T5951] usb 5-1: USB disconnect, device number 21 [ 493.071648][ T5951] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 493.881169][ T4392] usb 3-1: USB disconnect, device number 19 [ 494.344811][ T4392] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 495.033216][ T7347] mkiss: ax0: crc mode is auto. [ 495.142839][ T7359] siw: device registration error -23 [ 497.011518][ T7367] netlink: 88 bytes leftover after parsing attributes in process `syz.5.647'. [ 497.526976][ T7377] netlink: 88 bytes leftover after parsing attributes in process `syz.4.649'. [ 497.734879][ T7367] netlink: 'syz.5.647': attribute type 21 has an invalid length. [ 497.796441][ T7379] netlink: 68 bytes leftover after parsing attributes in process `syz.2.650'. [ 498.436512][ T7367] netlink: 128 bytes leftover after parsing attributes in process `syz.5.647'. [ 498.456700][ T7367] netlink: 'syz.5.647': attribute type 4 has an invalid length. [ 498.464971][ T7367] netlink: 3 bytes leftover after parsing attributes in process `syz.5.647'. [ 498.817990][ T7377] netlink: 'syz.4.649': attribute type 21 has an invalid length. [ 500.800451][ T7377] netlink: 128 bytes leftover after parsing attributes in process `syz.4.649'. [ 500.887132][ T7377] netlink: 'syz.4.649': attribute type 4 has an invalid length. [ 500.923941][ T7377] netlink: 3 bytes leftover after parsing attributes in process `syz.4.649'. [ 501.265480][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.381458][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.930296][ T7395] binder: BINDER_SET_CONTEXT_MGR already set [ 501.936442][ T7395] binder: 7391:7395 ioctl 4018620d 200000000040 returned -16 [ 502.745291][ T7403] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 502.760269][ T7403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 502.768335][ T7403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 505.180332][ T7264] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 505.370382][ T7264] usb 4-1: Using ep0 maxpacket: 32 [ 505.379144][ T7264] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 505.420173][ T7264] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 505.577842][ T7264] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 505.608833][ T7264] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 505.627178][ T7264] usb 4-1: config 0 interface 0 has no altsetting 0 [ 505.657167][ T7264] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 505.695840][ T7264] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 505.709734][ T7264] usb 4-1: Product: syz [ 505.714536][ T7264] usb 4-1: Manufacturer: syz [ 505.719464][ T7264] usb 4-1: SerialNumber: syz [ 505.739889][ T7264] usb 4-1: config 0 descriptor?? [ 506.014633][ T7264] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 506.390261][ T7428] binder_alloc: 7417: binder_alloc_buf, no vma [ 508.138107][ T7264] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 508.691719][ T7420] binder_alloc: 7418: binder_alloc_buf, no vma [ 509.201480][ T5951] usb 4-1: USB disconnect, device number 15 [ 509.232382][ T5951] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 510.081278][ T7445] sg_write: data in/out 91/98 bytes for SCSI command 0x7-- guessing data in; [ 510.081278][ T7445] program syz.3.663 not setting count and/or reply_len properly [ 510.755521][ T4388] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 510.948916][ T4388] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.990262][ T4388] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 511.003026][ T4388] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 511.014653][ T4388] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.045799][ T4388] usb 5-1: config 0 descriptor?? [ 511.129296][ T4388] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 511.204134][ T4388] dvb-usb: bulk message failed: -22 (3/0) [ 511.313377][ T7456] sg_write: data in/out 91/98 bytes for SCSI command 0x0-- guessing data in; [ 511.313377][ T7456] program syz.2.666 not setting count and/or reply_len properly [ 511.713399][ T4388] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 511.890256][ T4388] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 511.915705][ T4388] usb 5-1: media controller created [ 511.928589][ T4388] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 512.004942][ T7466] rdma_rxe: already configured on vxcan1 [ 512.739618][ T4388] dvb-usb: bulk message failed: -22 (6/0) [ 512.752295][ T4388] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 512.795721][ T4388] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input69 [ 512.826624][ T4388] dvb-usb: schedule remote query interval to 150 msecs. [ 512.839150][ T4388] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 512.990180][ T4388] dvb-usb: bulk message failed: -22 (1/0) [ 512.996122][ T4388] dvb-usb: error while querying for an remote control event. [ 513.180655][ T4388] dvb-usb: bulk message failed: -22 (1/0) [ 513.189172][ T4388] dvb-usb: error while querying for an remote control event. [ 513.386030][ T4388] dvb-usb: bulk message failed: -22 (1/0) [ 513.400148][ T4388] dvb-usb: error while querying for an remote control event. [ 513.580356][ T4388] dvb-usb: bulk message failed: -22 (1/0) [ 513.586157][ T4388] dvb-usb: error while querying for an remote control event. [ 513.839873][ T7432] dvb-usb: bulk message failed: -22 (1/0) [ 513.847271][ T4388] usb 5-1: USB disconnect, device number 22 [ 513.853588][ T7432] dvb-usb: error while querying for an remote control event. [ 513.884526][ T4388] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 514.005946][ T7264] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 514.225450][ T7264] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.568030][ T7264] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 514.592019][ T7264] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 514.630213][ T7264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.663021][ T7264] usb 1-1: config 0 descriptor?? [ 514.699353][ T7264] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 514.711780][ T7264] dvb-usb: bulk message failed: -22 (3/0) [ 514.719586][ T7264] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 514.743445][ T7264] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 514.751073][ T7264] usb 1-1: media controller created [ 514.764858][ T7264] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 515.218719][ T7264] dvb-usb: bulk message failed: -22 (6/0) [ 515.289602][ T7478] rdma_rxe: rxe_register_device failed with error -23 [ 515.297055][ T7478] rdma_rxe: failed to add vxcan1 [ 517.284515][ T7264] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 517.350806][ T7264] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input70 [ 517.423686][ T7264] dvb-usb: schedule remote query interval to 150 msecs. [ 517.461400][ T7264] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 517.620183][ T7264] dvb-usb: bulk message failed: -22 (1/0) [ 517.625983][ T7264] dvb-usb: error while querying for an remote control event. [ 517.852546][ T4388] dvb-usb: bulk message failed: -22 (1/0) [ 517.920944][ T4388] dvb-usb: error while querying for an remote control event. [ 517.940975][ T7481] binder_alloc: 7479: binder_alloc_buf, no vma [ 518.146283][ T7264] dvb-usb: bulk message failed: -22 (1/0) [ 518.151214][ T951] usb 1-1: USB disconnect, device number 21 [ 518.193642][ T7264] dvb-usb: error while querying for an remote control event. [ 518.437210][ T951] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 518.639495][ T7486] sg_write: data in/out 91/98 bytes for SCSI command 0x7-- guessing data in; [ 518.639495][ T7486] program syz.0.673 not setting count and/or reply_len properly [ 520.238902][ T7494] binder_alloc: 7492: binder_alloc_buf, no vma [ 523.990349][ T7508] tmpfs: Unknown parameter 'grpquota/#/msr' [ 524.001369][ T7508] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 524.001369][ T7508] program syz.5.679 not setting count and/or reply_len properly [ 524.616897][ T7517] binder_alloc: 7514: binder_alloc_buf, no vma [ 525.495407][ T4610] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 525.681990][ T4610] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.699682][ T4610] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 525.724432][ T4610] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 525.791689][ T4610] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.821789][ T4610] usb 6-1: config 0 descriptor?? [ 525.848445][ T4610] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 526.038175][ T4610] dvb-usb: bulk message failed: -22 (3/0) [ 527.025525][ T4610] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 527.108627][ T7542] rdma_rxe: rxe_register_device failed with error -23 [ 527.116658][ T7542] rdma_rxe: failed to add vxcan1 [ 527.844726][ T4610] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 527.861710][ T4610] usb 6-1: media controller created [ 527.884823][ T4610] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 527.922139][ T4610] dvb-usb: bulk message failed: -22 (6/0) [ 527.944187][ T4610] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 527.980419][ T4610] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input71 [ 528.018789][ T4610] dvb-usb: schedule remote query interval to 150 msecs. [ 528.034487][ T4610] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 528.567560][ T7264] dvb-usb: bulk message failed: -22 (1/0) [ 528.575564][ T7264] dvb-usb: error while querying for an remote control event. [ 528.740282][ T7432] dvb-usb: bulk message failed: -22 (1/0) [ 528.746097][ T7432] dvb-usb: error while querying for an remote control event. [ 529.115824][ T7264] usb 6-1: USB disconnect, device number 8 [ 529.430339][ T7432] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 529.616549][ T7548] binder_alloc: 7547: binder_alloc_buf, no vma [ 529.650277][ T7432] usb 5-1: Using ep0 maxpacket: 8 [ 529.662976][ T7553] binder_alloc: 7550: binder_alloc_buf, no vma [ 529.957564][ T7432] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.068540][ T7264] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 530.090701][ T7432] usb 5-1: config 0 has no interfaces? [ 530.292790][ T7432] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 531.027502][ T7558] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 531.229058][ T7432] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.462532][ T7432] usb 5-1: Product: syz [ 531.466761][ T7432] usb 5-1: Manufacturer: syz [ 532.716882][ T7432] usb 5-1: SerialNumber: syz [ 532.815529][ T7432] usb 5-1: config 0 descriptor?? [ 533.078671][ T7432] usb 5-1: can't set config #0, error -71 [ 533.403397][ T7432] usb 5-1: USB disconnect, device number 23 [ 533.537058][ T7574] tmpfs: Unknown parameter 'grpquota/#/msr' [ 533.614738][ T7574] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 533.614738][ T7574] program syz.4.695 not setting count and/or reply_len properly [ 535.014983][ T7581] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 535.868442][ T7591] netlink: 88 bytes leftover after parsing attributes in process `syz.4.697'. [ 536.049002][ T7593] binder: BINDER_SET_CONTEXT_MGR already set [ 536.055273][ T7593] binder: 7589:7593 ioctl 4018620d 200000000040 returned -16 [ 536.589946][ T7598] tmpfs: Unknown parameter 'grpquota/#/msr' [ 537.100431][ C0] ------------[ cut here ]------------ [ 537.106459][ C0] ODEBUG: free active (active state 0) object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 537.117617][ C0] WARNING: CPU: 0 PID: 3638 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x43c/0x530 [ 537.127686][ C0] Modules linked in: [ 537.131655][ C0] CPU: 0 PID: 3638 Comm: udevd Not tainted syzkaller #0 [ 537.138629][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 537.148753][ C0] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530 [ 537.155135][ C0] Code: ef e8 98 78 c5 fd 4c 8b 45 00 48 c7 c7 00 06 df 8a 48 c7 c6 c0 02 df 8a 48 c7 c2 60 07 df 8a 8b 0c 24 4d 89 e9 e8 a4 81 41 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 95 30 14 [ 537.174850][ C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00010246 [ 537.180992][ C0] RAX: 15203391bb23b800 RBX: ffffffff96e91b70 RCX: ffff88807b930000 [ 537.188985][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 537.197030][ C0] RBP: ffffffff8a8de220 R08: dffffc0000000000 R09: fffff52000000ed1 [ 537.205064][ C0] R10: fffff52000000ed1 R11: 1ffff92000000ed0 R12: ffff8880556d9a00 [ 537.213083][ C0] R13: ffffffff8918f950 R14: ffff8880556d9000 R15: ffff8880556d9890 [ 537.221093][ C0] FS: 00007f9425a6d880(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 537.230081][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 537.236675][ C0] CR2: 00007f85c4f056c0 CR3: 000000002dee3000 CR4: 00000000003506f0 [ 537.244686][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 537.252689][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 537.260694][ C0] Call Trace: [ 537.263977][ C0] [ 537.266828][ C0] slab_free_freelist_hook+0xd2/0x1a0 [ 537.272236][ C0] ? rose_timer_expiry+0x4a7/0x5d0 [ 537.277347][ C0] __kmem_cache_free+0xb6/0x1f0 [ 537.282230][ C0] rose_timer_expiry+0x4a7/0x5d0 [ 537.287170][ C0] ? call_timer_fn+0x187/0x670 [ 537.291982][ C0] call_timer_fn+0x1a0/0x670 [ 537.296574][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 537.301625][ C0] ? call_timer_fn+0xc1/0x670 [ 537.306302][ C0] ? __run_timers+0x7c0/0x7c0 [ 537.311018][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 537.316229][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 537.321458][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 537.326486][ C0] __run_timers+0x525/0x7c0 [ 537.331027][ C0] ? detach_timer+0x350/0x350 [ 537.335709][ C0] ? lock_chain_count+0x20/0x20 [ 537.340593][ C0] run_timer_softirq+0x63/0xf0 [ 537.345381][ C0] handle_softirqs+0x2a1/0x920 [ 537.350202][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 537.355090][ C0] ? do_softirq+0x200/0x200 [ 537.359610][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 537.364863][ C0] __irq_exit_rcu+0x12f/0x220 [ 537.369549][ C0] ? irq_exit_rcu+0x20/0x20 [ 537.374088][ C0] irq_exit_rcu+0x5/0x20 [ 537.378338][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 537.384009][ C0] [ 537.386959][ C0] [ 537.389888][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 537.395892][ C0] RIP: 0010:unwind_next_frame+0x176a/0x20b0 [ 537.401805][ C0] Code: 85 9e 08 00 00 49 0f bf 04 24 48 01 c6 48 89 df 4c 89 fa e8 58 09 00 00 84 c0 0f 84 41 01 00 00 49 bd 00 00 00 00 00 fc ff df <48> 8b 44 24 18 42 0f b6 04 28 84 c0 0f 85 29 06 00 00 8b 84 24 8c [ 537.421461][ C0] RSP: 0018:ffffc90003297830 EFLAGS: 00000202 [ 537.427543][ C0] RAX: 1ffff92000652f01 RBX: ffffc90003297908 RCX: 0000000000000001 [ 537.435555][ C0] RDX: ffffc90003297948 RSI: dffffc0000000000 RDI: ffffc90003297a30 [ 537.443554][ C0] RBP: ffffffff8ea232d0 R08: ffffc90003297a30 R09: ffffc90003297958 [ 537.4515