last executing test programs: 26m30.565809824s ago: executing program 2 (id=19): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, r2, 0x1, 0xffffffff, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x3, 0x4}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) 26m28.684788002s ago: executing program 2 (id=22): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@nouid32}, {@jqfmt_vfsv1}, {@noquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") pwrite64(0xffffffffffffffff, &(0x7f0000000180)='2', 0xfe78, 0x8000c63) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r0, r0, 0x0, 0xe3aa6ea) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x3, 0x100000002, 0x1000000000000004, 0x3ff}) 26m28.461580204s ago: executing program 2 (id=24): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x40000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e24, @local}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) syz_open_dev$tty1(0xc, 0x4, 0x1) 26m24.257674225s ago: executing program 2 (id=30): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x808080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x252, &(0x7f0000000880)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 26m23.710554044s ago: executing program 2 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r4, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x24044080) 26m22.837672109s ago: executing program 2 (id=37): socket$inet6_udp(0xa, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x401}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 26m22.524344746s ago: executing program 32 (id=37): socket$inet6_udp(0xa, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x401}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 26m5.375723995s ago: executing program 3 (id=90): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) shutdown(r0, 0x1) 26m5.141985388s ago: executing program 3 (id=91): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) r2 = openat$cgroup(r1, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 26m4.937951718s ago: executing program 3 (id=92): socket$inet6_udp(0xa, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x401}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 26m3.626884457s ago: executing program 3 (id=99): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000240)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@stripe={'stripe', 0x3d, 0x6}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") chdir(&(0x7f0000000400)='./file0\x00') sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x20008800) syz_clone(0x11, 0x0, 0xfffffffffffffede, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x94, 0x40000000, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockname$tipc(r0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 26m1.67716013s ago: executing program 3 (id=104): pselect6(0x40, &(0x7f0000000080)={0x4e6, 0x8, 0x40, 0x3, 0x7fffffffffffffff, 0x99d, 0x401, 0xe00000000000}, 0x0, 0x0, 0x0, 0x0) 25m58.510031436s ago: executing program 3 (id=115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r2, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x24044080) 25m57.598521943s ago: executing program 33 (id=115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r2, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x24044080) 4m42.16572754s ago: executing program 4 (id=2874): timer_create(0xfffffffd, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000001900010000000000000000002001000000000000000ae10000000000ac14141500000000000000000000000000000005000000000a0020000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000000000004400050000000000000000000000000000000000000004d23c00000000000000ff"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c040}, 0x8000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) listen(0xffffffffffffffff, 0xa) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8080, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)='L', 0x1}], 0x1}}], 0x1, 0x4040001) gettid() r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) write$uinput_user_dev(r3, &(0x7f0000000240)={'syz0\x00', {0x9, 0x1, 0x2, 0x3}, 0x2, [0x5, 0x5, 0x81, 0x8, 0x4, 0x1000, 0x50000, 0x1, 0x10001, 0xffffa103, 0x3, 0x6, 0x6, 0x6, 0x7, 0x3, 0x6, 0x0, 0x40, 0x5, 0x1cac, 0x3eb, 0xb8f, 0x3, 0x400, 0x40, 0x6, 0x0, 0xfffffffa, 0xdc, 0xffffffff, 0xa1bc, 0x200, 0x7, 0x6, 0x6, 0x3, 0x1, 0x0, 0x0, 0x2, 0x400, 0x7a08, 0x200, 0x3, 0x6, 0x7ff, 0x7f, 0x1c, 0x7, 0xe, 0x9, 0x5, 0xa, 0x3, 0x2, 0xf7, 0xfff, 0x71, 0x5, 0x1ac0, 0x4f, 0x6, 0x8], [0x5, 0x3ff, 0x6, 0xea, 0x3, 0x0, 0xca, 0x1c5936c5, 0x9, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xa, 0x4, 0x2, 0x0, 0x5, 0x2, 0x0, 0x6, 0x0, 0x1, 0x9, 0x6, 0x5e5893ee, 0xfffffff7, 0x9, 0x10000, 0x3, 0x8001, 0x2e6d, 0x7ff, 0x1, 0x9000, 0x877, 0x9, 0x8, 0x8, 0x80000000, 0xfff, 0x5, 0x7, 0x8, 0x5, 0x75da, 0x2, 0x5, 0xe8, 0x3, 0x9, 0x5, 0x7, 0xb99c, 0x2, 0x1000001, 0x4, 0x4, 0x1, 0x1, 0x9, 0x2, 0xc406], [0x80000001, 0x2, 0x9, 0x9, 0x0, 0xb9, 0x897, 0x5, 0x3, 0x4, 0x2, 0x5, 0x3, 0x9, 0x9, 0x7, 0x9, 0x61, 0x9, 0x5, 0x9, 0x8, 0x2, 0x6, 0x8001, 0x4, 0xc, 0x80000000, 0x7fffffff, 0x1, 0x1, 0x6, 0x8, 0x3, 0x2, 0x5, 0x3, 0x2, 0x1, 0x24, 0x9, 0x2000000, 0x4, 0xff, 0x7, 0x3eef6cc9, 0x1, 0x7, 0x7, 0x8bd, 0x9, 0xfffffff9, 0x80000001, 0x5, 0xffffff1d, 0x6, 0x0, 0xa, 0xfff, 0xfff, 0x1, 0x1, 0x19ee, 0xfffffff9], [0x0, 0x10, 0x101, 0x2, 0x4, 0x9c500, 0xef, 0x8, 0xc61, 0x7, 0x1d, 0x358, 0xd567, 0x1d5, 0xc8b, 0x658, 0xcbfd, 0x101, 0x6, 0x5, 0xb, 0x5, 0x6, 0x3, 0x75d6, 0xb26, 0x3ff, 0x6, 0x9, 0x0, 0x1, 0xf412, 0x2, 0x2, 0x2000002, 0x3, 0x3, 0x9, 0x3, 0x5, 0x3, 0x3, 0xfffffff3, 0x8000, 0x6, 0x6, 0xffff, 0x80, 0xf, 0xfff, 0xfff, 0xffff, 0xfffffffe, 0x80, 0xb975, 0x5, 0x5e1, 0xa, 0xffff58ee, 0x2, 0x2530, 0x4, 0x26da282, 0xc]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) 4m41.460452037s ago: executing program 4 (id=2876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000000040), 0x1003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = fsopen(&(0x7f0000000100)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup, 0xffffffffffffffff, 0x11}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f0000000180)=""/129, 0x0, 0x81, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 4m40.542256225s ago: executing program 4 (id=2877): openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x60}}, 0x0) 4m38.653086304s ago: executing program 4 (id=2880): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000000301012abd09000000df2507000002d3000000"], 0x18}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000080) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4m36.987661591s ago: executing program 4 (id=2886): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000000040), 0x1003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000100)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup, 0xffffffffffffffff, 0x11}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f0000000180)=""/129, 0x0, 0x81, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 4m35.086819901s ago: executing program 4 (id=2890): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x44014) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ftruncate(r5, 0x7) splice(r5, 0x0, r4, 0x0, 0x100002, 0x9) tee(r3, 0xffffffffffffffff, 0x81, 0xb) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1, 0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000680)={"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"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x8, 0x5, 0x5e12, 0x20, 0x13, 0x8000000000007, 0x106c, 0x9, 0x8000000000000, 0x8000000400007f, 0x0, 0x6, 0x0, 0x204, 0x0, 0x8001], 0xeeee0000, 0x2c0290}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m19.951869115s ago: executing program 34 (id=2890): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x44014) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ftruncate(r5, 0x7) splice(r5, 0x0, r4, 0x0, 0x100002, 0x9) tee(r3, 0xffffffffffffffff, 0x81, 0xb) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1, 0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000680)={"48e5416fae8a75e1773ced25cc5b60fc978893d728a13562165430a9158e84ef1d9e5bd44969d0dea7921bacc8f4711f267ebfe6980e2512283e83d742e4fb0166beead76ca956085cabc4f8dd88be442a4001012daa2814de0de43846e22b2ebc9fc4d191e9b0ca88c0e06f3242a65bf0f47355c9ba935dc43091b8d59c904b029f9ba7251d9b4a95aff65860f3593fa293ab4a5903b33466b5ce469e91114f8d859696c41de5eb3b5060e1887fa160c90a693f83af054f1f34f8336de8f3c7df480091f5451288f98380d01cb59112feb4cd625f7f3b7de8a97fd433b3e5dda8e7e89774fed6b7a2d3720ddaebe80753bd6e760b67a9b3e5a396e09fada873af5b8fe0b395f529bd82bb5bf5200529c72f86970e1c4e85002bf03d7a22f1e86f672ed3a4a2c742b96a0ba0d67a5c6ecfd4729aadce5cbf4fb78c25a76fd1bbfe2ef5f2eb30acf6d1834e08663c8dab498f2d411f54ca80c5d3013125f7ba059e1095992edab2b590b4268a1a3fcb66806c7c575ed8c249e902e9cfe8f1e35165d898163f98a5d74a7d877861e4699b1a8f731cf5f2a2794ae778de5b52cacda20a096a41a1130b3cb1d2dfeaa4e7a2ffb646f97a19c01ae5db9241f617f73bb3ad5be7cd5443c0485969c38261558dd03518f58b768325f6b8d380f3fb069a8e232db906a7b853a6914758428c7d8539fbb2860cca5f7ddeb8e9e52c53cc01963f39f018903c77bbe4bb55a7525be3e83b2642501b3ef7bd67c23453fce671feead9f9b44adebe4deeb01af88a93ccde8f55aaa24dd754c095e0a3eccec1682798acd204e675b3d046e1ce6fb3e6e1ee832d524ac7cd06637b6be286bb44d5908affdbcc943642bdb3f8cd8d86f3518d31e8bd3b633dc90ac15e3c199e2ee805db41c6c12fb769dc04afb1c359100acf25be312464aacd16cd55c95d5ce6cf5a0566dfc64cfaff240fe056671a96f50ea40c36146ab5f21920e918c116d2a342c387d7e32ae348dac64ac5849d73e72f260324a260b108f0d9113f6012ac582d6cdc3e1226c118d4ec1133744c3ba92e3a6e87bdbadc1e0875d8e6e954db0a0bcf9277a4f1b59acd3e997264cdb4960cff7fbc9f1edf5cabb417293d9a193b2be8cd1b8862a4377a3d38deeae40fe526cc4d3978efc7c768ccc3e4cdde673bb4c626caa879057a2832a3ba8fd4d61526950eb739ad995b576726817b1826963c7d64e1e73ff08a891fd660028ce50b0517210df71a19376eadf172f07f6e62b9bb048d6003a5f633156235b6750cfdbc7775ee941def0621682a562195150e38c517aa61d15b7b5064d6bc06ea082f5e8746863491cdc0d22641054d21203406a33e3a11c71f46a740ab04578c7c5210be1be6b0a674cc4bc39532b668eed8c0c83c42bd4738fc8677527224c9aec6e7a089d230b5a00c004dcb6d853e19dd"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x8, 0x5, 0x5e12, 0x20, 0x13, 0x8000000000007, 0x106c, 0x9, 0x8000000000000, 0x8000000400007f, 0x0, 0x6, 0x0, 0x204, 0x0, 0x8001], 0xeeee0000, 0x2c0290}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.931893134s ago: executing program 6 (id=3515): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000600)={0x48, 0x8, r2, 0x0, 0x2, 0x67, &(0x7f0000000400)="697ab143aeb2e35669aca2aea0cef279b0644270906e1af1e733c243ca19145cf450553fb5952288eb9ad7fd825fec0168fe4fdda9f8da7ad6fcadf42722e5a61a4f82714ce9cda6d39c7a50f9e7be936c4c3211cf6d882b7d8b32759169cd5daf7daeafb7a0d3", 0x4}) 7.695774076s ago: executing program 0 (id=3517): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000e00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0xfcff, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 7.61739075s ago: executing program 6 (id=3518): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) 7.291376998s ago: executing program 6 (id=3519): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000042c0)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0xfcfd, 0x0, {0x2, 0x0, 0x4}}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r5, &(0x7f0000000a80), 0x12) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r6 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r7, 0x25, 0x0, @val=@tcx}, 0x1c) mount$fuse(0x0, 0x0, 0x0, 0x20, 0x0) read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x28) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r8 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r8, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) ioctl$SG_GET_PACK_ID(r8, 0x227c, &(0x7f0000000000)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001000)={0x1c, 0x2, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x840) 6.230924193s ago: executing program 6 (id=3521): connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYRES32, @ANYBLOB="0200"/15, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e54c4055c98"], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78", 0x69}, {&(0x7f00000006c0)="138b9f8300af1d79", 0x8}, {&(0x7f0000000500)="e59c889c8be9e17c21882a76c6767239d44f6a0efb65359c6a8e05ed5fa03023810e910dd85069c302008dfd0b5221af418e566e5ca65c9b55e027ccf319ae594bfa8cc91912", 0x46}, {&(0x7f0000000300)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e0", 0x3f}], 0x5}}], 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.209417994s ago: executing program 5 (id=3522): syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x7) 6.131013518s ago: executing program 6 (id=3523): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_ublk_setup_io_uring(0x7a7c, 0x0, 0x0, &(0x7f0000000940), &(0x7f0000000980)) io_uring_register$IORING_UNREGISTER_NAPI(r1, 0x1c, &(0x7f00000009c0), 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0xcb490d407acd69fa) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_usb_connect(0x2, 0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100006df57108e2042414ebc70102030109023800029600000009"], 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0604250c"], 0x9) 6.130239489s ago: executing program 0 (id=3524): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000008880)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) close(0x3) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x80000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 5.969979017s ago: executing program 5 (id=3525): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000380)=[{0x13, '\x00', @st={0x4, [{0x3, @svalue=0x9}, {0x3, @uvalue=0x7}, {0x1, @uvalue=0x5}, {0x1, @uvalue=0x9}]}, 0x4}, {0x2, '\x00', @buffer={"156074847dff3ec92fd15c5a5ab6e820b94f2a1ade3e311b88351c3481518fff", 0x20}, 0x9}, {0x15, '\x00', @data=0x7, 0xe6}, {0x4, '\x00', @st={0x4, [{0x3, @uvalue=0x9}, {0x3, @svalue=0xab}, {0x2, @uvalue=0x4}, {0x3, @svalue}]}, 0x4}, {0x24, '\x00', @buffer={"86219b3d1c24e63b6a8241d98c8356e548b6dcc9acc234fcecbd724cef9ca73d", 0x20}, 0x205}]}) 5.619647085s ago: executing program 5 (id=3526): socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ioperm(0x0, 0x2, 0x7e) 5.552748959s ago: executing program 0 (id=3527): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) 5.14074917s ago: executing program 1 (id=3528): socket$inet6_sctp(0xa, 0x1, 0x84) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x20002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key$user(0x0, &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r1, r1, r1}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={'sha224-generic\x00'}}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r2, &(0x7f0000000440)="64e99d", 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x1], 0x0, 0x0, 0x1}}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.556400321s ago: executing program 0 (id=3529): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x4, 0x180) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r4, &(0x7f0000000180)='./file0\x00', r4, &(0x7f00000001c0)='\x00') close(r4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, 0x0, 0x0) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) sendto(r7, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r4, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) unshare(0x62000280) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[], 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0x4, 0x0) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0xe090, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) 4.161500852s ago: executing program 5 (id=3530): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000042c0)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0xfcfd, 0x0, {0x2, 0x0, 0x4}}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r4, &(0x7f0000000a80), 0x12) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) close(0x3) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x80000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0xa53, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xfffffdfd, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 1.427495865s ago: executing program 5 (id=3536): syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() ioprio_set$pid(0x0, r0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @dev, @broadcast}, &(0x7f0000000380)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f0000000400)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x4, 0xf, 0x8, 0x80000001, 0x26, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x8000, 0x8000, 0xe, 0x1}}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x3fffc, 0x0, 0x0, 0x2d04, '\x00', r10}, 0x50) sendmsg$nl_route(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=@RTM_DELMDB={0x118, 0x55, 0x200, 0x70bd28, 0x25dfdbfd, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x0, {@ip4=@dev={0xac, 0x14, 0x14, 0x35}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x1, {@ip4=@broadcast, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x3, 0x1, {@ip4=@private=0xa010100, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x3, 0x3, {@ip4=@broadcast, 0x96dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x2, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x2, 0x1, {@ip4=@empty, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x1, 0x2, {@ip4=@broadcast}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@in6_addr=@local, 0x86dd}}}]}, 0x118}, 0x1, 0x0, 0x0, 0x14}, 0x10000004) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x10500, 0x2) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) 925.683082ms ago: executing program 0 (id=3537): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300, {[@ra={0x94, 0x4}]}}, @address_request}}}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x6, 0x8, &(0x7f00000002c0)="0000ffffffff", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 37.878088ms ago: executing program 5 (id=3538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x71b52c, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x3, 0x3, 0x8001, 0x3, 0x8}, {0x8, 0x0, 0x8, 0x8, 0x5, 0xc}, 0x1000006, 0x8, 0x1457}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x3ace9a85e05b5271}, @TCA_TBF_BURST={0x8, 0x6, 0x7}]}}]}, 0x6c}}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 0 (id=3539): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) kernel console output (not intermixed with test programs): omm syz.1.2817: corrupted inode contents [ 1353.377771][T17687] EXT4-fs error (device loop1): ext4_truncate:4301: inode #12: comm syz.1.2817: mark_inode_dirty error [ 1353.378023][ T2320] pvrusb2: Attached sub-driver cx25840 [ 1353.399517][T13581] libceph: connect (1)[c::]:6789 error -101 [ 1353.407511][T13581] libceph: mon0 (1)[c::]:6789 connect error [ 1353.413589][T17687] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 1353.426299][ T9834] usb 6-1: unable to read config index 0 descriptor/start: -32 [ 1353.447232][ T9834] usb 6-1: chopping to 0 config(s) [ 1353.452782][T17687] EXT4-fs (loop1): 1 truncate cleaned up [ 1353.459482][T17687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1353.497476][ T9834] usb 6-1: can't read configurations, error -32 [ 1353.523958][T17676] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1353.564519][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1353.606296][T16854] usb 1-1: USB disconnect, device number 76 [ 1353.644994][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1353.653154][T17684] ceph: No mds server is up or the cluster is laggy [ 1353.753581][ T9834] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 1353.765258][T15867] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1354.112491][ T9834] usb 6-1: device descriptor read/64, error -32 [ 1354.240832][ T9834] usb usb6-port1: attempt power cycle [ 1354.487920][T17707] fuse: Bad value for 'fd' [ 1354.494230][T17704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2821'. [ 1354.628474][T13623] Bluetooth: hci0: command 0x0406 tx timeout [ 1354.688457][ T9834] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 1354.801715][T16854] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1355.024761][T16854] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1355.051969][T16854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.101701][T16854] usb 5-1: Product: syz [ 1355.106005][T16854] usb 5-1: Manufacturer: syz [ 1355.138790][ T9834] usb 6-1: device descriptor read/8, error -71 [ 1355.140907][T16854] usb 5-1: SerialNumber: syz [ 1355.249637][T16854] usb 5-1: config 0 descriptor?? [ 1355.268854][T16854] hub 5-1:0.0: bad descriptor, ignoring hub [ 1355.305986][T16854] hub: probe of 5-1:0.0 failed with error -5 [ 1355.533799][T16854] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1355.575054][T16854] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1355.585606][T16854] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1355.605452][T16854] usb 5-1: media controller created [ 1356.452866][T16854] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1356.843387][T17723] usb usb9: usbfs: process 17723 (syz.5.2827) did not claim interface 0 before use [ 1357.006163][T16854] DVB: Unable to find symbol dib7000p_attach() [ 1357.062269][T16854] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1357.318542][T16854] rc_core: IR keymap rc-dib0700-rc5 not found [ 1357.325532][T16854] Registered IR keymap rc-empty [ 1357.336502][T16854] dvb-usb: could not initialize remote control. [ 1357.343809][T16854] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1357.402386][T17730] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1357.425901][T16854] usb 5-1: USB disconnect, device number 76 [ 1357.500557][T17733] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1357.510791][T17733] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1358.524629][T16854] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1358.924725][T17732] can0: slcan on ptm0. [ 1359.070793][T17729] can0 (unregistered): slcan off ptm0. [ 1359.224551][T17742] fuse: Bad value for 'fd' [ 1359.451514][T17751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2834'. [ 1359.841040][T11888] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1360.130553][T11888] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.276293][T11888] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1360.298434][T11888] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1360.307871][T11888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.443992][T12476] Bluetooth: hci4: unexpected event for opcode 0x2ef5 [ 1361.200790][ T9834] usb 6-1: USB disconnect, device number 71 [ 1361.308529][T13581] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1361.440758][T17784] tipc: Enabled bearer , priority 0 [ 1361.485047][T17784] syzkaller0: entered promiscuous mode [ 1361.498471][T17784] syzkaller0: entered allmulticast mode [ 1361.508608][T13581] usb 2-1: Using ep0 maxpacket: 32 [ 1361.527259][T13581] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1361.549298][T13581] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.603465][T13581] usb 2-1: config 0 descriptor?? [ 1361.635340][T13581] as10x_usb: device has been detected [ 1361.665820][T17784] tipc: Resetting bearer [ 1361.689385][T13581] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1361.715814][T17783] tipc: Resetting bearer [ 1361.992252][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.998709][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.400835][T17773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1363.405395][T13581] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1363.411860][T17773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1363.539592][T13581] as10x_usb: error during firmware upload part1 [ 1363.547938][T17783] tipc: Disabling bearer [ 1363.562496][T13581] Registered device nBox DVB-T Dongle [ 1363.637619][T11888] tipc: Node number set to 1012111195 [ 1364.850146][ T5804] usb 2-1: USB disconnect, device number 66 [ 1364.919450][T11888] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1364.956467][ T5804] Unregistered device nBox DVB-T Dongle [ 1364.962834][ T5804] as10x_usb: device has been disconnected [ 1365.006718][T17811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2844'. [ 1365.130784][T11888] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 1365.246773][T11888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1365.257936][T11888] usb 5-1: config 0 has no interface number 0 [ 1365.264587][T11888] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1365.276520][T11888] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1365.287087][T11888] usb 5-1: config 0 interface 237 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1365.317443][T11888] usb 5-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 1365.336718][T11888] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 1365.373246][T11888] usb 5-1: Product: syz [ 1365.385647][T11888] usb 5-1: Manufacturer: syz [ 1365.403300][T11888] usb 5-1: SerialNumber: syz [ 1365.429390][T11888] usb 5-1: config 0 descriptor?? [ 1365.667430][T11888] usb 5-1: USB disconnect, device number 77 [ 1367.912483][T17833] loop0: detected capacity change from 0 to 512 [ 1368.193150][T17833] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1368.193326][T17831] netlink: 'syz.1.2848': attribute type 3 has an invalid length. [ 1368.201897][T17833] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1368.220544][ T5803] libceph: connect (1)[c::]:6789 error -101 [ 1368.231678][ T5803] libceph: mon0 (1)[c::]:6789 connect error [ 1368.275235][T17833] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 1368.289250][T17833] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.2847: Allocating blocks 41-42 which overlap fs metadata [ 1368.304857][T17833] Quota error (device loop0): write_blk: dquota write failed [ 1368.312893][T17833] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 1368.322583][T17833] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.2847: Allocating blocks 41-42 which overlap fs metadata [ 1368.341608][T17833] Quota error (device loop0): write_blk: dquota write failed [ 1368.349281][T17833] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1368.360396][T17833] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.2847: Failed to acquire dquot type 1 [ 1368.374584][T17833] EXT4-fs error (device loop0): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1368.390347][T17833] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #12: comm syz.0.2847: corrupted inode contents [ 1368.510455][T17833] EXT4-fs error (device loop0): ext4_dirty_inode:6143: inode #12: comm syz.0.2847: mark_inode_dirty error [ 1368.522485][T17833] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #12: comm syz.0.2847: corrupted inode contents [ 1368.535204][T17833] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.2847: mark_inode_dirty error [ 1368.548524][T17833] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #12: comm syz.0.2847: corrupted inode contents [ 1368.564220][T17833] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 1368.573718][T17833] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #12: comm syz.0.2847: corrupted inode contents [ 1368.587035][T17833] EXT4-fs error (device loop0): ext4_truncate:4301: inode #12: comm syz.0.2847: mark_inode_dirty error [ 1368.600508][T17833] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 1368.610809][T17833] EXT4-fs (loop0): 1 truncate cleaned up [ 1368.617928][T17833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1368.643134][ T5803] libceph: connect (1)[c::]:6789 error -101 [ 1368.660881][ T5803] libceph: mon0 (1)[c::]:6789 connect error [ 1368.733965][T17830] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1368.863507][T17832] ceph: No mds server is up or the cluster is laggy [ 1369.022362][T13456] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1369.709916][T11888] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1369.899057][T11888] usb 6-1: Using ep0 maxpacket: 16 [ 1369.910467][T11888] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1369.930423][T11888] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1369.943254][T11888] usb 6-1: language id specifier not provided by device, defaulting to English [ 1369.959424][T11888] usb 6-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 1369.969438][T11888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.978750][T11888] usb 6-1: Product: 熪⎥Wæ€ [ 1369.983882][T11888] usb 6-1: SerialNumber: syz [ 1370.090057][T17857] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 1370.130588][T17857] kvm: pic: single mode not supported [ 1370.138626][T17857] kvm: pic: single mode not supported [ 1371.405401][T11888] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1371.416831][T17859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2855'. [ 1371.433774][T11888] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 1371.445118][T11888] usb 6-1: unknown sample rate [ 1371.506138][T11888] usb 6-1: USB disconnect, device number 72 [ 1371.885432][T17208] udevd[17208]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1373.742572][T17881] loop1: detected capacity change from 0 to 512 [ 1374.203263][ T9834] libceph: connect (1)[c::]:6789 error -101 [ 1374.210327][ T9834] libceph: mon0 (1)[c::]:6789 connect error [ 1374.231701][T17881] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1374.240482][T17881] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1374.267106][T17881] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 1374.311471][T17881] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4059: comm syz.1.2859: Allocating blocks 41-42 which overlap fs metadata [ 1374.330678][T17881] Quota error (device loop1): write_blk: dquota write failed [ 1374.338516][T17881] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 1374.348017][T17881] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4059: comm syz.1.2859: Allocating blocks 41-42 which overlap fs metadata [ 1374.364330][T17881] Quota error (device loop1): write_blk: dquota write failed [ 1374.372071][T17881] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1374.382632][T17881] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.2859: Failed to acquire dquot type 1 [ 1374.405608][T17881] EXT4-fs error (device loop1): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1374.420433][T17881] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #12: comm syz.1.2859: corrupted inode contents [ 1374.453987][T17881] EXT4-fs error (device loop1): ext4_dirty_inode:6143: inode #12: comm syz.1.2859: mark_inode_dirty error [ 1374.467557][T17881] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #12: comm syz.1.2859: corrupted inode contents [ 1374.480311][T17881] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.2859: mark_inode_dirty error [ 1374.492286][ T9834] libceph: connect (1)[c::]:6789 error -101 [ 1374.500274][T17881] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #12: comm syz.1.2859: corrupted inode contents [ 1374.514343][ T9834] libceph: mon0 (1)[c::]:6789 connect error [ 1374.520639][T17881] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 1374.532455][T17881] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #12: comm syz.1.2859: corrupted inode contents [ 1374.545929][T17881] EXT4-fs error (device loop1): ext4_truncate:4301: inode #12: comm syz.1.2859: mark_inode_dirty error [ 1374.576928][T17881] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 1374.596031][T17881] EXT4-fs (loop1): 1 truncate cleaned up [ 1374.613386][T17881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1374.703141][T17877] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1374.788760][T12476] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1374.788792][T13623] Bluetooth: hci2: command 0x1003 tx timeout [ 1374.854903][T17879] ceph: No mds server is up or the cluster is laggy [ 1375.029121][T15867] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1375.598529][ T5803] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1376.219376][ T5803] usb 2-1: Using ep0 maxpacket: 8 [ 1376.230791][ T5803] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1376.240522][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.282871][ T5803] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1376.315035][ T5803] pvrusb2: ********** [ 1376.324575][ T5803] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1376.335896][ T5803] pvrusb2: Important functionality might not be entirely working. [ 1376.344666][ T5803] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1376.357607][ T5803] pvrusb2: ********** [ 1376.487609][ T2320] pvrusb2: Invalid write control endpoint [ 1376.609415][ T2320] pvrusb2: Invalid write control endpoint [ 1376.637205][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1376.675985][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1376.769190][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1376.783699][ T2320] pvrusb2: Device being rendered inoperable [ 1376.792570][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1376.793486][ T5803] usb 2-1: USB disconnect, device number 67 [ 1376.806441][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1377.130898][T17912] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 1377.327974][T17912] kvm: pic: single mode not supported [ 1377.337141][T17912] kvm: pic: single mode not supported [ 1378.418949][ T2320] pvrusb2: Attached sub-driver cx25840 [ 1378.589829][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1378.593713][T17915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2867'. [ 1378.634508][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1380.448521][T13581] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1380.908781][T13581] usb 1-1: Using ep0 maxpacket: 8 [ 1380.922902][T17940] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2874'. [ 1380.943117][T13581] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1381.075529][T17940] input: syz0 as /devices/virtual/input/input24 [ 1381.358548][T13581] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1381.370117][T13581] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1381.389893][T13581] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1381.497461][T13581] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1381.560794][T13581] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1381.583283][T13581] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.235643][T13581] usb 1-1: GET_CAPABILITIES returned 0 [ 1382.241581][T13581] usbtmc 1-1:16.0: can't read capabilities [ 1382.387340][T16854] usb 1-1: USB disconnect, device number 77 [ 1382.913739][T17958] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 1382.936328][T17958] kvm: pic: single mode not supported [ 1382.936379][T17958] kvm: pic: single mode not supported [ 1384.457645][T17963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2880'. [ 1384.850652][T12476] Bluetooth: hci1: unexpected event for opcode 0x2ef5 [ 1386.538771][T17984] syz_tun: entered allmulticast mode [ 1387.128407][T17977] syz_tun: left allmulticast mode [ 1387.438557][ T5804] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1387.676803][ T5804] usb 6-1: Using ep0 maxpacket: 8 [ 1387.685266][ T5804] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1387.694482][ T5804] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1387.707792][ T5804] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1387.738757][ T5804] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1387.798849][ T5804] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1387.878065][ T5804] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1388.027074][ T5804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.411335][ T5804] usb 6-1: GET_CAPABILITIES returned 0 [ 1388.416933][ T5804] usbtmc 6-1:16.0: can't read capabilities [ 1388.548258][T18006] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 1388.585942][T18006] kvm: pic: single mode not supported [ 1388.585996][T18006] kvm: pic: single mode not supported [ 1388.730737][ T5804] usb 6-1: USB disconnect, device number 73 [ 1389.816312][T12476] Bluetooth: hci1: unexpected event for opcode 0x2ef5 [ 1391.399995][T18040] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2900'. [ 1396.591207][T18064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2908'. [ 1396.629178][T18064] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2908'. [ 1396.645874][T18064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2908'. [ 1396.658513][T18064] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2908'. [ 1396.683872][T18064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2908'. [ 1396.754041][T18064] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2908'. [ 1396.863730][T18064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2908'. [ 1396.938799][T18064] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2908'. [ 1399.982229][T18083] syz.1.2911 (18083): drop_caches: 2 [ 1400.833539][T18100] syz.1.2916 (18100): drop_caches: 2 [ 1402.240851][T18112] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (aio_iiro_16) [ 1404.065706][ T9834] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 1404.277275][T16293] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1404.291728][ T9834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1404.303690][T16293] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1404.311275][ T9834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1404.321788][T16293] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1404.340854][T16293] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1404.353493][T16293] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1404.353613][ T9834] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1404.371115][T16293] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1404.371940][ T9834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.410993][ T9834] usb 2-1: config 0 descriptor?? [ 1404.695743][ T9834] usb 2-1: can't set config #0, error -71 [ 1404.740813][ T9834] usb 2-1: USB disconnect, device number 68 [ 1405.271762][T18138] syz.0.2924 (18138): drop_caches: 2 [ 1405.350703][T16293] Bluetooth: hci2: command 0x1003 tx timeout [ 1405.374017][T12476] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1405.528593][T18140] syz_tun: entered allmulticast mode [ 1405.564901][T18139] syz_tun: left allmulticast mode [ 1405.706709][T18132] chnl_net:caif_netlink_parms(): no params data found [ 1405.928908][T18151] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (aio_iiro_16) [ 1406.067914][T10780] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1406.186758][T10780] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.470853][T12476] Bluetooth: hci5: command tx timeout [ 1406.653633][T10780] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1406.704537][T10780] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.717520][T18157] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2930'. [ 1406.917796][T10780] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1406.942193][T10780] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.986191][T18162] fuse: Bad value for 'rootmode' [ 1406.994720][T18132] bridge0: port 1(bridge_slave_0) entered blocking state [ 1407.003968][T18132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1407.015038][T18132] bridge_slave_0: entered allmulticast mode [ 1407.033647][T18132] bridge_slave_0: entered promiscuous mode [ 1407.074664][T10780] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1407.085874][T10780] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1407.097568][T18166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2932'. [ 1407.114506][T18132] bridge0: port 2(bridge_slave_1) entered blocking state [ 1407.124507][T18132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1407.155522][T18132] bridge_slave_1: entered allmulticast mode [ 1407.164190][T18132] bridge_slave_1: entered promiscuous mode [ 1407.345701][T18132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1407.407671][T18132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1407.440254][T10780] tipc: Left network mode [ 1407.675715][T18132] team0: Port device team_slave_0 added [ 1407.694388][T18132] team0: Port device team_slave_1 added [ 1407.826201][T18132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1407.833995][T18132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1407.893143][T18132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1408.129066][T18132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1408.150935][T18132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1408.233184][T18132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1408.568616][T12476] Bluetooth: hci5: command tx timeout [ 1408.936228][T18197] loop0: detected capacity change from 0 to 512 [ 1409.447765][T18132] hsr_slave_0: entered promiscuous mode [ 1409.460990][ T5803] libceph: connect (1)[c::]:6789 error -101 [ 1409.467406][ T5803] libceph: mon0 (1)[c::]:6789 connect error [ 1409.494658][T18132] hsr_slave_1: entered promiscuous mode [ 1409.526609][T18132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1409.540953][T18132] Cannot create hsr debugfs directory [ 1409.657249][T18197] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1409.666633][T18197] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1409.690863][T18197] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 1409.704488][T18197] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.2938: Allocating blocks 41-42 which overlap fs metadata [ 1409.720160][T18197] Quota error (device loop0): write_blk: dquota write failed [ 1409.728089][T18197] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 1409.738261][T18197] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.2938: Allocating blocks 41-42 which overlap fs metadata [ 1409.764089][ T5803] libceph: connect (1)[c::]:6789 error -101 [ 1409.770751][T18197] Quota error (device loop0): write_blk: dquota write failed [ 1409.779786][T18197] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1409.790429][T18197] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.2938: Failed to acquire dquot type 1 [ 1409.807108][T18197] EXT4-fs error (device loop0): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1409.822626][T18197] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #12: comm syz.0.2938: corrupted inode contents [ 1409.837776][T18197] EXT4-fs error (device loop0): ext4_dirty_inode:6143: inode #12: comm syz.0.2938: mark_inode_dirty error [ 1409.864718][T18197] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #12: comm syz.0.2938: corrupted inode contents [ 1409.882094][T18197] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.2938: mark_inode_dirty error [ 1409.900350][ T5803] libceph: mon0 (1)[c::]:6789 connect error [ 1409.914541][T18197] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #12: comm syz.0.2938: corrupted inode contents [ 1409.941581][T18197] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 1409.963142][T18197] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #12: comm syz.0.2938: corrupted inode contents [ 1409.976806][T18197] EXT4-fs error (device loop0): ext4_truncate:4301: inode #12: comm syz.0.2938: mark_inode_dirty error [ 1409.995255][T18197] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 1410.040652][T18197] EXT4-fs (loop0): 1 truncate cleaned up [ 1410.047785][T18197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1410.077626][T18205] syz.1.2939 (18205): drop_caches: 2 [ 1410.077769][T18208] fuse: Bad value for 'rootmode' [ 1410.114329][T18193] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1410.243526][T18196] ceph: No mds server is up or the cluster is laggy [ 1410.440371][T13456] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1410.634295][T18216] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2941'. [ 1410.676354][T12476] Bluetooth: hci5: command tx timeout [ 1411.074298][T18214] input: syz0 as /devices/virtual/input/input25 [ 1411.175275][T10780] hsr_slave_0: left promiscuous mode [ 1411.231156][T10780] hsr_slave_1: left promiscuous mode [ 1411.252099][T10780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1411.295387][T10780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1411.311312][ T5803] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1411.333595][T10780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1411.347034][T10780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1411.367880][T10780] bridge_slave_1: left allmulticast mode [ 1411.378652][T10780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.411767][T10780] bridge_slave_0: left allmulticast mode [ 1411.417905][T10780] bridge_slave_0: left promiscuous mode [ 1411.438613][T10780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.518754][ T5803] usb 1-1: Using ep0 maxpacket: 8 [ 1411.532470][ T5803] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1411.532552][T10780] veth1_macvtap: left promiscuous mode [ 1411.550915][ T5803] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1411.592817][T10780] veth0_macvtap: left promiscuous mode [ 1411.632287][T10780] veth1_vlan: left promiscuous mode [ 1411.697018][T10780] veth0_vlan: left promiscuous mode [ 1412.407092][ T5803] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1412.417774][ T5803] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1412.428136][ T5803] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1412.441931][ T5803] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1412.451395][ T5803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.683087][ T5803] usb 1-1: GET_CAPABILITIES returned 0 [ 1412.692977][ T5803] usbtmc 1-1:16.0: can't read capabilities [ 1412.791616][T16293] Bluetooth: hci5: command tx timeout [ 1412.897938][ T5803] usb 1-1: USB disconnect, device number 78 [ 1413.575234][T18243] fuse: Unknown parameter 'use00000000000000000000' [ 1414.130024][T18252] loop0: detected capacity change from 0 to 512 [ 1414.161498][T18252] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1414.170386][T18252] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1414.250371][T18252] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 1414.283958][T18252] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.2949: Allocating blocks 41-42 which overlap fs metadata [ 1414.301712][T18252] Quota error (device loop0): write_blk: dquota write failed [ 1414.309352][T18252] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 1414.320437][T18252] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.2949: Allocating blocks 41-42 which overlap fs metadata [ 1414.342710][T18252] Quota error (device loop0): write_blk: dquota write failed [ 1414.351431][T18252] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1414.362756][T18252] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.2949: Failed to acquire dquot type 1 [ 1414.387896][T18252] EXT4-fs error (device loop0): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1414.403212][T18252] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #12: comm syz.0.2949: corrupted inode contents [ 1414.419513][T18252] EXT4-fs error (device loop0): ext4_dirty_inode:6143: inode #12: comm syz.0.2949: mark_inode_dirty error [ 1414.432790][T18252] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #12: comm syz.0.2949: corrupted inode contents [ 1414.447866][T18252] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.2949: mark_inode_dirty error [ 1414.460620][T18252] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #12: comm syz.0.2949: corrupted inode contents [ 1414.474276][T13581] libceph: connect (1)[c::]:6789 error -101 [ 1414.480818][T18252] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 1414.490629][T13581] libceph: mon0 (1)[c::]:6789 connect error [ 1414.498419][T18252] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #12: comm syz.0.2949: corrupted inode contents [ 1414.504003][T18259] netlink: 'syz.1.2951': attribute type 3 has an invalid length. [ 1414.521690][T18252] EXT4-fs error (device loop0): ext4_truncate:4301: inode #12: comm syz.0.2949: mark_inode_dirty error [ 1414.548729][T18252] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 1414.561427][T18252] EXT4-fs (loop0): 1 truncate cleaned up [ 1414.568673][T18252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1414.614320][T18249] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1414.641427][T10780] team0 (unregistering): Port device team_slave_1 removed [ 1414.723446][T16293] Bluetooth: hci2: command 0x1003 tx timeout [ 1414.725012][T12476] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1414.744547][T18251] ceph: No mds server is up or the cluster is laggy [ 1414.781512][ T5803] libceph: connect (1)[c::]:6789 error -101 [ 1414.784062][T10780] team0 (unregistering): Port device team_slave_0 removed [ 1414.788560][ T5803] libceph: mon0 (1)[c::]:6789 connect error [ 1414.936402][T13456] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1415.005398][T10780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1415.094776][T10780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1415.323863][ T5803] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1415.572225][ T5803] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1415.586485][ T5803] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1415.597173][ T5803] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1415.606803][ T5803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.625754][T18261] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1415.641922][ T5803] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1415.740990][T10780] bond0 (unregistering): Released all slaves [ 1415.864988][ T5803] usb 1-1: USB disconnect, device number 79 [ 1416.242466][T18132] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1416.298656][T18132] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1416.356837][T18132] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1416.408024][T18132] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1416.438881][T18273] binder: BINDER_SET_CONTEXT_MGR already set [ 1416.445185][T18273] binder: 18271:18273 ioctl 4018620d 200000001000 returned -16 [ 1416.595629][T18132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1416.622161][T18132] 8021q: adding VLAN 0 to HW filter on device team0 [ 1416.689817][T15036] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.697177][T15036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1416.736504][T15036] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.743897][T15036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1416.877825][T18285] fuse: Unknown parameter 'use00000000000000000000' [ 1417.303642][T18132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1417.338927][ T9834] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1417.699760][ T9834] usb 6-1: Using ep0 maxpacket: 8 [ 1417.757614][ T9834] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1417.892555][ T9834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.382208][ T9834] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1418.389913][ T9834] pvrusb2: ********** [ 1418.393927][ T9834] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1418.404987][ T9834] pvrusb2: Important functionality might not be entirely working. [ 1418.433670][ T9834] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1418.465844][ T9834] pvrusb2: ********** [ 1418.514888][T12476] Bluetooth: hci3: unexpected event for opcode 0x2ef5 [ 1418.589189][ T2320] pvrusb2: Invalid write control endpoint [ 1419.962616][T18328] syz.0.2960 (18328): drop_caches: 2 [ 1420.336072][ T2320] pvrusb2: Invalid write control endpoint [ 1420.346832][ T5822] usb 6-1: USB disconnect, device number 74 [ 1420.375482][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1420.434771][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1420.463038][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1420.503129][ T2320] pvrusb2: Device being rendered inoperable [ 1420.520331][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1420.533199][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1420.549707][ T2320] pvrusb2: Attached sub-driver cx25840 [ 1420.557330][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1420.584022][T18132] veth0_vlan: entered promiscuous mode [ 1420.590261][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1420.611042][T18132] veth1_vlan: entered promiscuous mode [ 1420.691505][T18132] veth0_macvtap: entered promiscuous mode [ 1420.709979][T18132] veth1_macvtap: entered promiscuous mode [ 1420.736754][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.747894][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.758582][ T9834] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1420.776223][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.787370][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.801023][T18132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1420.814208][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1420.825537][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.874959][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1420.927307][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.939815][T18132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1421.001769][T18132] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.039668][T18344] trusted_key: encrypted_key: keyword 'upfault' not recognized [ 1421.062099][T18132] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.083808][T18132] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.096191][T18132] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.264507][ T9834] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1421.296871][ T9834] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1421.420152][T15037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.433968][T15037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1421.449377][ T9834] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1421.469785][T18344] gfs2: path_lookup on syzkaller returned error -2 [ 1421.508856][ T3516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.516932][ T3516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1421.529709][ T9834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.825557][T18334] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1421.855750][ T9834] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1422.690943][ T9834] usb 2-1: USB disconnect, device number 69 [ 1423.268934][T18375] syz.0.2968 (18375): drop_caches: 2 [ 1423.457690][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.482028][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.022454][T12476] Bluetooth: hci3: unexpected event for opcode 0x2ef5 [ 1424.799776][T11888] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1424.982182][T18410] loop0: detected capacity change from 0 to 512 [ 1425.026886][T18410] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1425.035626][T18410] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1425.084061][T12917] libceph: connect (1)[c::]:6789 error -101 [ 1425.103085][T18410] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 1425.197071][T18410] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.2975: Allocating blocks 41-42 which overlap fs metadata [ 1425.214948][T18410] Quota error (device loop0): write_blk: dquota write failed [ 1425.223398][T18410] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 1425.234761][T18410] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.2975: Allocating blocks 41-42 which overlap fs metadata [ 1425.263630][T18410] Quota error (device loop0): write_blk: dquota write failed [ 1425.272558][T18410] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1425.283636][T18410] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.2975: Failed to acquire dquot type 1 [ 1425.300520][T18410] EXT4-fs error (device loop0): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1425.315896][T18410] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #12: comm syz.0.2975: corrupted inode contents [ 1425.329000][T12917] libceph: mon0 (1)[c::]:6789 connect error [ 1425.341455][T18410] EXT4-fs error (device loop0): ext4_dirty_inode:6143: inode #12: comm syz.0.2975: mark_inode_dirty error [ 1425.363568][T18410] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #12: comm syz.0.2975: corrupted inode contents [ 1425.377461][T18410] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.2975: mark_inode_dirty error [ 1425.392189][T18410] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #12: comm syz.0.2975: corrupted inode contents [ 1425.420498][T18410] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 1425.432398][T18410] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #12: comm syz.0.2975: corrupted inode contents [ 1425.445868][T18410] EXT4-fs error (device loop0): ext4_truncate:4301: inode #12: comm syz.0.2975: mark_inode_dirty error [ 1425.464260][T18410] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 1425.478962][T18410] EXT4-fs (loop0): 1 truncate cleaned up [ 1425.485864][T18410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1425.528421][T11888] usb 6-1: Using ep0 maxpacket: 8 [ 1425.536971][T18406] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1425.562008][T11888] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1425.562037][T11888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.604010][T13581] libceph: connect (1)[c::]:6789 error -101 [ 1425.604149][T13581] libceph: mon0 (1)[c::]:6789 connect error [ 1425.619117][T11888] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1425.619137][T11888] pvrusb2: ********** [ 1425.619144][T11888] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1425.619156][T11888] pvrusb2: Important functionality might not be entirely working. [ 1425.619164][T11888] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1425.619174][T11888] pvrusb2: ********** [ 1425.663636][T18407] ceph: No mds server is up or the cluster is laggy [ 1425.788396][T13456] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1425.850113][ T2320] pvrusb2: Invalid write control endpoint [ 1426.106858][ T2320] pvrusb2: Invalid write control endpoint [ 1426.123277][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1426.181273][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1426.226439][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1426.287701][ T2320] pvrusb2: Device being rendered inoperable [ 1426.331616][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1426.343438][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1426.357931][ T2320] pvrusb2: Attached sub-driver cx25840 [ 1426.368962][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1426.453402][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1426.488643][T13581] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1426.586070][T12917] usb 6-1: USB disconnect, device number 75 [ 1426.704677][T13581] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1426.735964][T13581] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1426.758609][T13581] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1426.780152][T13581] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.794109][T16293] Bluetooth: hci2: command 0x1003 tx timeout [ 1426.803316][T12476] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1426.923242][T13581] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1427.018564][T13581] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 1427.070447][T15507] udevd[15507]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1428.182113][ T5804] usb 1-1: USB disconnect, device number 80 [ 1431.798464][T11888] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1432.006809][T11888] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.168503][T11888] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1432.209528][T11888] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1432.228500][T11888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.263908][T11888] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1432.329705][T11888] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 1432.434145][T15507] udevd[15507]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1433.169247][ T9834] usb 1-1: USB disconnect, device number 81 [ 1434.979251][T18524] netlink: 'syz.6.2998': attribute type 3 has an invalid length. [ 1435.878834][T18534] tipc: Started in network mode [ 1435.919680][T18534] tipc: Node identity 72e9c4c5a4de, cluster identity 4711 [ 1435.951331][T18534] tipc: Enabled bearer , priority 0 [ 1435.961577][T18539] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 1435.982896][T18534] tipc: Resetting bearer [ 1436.104268][T18531] tipc: Disabling bearer [ 1436.178422][ T5803] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1437.849058][ T5803] usb 6-1: Using ep0 maxpacket: 8 [ 1440.209448][ T5803] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1440.336701][ T5803] usb 6-1: can't read configurations, error -71 [ 1441.440002][T18573] Context (ID=0x0) not attached to queue pair (handle=0x4dd:0x0) [ 1441.538610][T16854] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1443.631838][T16854] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1443.715272][T16854] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1443.734145][T16854] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1443.776168][T16854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.798738][T18580] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1443.822803][T16854] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1443.970859][T18605] netlink: 'syz.5.3018': attribute type 3 has an invalid length. [ 1444.065317][T16854] usb 2-1: USB disconnect, device number 70 [ 1444.478433][ T5804] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1444.527275][T18610] loop6: detected capacity change from 0 to 512 [ 1444.544951][T18610] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1444.555920][T18610] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1444.678657][ T5804] usb 1-1: Using ep0 maxpacket: 8 [ 1444.695343][ T5804] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1444.708862][ T5804] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1444.729697][ T5804] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1444.747277][ T5804] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1444.759627][ T5804] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1444.776764][ T5804] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1444.787963][ T5804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.027345][ T5804] usb 1-1: GET_CAPABILITIES returned 0 [ 1445.041207][ T5804] usbtmc 1-1:16.0: can't read capabilities [ 1445.243460][ T5804] usb 1-1: USB disconnect, device number 82 [ 1445.318158][T13581] libceph: connect (1)[c::]:6789 error -101 [ 1445.335655][T13581] libceph: mon0 (1)[c::]:6789 connect error [ 1445.358630][T18610] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 1445.550101][T18610] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4059: comm syz.6.3017: Allocating blocks 41-42 which overlap fs metadata [ 1445.568672][T18610] Quota error (device loop6): write_blk: dquota write failed [ 1445.576537][T18610] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 1445.586125][T18610] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4059: comm syz.6.3017: Allocating blocks 41-42 which overlap fs metadata [ 1445.600864][T13581] libceph: connect (1)[c::]:6789 error -101 [ 1445.607022][T13581] libceph: mon0 (1)[c::]:6789 connect error [ 1445.613456][T18610] Quota error (device loop6): write_blk: dquota write failed [ 1445.621344][T18610] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1445.631833][T18610] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.3017: Failed to acquire dquot type 1 [ 1445.644289][T18610] EXT4-fs error (device loop6): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1445.660431][T18610] EXT4-fs error (device loop6): ext4_do_update_inode:5255: inode #12: comm syz.6.3017: corrupted inode contents [ 1445.677003][T18610] EXT4-fs error (device loop6): ext4_dirty_inode:6143: inode #12: comm syz.6.3017: mark_inode_dirty error [ 1445.690175][T18610] EXT4-fs error (device loop6): ext4_do_update_inode:5255: inode #12: comm syz.6.3017: corrupted inode contents [ 1445.708655][T18610] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.3017: mark_inode_dirty error [ 1445.749381][ T8] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1445.786458][T18610] EXT4-fs error (device loop6): ext4_do_update_inode:5255: inode #12: comm syz.6.3017: corrupted inode contents [ 1445.800175][T18610] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1445.819735][T18610] EXT4-fs error (device loop6): ext4_do_update_inode:5255: inode #12: comm syz.6.3017: corrupted inode contents [ 1445.838791][T18610] EXT4-fs error (device loop6): ext4_truncate:4301: inode #12: comm syz.6.3017: mark_inode_dirty error [ 1445.871595][T18610] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 1445.889611][T18610] EXT4-fs (loop6): 1 truncate cleaned up [ 1445.902805][T18610] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1446.150803][T13581] libceph: connect (1)[c::]:6789 error -101 [ 1446.226545][T13581] libceph: mon0 (1)[c::]:6789 connect error [ 1446.997418][T18606] ceph: No mds server is up or the cluster is laggy [ 1447.190338][T13581] libceph: connect (1)[c::]:6789 error -101 [ 1447.276597][T13581] libceph: mon0 (1)[c::]:6789 connect error [ 1447.471721][T18603] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1447.588108][T18132] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1447.646016][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 1447.706945][ T8] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1447.733799][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.766842][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1447.820977][ T8] pvrusb2: ********** [ 1447.846477][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1447.906966][ T8] pvrusb2: Important functionality might not be entirely working. [ 1447.924444][T18640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3023'. [ 1447.934043][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1447.958097][ T8] pvrusb2: ********** [ 1447.969005][ T2320] pvrusb2: Invalid write control endpoint [ 1448.093564][ T2320] pvrusb2: Invalid write control endpoint [ 1448.122132][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1448.157068][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1448.188385][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1448.201579][ T2320] pvrusb2: Device being rendered inoperable [ 1448.213618][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1448.228123][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1448.250570][ T2320] pvrusb2: Attached sub-driver cx25840 [ 1448.263022][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1448.357065][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1450.068492][ T8] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1450.288672][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 1450.361176][ T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1450.407414][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.553804][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1450.628017][ T8] pvrusb2: ********** [ 1450.649199][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1450.680255][ T8] pvrusb2: Important functionality might not be entirely working. [ 1450.728971][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1450.769727][ T8] pvrusb2: ********** [ 1450.786107][ T2320] pvrusb2: Invalid write control endpoint [ 1450.973379][ T2320] pvrusb2: Invalid write control endpoint [ 1451.001741][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1451.069300][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1451.078123][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1451.098488][ T2320] pvrusb2: Device being rendered inoperable [ 1451.105167][ T2320] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1451.113497][ T2320] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 1451.125470][ T5803] usb 2-1: USB disconnect, device number 71 [ 1451.135045][ T2320] pvrusb2: Attached sub-driver cx25840 [ 1451.157813][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1451.171174][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1451.208438][ T9834] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1451.456934][ T9834] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1451.474488][ T9834] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1451.486684][ T9834] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1451.497491][ T9834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.547344][T18675] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1451.586696][ T9834] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 1451.790182][ T9834] usb 7-1: USB disconnect, device number 2 [ 1452.014367][ T5804] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1452.208488][ T5804] usb 1-1: Using ep0 maxpacket: 8 [ 1452.225892][ T5804] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1452.235791][ T5804] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1452.251889][ T5804] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1452.263916][ T5804] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1452.278203][ T5804] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1452.296009][ T5804] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1452.306662][ T5804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.564770][ T5804] usb 1-1: GET_CAPABILITIES returned 0 [ 1452.581009][ T5804] usbtmc 1-1:16.0: can't read capabilities [ 1452.819620][ T5804] usb 1-1: USB disconnect, device number 83 [ 1453.141964][T18695] loop1: detected capacity change from 0 to 512 [ 1453.314529][ T5803] libceph: connect (1)[c::]:6789 error -101 [ 1453.325787][ T5803] libceph: mon0 (1)[c::]:6789 connect error [ 1453.838313][ T9834] libceph: connect (1)[c::]:6789 error -101 [ 1453.882027][ T9834] libceph: mon0 (1)[c::]:6789 connect error [ 1453.932954][T18695] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1453.942049][T18695] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1454.029193][ T9834] usb 6-1: USB disconnect, device number 78 [ 1454.060123][T18695] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 1454.076170][T18695] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4059: comm syz.1.3030: Allocating blocks 41-42 which overlap fs metadata [ 1454.094292][T18695] Quota error (device loop1): write_blk: dquota write failed [ 1454.106286][T18695] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 1454.118636][T18695] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4059: comm syz.1.3030: Allocating blocks 41-42 which overlap fs metadata [ 1454.255703][T18695] Quota error (device loop1): write_blk: dquota write failed [ 1454.264059][T18695] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1454.274546][T18695] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.3030: Failed to acquire dquot type 1 [ 1454.293459][T18695] EXT4-fs error (device loop1): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1454.308765][T18695] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #12: comm syz.1.3030: corrupted inode contents [ 1454.521152][T13581] libceph: connect (1)[c::]:6789 error -101 [ 1454.528221][T13581] libceph: mon0 (1)[c::]:6789 connect error [ 1454.807954][T18692] ceph: No mds server is up or the cluster is laggy [ 1454.900584][T18695] EXT4-fs error (device loop1): ext4_dirty_inode:6143: inode #12: comm syz.1.3030: mark_inode_dirty error [ 1454.916298][T18695] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #12: comm syz.1.3030: corrupted inode contents [ 1454.984985][T18695] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.3030: mark_inode_dirty error [ 1454.999410][T18709] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3034'. [ 1455.041070][T18695] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #12: comm syz.1.3030: corrupted inode contents [ 1455.062587][T18709] input: syz0 as /devices/virtual/input/input26 [ 1455.088001][T18695] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 1455.097558][T18695] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #12: comm syz.1.3030: corrupted inode contents [ 1455.111368][T18695] EXT4-fs error (device loop1): ext4_truncate:4301: inode #12: comm syz.1.3030: mark_inode_dirty error [ 1455.130116][T18695] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 1455.148499][T18695] EXT4-fs (loop1): 1 truncate cleaned up [ 1455.155884][T18695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1455.347281][T15867] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1455.642668][T18722] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3038'. [ 1455.738398][ T9834] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1455.947910][ T9834] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1455.960311][ T9834] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1455.971414][ T9834] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1456.006372][ T9834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.019463][T18718] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1456.041365][ T9834] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1456.278434][ T8] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1456.297059][ T9834] usb 1-1: USB disconnect, device number 84 [ 1456.370410][T18732] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1456.384283][T18732] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 1456.489515][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 1456.507647][ T8] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1456.525883][ T8] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1456.553502][ T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1456.587322][ T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1456.602167][ T8] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1456.628645][ T8] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1456.649980][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.708793][T11888] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1456.881211][ T8] usb 7-1: GET_CAPABILITIES returned 0 [ 1456.887121][ T8] usbtmc 7-1:16.0: can't read capabilities [ 1456.960640][T11888] usb 6-1: Using ep0 maxpacket: 8 [ 1456.969735][T11888] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1456.984190][T11888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.011806][T11888] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1457.030615][T11888] pvrusb2: ********** [ 1457.040771][T11888] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1457.063113][T11888] pvrusb2: Important functionality might not be entirely working. [ 1457.090308][T16854] usb 7-1: USB disconnect, device number 3 [ 1457.108490][T11888] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1457.152108][T11888] pvrusb2: ********** [ 1457.220341][ T2320] pvrusb2: Invalid write control endpoint [ 1457.442891][ T2320] pvrusb2: Invalid write control endpoint [ 1458.208663][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1458.259946][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1458.298563][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1458.448952][ T2320] pvrusb2: Device being rendered inoperable [ 1459.491099][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1459.681092][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1459.756141][ T2320] pvrusb2: Attached sub-driver cx25840 [ 1459.772902][T18768] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3047'. [ 1460.512059][T18772] loop6: detected capacity change from 0 to 512 [ 1460.926364][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1460.928237][ T9834] libceph: connect (1)[c::]:6789 error -101 [ 1460.943805][ T9834] libceph: mon0 (1)[c::]:6789 connect error [ 1460.951607][T18768] input: syz0 as /devices/virtual/input/input27 [ 1461.026334][T18772] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1461.035646][T18772] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1461.056938][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1461.108151][T18772] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 1461.149027][T18772] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4059: comm syz.6.3045: Allocating blocks 41-42 which overlap fs metadata [ 1461.179283][T18772] Quota error (device loop6): write_blk: dquota write failed [ 1461.186913][T18772] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 1461.196823][T18772] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4059: comm syz.6.3045: Allocating blocks 41-42 which overlap fs metadata [ 1461.212193][ T9834] libceph: connect (1)[c::]:6789 error -101 [ 1461.219560][ T9834] libceph: mon0 (1)[c::]:6789 connect error [ 1461.260058][T18772] Quota error (device loop6): write_blk: dquota write failed [ 1461.268207][T18772] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1461.278715][T18772] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.3045: Failed to acquire dquot type 1 [ 1461.291014][T18772] EXT4-fs error (device loop6): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1461.305863][T18772] EXT4-fs error (device loop6): ext4_do_update_inode:5255: inode #12: comm syz.6.3045: corrupted inode contents [ 1461.318335][T18772] EXT4-fs error (device loop6): ext4_dirty_inode:6143: inode #12: comm syz.6.3045: mark_inode_dirty error [ 1461.330403][T18772] EXT4-fs error (device loop6): ext4_do_update_inode:5255: inode #12: comm syz.6.3045: corrupted inode contents [ 1461.345246][T18772] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.3045: mark_inode_dirty error [ 1461.358971][T18772] EXT4-fs error (device loop6): ext4_do_update_inode:5255: inode #12: comm syz.6.3045: corrupted inode contents [ 1461.372105][T18772] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1461.382743][T18772] EXT4-fs error (device loop6): ext4_do_update_inode:5255: inode #12: comm syz.6.3045: corrupted inode contents [ 1461.395323][T18772] EXT4-fs error (device loop6): ext4_truncate:4301: inode #12: comm syz.6.3045: mark_inode_dirty error [ 1461.423229][T18772] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 1461.448135][T18772] EXT4-fs (loop6): 1 truncate cleaned up [ 1461.455159][T18772] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1461.523009][T18770] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1461.647362][T18774] ceph: No mds server is up or the cluster is laggy [ 1461.804216][T18132] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1463.020973][ T5804] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1463.220025][ T5804] usb 2-1: Using ep0 maxpacket: 8 [ 1463.231373][ T5804] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1463.252585][ T5804] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1463.276048][ T5804] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1463.322910][ T5804] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1463.348638][ T5804] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1463.386745][ T5804] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1463.420443][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.688572][ T5804] usb 2-1: GET_CAPABILITIES returned 0 [ 1463.717115][ T5804] usbtmc 2-1:16.0: can't read capabilities [ 1463.904033][ T5804] usb 2-1: USB disconnect, device number 72 [ 1464.596600][T12917] usb 6-1: USB disconnect, device number 79 [ 1465.139811][T18853] loop5: detected capacity change from 0 to 512 [ 1465.291075][T18853] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1465.300028][T18853] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1465.348477][T12917] libceph: connect (1)[c::]:6789 error -101 [ 1465.355914][T12917] libceph: mon0 (1)[c::]:6789 connect error [ 1465.449096][T18853] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 1465.485244][T18853] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4059: comm syz.5.3059: Allocating blocks 41-42 which overlap fs metadata [ 1465.509343][T18853] Quota error (device loop5): write_blk: dquota write failed [ 1465.517529][T18853] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 1465.527904][T18853] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4059: comm syz.5.3059: Allocating blocks 41-42 which overlap fs metadata [ 1465.544504][T18853] Quota error (device loop5): write_blk: dquota write failed [ 1465.552422][T18853] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1465.563304][T18853] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.3059: Failed to acquire dquot type 1 [ 1465.578478][T18853] EXT4-fs error (device loop5): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1465.595341][T18853] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #12: comm syz.5.3059: corrupted inode contents [ 1465.768083][T18853] EXT4-fs error (device loop5): ext4_dirty_inode:6143: inode #12: comm syz.5.3059: mark_inode_dirty error [ 1465.783326][T12917] libceph: connect (1)[c::]:6789 error -101 [ 1465.820902][T18853] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #12: comm syz.5.3059: corrupted inode contents [ 1465.848450][T18853] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.3059: mark_inode_dirty error [ 1465.886055][T18853] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #12: comm syz.5.3059: corrupted inode contents [ 1465.902175][T18853] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 1465.913540][T18853] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #12: comm syz.5.3059: corrupted inode contents [ 1466.018986][T18853] EXT4-fs error (device loop5): ext4_truncate:4301: inode #12: comm syz.5.3059: mark_inode_dirty error [ 1466.093398][T18853] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 1466.129646][T12917] libceph: mon0 (1)[c::]:6789 connect error [ 1466.142764][T18853] EXT4-fs (loop5): 1 truncate cleaned up [ 1466.157531][T18853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1466.451947][T18845] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1466.579227][T18851] ceph: No mds server is up or the cluster is laggy [ 1466.762443][T16608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1467.698462][T12917] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1468.029569][T12917] usb 6-1: Using ep0 maxpacket: 8 [ 1468.169256][T12917] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1468.284534][ T5804] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1468.311819][T12917] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1468.322824][T12917] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1468.337669][T12917] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1468.348525][T12917] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1468.364173][T12917] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1468.376043][T12917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.499569][ T5804] usb 1-1: Using ep0 maxpacket: 8 [ 1470.510054][T12917] usb 6-1: usb_control_msg returned -71 [ 1470.526121][T12917] usbtmc 6-1:16.0: can't read capabilities [ 1470.552813][T12917] usb 6-1: USB disconnect, device number 80 [ 1470.639177][ T5804] usb 1-1: unable to read config index 0 descriptor/all [ 1470.646787][ T5804] usb 1-1: can't read configurations, error -71 [ 1471.858552][T16854] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1471.912746][T18926] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3077'. [ 1471.959343][T18926] input: syz0 as /devices/virtual/input/input28 [ 1473.150466][T18933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1473.197211][T18933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.328385][ T5803] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1475.097995][T18959] binder: 18958:18959 ioctl 4018620d 0 returned -22 [ 1475.170949][ T5803] usb 1-1: Using ep0 maxpacket: 8 [ 1475.189620][ T5803] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1475.197969][ T5803] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1475.225087][ T5803] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1475.237706][T16854] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1475.257036][ T5803] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1475.263760][T16854] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1475.282736][ T5803] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1475.289870][T16854] usb 2-1: can't read configurations, error -71 [ 1475.319563][ T5803] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1475.338349][ T5803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.349395][T12476] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1475.619394][ T5803] usb 1-1: GET_CAPABILITIES returned 0 [ 1475.634852][ T5803] usbtmc 1-1:16.0: can't read capabilities [ 1475.778551][ T8] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1475.825449][ T5804] usb 1-1: USB disconnect, device number 87 [ 1475.968866][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 1475.996231][ T8] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1476.005961][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.752008][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1476.759267][ T8] pvrusb2: ********** [ 1476.763534][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1476.774963][ T8] pvrusb2: Important functionality might not be entirely working. [ 1476.784247][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1476.796178][ T8] pvrusb2: ********** [ 1477.080694][ T2320] pvrusb2: Invalid write control endpoint [ 1477.108663][ T9834] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1477.448474][ T9834] usb 7-1: Using ep0 maxpacket: 16 [ 1477.641908][ T9834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1477.778598][ T9834] usb 7-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1477.798597][ T9834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.811918][ T9834] usb 7-1: config 0 descriptor?? [ 1477.868873][ T2320] pvrusb2: Invalid write control endpoint [ 1477.946710][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1477.996556][T13581] usb 6-1: USB disconnect, device number 81 [ 1478.013699][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1478.039364][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1478.056409][ T2320] pvrusb2: Device being rendered inoperable [ 1478.092081][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1478.102420][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1478.135910][ T2320] pvrusb2: Attached sub-driver cx25840 [ 1478.145236][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1478.173529][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1478.241916][ T9834] pantherlord 0003:0E8F:0003.000A: unknown main item tag 0x0 [ 1478.258902][ T9834] pantherlord 0003:0E8F:0003.000A: unknown main item tag 0x0 [ 1478.266742][ T9834] pantherlord 0003:0E8F:0003.000A: item fetching failed at offset 2/41 [ 1478.277277][ T9834] pantherlord 0003:0E8F:0003.000A: parse failed [ 1478.284496][ T9834] pantherlord: probe of 0003:0E8F:0003.000A failed with error -22 [ 1478.443758][ T9] usb 7-1: USB disconnect, device number 4 [ 1479.674637][T19014] binder: 19011:19014 ioctl 4018620d 0 returned -22 [ 1480.037738][T19022] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1480.058737][T19022] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 1480.098489][ T9834] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1480.106629][T13581] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1480.381476][ T9834] usb 6-1: Using ep0 maxpacket: 8 [ 1480.626720][ T9834] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1480.655897][ T9834] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1480.728528][ T9834] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1480.764799][ T9834] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1480.848566][T19031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1480.874124][T19031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1481.059975][T19033] syz.0.3098 (19033): drop_caches: 2 [ 1481.545015][ T9834] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1481.558709][ T9834] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1481.568080][ T9834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.599095][ T9] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1481.785878][ T9834] usb 6-1: GET_CAPABILITIES returned 0 [ 1481.791881][ T9834] usbtmc 6-1:16.0: can't read capabilities [ 1481.801956][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1481.820559][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1481.839348][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.864448][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1481.881977][ T9] pvrusb2: ********** [ 1481.886029][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1481.900942][ T9] pvrusb2: Important functionality might not be entirely working. [ 1481.909393][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1481.946350][ T9] pvrusb2: ********** [ 1482.010940][T16854] usb 6-1: USB disconnect, device number 82 [ 1482.075036][ T2320] pvrusb2: Invalid write control endpoint [ 1482.150577][ T2320] pvrusb2: Invalid write control endpoint [ 1482.156980][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1482.188630][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1482.201873][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1482.214052][ T2320] pvrusb2: Device being rendered inoperable [ 1482.224483][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1482.232909][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1482.243689][ T2320] pvrusb2: Attached sub-driver cx25840 [ 1482.249666][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1482.263206][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1482.797197][T13581] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1482.834708][T13581] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1482.864520][T13581] usb 2-1: can't read configurations, error -71 [ 1483.259414][T19057] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1484.052286][T19059] dlm: no local IP address has been set [ 1484.168720][T19059] dlm: cannot start dlm midcomms -107 [ 1484.294696][T19062] syz.6.3107 (19062): drop_caches: 2 [ 1484.967079][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.974838][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.902632][T16854] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1485.918851][T13744] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1486.088480][T16854] usb 7-1: Using ep0 maxpacket: 8 [ 1486.101188][T16854] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1486.114041][T13744] usb 2-1: Using ep0 maxpacket: 8 [ 1486.119734][T16854] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1486.136909][T16854] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1486.150762][T13744] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1486.171638][T13744] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.183625][T16854] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1486.203989][T13744] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1486.219798][T16854] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1486.243933][T13744] pvrusb2: ********** [ 1486.248138][T13744] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1486.266898][T16854] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1486.281303][T13744] pvrusb2: Important functionality might not be entirely working. [ 1486.296110][T16854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.306978][T13744] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1486.351184][T13744] pvrusb2: ********** [ 1486.429434][ T2320] pvrusb2: Invalid write control endpoint [ 1486.556445][T16854] usb 7-1: GET_CAPABILITIES returned 0 [ 1486.586043][ T2320] pvrusb2: Invalid write control endpoint [ 1486.594095][T16854] usbtmc 7-1:16.0: can't read capabilities [ 1486.610302][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1486.638062][T13581] usb 1-1: USB disconnect, device number 88 [ 1486.657536][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1486.666766][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1486.685314][ T2320] pvrusb2: Device being rendered inoperable [ 1486.692646][ T2320] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1486.726715][ T2320] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 1486.775686][T12917] usb 7-1: USB disconnect, device number 5 [ 1486.775764][ T2320] pvrusb2: Attached sub-driver cx25840 [ 1486.824646][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1486.836450][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1487.179897][T19088] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1487.278622][T13581] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 1488.837731][T19095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1488.918704][T19095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.486351][T19100] syz.6.3117 (19100): drop_caches: 2 [ 1490.224253][T12917] usb 2-1: USB disconnect, device number 77 [ 1490.348221][T13581] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1490.371532][T13581] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1490.395450][T13581] usb 1-1: can't read configurations, error -71 [ 1493.433487][T19138] syz.1.3126 (19138): drop_caches: 2 [ 1493.927213][T13744] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1494.011994][ T8] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1494.129906][T13744] usb 1-1: Using ep0 maxpacket: 8 [ 1494.138133][T13744] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1494.148870][T13744] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1494.161208][T13744] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1494.175037][T13744] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1494.191051][T13744] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1494.205151][T13744] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1494.214909][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 1494.220404][T13744] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.230475][ T8] usb 7-1: config 0 has an invalid interface number: 239 but max is 0 [ 1494.239298][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1494.252130][ T8] usb 7-1: config 0 has no interface number 0 [ 1494.260011][ T8] usb 7-1: config 0 interface 239 altsetting 0 has an invalid endpoint with address 0x64, skipping [ 1494.272820][ T8] usb 7-1: config 0 interface 239 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1494.290490][ T8] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1494.300168][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.308923][ T8] usb 7-1: Product: syz [ 1494.313664][ T8] usb 7-1: Manufacturer: syz [ 1494.318844][T16854] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1494.326858][ T8] usb 7-1: SerialNumber: syz [ 1494.337218][ T8] usb 7-1: config 0 descriptor?? [ 1494.343328][T19136] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1494.475525][T13744] usb 1-1: GET_CAPABILITIES returned 0 [ 1494.481599][T13744] usbtmc 1-1:16.0: can't read capabilities [ 1494.538728][T16854] usb 2-1: Using ep0 maxpacket: 8 [ 1494.548812][T16854] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1494.574046][ T8] ath6kl: Failed to submit usb control message: -71 [ 1494.581271][T16854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.596207][ T8] ath6kl: unable to send the bmi data to the device: -71 [ 1494.604645][ T8] ath6kl: Unable to send get target info: -71 [ 1494.616215][T16854] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1494.626711][T16854] pvrusb2: ********** [ 1494.634324][ T8] ath6kl: Failed to init ath6kl core: -71 [ 1494.640202][T16854] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1494.652554][ T8] ath6kl_usb: probe of 7-1:0.239 failed with error -71 [ 1494.668330][T16854] pvrusb2: Important functionality might not be entirely working. [ 1494.688623][ T8] usb 7-1: USB disconnect, device number 6 [ 1494.692343][ T5803] usb 1-1: USB disconnect, device number 91 [ 1494.699206][T16854] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1494.715598][T16854] pvrusb2: ********** [ 1494.839867][ T2320] pvrusb2: Invalid write control endpoint [ 1495.726007][ T2320] pvrusb2: Invalid write control endpoint [ 1495.754037][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1495.806267][T19148] binder: BINDER_SET_CONTEXT_MGR already set [ 1495.813270][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1495.830944][T19148] binder: 19147:19148 ioctl 4018620d 200000001000 returned -16 [ 1495.843471][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1495.865271][ T2320] pvrusb2: Device being rendered inoperable [ 1495.871753][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1495.885187][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1495.894467][ T2320] pvrusb2: Attached sub-driver cx25840 [ 1495.905995][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1495.920052][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1497.275875][ T9] usb 2-1: USB disconnect, device number 78 [ 1497.691573][ T5803] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 1498.315475][ T5803] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1498.367899][ T5803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 1498.403064][ T5803] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1498.568449][ T5803] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1498.578101][ T5803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1498.586582][ T5803] usb 6-1: Product: syz [ 1498.591719][ T5803] usb 6-1: Manufacturer: syz [ 1498.596634][ T5803] usb 6-1: SerialNumber: syz [ 1498.679077][T19172] syz.0.3136 (19172): drop_caches: 2 [ 1499.365762][ T5803] usb 6-1: config 0 descriptor?? [ 1499.424845][ T5803] usb 6-1: can't set config #0, error -71 [ 1499.445215][ T5803] usb 6-1: USB disconnect, device number 83 [ 1499.808592][ T9] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 1499.840920][T19180] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1500.108442][ T5803] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1500.768456][ T5803] usb 6-1: Using ep0 maxpacket: 8 [ 1501.372751][ T5803] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1501.384840][ T5803] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1501.395722][ T5803] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1501.405883][ T5803] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1501.417430][ T5803] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1501.437941][ T5803] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1501.453579][ T5803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.701714][ T5803] usb 6-1: GET_CAPABILITIES returned 0 [ 1501.707425][ T5803] usbtmc 6-1:16.0: can't read capabilities [ 1501.927189][ T5803] usb 6-1: USB disconnect, device number 84 [ 1502.843067][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1502.859439][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1502.869496][ T9] usb 2-1: can't read configurations, error -71 [ 1505.012123][T19211] syz.0.3146 (19211): drop_caches: 2 [ 1505.678346][T19215] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3148'. [ 1505.969636][T19222] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1506.628555][T19219] input: syz0 as /devices/virtual/input/input29 [ 1508.999918][T19238] netlink: 468 bytes leftover after parsing attributes in process `syz.6.3154'. [ 1510.093138][ T5803] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1510.727476][T19247] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1510.734582][T19247] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1510.745807][T19247] vhci_hcd vhci_hcd.0: Device attached [ 1510.838824][ T5803] usb 2-1: Using ep0 maxpacket: 8 [ 1510.854786][ T5803] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1510.866027][ T5803] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1510.878362][ T5803] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1510.890329][ T5803] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1510.906657][ T5803] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1510.929028][ T5803] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1510.942597][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.068594][T13581] usb 46-1: SetAddress Request (2) to port 0 [ 1511.075886][T13581] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1511.184901][ T5803] usb 2-1: GET_CAPABILITIES returned 0 [ 1511.191875][ T5803] usbtmc 2-1:16.0: can't read capabilities [ 1511.396994][ T8] usb 2-1: USB disconnect, device number 81 [ 1511.503399][T19248] vhci_hcd: connection reset by peer [ 1511.512526][ T11] vhci_hcd: stop threads [ 1511.517093][ T11] vhci_hcd: release socket [ 1511.532138][ T11] vhci_hcd: disconnect device [ 1511.605562][T19254] syz.0.3159 (19254): drop_caches: 2 [ 1514.464696][T19273] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3163'. [ 1514.655234][T19273] input: syz0 as /devices/virtual/input/input30 [ 1515.508505][ T9834] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1515.709265][ T9834] usb 6-1: Using ep0 maxpacket: 8 [ 1515.730238][ T9834] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1515.749618][ T9834] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1515.775800][ T9834] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1515.797723][ T9834] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1515.875417][ T9834] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1516.023218][ T9834] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1516.033366][ T9834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.357435][T13581] usb 46-1: device descriptor read/8, error -110 [ 1516.393842][ T9834] usb 6-1: GET_CAPABILITIES returned 0 [ 1517.278559][ T9834] usbtmc 6-1:16.0: can't read capabilities [ 1517.327646][ T9834] usb 6-1: USB disconnect, device number 85 [ 1517.699641][T13581] usb usb46-port1: attempt power cycle [ 1518.686748][T19319] tipc: Enabled bearer , priority 0 [ 1518.699066][T19319] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 1518.711536][T19319] tipc: Resetting bearer [ 1519.037527][T13581] usb usb46-port1: unable to enumerate USB device [ 1519.310317][T19318] tipc: Disabling bearer [ 1521.978491][ T8] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1522.188341][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 1522.199485][ T8] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1522.225321][ T8] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1522.251602][ T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1522.266642][ T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1522.287938][ T8] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1522.309974][ T8] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1522.329870][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.918811][T12917] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 1523.947635][ T8] usb 7-1: usb_control_msg returned -71 [ 1523.986859][ T8] usbtmc 7-1:16.0: can't read capabilities [ 1524.026868][ T8] usb 7-1: USB disconnect, device number 7 [ 1524.131314][T12917] usb 1-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x3B, skipping [ 1524.189743][T12917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1524.221028][T12917] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1524.233178][T12917] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1524.244421][T12917] usb 1-1: Product: syz [ 1524.251386][T12917] usb 1-1: Manufacturer: syz [ 1524.257207][T12917] usb 1-1: SerialNumber: syz [ 1524.292403][T12917] usb 1-1: config 0 descriptor?? [ 1524.300265][T19341] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1524.832117][T12917] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 1524.885124][T12917] usb 1-1: USB disconnect, device number 92 [ 1524.893156][T15507] udevd[15507]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1527.908744][T16293] Bluetooth: hci5: command 0x0406 tx timeout [ 1528.577902][T19393] overlayfs: failed to resolve './file1/file0': -2 [ 1531.879030][T19428] syz_tun: entered allmulticast mode [ 1533.848414][T11888] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1535.142272][T11888] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1535.164346][T11888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.997868][T11888] usb 2-1: Product: syz [ 1536.011722][T11888] usb 2-1: Manufacturer: syz [ 1536.017022][T11888] usb 2-1: SerialNumber: syz [ 1538.183610][T11888] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1539.650289][T11888] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1539.896414][T19464] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3219'. [ 1540.086305][T19464] input: syz0 as /devices/virtual/input/input31 [ 1540.289589][T11888] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1540.321420][T11888] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1540.390165][T11888] lan78xx: probe of 2-1:1.0 failed with error -71 [ 1540.464273][T11888] usb 2-1: USB disconnect, device number 82 [ 1541.181422][T19481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3222'. [ 1541.241403][T19481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3222'. [ 1541.252132][T19484] loop2: detected capacity change from 0 to 7 [ 1541.272625][T19484] Dev loop2: unable to read RDB block 7 [ 1541.279308][T19481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3222'. [ 1541.288566][T19484] loop2: unable to read partition table [ 1541.294696][T19484] loop2: partition table beyond EOD, truncated [ 1541.329099][T19481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3222'. [ 1541.347653][T19485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3222'. [ 1541.498343][T19484] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1542.888338][T19485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3222'. [ 1542.898123][T19485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3222'. [ 1542.971111][T19485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3222'. [ 1544.292532][T19519] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3235'. [ 1544.720147][T19520] syz_tun: entered allmulticast mode [ 1546.320110][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.334283][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1549.925453][T19571] Bluetooth: MGMT ver 1.22 [ 1551.048449][ T9834] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1552.788583][ T9834] usb 7-1: Using ep0 maxpacket: 8 [ 1552.815477][ T9834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1552.831748][ T9834] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1552.846437][ T9834] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1553.066295][ T9834] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1553.080914][ T9834] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1553.090632][ T9834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.951512][T19590] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (aio_iiro_16) [ 1554.260512][ T9834] usb 7-1: usb_control_msg returned -71 [ 1554.266713][ T9834] usbtmc 7-1:16.0: can't read capabilities [ 1554.320027][ T9834] usb 7-1: USB disconnect, device number 8 [ 1554.758840][T11888] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1555.719354][T11888] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1555.918886][T13744] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 1555.940311][T11888] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1556.088961][T11888] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1556.104433][T11888] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1556.116533][T11888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.147201][T11888] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1556.203777][T11888] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 1556.223537][T15507] udevd[15507]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1556.384163][T12917] usb 2-1: USB disconnect, device number 83 [ 1556.500526][T19605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1556.509623][T19605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1559.551886][T13744] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1559.569896][T13744] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1559.577827][T13744] usb 7-1: can't read configurations, error -71 [ 1559.763653][T19629] binder: 19628:19629 ioctl 4018620d 0 returned -22 [ 1562.519006][T13744] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1562.578504][ T8] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1563.440558][T13744] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1563.456692][T13744] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1563.474034][T13744] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1563.489251][T13744] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1563.498928][T13744] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.520581][T13744] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1563.529694][T13744] usb 1-1: invalid MIDI out EP 0 [ 1563.588588][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 1563.610331][ T8] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1563.622308][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.657016][T15048] udevd[15048]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1563.661676][T13744] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 1563.690143][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1563.697670][ T8] pvrusb2: ********** [ 1563.703294][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1563.726604][ T8] pvrusb2: Important functionality might not be entirely working. [ 1563.751434][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1563.768759][ T8] pvrusb2: ********** [ 1563.773548][T13744] usb 1-1: USB disconnect, device number 93 [ 1563.863465][ T2320] pvrusb2: Invalid write control endpoint [ 1563.910083][T19662] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3277'. [ 1563.996534][ T2320] pvrusb2: Invalid write control endpoint [ 1564.023238][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1564.048463][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1564.056308][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1564.066808][ T2320] pvrusb2: Device being rendered inoperable [ 1564.073815][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1564.087493][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1564.117485][ T2320] pvrusb2: Attached sub-driver cx25840 [ 1564.127726][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1564.148203][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1565.010780][T13744] usb 6-1: USB disconnect, device number 86 [ 1568.315199][T19690] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3284'. [ 1568.848187][T19688] input: syz0 as /devices/virtual/input/input32 [ 1569.478684][T12917] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1569.705939][T12917] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.842243][T12917] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1569.958168][T12917] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1570.010997][T12917] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1570.058799][T12917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.098053][T12917] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1570.111249][T12917] usb 2-1: invalid MIDI out EP 0 [ 1571.401599][T15039] udevd[15039]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1571.410375][T12917] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 1571.490163][T12917] usb 2-1: USB disconnect, device number 84 [ 1573.618350][T19734] netlink: 'syz.5.3299': attribute type 6 has an invalid length. [ 1574.809083][T12917] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1575.042337][T12917] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1575.093219][T12917] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1575.209644][T12917] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1575.224070][T12917] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1575.233325][T12917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.311630][T12917] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1575.329864][T12917] usb 1-1: invalid MIDI out EP 0 [ 1575.686652][T12917] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 1575.733782][T12917] usb 1-1: USB disconnect, device number 94 [ 1575.755142][T15507] udevd[15507]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1576.088496][T13581] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1576.128532][ T27] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1576.538500][ T27] usb 6-1: Using ep0 maxpacket: 8 [ 1576.554356][ T27] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1578.209144][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.227142][ T27] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1578.238327][ T27] pvrusb2: ********** [ 1578.242985][ T27] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1578.280036][ T27] pvrusb2: Important functionality might not be entirely working. [ 1578.293958][ T27] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1578.306367][ T27] pvrusb2: ********** [ 1578.444594][ T2320] pvrusb2: Invalid write control endpoint [ 1579.090751][ T2320] pvrusb2: Invalid write control endpoint [ 1579.117836][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1579.141704][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1579.154744][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1579.204907][ T2320] pvrusb2: Device being rendered inoperable [ 1579.303146][T13581] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1579.312913][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1579.318677][T13581] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1579.327844][T13581] usb 7-1: can't read configurations, error -71 [ 1579.348865][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1579.357606][ T2320] pvrusb2: Attached sub-driver cx25840 [ 1579.373652][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1579.385354][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1580.143580][ T8] usb 6-1: USB disconnect, device number 87 [ 1581.832319][T19840] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1581.871182][T19840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3333'. [ 1582.805060][T12917] usb 6-1: new full-speed USB device number 88 using dummy_hcd [ 1585.563669][T13744] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1585.687401][T12917] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1585.705166][T12917] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1585.714052][T12917] usb 6-1: can't read configurations, error -71 [ 1585.763179][T13744] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1585.779839][T13744] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1585.794888][T13744] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1585.807028][T13744] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.825712][T13744] usb 7-1: config 0 descriptor?? [ 1585.832269][ T8] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1585.850094][T19869] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1585.876806][T13744] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1586.018985][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 1586.026512][ T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1586.038330][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.056633][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1586.078365][ T8] pvrusb2: ********** [ 1586.082568][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1586.118287][ T8] pvrusb2: Important functionality might not be entirely working. [ 1586.137616][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1586.161311][ T8] pvrusb2: ********** [ 1586.405289][ T2320] pvrusb2: Invalid write control endpoint [ 1587.358930][T19886] netlink: 'syz.6.3340': attribute type 1 has an invalid length. [ 1588.062230][T12917] usb 2-1: USB disconnect, device number 85 [ 1588.083946][ T2320] pvrusb2: Invalid write control endpoint [ 1588.114374][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1588.151030][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1588.186804][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1588.236290][ T2320] pvrusb2: Device being rendered inoperable [ 1588.259131][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1588.302236][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1588.348194][ T2320] pvrusb2: Attached sub-driver cx25840 [ 1588.362985][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1588.515705][T19904] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3347'. [ 1588.666813][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1588.979151][T19886] Bluetooth: MGMT ver 1.22 [ 1589.551437][T12917] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 1590.734992][T12476] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 1590.866215][ T27] usb 7-1: USB disconnect, device number 13 [ 1592.384203][T12917] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1592.397413][T12917] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1592.407261][T12917] usb 1-1: can't read configurations, error -71 [ 1592.466401][T19944] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3359'. [ 1593.942966][T12917] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1593.959722][T12917] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1594.001820][T12917] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1594.024657][T12476] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 1596.419106][T13581] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 1596.427852][T19986] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3370'. [ 1597.580217][T19991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1597.594056][T19991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1598.819965][T12476] Bluetooth: hci5: unexpected event for opcode 0x2040 [ 1599.572783][T13581] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1599.639472][T13581] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1599.699148][T13581] usb 1-1: can't read configurations, error -71 [ 1601.284453][T12476] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 1601.430480][T20027] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3381'. [ 1605.065752][T12476] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 1606.079306][T20076] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3393'. [ 1607.753562][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.782913][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1611.838310][T12476] Bluetooth: hci3: unexpected event for opcode 0x080c [ 1615.582249][T20164] syzkaller0: entered promiscuous mode [ 1615.596707][T20164] syzkaller0: entered allmulticast mode [ 1615.976174][T20166] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 1618.068759][ T5803] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1618.283671][T20193] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1618.328627][ T5803] usb 1-1: Using ep0 maxpacket: 8 [ 1618.363133][ T5803] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1618.404667][ T5803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.583905][ T5803] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1618.699791][ T5803] pvrusb2: ********** [ 1618.761999][ T5803] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1618.914212][ T5803] pvrusb2: Important functionality might not be entirely working. [ 1619.104345][ T5803] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1619.358294][ T5803] pvrusb2: ********** [ 1619.744367][ T2320] pvrusb2: Invalid write control endpoint [ 1619.843743][ T5803] usb 1-1: USB disconnect, device number 99 [ 1621.383572][ T2320] pvrusb2: Invalid write control endpoint [ 1621.438447][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1621.447883][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1621.557413][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1621.770047][ T2320] pvrusb2: Device being rendered inoperable [ 1621.777254][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1624.011198][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1624.125875][ T2320] pvrusb2: Attached sub-driver cx25840 [ 1624.177701][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1624.354809][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1629.136854][T20259] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3446'. [ 1629.984768][ T8] libceph: connect (1)[c::]:6789 error -101 [ 1629.997450][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 1630.146746][T20274] ceph: No mds server is up or the cluster is laggy [ 1630.259839][ T8] libceph: connect (1)[c::]:6789 error -101 [ 1630.303988][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 1631.440930][ T8] libceph: connect (1)[c::]:6789 error -101 [ 1631.478646][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 1631.787837][T20290] binder: 20288:20290 unknown command 0 [ 1631.793911][T20290] binder: 20288:20290 ioctl c0306201 200000000080 returned -22 [ 1633.013639][ T5803] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1633.031544][ T5803] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1633.056957][ T5803] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1633.147575][T20301] fido_id[20301]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1633.190865][T20302] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1640.248904][T20349] random: crng reseeded on system resumption [ 1641.328639][T20345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3470'. [ 1643.080250][T12476] Bluetooth: hci1: unexpected event for opcode 0x0402 [ 1644.488761][T20368] binder: 20367:20368 ioctl c0306201 200000000680 returned -14 [ 1645.947444][T20392] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3487'. [ 1645.963404][T20392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1646.157105][T20392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1647.308293][T16854] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1647.521350][T16854] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1647.537360][T16854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.562129][T16854] usb 6-1: config 0 descriptor?? [ 1647.570783][T16854] cp210x 6-1:0.0: cp210x converter detected [ 1647.992263][T16854] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1648.150450][T16854] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1648.288010][ T9834] usb 6-1: USB disconnect, device number 90 [ 1648.338972][ T9834] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1648.397887][ T9834] cp210x 6-1:0.0: device disconnected [ 1651.157225][T20443] binder: BINDER_SET_CONTEXT_MGR already set [ 1651.182316][T20443] binder: 20442:20443 ioctl 4018620d 200000001000 returned -16 [ 1654.444330][T20476] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3509'. [ 1654.482014][T20476] bridge0: port 3(geneve1) entered blocking state [ 1654.489296][T20476] bridge0: port 3(geneve1) entered disabled state [ 1654.496308][T20476] geneve1: entered allmulticast mode [ 1654.504266][T20476] geneve1: entered promiscuous mode [ 1654.511423][T20476] bridge0: port 3(geneve1) entered blocking state [ 1654.518808][T20476] bridge0: port 3(geneve1) entered forwarding state [ 1655.201875][T20485] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3514'. [ 1655.661076][T20482] input: syz0 as /devices/virtual/input/input33 [ 1658.098628][ T8] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 1658.589687][ T8] usb 7-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1658.600291][ T8] usb 7-1: config 150 has 0 interfaces, different from the descriptor's value: 2 [ 1658.748306][ T8] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1658.867148][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.889591][ T8] usb 7-1: Product: syz [ 1658.894269][ T8] usb 7-1: Manufacturer: syz [ 1659.023556][ T8] usb 7-1: SerialNumber: syz [ 1659.168358][ T5804] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 1659.318932][T20533] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3531'. [ 1659.320858][T12476] Bluetooth: hci5: unexpected event for opcode 0x0c25 [ 1659.388781][T12917] usb 7-1: USB disconnect, device number 14 [ 1659.897664][T20537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.908117][T20537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1660.889863][T20533] input: syz0 as /devices/virtual/input/input34 [ 1661.323800][T20544] binder: 20543:20544 ioctl c0306201 0 returned -14 [ 1662.077057][ T5804] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1662.088260][ T5804] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1662.096774][ T5804] usb 1-1: can't read configurations, error -71 [ 1662.204046][T20556] syz.5.3536: attempt to access beyond end of device [ 1662.204046][T20556] loop11: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1662.218990][T20556] F2FS-fs (loop11): Unable to read 1th superblock [ 1662.226591][T20556] syz.5.3536: attempt to access beyond end of device [ 1662.226591][T20556] loop11: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1662.240016][T20556] F2FS-fs (loop11): Unable to read 2th superblock [ 1662.956889][T20563] syzkaller0: entered promiscuous mode [ 1662.963093][T20563] syzkaller0: entered allmulticast mode [ 1663.042806][ T1300] ------------[ cut here ]------------ [ 1663.050085][ T1300] WARNING: CPU: 1 PID: 1300 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1663.061903][ T1300] Modules linked in: [ 1663.065842][ T1300] CPU: 1 PID: 1300 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 1663.073592][ T1300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1663.083887][ T1300] Workqueue: phy22 ieee80211_csa_finalize_work SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1663.090631][ T1300] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1663.098304][ T1300] Code: 48 89 df e8 6a 56 d6 f7 e9 dc fc ff ff e8 f0 1e 7e f7 eb 24 e8 e9 1e 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 d8 1e 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 ca 1e 7e f7 48 8b 7c 24 08 4c 8b 7c [ 1663.120313][ T1300] RSP: 0018:ffffc90004bbf9c0 EFLAGS: 00010293 [ 1663.127143][ T1300] RAX: ffffffff8a08ff2e RBX: 0000000000000001 RCX: ffff888024ac9e00 [ 1663.136158][ T1300] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1663.144672][ C0] ------------[ cut here ]------------ [ 1663.145280][ T1300] RBP: dffffc0000000000 R08: ffff8880251c55af R09: 1ffff11004a38ab5 [ 1663.150982][ C0] WARNING: CPU: 0 PID: 5751 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 1663.159370][ T1300] R10: dffffc0000000000 R11: ffffed1004a38ab6 R12: 0000000000000001 [ 1663.169777][ C0] Modules linked in: [ 1663.178008][ T1300] R13: ffff8880251c65d9 R14: ffff88806a342c70 R15: ffff88806a342ce8 [ 1663.182137][ C0] CPU: 0 PID: 5751 Comm: syz-executor Not tainted syzkaller #0 [ 1663.182159][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1663.182170][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 1663.190573][ T1300] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1663.198689][ C0] Code: 24 4c 89 e7 e8 de 8c c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 d9 ca 82 f7 0f 0b e9 f6 f7 ff ff e8 cd ca 82 f7 <0f> 0b e9 48 fb ff ff e8 c1 ca 82 f7 48 c7 c7 00 86 64 8e 4c 89 e6 [ 1663.198710][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 1663.198737][ C0] RAX: ffffffff8a045733 RBX: ffffffff8a044536 RCX: ffff88802eabda00 [ 1663.209355][ T1300] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1663.215977][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1663.225445][ T1300] CR2: 00007f835b1ada40 CR3: 000000006327d000 CR4: 00000000003506e0 [ 1663.245515][ C0] RBP: 0000000000000000 R08: ffff88802eabda00 R09: 0000000000000003 [ 1663.245538][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880251c63c0 [ 1663.245551][ C0] R13: dffffc0000000000 R14: ffff8880251c68b0 R15: ffff888024dac424 [ 1663.245567][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1663.245584][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1663.251816][ T1300] Call Trace: [ 1663.260318][ C0] CR2: 00007ffd47837c9c CR3: 0000000030cac000 CR4: 00000000003506f0 [ 1663.260350][ C0] Call Trace: [ 1663.266947][ T1300] [ 1663.275228][ C0] [ 1663.275246][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 1663.283405][ T1300] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 1663.291989][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 1663.300434][ T1300] ieee80211_csa_finalize+0x5a6/0xf20 [ 1663.308800][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1663.317832][ T1300] ? mutex_lock_nested+0x20/0x20 [ 1663.324455][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 1663.328033][ T1300] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1663.336290][ C0] __iterate_interfaces+0x243/0x500 [ 1663.339843][ T1300] ? ieee80211_csa_finalize_work+0x140/0x140 [ 1663.342867][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1663.345829][ T1300] ? read_lock_is_recursive+0x20/0x20 [ 1663.351924][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1663.358583][ T1300] ieee80211_csa_finalize_work+0xf6/0x140 [ 1663.363978][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1663.369616][ T1300] ? process_scheduled_works+0x96f/0x15d0 [ 1663.376619][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1663.381616][ T1300] process_scheduled_works+0xa5d/0x15d0 [ 1663.387471][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1663.393709][ T1300] ? worker_attach_to_pool+0x380/0x380 [ 1663.399029][ C0] __hrtimer_run_queues+0x520/0xc40 [ 1663.399053][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 1663.399081][ C0] ? hw_scan_work+0xf60/0xf60 [ 1663.399107][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1663.399127][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1663.399161][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 1663.399188][ C0] handle_softirqs+0x280/0x820 [ 1663.399212][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1663.405271][ T1300] ? assign_work+0x3d2/0x5d0 [ 1663.411713][ C0] ? do_softirq+0x1a0/0x1a0 [ 1663.411744][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1663.417196][ T1300] worker_thread+0xa55/0xfc0 [ 1663.424759][ C0] __irq_exit_rcu+0xd3/0x190 [ 1663.424785][ C0] ? irq_exit_rcu+0x20/0x20 [ 1663.430702][ T1300] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1663.437115][ C0] irq_exit_rcu+0x9/0x20 [ 1663.442984][ T1300] ? _raw_spin_unlock+0x40/0x40 [ 1663.450187][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1663.456088][ T1300] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1663.461688][ C0] [ 1663.461701][ C0] [ 1663.461708][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1663.467538][ T1300] kthread+0x2fa/0x390 [ 1663.473095][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 1663.479571][ T1300] ? pr_cont_work+0x560/0x560 [ 1663.484789][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 0b 94 cc f6 65 8b 05 4c c1 73 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 1663.490324][ T1300] ? kthread_blkcg+0xd0/0xd0 [ 1663.496738][ C0] RSP: 0018:ffffc900044afaa0 EFLAGS: 00000206 [ 1663.502115][ T1300] ret_from_fork+0x48/0x80 [ 1663.507048][ C0] [ 1663.507061][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 1d663830ccba4400 [ 1663.512006][ T1300] ? kthread_blkcg+0xd0/0xd0 [ 1663.517261][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: 0000000000000001 [ 1663.522138][ T1300] ret_from_fork_asm+0x11/0x20 [ 1663.527734][ C0] RBP: ffffc900044afb30 R08: ffffffff8e8b15ef R09: 1ffffffff1d162bd [ 1663.532536][ T1300] [ 1663.537349][ C0] R10: dffffc0000000000 R11: fffffbfff1d162be R12: dffffc0000000000 [ 1663.542114][ T1300] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1663.542127][ T1300] CPU: 1 PID: 1300 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 1663.542144][ T1300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1663.542154][ T1300] Workqueue: phy22 ieee80211_csa_finalize_work [ 1663.542182][ T1300] Call Trace: [ 1663.542192][ T1300] [ 1663.542201][ T1300] dump_stack_lvl+0x18c/0x250 [ 1663.542258][ T1300] ? show_regs_print_info+0x20/0x20 [ 1663.542282][ T1300] ? load_image+0x420/0x420 [ 1663.542331][ T1300] panic+0x2dc/0x730 [ 1663.542354][ T1300] ? bpf_jit_dump+0xd0/0xd0 [ 1663.542382][ T1300] ? ret_from_fork_asm+0x11/0x20 [ 1663.542408][ T1300] __warn+0x2e0/0x470 [ 1663.542425][ T1300] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1663.542447][ T1300] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1663.542465][ T1300] report_bug+0x2be/0x4f0 [ 1663.542487][ T1300] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1663.542512][ T1300] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1663.542530][ T1300] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 1663.542549][ T1300] handle_bug+0xcf/0x120 [ 1663.542565][ T1300] exc_invalid_op+0x1a/0x50 [ 1663.542580][ T1300] asm_exc_invalid_op+0x1a/0x20 [ 1663.542599][ T1300] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1663.542619][ T1300] Code: 48 89 df e8 6a 56 d6 f7 e9 dc fc ff ff e8 f0 1e 7e f7 eb 24 e8 e9 1e 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 d8 1e 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 ca 1e 7e f7 48 8b 7c 24 08 4c 8b 7c [ 1663.542633][ T1300] RSP: 0018:ffffc90004bbf9c0 EFLAGS: 00010293 [ 1663.542647][ T1300] RAX: ffffffff8a08ff2e RBX: 0000000000000001 RCX: ffff888024ac9e00 [ 1663.542658][ T1300] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1663.542666][ T1300] RBP: dffffc0000000000 R08: ffff8880251c55af R09: 1ffff11004a38ab5 [ 1663.542678][ T1300] R10: dffffc0000000000 R11: ffffed1004a38ab6 R12: 0000000000000001 [ 1663.542688][ T1300] R13: ffff8880251c65d9 R14: ffff88806a342c70 R15: ffff88806a342ce8 [ 1663.542707][ T1300] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 1663.542746][ T1300] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 1663.542769][ T1300] ieee80211_csa_finalize+0x5a6/0xf20 [ 1663.542789][ T1300] ? mutex_lock_nested+0x20/0x20 [ 1663.542807][ T1300] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1663.542826][ T1300] ? ieee80211_csa_finalize_work+0x140/0x140 [ 1663.542846][ T1300] ? read_lock_is_recursive+0x20/0x20 [ 1663.542871][ T1300] ieee80211_csa_finalize_work+0xf6/0x140 [ 1663.542892][ T1300] ? process_scheduled_works+0x96f/0x15d0 [ 1663.542912][ T1300] process_scheduled_works+0xa5d/0x15d0 [ 1663.542959][ T1300] ? worker_attach_to_pool+0x380/0x380 [ 1663.542983][ T1300] ? assign_work+0x3d2/0x5d0 [ 1663.543008][ T1300] worker_thread+0xa55/0xfc0 [ 1663.543028][ T1300] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1663.543048][ T1300] ? _raw_spin_unlock+0x40/0x40 [ 1663.543064][ T1300] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1663.543100][ T1300] kthread+0x2fa/0x390 [ 1663.543115][ T1300] ? pr_cont_work+0x560/0x560 [ 1663.543134][ T1300] ? kthread_blkcg+0xd0/0xd0 [ 1663.543149][ T1300] ret_from_fork+0x48/0x80 [ 1663.543167][ T1300] ? kthread_blkcg+0xd0/0xd0 [ 1663.543182][ T1300] ret_from_fork_asm+0x11/0x20 [ 1663.543216][ T1300] [ 1663.550339][ T1300] Kernel Offset: disabled