last executing test programs: 16.421887378s ago: executing program 3 (id=2728): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @empty}]}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x4, 0x8, 0x3, 0x0, 0xa, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2e, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4300) readahead(r5, 0x6, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010100}}, 0x24) r7 = epoll_create(0x1002) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000040)={0x1000000d}) bind$inet6(r0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) pipe(&(0x7f0000000040)) 12.22602368s ago: executing program 3 (id=2746): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x35c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000340)={0x7, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e32, @loopback}}}, 0x108) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) 10.827529412s ago: executing program 2 (id=2749): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv2(r2, &(0x7f0000000200)=[{&(0x7f0000000500)=""/61, 0x3d}], 0x1, 0x40, 0x4, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0xffffffffffffff0d) 9.235485812s ago: executing program 2 (id=2754): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r0, 0x400442c9, 0x7ff) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=[0x0, 0x0], 0x4) r2 = getpgrp(0x0) ioprio_get$pid(0x207e1e73da1d2d72, r2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xf0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x844041, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) accept4(r3, 0x0, &(0x7f00000001c0), 0x80800) syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') 8.309150979s ago: executing program 3 (id=2758): r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4c, 0x0, 0x7, 0x10000, @value=r0}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x2000)=nil) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$MON_IOCG_STATS(r4, 0xc0109207, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000019340)={0x0, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 8.28533454s ago: executing program 2 (id=2759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x34000c24) socket(0x25, 0x6, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x3c) socket$inet6_mptcp(0xa, 0x1, 0x106) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 8.169383536s ago: executing program 1 (id=2761): close(0x5) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x20040040) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r6, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 6.713989s ago: executing program 1 (id=2762): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='2\x00\x00', @ANYRES32], 0x20) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x512f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) msgrcv(0x0, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgsnd(0x0, &(0x7f0000000200)={0x2}, 0x8, 0x800) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'vxcan1\x00', @remote}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f0000000300), 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r3, 0x1) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def384", 0x9}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c62", 0x4a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)='1', 0x1}], 0x1}}], 0x2, 0x2090) 6.602466656s ago: executing program 3 (id=2764): r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4c, 0x0, 0x7, 0x10000, @value=r0}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x1000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x2000)=nil) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000006) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$MON_IOCG_STATS(r4, 0xc0109207, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) fcntl$lock(r3, 0x24, &(0x7f0000019400)={0x2, 0x3, 0x0, 0x7fff}) timer_create(0x6df15f9925fd7a7c, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(0x0, 0x8, 0x4, 0x13, 0xffffffffffffffff, 0x8000000) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0d000000040000"], 0x50) io_setup(0x1, 0x0) 5.712465991s ago: executing program 1 (id=2765): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv2(r2, &(0x7f0000000200)=[{&(0x7f0000000500)=""/61, 0x3d}], 0x1, 0x40, 0x4, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0xffffffffffffff0d) 4.910786672s ago: executing program 3 (id=2768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000006800011003000000000000800000070000000000"], 0x18}}, 0x4000) r2 = io_uring_setup(0x7a58, &(0x7f0000000080)={0x0, 0xc95e, 0x0, 0x2, 0x129}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002700)=""/4095, 0xfff}], 0x1) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="2e1221b23bb601c477d3df373e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)="24f5bbd11cb3", 0x6}, {&(0x7f0000000240)="a43b2eaab4000000000080006558", 0xe}, {&(0x7f0000000100)="2d6d0000088fe40442a9242ecbf3a92009", 0x11}], 0x4) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000190001002abd7000fcdbdf251d"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) mount$9p_rdma(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x110000, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYBLOB=',\x00']) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000280)=0x6) r7 = socket$alg(0x26, 0x5, 0x0) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000080)=0x28) bind$alg(r7, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) accept4(r7, 0x0, 0x0, 0x800) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f0000000400), &(0x7f0000000440)=0xc) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d00010000000009040000050095c20009050000000000000007058433c4"], 0x0) 4.55612228s ago: executing program 4 (id=2770): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x35c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000340)={0x7, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e32, @loopback}}}, 0x108) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) 4.208081377s ago: executing program 1 (id=2771): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x6, 0xfe, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x7fff, 0x2, 0x88e, 0x5, 0x2, 0x0, 0x6, 0x3, 0x7, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x5, 0x9, 0x9, 0x1, 0xfffff801, 0x7, 0xe261, 0x392, 0x4000b, 0x3, 0x7f7f, 0x4c74, 0x1, 0x200000c, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x7fff, 0x8f, 0xf, 0x2, 0x5, 0x623280, 0x4, 0x1, 0x20000000, 0x80082, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0x0, 0x3, 0x8000d, 0x2bf, 0xffffffff, 0x0, 0xfffffffc, 0x8000, 0x0, 0x7, 0x85, 0x2b, 0x5a04, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xbda4, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x2003, 0x4, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0xff0c, 0x1, 0x3, 0x4, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x7], [0x6, 0x6, 0x80000003, 0x0, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0x5, 0x3, 0x5, 0x348, 0x0, 0xa3d, 0xfffffffd, 0x2, 0x83, 0x1, 0x3, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x4, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x0, 0x3, 0xc0, 0x10003, 0x403, 0x7fd, 0x3, 0x0, 0xfffffffc, 0xffff, 0x5, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaf1, 0x4, 0x100], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0xffffffff, 0x80ce5, 0x100001ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0xb, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000001, 0x3, 0xc, 0xc8, 0xee1, 0x0, 0xffff, 0x7, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x2, 0x10080, 0x6, 0xb, 0x30b1d693, 0x1, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x0, 0x5, 0x80b1c, 0x1, 0x20000200, 0xffff3441, 0xfff]}, 0x45c) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000100)='/d%v\xff\x00\xd4\xcd/snd/midiC#D#\x00', 0x0) keyctl$dh_compute(0x17, &(0x7f0000000280)={0x0, 0x0, r5}, &(0x7f0000000300)=""/71, 0x47, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, 0x0, 0x0) unshare(0x22020600) fcntl$lock(0xffffffffffffffff, 0x410, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) pselect6(0x40, &(0x7f0000000880)={0xfffffffffffffffc, 0xa000000, 0x1fe, 0x3ff, 0x603, 0x400000000001, 0xfffffffffa86cde8, 0x4}, 0x0, &(0x7f00000002c0)={0x5, 0x7fff, 0xfffffffffbffffff, 0x9, 0x0, 0x4}, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000200)={0x80000002, 0x1801, 0x9, 0xb, 0x59, "ea7102000000f900edffff0900000000000005", 0x800, 0x3}) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000140)={0x0, 0x3, 0x100c, 0x1}) 4.206855117s ago: executing program 0 (id=2781): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv2(r2, &(0x7f0000000200)=[{&(0x7f0000000500)=""/61, 0x3d}], 0x1, 0x40, 0x4, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0xffffffffffffff0d) 3.180760989s ago: executing program 2 (id=2772): socket$tipc(0x1e, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000680)=""/102395, 0x18ffb) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="08000000000000000000000000000000000000001d8eebe96a962601335cf16b678e48553a05beaa9e3808ea0d470743ea43e480d75ad65e3388069867f4a70600000000000000fe402c54a060e99da49e889057546c661259977147169cb8ca724adbbc8aeeb071be549adbc50678", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x9, 0x12b1c1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x5) socket$inet(0x2, 0x80001, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x5, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioprio_set$pid(0x3, 0x0, 0x0) open(0x0, 0x14927e, 0x20) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000104fcffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431903000000000014003500776c616e30000000000000000000000008000a00", @ANYRES32=r3, @ANYBLOB="c198e36116e2aaf62ff77197ffffffff16d14971fbdf7776cf2b5ea9580df1a6e1d5c7001a05b8cc4be1d0694966cc7efb9c926c334a43925ed9de2ccc482eb2cf13fcbed43faedc734a3d09317f8038e681c62e490639f7f1e34488652fb933ada488725bf99b21f93a5b69bd77bfece6aab4c3ab13ca3a96ba1ac39fb02948893f2322dec7fc7bb68496c37c94fda6"], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 3.090725324s ago: executing program 4 (id=2773): syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x45ae41) syz_open_dev$dri(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff90) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0xc040000}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x28502, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) 3.032834566s ago: executing program 1 (id=2774): r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4c, 0x0, 0x7, 0x10000, @value=r0}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x2000)=nil) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$MON_IOCG_STATS(r4, 0xc0109207, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000019340)={0x0, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 2.96418003s ago: executing program 0 (id=2775): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x25, 0x6, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x3c) socket$inet6_mptcp(0xa, 0x1, 0x106) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.343211432s ago: executing program 0 (id=2776): r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4c, 0x0, 0x7, 0x10000, @value=r0}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x1000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x2000)=nil) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000006) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$MON_IOCG_STATS(r4, 0xc0109207, &(0x7f0000019300)) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) fcntl$lock(r3, 0x24, &(0x7f0000019400)={0x2, 0x3, 0x0, 0x7fff}) timer_create(0x6df15f9925fd7a7c, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(0x0, 0x8, 0x4, 0x13, 0xffffffffffffffff, 0x8000000) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0d000000040000"], 0x50) io_setup(0x1, 0x0) 1.847964757s ago: executing program 4 (id=2777): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000002dc0)=@abs, 0x6e, 0x0}}, {{0x0, 0x0, &(0x7f0000004140), 0x0, &(0x7f00000041c0)}}, {{&(0x7f0000004280)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000004540)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xb0}}], 0x3, 0x80, &(0x7f0000004800)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(0x0, 0xf) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB="000000000200", @ANYRES32, @ANYBLOB='\x00'/14], 0x50) 1.844215417s ago: executing program 1 (id=2778): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd28, 0x25dfd402, {0x0, 0x0, 0x0, 0x0, 0x64e98}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x6, 0xffff}, {0x7, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x44) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ff"], 0x0) 1.617012778s ago: executing program 0 (id=2779): socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000001600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xe10}, 0x1, 0x0, 0x0, 0x200400c0}, 0x24008850) socket$phonet_pipe(0x23, 0x5, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x7d, 0x0, 0x7ffe, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, r2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xfdffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x3, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x7, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x7, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x81, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0x8aaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0x80ffff, 0x10, 0x7f, 0x104, 0x9606, 0x4, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) 1.58728759s ago: executing program 2 (id=2780): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @empty}]}, &(0x7f0000000180)=0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x4, 0x8, 0x3, 0x0, 0xa, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2e, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4300) readahead(r3, 0x6, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010100}}, 0x24) r5 = epoll_create(0x1002) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000040)={0x1000000d}) bind$inet6(r0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) pipe(&(0x7f0000000040)) 846.858157ms ago: executing program 4 (id=2782): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xd637684e08508ddb, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r1, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r2, 0xffffffffffffffff, 0x0, 0x2) close(r2) syz_ublk_setup_io_uring(0x3715, &(0x7f0000001d40)={0x0, 0x3239, 0x4, 0x3, 0x226}, &(0x7f0000001dc0), 0x0, &(0x7f0000001e40)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x8000d}, &(0x7f0000000140), 0x0, &(0x7f00000005c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) clock_gettime(0x0, &(0x7f0000001cc0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10020, &(0x7f0000001d00)={r3, r4+60000000}) 824.095049ms ago: executing program 3 (id=2783): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xd637684e08508ddb, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r1, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r2, 0xffffffffffffffff, 0x0, 0x2) close(r2) syz_ublk_setup_io_uring(0x3715, &(0x7f0000001d40)={0x0, 0x3239, 0x4, 0x3, 0x226}, &(0x7f0000001dc0), 0x0, &(0x7f0000001e40)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x8000d}, &(0x7f0000000140), 0x0, &(0x7f00000005c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) clock_gettime(0x0, &(0x7f0000001cc0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10020, &(0x7f0000001d00)={r3, r4+60000000}) 711.197864ms ago: executing program 4 (id=2784): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x35c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000340)={0x7, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e32, @loopback}}}, 0x108) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) 158.033043ms ago: executing program 2 (id=2785): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x6, 0xfe, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x7fff, 0x2, 0x88e, 0x5, 0x2, 0x0, 0x6, 0x3, 0x7, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x5, 0x9, 0x9, 0x1, 0xfffff801, 0x7, 0xe261, 0x392, 0x4000b, 0x3, 0x7f7f, 0x4c74, 0x1, 0x200000c, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x7fff, 0x8f, 0xf, 0x2, 0x5, 0x623280, 0x4, 0x1, 0x20000000, 0x80082, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0x0, 0x3, 0x8000d, 0x2bf, 0xffffffff, 0x0, 0xfffffffc, 0x8000, 0x0, 0x7, 0x85, 0x2b, 0x5a04, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xbda4, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x2003, 0x4, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0xff0c, 0x1, 0x3, 0x4, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x7], [0x6, 0x6, 0x80000003, 0x0, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0x5, 0x3, 0x5, 0x348, 0x0, 0xa3d, 0xfffffffd, 0x2, 0x83, 0x1, 0x3, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x4, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x0, 0x3, 0xc0, 0x10003, 0x403, 0x7fd, 0x3, 0x0, 0xfffffffc, 0xffff, 0x5, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaf1, 0x4, 0x100], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0xffffffff, 0x80ce5, 0x100001ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0xb, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000001, 0x3, 0xc, 0xc8, 0xee1, 0x0, 0xffff, 0x7, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x2, 0x10080, 0x6, 0xb, 0x30b1d693, 0x1, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x0, 0x5, 0x80b1c, 0x1, 0x20000200, 0xffff3441, 0xfff]}, 0x45c) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000100)='/d%v\xff\x00\xd4\xcd/snd/midiC#D#\x00', 0x0) keyctl$dh_compute(0x17, &(0x7f0000000280)={0x0, 0x0, r5}, &(0x7f0000000300)=""/71, 0x47, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, 0x0, 0x0) unshare(0x22020600) fcntl$lock(0xffffffffffffffff, 0x410, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) pselect6(0x40, &(0x7f0000000880)={0xfffffffffffffffc, 0xa000000, 0x1fe, 0x3ff, 0x603, 0x400000000001, 0xfffffffffa86cde8, 0x4}, 0x0, &(0x7f00000002c0)={0x5, 0x7fff, 0xfffffffffbffffff, 0x9, 0x0, 0x4}, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000200)={0x80000002, 0x1801, 0x9, 0xb, 0x59, "ea7102000000f900edffff0900000000000005", 0x800, 0x3}) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000140)={0x0, 0x3, 0x100c, 0x1}) 157.053643ms ago: executing program 0 (id=2786): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv2(r2, &(0x7f0000000200)=[{&(0x7f0000000500)=""/61, 0x3d}], 0x1, 0x40, 0x4, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0xffffffffffffff0d) 155.958123ms ago: executing program 4 (id=2787): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x121) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x739}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x800, 0x4) read$char_usb(r2, &(0x7f0000000040)=""/236, 0xec) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) syz_io_uring_setup(0x5b0f, &(0x7f0000000180)={0x0, 0xfffffffc, 0x80, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) 0s ago: executing program 0 (id=2788): syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x45ae41) syz_open_dev$dri(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff90) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0xc040000}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x28502, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) kernel console output (not intermixed with test programs): Number=3 [ 737.539735][ T6580] usb 5-1: Product: syz [ 737.545844][ T6580] usb 5-1: Manufacturer: syz [ 737.551354][ T6580] usb 5-1: SerialNumber: syz [ 737.568758][ T6580] usb 5-1: config 0 descriptor?? [ 737.581011][ T6580] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 737.720886][ T8222] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 737.729706][ T8222] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 737.738499][ T8222] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 737.785778][ T6580] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 737.837762][ T6580] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 738.952331][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 738.953051][ T4965] usb 5-1: USB disconnect, device number 6 [ 740.091283][ T4965] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 740.109905][ T4965] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 740.121748][ T4965] quatech2 5-1:0.51: device disconnected [ 746.137831][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1096'. [ 746.325708][ T8294] fuse: Bad value for 'fd' [ 747.057921][ T8297] mmap: syz.1.1097 (8297) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 747.081259][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.090660][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.109496][ T8297] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 748.319574][ T8315] I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 751.589516][ T8334] fuse: Bad value for 'fd' [ 758.117049][ T8372] fuse: Bad value for 'fd' [ 759.585715][ T5811] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 759.710726][ T7004] Bluetooth: hci5: command 0x1003 tx timeout [ 759.791209][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 759.870641][ T5811] usb 2-1: Using ep0 maxpacket: 8 [ 759.904520][ T5811] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 759.953526][ T5811] usb 2-1: config 0 interface 0 has no altsetting 0 [ 759.980861][ T5811] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 760.041459][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.274800][ T5811] usb 2-1: config 0 descriptor?? [ 761.693602][ T5811] uclogic 0003:28BD:0055.0006: interface is invalid, ignoring [ 761.989417][ T5811] usb 2-1: USB disconnect, device number 8 [ 764.274921][ T8402] loop4: detected capacity change from 0 to 256 [ 764.661208][ T8409] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 766.130846][ T8410] fuse: Bad value for 'fd' [ 772.751026][ T7004] Bluetooth: hci5: command 0x1003 tx timeout [ 772.758576][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 773.582072][ T8462] loop2: detected capacity change from 0 to 256 [ 774.388258][ T6093] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 774.601391][ T6093] usb 1-1: Using ep0 maxpacket: 8 [ 774.616638][ T6093] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 774.758526][ T6093] usb 1-1: config 0 interface 0 has no altsetting 0 [ 774.895183][ T6093] usb 1-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 775.155704][ T6093] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.171543][ T6093] usb 1-1: config 0 descriptor?? [ 776.629252][ T6093] usbhid 1-1:0.0: can't add hid device: -71 [ 776.646404][ T6093] usbhid: probe of 1-1:0.0 failed with error -71 [ 776.665431][ T6093] usb 1-1: USB disconnect, device number 4 [ 778.262086][ T6093] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 778.660664][ T6093] usb 1-1: Using ep0 maxpacket: 32 [ 778.669656][ T6093] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 778.725692][ T6093] usb 1-1: config 0 has no interface number 0 [ 778.747985][ T6093] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 778.811392][ T6093] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.850671][ T6093] usb 1-1: Product: syz [ 778.854885][ T6093] usb 1-1: Manufacturer: syz [ 778.859481][ T6093] usb 1-1: SerialNumber: syz [ 778.908046][ T6093] usb 1-1: config 0 descriptor?? [ 778.942514][ T6093] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 779.279240][ T6093] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 780.106723][ T6093] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 780.386440][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 780.437669][ T6093] usb 1-1: USB disconnect, device number 5 [ 780.467730][ T6093] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 781.160962][ T7004] Bluetooth: hci5: command 0x1003 tx timeout [ 781.168449][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 781.192439][ T6093] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 781.282300][ T6093] quatech2 1-1:0.51: device disconnected [ 781.854693][ T8516] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 782.118611][ T8516] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 782.345594][ T8519] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1160'. [ 782.716915][ T8525] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 788.225840][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1171'. [ 789.744437][ T8573] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 790.036427][ T8573] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 793.557035][ T8597] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 793.792167][ T8597] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 796.722311][ T8616] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1189'. [ 797.116151][ T8624] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 797.212978][ T14] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 797.369015][ T8624] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 797.678965][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 797.691738][ T14] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 797.740567][ T14] usb 5-1: config 0 interface 0 has no altsetting 0 [ 797.755031][ T14] usb 5-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 798.420590][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.467946][ T14] usb 5-1: config 0 descriptor?? [ 798.995852][ T14] uclogic 0003:28BD:0055.0007: interface is invalid, ignoring [ 799.528404][ T14] usb 5-1: USB disconnect, device number 7 [ 800.983774][ T8649] device syzkaller0 entered promiscuous mode [ 801.231073][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 803.582281][ T8663] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 805.242503][ T4580] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 805.254693][ T4580] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 805.271743][ T4580] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 805.507066][ T8679] netlink: 'syz.4.1207': attribute type 29 has an invalid length. [ 805.666643][ T8679] netlink: 'syz.4.1207': attribute type 29 has an invalid length. [ 805.992818][ T4391] Bluetooth: Error in BCSP hdr checksum [ 806.066462][ T8686] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 806.252962][ T4321] Bluetooth: Error in BCSP hdr checksum [ 806.291080][ T8686] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 806.317028][ T8688] netlink: 'syz.4.1207': attribute type 29 has an invalid length. [ 806.464791][ T8677] fido_id[8677]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 807.787175][ T8700] device syzkaller0 entered promiscuous mode [ 807.794337][ T48] Bluetooth: hci5: command 0x1003 tx timeout [ 807.800734][ T7004] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 808.513067][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.519402][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.972325][ T8718] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 810.041487][ T8716] overlayfs: failed to resolve './file0': -2 [ 811.390793][ T8730] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 811.401031][ T8730] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 811.409613][ T8730] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 813.596118][ T8737] netlink: 'syz.0.1220': attribute type 29 has an invalid length. [ 813.611039][ T8737] netlink: 'syz.0.1220': attribute type 29 has an invalid length. [ 813.633124][ T8740] netlink: 'syz.0.1220': attribute type 29 has an invalid length. [ 815.353119][ T8749] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 815.391779][ T8749] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 815.400254][ T8749] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 815.516774][ T8752] device syzkaller0 entered promiscuous mode [ 817.265453][ T8770] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 818.462070][ T8786] netlink: 'syz.1.1237': attribute type 29 has an invalid length. [ 818.887445][ T8786] netlink: 'syz.1.1237': attribute type 29 has an invalid length. [ 819.073175][ T8784] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 819.088997][ T8788] netlink: 'syz.1.1237': attribute type 29 has an invalid length. [ 819.140412][ T8784] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 819.157292][ T8784] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 819.809346][ T8801] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 819.852134][ T8801] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 820.242741][ T8800] device syzkaller0 entered promiscuous mode [ 820.927192][ T8803] fuse: Bad value for 'fd' [ 821.917686][ T8808] fuse: Bad value for 'fd' [ 822.101370][ T4580] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 822.109247][ T4580] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 822.138772][ T4580] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 822.340460][ T8817] fido_id[8817]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 825.790660][ T4316] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 825.799899][ T26] audit: type=1107 audit(1784490467.076:10): pid=8845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 825.799899][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 825.799899][ T26] Вh0VZ2' [ 825.838044][ C1] vkms_vblank_simulate: vblank timer overrun [ 828.349923][ T4316] usb 2-1: Using ep0 maxpacket: 8 [ 828.358180][ T4316] usb 2-1: device descriptor read/all, error -71 [ 830.200614][ T14] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 830.430220][ T8869] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 830.444174][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 830.451396][ T8869] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 830.466128][ T14] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 830.500672][ T14] usb 3-1: config 0 interface 0 has no altsetting 0 [ 830.522711][ T14] usb 3-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 830.548741][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.581244][ T8869] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 830.598640][ T14] usb 3-1: config 0 descriptor?? [ 830.832387][ T8873] device syzkaller0 entered promiscuous mode [ 831.019871][ T8875] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1264'. [ 831.027777][ T14] usbhid 3-1:0.0: can't add hid device: -71 [ 831.044348][ T14] usbhid: probe of 3-1:0.0 failed with error -71 [ 831.069005][ T14] usb 3-1: USB disconnect, device number 5 [ 835.634048][ T8912] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 835.741356][ T8912] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 836.917841][ T8928] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 836.930740][ T8928] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 836.958349][ T8928] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 839.153071][ T8849] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 839.860710][ T8849] usb 1-1: Using ep0 maxpacket: 8 [ 839.872098][ T8849] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 839.874981][ T8950] device syzkaller0 entered promiscuous mode [ 839.910628][ T8849] usb 1-1: config 0 interface 0 has no altsetting 0 [ 839.944155][ T8849] usb 1-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 839.981584][ T8849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.017851][ T8849] usb 1-1: config 0 descriptor?? [ 840.430646][ T4357] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 840.451116][ T8849] uclogic 0003:28BD:0055.000A: interface is invalid, ignoring [ 840.682868][ T4357] usb 4-1: Using ep0 maxpacket: 32 [ 841.056399][ T4357] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 841.086257][ T4357] usb 4-1: config 0 has no interface number 0 [ 841.123175][ T6580] usb 1-1: USB disconnect, device number 6 [ 841.131966][ T4357] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 841.201809][ T4357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.220061][ T4357] usb 4-1: Product: syz [ 841.231054][ T4357] usb 4-1: Manufacturer: syz [ 841.246092][ T8957] device syzkaller0 entered promiscuous mode [ 841.252500][ T4357] usb 4-1: SerialNumber: syz [ 841.277566][ T4357] usb 4-1: config 0 descriptor?? [ 841.304394][ T4357] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 841.524583][ T4357] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 841.540236][ T4357] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 842.481759][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 842.494126][ T6580] usb 4-1: USB disconnect, device number 9 [ 843.498450][ T6580] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 843.584500][ T6580] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 843.659260][ T6580] quatech2 4-1:0.51: device disconnected [ 846.512483][ T8988] device syzkaller0 entered promiscuous mode [ 846.760136][ T8992] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 846.778922][ T8992] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 846.795700][ T8992] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 847.665095][ T8996] device syzkaller0 entered promiscuous mode [ 848.688297][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1301'. [ 849.178740][ T9008] fuse: Bad value for 'fd' [ 852.916589][ T9037] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 852.937467][ T9037] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 852.948455][ T9037] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 855.953599][ T9054] device syzkaller0 entered promiscuous mode [ 856.710819][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1319'. [ 857.270957][ T9063] fuse: Bad value for 'fd' [ 859.386214][ T26] audit: type=1107 audit(1784490500.666:11): pid=9072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 859.386214][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 859.386214][ T26] Вh0VZ2' [ 859.471549][ T4496] Bluetooth: Error in BCSP hdr checksum [ 859.731520][ T4398] Bluetooth: Error in BCSP hdr checksum [ 859.991405][ T46] Bluetooth: Error in BCSP hdr checksum [ 860.251446][ T4398] Bluetooth: Error in BCSP hdr checksum [ 860.511605][ T9] Bluetooth: Error in BCSP hdr checksum [ 861.031526][ T4398] Bluetooth: Error in BCSP hdr checksum [ 861.230629][ T48] Bluetooth: hci5: command 0x1003 tx timeout [ 861.230744][ T7004] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 863.178918][ T9084] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 863.190714][ T9084] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 863.305445][ T9084] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 864.043163][ T9096] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 864.102394][ T9096] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 864.148603][ T9096] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 868.425519][ T9122] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1333'. [ 869.952744][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.959152][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.861734][ T9150] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 874.458344][ T9158] fuse: Bad value for 'fd' [ 875.625960][ T9169] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 876.442679][ T9173] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 876.480610][ T9173] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 876.510608][ T9173] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 882.523371][ T9212] netlink: 'syz.2.1357': attribute type 29 has an invalid length. [ 882.561410][ T9212] netlink: 'syz.2.1357': attribute type 29 has an invalid length. [ 882.639300][ T9219] netlink: 'syz.2.1357': attribute type 29 has an invalid length. [ 883.405786][ T9226] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 883.435965][ T9226] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 883.472282][ T9226] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 888.034448][ T9250] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 888.050788][ T9250] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 888.091988][ T9250] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 889.850639][ T125] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 890.067036][ T26] audit: type=1107 audit(1784490531.346:12): pid=9261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 890.067036][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 890.067036][ T26] Вh0VZ2' [ 890.204414][ T125] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 890.995836][ T125] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 891.048898][ T125] usb 1-1: config 220 has no interface number 2 [ 891.074537][ T125] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 891.133162][ T125] usb 1-1: config 220 interface 0 has no altsetting 0 [ 891.155511][ T125] usb 1-1: config 220 interface 76 has no altsetting 0 [ 891.180696][ T125] usb 1-1: config 220 interface 1 has no altsetting 0 [ 891.197060][ T125] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 891.216483][ T125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.340764][ T125] usb 1-1: Product: syz [ 891.344966][ T125] usb 1-1: Manufacturer: syz [ 891.373525][ T125] usb 1-1: SerialNumber: syz [ 891.434320][ T9268] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 892.001168][ T125] usb 1-1: selecting invalid altsetting 0 [ 892.007896][ T125] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 892.039714][ T125] usb 1-1: No valid video chain found. [ 892.094885][ T125] usb 1-1: selecting invalid altsetting 0 [ 892.131558][ T125] usbtest: probe of 1-1:220.1 failed with error -22 [ 892.253806][ T125] usb 1-1: USB disconnect, device number 7 [ 892.338541][ T9276] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 892.704052][ T9276] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 893.082236][ T9276] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 895.940952][ T46] Bluetooth: Error in BCSP hdr checksum [ 896.203416][ T8425] Bluetooth: Error in BCSP hdr checksum [ 896.206842][ T9313] loop0: detected capacity change from 0 to 256 [ 896.525922][ T4496] Bluetooth: Error in BCSP hdr checksum [ 897.710704][ T7004] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 897.710779][ T4286] Bluetooth: hci5: command 0x1003 tx timeout [ 899.479535][ T9324] Bluetooth: hci1: command 0x0409 tx timeout [ 899.875501][ T26] audit: type=1107 audit(1784490541.156:13): pid=9329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 899.875501][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 899.875501][ T26] Вh0VZ2' [ 901.537623][ T26] audit: type=1107 audit(1784490542.376:14): pid=9340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 901.537623][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 901.537623][ T26] Вh0VZ2' [ 903.295250][ T9360] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 904.455294][ T9366] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 904.463667][ T9366] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 904.472845][ T9366] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 906.295325][ T9383] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 911.253850][ T9407] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 911.263007][ T9407] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 911.272069][ T9407] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 911.659451][ T9412] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 914.566284][ T6580] hid-generic 0000:0000:0000.000B: item fetching failed at offset 0/2 [ 915.731970][ T6580] hid-generic: probe of 0000:0000:0000.000B failed with error -22 [ 917.521445][ T9445] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 917.953352][ T9441] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 919.021754][ T9452] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 919.070153][ T9452] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 919.082333][ T9452] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 919.310665][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 919.550714][ T22] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 919.560890][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 919.577409][ T7] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 919.629295][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 919.649656][ T7] usb 1-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 919.698168][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.737702][ T7] usb 1-1: config 0 descriptor?? [ 919.751038][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 919.762530][ T22] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 919.889379][ T22] usb 4-1: config 0 has no interface number 0 [ 919.935487][ T22] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 919.950745][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 920.202539][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.748483][ T22] usb 4-1: Product: syz [ 920.755537][ T22] usb 4-1: Manufacturer: syz [ 920.820640][ T22] usb 4-1: SerialNumber: syz [ 920.837092][ T22] usb 4-1: config 0 descriptor?? [ 920.882507][ T7] usbhid 1-1:0.0: can't add hid device: -71 [ 920.885506][ T22] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 920.898711][ T7] usbhid: probe of 1-1:0.0 failed with error -71 [ 921.368835][ T7] usb 1-1: USB disconnect, device number 8 [ 921.388990][ T22] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 921.431625][ T22] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 921.886591][ T8849] usb 4-1: USB disconnect, device number 10 [ 921.895829][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 921.980895][ T8849] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 922.502627][ T8849] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 922.529875][ T8849] quatech2 4-1:0.51: device disconnected [ 923.979597][ T9488] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 924.430584][ T9324] Bluetooth: hci3: command 0x0409 tx timeout [ 927.091651][ T9499] loop3: detected capacity change from 0 to 256 [ 927.563269][ T9519] I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 928.358971][ T9521] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 928.367795][ T9521] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 928.427120][ T9521] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 929.306947][ T9531] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 929.347993][ T9531] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 929.384088][ T9531] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 929.911439][ T4477] Bluetooth: Error in BCSP hdr checksum [ 930.180984][ T9472] Bluetooth: Error in BCSP hdr checksum [ 930.455755][ T4477] Bluetooth: Error in BCSP hdr checksum [ 930.521542][ T9540] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 930.605036][ T9540] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 930.664505][ T9544] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 931.402771][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.409672][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.491735][ T9540] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 931.710874][ T48] Bluetooth: hci5: command 0x1003 tx timeout [ 931.717523][ T9324] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 933.152593][ T9567] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 935.451463][ T9591] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 935.472451][ T9591] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 935.864483][ T9595] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 935.900660][ T9595] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 935.950636][ T9595] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 938.859638][ T9628] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 938.923369][ T9628] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 939.031077][ T9628] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 941.332977][ T9646] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 941.645776][ T9646] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 941.804510][ T9648] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 941.880731][ T9648] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 942.000275][ T9648] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 942.482219][ T26] audit: type=1107 audit(1784490583.766:15): pid=9654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 942.482219][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 942.482219][ T26] Вh0VZ2' [ 945.966666][ T9667] netlink: 'syz.1.1476': attribute type 29 has an invalid length. [ 946.016070][ T9667] netlink: 'syz.1.1476': attribute type 29 has an invalid length. [ 946.102140][ T9670] netlink: 'syz.1.1476': attribute type 29 has an invalid length. [ 946.496947][ T9676] netlink: 'syz.4.1479': attribute type 29 has an invalid length. [ 946.540413][ T9676] netlink: 'syz.4.1479': attribute type 29 has an invalid length. [ 946.596481][ T9678] netlink: 'syz.4.1479': attribute type 29 has an invalid length. [ 950.534019][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1486'. [ 952.491147][ T9715] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 954.911263][ T9733] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 955.384572][ T9737] fuse: Bad value for 'fd' [ 956.059506][ T9733] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 956.083596][ T9733] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 956.198218][ T9743] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 958.921643][ T9758] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 964.393245][ T9321] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 964.648313][ T9321] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 964.659654][ T9321] usb 5-1: config 220 descriptor has 1 excess byte, ignoring [ 964.667387][ T9321] usb 5-1: config 220 has no interface number 2 [ 964.674043][ T9321] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 964.692331][ T9321] usb 5-1: config 220 interface 0 has no altsetting 0 [ 964.700339][ T9321] usb 5-1: config 220 interface 76 has no altsetting 0 [ 964.707394][ T9321] usb 5-1: config 220 interface 1 has no altsetting 0 [ 964.719895][ T4645] Bluetooth: Error in BCSP hdr checksum [ 964.722024][ T9321] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 964.737436][ T9321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.745923][ T9321] usb 5-1: Product: syz [ 964.750171][ T9321] usb 5-1: Manufacturer: syz [ 964.754917][ T9321] usb 5-1: SerialNumber: syz [ 964.981654][ T4645] Bluetooth: Error in BCSP hdr checksum [ 965.028862][ T9321] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 965.048524][ T9321] usb 5-1: No valid video chain found. [ 965.054817][ T9321] usb 5-1: selecting invalid altsetting 0 [ 965.098119][ T9321] usb 5-1: selecting invalid altsetting 0 [ 965.110889][ T9321] usbtest: probe of 5-1:220.1 failed with error -22 [ 965.147126][ T9321] usb 5-1: USB disconnect, device number 8 [ 966.441665][ T48] Bluetooth: hci5: command 0x1003 tx timeout [ 966.441707][ T9324] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 969.536843][ T4317] hid-generic 0000:0000:0000.000C: item fetching failed at offset 0/2 [ 969.621061][ T4317] hid-generic: probe of 0000:0000:0000.000C failed with error -22 [ 969.969161][ T9829] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 970.808711][ T9832] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 970.817106][ T9832] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 970.825952][ T9832] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 972.103412][ T9838] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 972.137415][ T9838] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 972.177752][ T9838] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 975.465382][ T9867] snd_dummy snd_dummy.0: control 6:65278:-4:syz0:-259 is already present [ 976.552348][ T26] audit: type=1107 audit(1784490617.836:16): pid=9872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 976.552348][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 976.552348][ T26] Вh0VZ2' [ 980.046155][ T9900] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 985.473955][ T9924] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 985.569214][ T9924] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 985.626922][ T9927] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 985.650684][ T9927] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 985.694144][ T9927] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 993.264605][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.338379][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.226729][ T4317] hid-generic 0000:0000:0000.000D: item fetching failed at offset 0/2 [ 995.406517][ T4317] hid-generic: probe of 0000:0000:0000.000D failed with error -22 [ 996.581630][ T9980] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 996.635936][ T9980] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 996.651656][ T9980] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 999.799292][T10004] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1001.119886][ T26] audit: type=1107 audit(1784490642.396:17): pid=10010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 1001.119886][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 1001.119886][ T26] Вh0VZ2' [ 1001.158055][ C1] vkms_vblank_simulate: vblank timer overrun [ 1002.967684][T10026] overlayfs: failed to resolve './file1': -2 [ 1003.903298][T10033] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1003.930320][T10033] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1003.984792][T10033] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1006.146452][T10048] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1006.206821][T10048] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1006.232923][T10048] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1007.689508][T10070] overlayfs: failed to resolve './file1': -2 [ 1008.527060][T10072] overlayfs: failed to resolve './file0': -2 [ 1009.646964][T10087] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1009.692005][T10087] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1012.811409][T10108] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1012.820126][T10108] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1012.856474][T10108] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1013.128458][T10117] overlayfs: failed to resolve './file1': -2 [ 1014.875300][T10134] overlayfs: failed to resolve './file0': -2 [ 1016.741641][T10147] loop5: detected capacity change from 0 to 7 [ 1016.752827][ T9160] Dev loop5: unable to read RDB block 7 [ 1016.758500][ T9160] loop5: unable to read partition table [ 1016.769615][ T9160] loop5: partition table beyond EOD, truncated [ 1016.780320][T10147] Dev loop5: unable to read RDB block 7 [ 1016.800925][T10147] loop5: unable to read partition table [ 1016.806835][T10147] loop5: partition table beyond EOD, truncated [ 1016.827684][T10147] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1018.924989][T10156] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1019.957038][T10162] tipc: Started in network mode [ 1019.957223][T10162] tipc: Node identity 7f000001, cluster identity 4711 [ 1019.961508][T10162] tipc: Enabled bearer , priority 10 [ 1020.630470][T10161] tty tty27: ldisc open failed (-12), clearing slot 26 [ 1020.756312][T10164] overlayfs: failed to resolve './file0': -2 [ 1020.888004][T10166] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1020.903240][T10166] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1020.957285][T10166] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1021.024739][ T6580] tipc: Node number set to 2130706433 [ 1025.789242][T10205] loop5: detected capacity change from 0 to 7 [ 1025.801940][T10205] Dev loop5: unable to read RDB block 7 [ 1025.850671][T10205] loop5: unable to read partition table [ 1025.857049][T10205] loop5: partition table beyond EOD, truncated [ 1025.887453][T10205] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1029.906902][T10229] netlink: 57 bytes leftover after parsing attributes in process `syz.2.1625'. [ 1030.559655][ T27] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 1031.066458][ T27] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 1031.128219][ T27] usb 3-1: config 0 has no interface number 0 [ 1031.175783][ T27] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1031.194232][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.226774][ T27] usb 3-1: Product: syz [ 1031.238616][ T27] usb 3-1: Manufacturer: syz [ 1031.246795][ T27] usb 3-1: SerialNumber: syz [ 1031.314179][ T27] usb 3-1: config 0 descriptor?? [ 1031.506516][T10244] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1031.525213][T10244] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1031.545149][T10244] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1032.823361][ T27] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1032.862089][T10251] loop5: detected capacity change from 0 to 7 [ 1033.054573][ T27] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 1033.074727][T10251] Dev loop5: unable to read RDB block 7 [ 1033.080578][T10251] loop5: unable to read partition table [ 1033.086491][T10251] loop5: partition table beyond EOD, truncated [ 1033.093449][T10251] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1033.228379][ T27] asix: probe of 3-1:0.251 failed with error -71 [ 1033.293265][ T27] usb 3-1: USB disconnect, device number 6 [ 1036.133823][T10277] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1037.424708][T10284] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1037.465241][T10284] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1037.576951][T10284] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1040.640153][T10306] netlink: 'syz.2.1647': attribute type 29 has an invalid length. [ 1040.649225][T10306] netlink: 'syz.2.1647': attribute type 29 has an invalid length. [ 1040.660157][T10306] netlink: 'syz.2.1647': attribute type 29 has an invalid length. [ 1042.194524][T10326] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1045.146830][T10319] fuse: Bad value for 'fd' [ 1045.307483][T10344] tipc: Started in network mode [ 1045.312507][T10344] tipc: Node identity 7f000001, cluster identity 4711 [ 1045.321218][T10344] tipc: Enabled bearer , priority 10 [ 1046.421819][ T4580] tipc: Node number set to 2130706433 [ 1047.536016][T10350] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1047.652484][T10350] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1047.802076][T10350] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1051.158058][T10380] netlink: 'syz.3.1658': attribute type 29 has an invalid length. [ 1051.167854][T10380] netlink: 'syz.3.1658': attribute type 29 has an invalid length. [ 1051.228769][T10382] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1052.003589][T10380] netlink: 'syz.3.1658': attribute type 29 has an invalid length. [ 1054.065961][T10391] netlink: 57 bytes leftover after parsing attributes in process `syz.3.1669'. [ 1054.272202][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.278559][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.265789][ T8948] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1055.465480][ T8948] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 1055.495453][ T8948] usb 4-1: config 0 has no interface number 0 [ 1055.577584][ T8948] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1055.664609][ T8948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.741775][ T8948] usb 4-1: Product: syz [ 1055.784051][ T8948] usb 4-1: Manufacturer: syz [ 1055.832049][ T8948] usb 4-1: SerialNumber: syz [ 1055.870644][ T9324] Bluetooth: hci5: command 0x1003 tx timeout [ 1055.877036][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1055.992814][ T8948] usb 4-1: config 0 descriptor?? [ 1056.460506][T10403] overlayfs: failed to resolve './file1': -2 [ 1056.701720][ T8948] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1056.889585][ T8948] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -32 [ 1057.116063][ T8948] asix: probe of 4-1:0.251 failed with error -32 [ 1057.137340][ T8948] usb 4-1: USB disconnect, device number 11 [ 1061.321986][T10434] tipc: Enabling of bearer rejected, already enabled [ 1065.411362][T10460] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1065.420078][T10460] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1065.428843][T10460] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1068.172352][T10486] tipc: Enabling of bearer rejected, already enabled [ 1068.186150][ T4314] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1068.531436][ T4314] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1068.704883][ T4314] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1068.801681][ T4314] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 1068.811644][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.947245][ T4314] usb 5-1: config 0 descriptor?? [ 1068.961504][T10478] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1070.606818][T10498] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1070.630320][ T4314] usbhid 5-1:0.0: can't add hid device: -71 [ 1070.641724][ T4314] usbhid: probe of 5-1:0.0 failed with error -71 [ 1070.699685][ T4314] usb 5-1: USB disconnect, device number 9 [ 1073.890339][T10510] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1073.898712][T10510] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1073.907267][T10510] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1077.800615][ T9321] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1078.052230][ T9321] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.076032][ T9321] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1078.104043][ T9321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1079.165734][ T9321] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1079.258432][ T9321] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1079.290738][ T9321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.298761][ T9321] usb 2-1: Product: syz [ 1079.362075][ T9321] usb 2-1: Manufacturer: syz [ 1079.393277][ T9321] usb 2-1: SerialNumber: syz [ 1079.433586][ T9321] usb 2-1: config 0 descriptor?? [ 1079.455176][ T9321] usb 2-1: can't set config #0, error -71 [ 1079.506224][ T9321] usb 2-1: USB disconnect, device number 11 [ 1079.752863][T10560] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1079.801429][T10560] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1079.905628][T10560] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1086.910611][ T9324] Bluetooth: hci2: command 0x0409 tx timeout [ 1087.370773][ T8948] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 1087.583030][ T8948] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1088.495005][ T8948] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1088.501974][ T8948] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 1088.520792][ T8948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.543928][ T8948] usb 1-1: config 0 descriptor?? [ 1088.551033][T10605] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1088.573673][T10613] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1088.622782][T10613] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1088.633989][T10613] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1089.813311][ T8948] usbhid 1-1:0.0: can't add hid device: -71 [ 1091.493159][ T8948] usbhid: probe of 1-1:0.0 failed with error -71 [ 1091.533216][ T8948] usb 1-1: USB disconnect, device number 9 [ 1091.580024][T10622] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1091.588383][T10622] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1091.597303][T10622] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1091.623889][T10624] netlink: 'syz.4.1734': attribute type 29 has an invalid length. [ 1091.633921][T10624] netlink: 'syz.4.1734': attribute type 29 has an invalid length. [ 1091.650072][T10624] netlink: 'syz.4.1734': attribute type 29 has an invalid length. [ 1099.709082][T10662] fuse: Bad value for 'fd' [ 1099.830683][ T8849] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1100.097007][ T8849] usb 2-1: device descriptor read/all, error -71 [ 1101.587124][T10669] device syzkaller0 entered promiscuous mode [ 1106.101849][ T4477] Bluetooth: Error in BCSP hdr checksum [ 1107.692650][T10699] device syzkaller0 entered promiscuous mode [ 1108.858258][ T48] Bluetooth: hci5: command 0x1003 tx timeout [ 1108.864593][ T9324] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1110.970818][ T8948] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1111.193634][T10726] tipc: Started in network mode [ 1111.198669][T10726] tipc: Node identity 7f000001, cluster identity 4711 [ 1111.206931][T10726] tipc: Enabled bearer , priority 10 [ 1111.872464][ T8948] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1111.937836][ T8948] usb 5-1: config 220 descriptor has 1 excess byte, ignoring [ 1111.980669][ T8948] usb 5-1: config 220 has no interface number 2 [ 1111.986998][ T8948] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1112.040089][ T8948] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1112.054161][T10732] netlink: 'syz.2.1767': attribute type 29 has an invalid length. [ 1112.055939][ T8948] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1112.069587][T10732] netlink: 'syz.2.1767': attribute type 29 has an invalid length. [ 1112.089652][ T8948] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1112.119018][ T8948] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1112.174334][T10732] netlink: 'syz.2.1767': attribute type 29 has an invalid length. [ 1112.223855][ T8948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.323939][ T8948] usb 5-1: Product: syz [ 1112.340688][ T4580] tipc: Node number set to 2130706433 [ 1112.375457][ T8948] usb 5-1: Manufacturer: syz [ 1112.428793][ T8948] usb 5-1: SerialNumber: syz [ 1112.838909][ T8948] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1112.942911][ T8948] usb 5-1: No valid video chain found. [ 1112.990839][ T8948] usb 5-1: selecting invalid altsetting 0 [ 1113.108162][ T8948] usb 5-1: selecting invalid altsetting 0 [ 1113.271793][ T8948] usbtest: probe of 5-1:220.1 failed with error -22 [ 1113.284642][ T8948] usb 5-1: USB disconnect, device number 10 [ 1114.420764][ T7] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1115.712854][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.719153][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.095001][ T7] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1116.133511][ T7] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.146329][ T7] usb 1-1: config 220 has no interface number 2 [ 1116.152878][ T7] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1116.166300][ T7] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1116.173208][ T7] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1116.181312][ T7] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1116.217821][ T7] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1116.254837][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.270741][ T7] usb 1-1: Product: syz [ 1116.275117][ T7] usb 1-1: Manufacturer: syz [ 1116.279827][ T7] usb 1-1: SerialNumber: syz [ 1116.420643][ T4580] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1116.510912][ T7] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1116.517305][ T7] usb 1-1: No valid video chain found. [ 1116.545918][ T7] usb 1-1: selecting invalid altsetting 0 [ 1116.581113][ T7] usb 1-1: selecting invalid altsetting 0 [ 1116.597493][ T7] usbtest: probe of 1-1:220.1 failed with error -22 [ 1116.628707][ T7] usb 1-1: USB disconnect, device number 10 [ 1116.642277][ T4580] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.661732][ T4580] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1116.678916][ T4580] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1116.694966][ T4580] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1116.746852][ T4580] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1116.813802][T10762] tipc: Started in network mode [ 1116.818822][T10762] tipc: Node identity 7f000001, cluster identity 4711 [ 1116.827560][T10762] tipc: Enabled bearer , priority 10 [ 1117.053426][ T4580] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.150929][ T4580] usb 4-1: Product: syz [ 1117.204715][ T4580] usb 4-1: Manufacturer: syz [ 1117.252113][ T4580] usb 4-1: SerialNumber: syz [ 1117.459453][ T4580] usb 4-1: config 0 descriptor?? [ 1117.545312][ T4580] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 1117.556027][ T4580] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1117.567339][ T4580] garmin_gps: probe of ttyUSB0 failed with error -8 [ 1117.791159][ T4580] usb 4-1: USB disconnect, device number 12 [ 1117.798185][ T4580] garmin_gps 4-1:0.0: device disconnected [ 1117.862292][T10775] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1117.870501][T10775] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1117.961596][ T9321] tipc: Node number set to 2130706433 [ 1117.976538][T10775] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1121.235512][T10797] overlayfs: failed to resolve './file0': -2 [ 1121.366650][T10801] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1121.401418][T10801] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1122.418272][T10813] tipc: Enabling of bearer rejected, already enabled [ 1123.426812][T10820] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1126.360363][ T26] audit: type=1107 audit(1784490767.636:18): pid=10833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 1126.360363][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 1126.360363][ T26] Вh0VZ2' [ 1128.528753][T10851] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1128.548795][T10851] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1128.558236][T10851] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1129.395181][T10855] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1130.876861][ T26] audit: type=1107 audit(1784490772.156:19): pid=10872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 1130.876861][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 1130.876861][ T26] Вh0VZ2' [ 1133.620300][ T9472] Bluetooth: Error in BCSP hdr checksum [ 1135.391686][ T48] Bluetooth: hci5: command 0x1003 tx timeout [ 1135.391733][ T9324] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1137.097176][T10905] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1140.984929][T10932] netlink: 'syz.4.1829': attribute type 29 has an invalid length. [ 1141.001133][T10932] netlink: 'syz.4.1829': attribute type 29 has an invalid length. [ 1141.021720][T10932] netlink: 'syz.4.1829': attribute type 29 has an invalid length. [ 1142.394174][T10949] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1144.519864][ T26] audit: type=1107 audit(1784490785.796:20): pid=10962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 1144.519864][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 1144.519864][ T26] Вh0VZ2' [ 1151.346312][ T26] audit: type=1107 audit(1784490792.626:21): pid=10991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 1151.346312][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 1151.346312][ T26] Вh0VZ2' [ 1156.355861][T11013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1854'. [ 1156.555600][ T26] audit: type=1107 audit(1784490797.836:22): pid=11017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 1156.555600][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 1156.555600][ T26] Вh0VZ2' [ 1165.381628][T11078] tipc: Started in network mode [ 1165.386640][T11078] tipc: Node identity 7f000001, cluster identity 4711 [ 1165.395544][T11078] tipc: Enabled bearer , priority 10 [ 1166.402868][ T4357] tipc: Node number set to 2130706433 [ 1168.087368][T11108] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1168.114822][T11108] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1168.118594][T11110] overlayfs: failed to resolve './file1': -2 [ 1168.147954][T11108] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1168.166641][T11114] overlayfs: missing 'workdir' [ 1172.284032][T11152] overlayfs: failed to resolve './file1': -2 [ 1173.106677][T11157] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1173.115312][T11157] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1173.123846][T11157] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1174.161477][T11167] overlayfs: missing 'lowerdir' [ 1174.766121][ T26] audit: type=1107 audit(1784490816.046:23): pid=11171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 1174.766121][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 1174.766121][ T26] Вh0VZ2' [ 1175.985736][T11184] device syzkaller0 entered promiscuous mode [ 1176.065554][ T26] audit: type=1107 audit(1784490817.346:24): pid=11185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 1176.065554][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 1176.065554][ T26] Вh0VZ2' [ 1177.152054][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.159845][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.586173][T11199] overlayfs: failed to resolve './file1': -2 [ 1178.647489][T11200] device syzkaller0 entered promiscuous mode [ 1178.746590][T11203] snd_dummy snd_dummy.0: control 6:65278:-4:syz0:-259 is already present [ 1178.947797][T11210] tipc: Enabling of bearer rejected, already enabled [ 1179.722011][T11215] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1179.730991][T11215] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1179.739814][T11215] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1180.627810][T11228] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1184.827564][T11267] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1184.940377][T11267] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1185.681641][T11267] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1188.288549][T11291] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1188.424042][T11291] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1189.945565][T11291] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1194.127085][T11329] fuse: Bad value for 'fd' [ 1194.149160][T11334] device syzkaller0 entered promiscuous mode [ 1197.569628][T11355] overlayfs: failed to resolve './file0': -2 [ 1200.594453][T11363] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1200.709398][T11363] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1202.239219][T11363] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1203.112719][T11374] netlink: 'syz.2.1954': attribute type 29 has an invalid length. [ 1203.151207][T11374] netlink: 'syz.2.1954': attribute type 29 has an invalid length. [ 1203.181278][T11375] netlink: 'syz.2.1954': attribute type 29 has an invalid length. [ 1203.520654][ T5811] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1203.712883][ T5811] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.731017][ T5811] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1204.760605][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1204.771779][ T5811] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1204.796178][ T5811] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1204.820629][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.832644][ T5811] usb 5-1: Product: syz [ 1204.836899][ T5811] usb 5-1: Manufacturer: syz [ 1204.848882][ T5811] usb 5-1: SerialNumber: syz [ 1204.860117][ T5811] usb 5-1: config 0 descriptor?? [ 1204.872613][ T5811] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected [ 1204.891563][ T5811] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1204.912191][ T5811] garmin_gps: probe of ttyUSB0 failed with error -8 [ 1207.161964][ T6580] usb 5-1: USB disconnect, device number 11 [ 1207.214405][ T6580] garmin_gps 5-1:0.0: device disconnected [ 1207.260277][T11400] loop5: detected capacity change from 0 to 7 [ 1207.316542][T11400] Dev loop5: unable to read RDB block 7 [ 1207.325961][T11400] loop5: unable to read partition table [ 1207.352637][T11400] loop5: partition table beyond EOD, truncated [ 1207.389434][T11400] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1207.687455][T11405] overlayfs: failed to resolve './file0': -2 [ 1207.798194][T11386] device wlan0 entered promiscuous mode [ 1207.805299][T11386] batman_adv: batadv0: Adding interface: wlan0 [ 1207.811565][T11386] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1207.836785][T11386] batman_adv: batadv0: Interface activated: wlan0 [ 1209.108751][T11417] device syzkaller0 entered promiscuous mode [ 1209.181925][ T6580] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1209.260676][ T5811] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1209.290061][T11412] device wlan0 entered promiscuous mode [ 1209.296081][T11412] batman_adv: batadv0: Adding interface: wlan0 [ 1209.302303][T11412] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1209.327865][T11412] batman_adv: batadv0: Interface activated: wlan0 [ 1209.372490][ T6580] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.409802][ T6580] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1209.457801][ T5811] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1209.501544][ T5811] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.538823][ T6580] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1209.553993][ T5811] usb 4-1: config 220 has no interface number 2 [ 1209.562698][ T5811] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1209.603423][ T6580] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1209.618823][ T5811] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1209.652610][ T5811] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1209.673079][ T6580] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1209.683317][ T5811] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1209.690168][ T6580] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.707756][ T6580] usb 5-1: Product: syz [ 1209.715565][ T6580] usb 5-1: Manufacturer: syz [ 1209.724718][ T6580] usb 5-1: SerialNumber: syz [ 1209.738451][ T5811] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1209.796215][ T6580] usb 5-1: config 0 descriptor?? [ 1209.802767][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.866913][ T4965] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1209.870732][ T5811] usb 4-1: Product: syz [ 1209.892552][ T6580] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected [ 1209.909548][ T5811] usb 4-1: Manufacturer: syz [ 1209.924286][ T6580] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1209.946619][ T5811] usb 4-1: SerialNumber: syz [ 1209.966028][ T6580] garmin_gps: probe of ttyUSB0 failed with error -8 [ 1210.095943][ T4965] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1210.104418][ T4965] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.114942][ T4965] usb 3-1: config 220 has no interface number 2 [ 1210.121376][ T4965] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1210.126102][ T6580] usb 5-1: USB disconnect, device number 12 [ 1210.134633][ T4965] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1210.134654][ T4965] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1210.134670][ T4965] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1210.159572][ T4965] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1210.174465][ T4965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.188813][ T4965] usb 3-1: Product: syz [ 1210.193595][ T4965] usb 3-1: Manufacturer: syz [ 1210.200878][ T4965] usb 3-1: SerialNumber: syz [ 1210.218503][ T6580] garmin_gps 5-1:0.0: device disconnected [ 1210.250019][ T5811] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1210.263319][ T5811] usb 4-1: No valid video chain found. [ 1210.268851][ T5811] usb 4-1: selecting invalid altsetting 0 [ 1210.313450][ T5811] usb 4-1: selecting invalid altsetting 0 [ 1210.319243][ T5811] usbtest: probe of 4-1:220.1 failed with error -22 [ 1210.330471][ T5811] usb 4-1: USB disconnect, device number 13 [ 1210.455526][ T4965] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1210.469851][ T4965] usb 3-1: No valid video chain found. [ 1210.478457][ T4965] usb 3-1: selecting invalid altsetting 0 [ 1210.513692][ T4965] usb 3-1: selecting invalid altsetting 0 [ 1210.519471][ T4965] usbtest: probe of 3-1:220.1 failed with error -22 [ 1210.537670][ T4965] usb 3-1: USB disconnect, device number 7 [ 1210.560915][ T4318] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 1211.777814][ T4318] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1211.830645][ T4318] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1211.880400][ T4318] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 1211.937461][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.854114][ T4318] usb 1-1: config 0 descriptor?? [ 1212.870707][T11425] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1212.914156][T11440] overlayfs: failed to resolve './file0': -2 [ 1214.754544][ T4318] usbhid 1-1:0.0: can't add hid device: -71 [ 1214.760820][ T4318] usbhid: probe of 1-1:0.0 failed with error -71 [ 1214.769340][ T4318] usb 1-1: USB disconnect, device number 11 [ 1217.461658][T11475] overlayfs: failed to resolve './file0': -2 [ 1219.199964][T11487] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1219.231828][T11487] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1219.276602][T11487] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1220.076428][T11491] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1224.792794][ T26] audit: type=1107 audit(1784490866.076:25): pid=11516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 1224.792794][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 1224.792794][ T26] Вh0VZ2' [ 1225.918492][T11537] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1225.926866][T11537] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1225.935624][T11537] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1230.060936][ T14] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1231.608498][ T14] usb 1-1: device descriptor read/all, error -71 [ 1233.775970][T11589] netlink: 'syz.1.2015': attribute type 29 has an invalid length. [ 1233.910777][T11589] netlink: 'syz.1.2015': attribute type 29 has an invalid length. [ 1233.928827][T11590] netlink: 'syz.1.2015': attribute type 29 has an invalid length. [ 1234.080279][ T26] audit: type=1107 audit(1784490875.356:26): pid=11591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 1234.080279][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 1234.080279][ T26] Вh0VZ2' [ 1237.246745][T11612] netlink: 'syz.2.2021': attribute type 29 has an invalid length. [ 1237.317514][T11612] netlink: 'syz.2.2021': attribute type 29 has an invalid length. [ 1237.360972][T11615] netlink: 'syz.2.2021': attribute type 29 has an invalid length. [ 1237.370801][ T7] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 1237.586945][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1237.628475][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1237.648775][ T7] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 1237.670763][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.699613][ T7] usb 1-1: config 0 descriptor?? [ 1237.730952][T11601] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1237.900463][T11621] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1238.478208][ T7] usbhid 1-1:0.0: can't add hid device: -71 [ 1238.532326][ T7] usbhid: probe of 1-1:0.0 failed with error -71 [ 1238.602748][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.609677][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.724783][ T7] usb 1-1: USB disconnect, device number 14 [ 1239.170748][ T8849] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1239.407588][ T8849] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1239.444436][ T8849] usb 3-1: config 220 descriptor has 1 excess byte, ignoring [ 1239.540751][ T4318] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1239.644116][ T8849] usb 3-1: config 220 has no interface number 2 [ 1239.743289][ T4318] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.756481][ T4318] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1239.756552][ T8849] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1239.767404][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1239.767481][ T4318] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1239.884020][ T4318] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1239.894930][ T8849] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1239.909843][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.910098][ T8849] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1239.918405][ T4318] usb 2-1: Product: syz [ 1239.929407][ T4318] usb 2-1: Manufacturer: syz [ 1239.935262][ T4318] usb 2-1: SerialNumber: syz [ 1239.955981][ T4318] usb 2-1: config 0 descriptor?? [ 1240.002852][ T4318] garmin_gps 2-1:0.0: Garmin GPS usb/tty converter detected [ 1240.007805][ T8849] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1240.013889][ T4318] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1240.027897][ T4318] garmin_gps: probe of ttyUSB0 failed with error -8 [ 1240.418590][ T8849] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1240.430653][ T8849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.438771][ T8849] usb 3-1: Product: syz [ 1240.464596][ T8849] usb 3-1: Manufacturer: syz [ 1240.466596][ T4357] usb 2-1: USB disconnect, device number 14 [ 1240.469217][ T8849] usb 3-1: SerialNumber: syz [ 1240.543383][ T4357] garmin_gps 2-1:0.0: device disconnected [ 1240.732543][ T8849] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1240.790243][ T8849] usb 3-1: No valid video chain found. [ 1240.806362][ T8849] usb 3-1: selecting invalid altsetting 0 [ 1240.876001][ T8849] usb 3-1: selecting invalid altsetting 0 [ 1240.886009][ T8849] usbtest: probe of 3-1:220.1 failed with error -22 [ 1240.937251][ T8849] usb 3-1: USB disconnect, device number 8 [ 1241.982064][T11652] device wlan0 entered promiscuous mode [ 1241.993460][T11652] batman_adv: batadv0: Adding interface: wlan0 [ 1241.999710][T11652] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1242.025082][T11652] batman_adv: batadv0: Interface activated: wlan0 [ 1242.598348][T11658] overlayfs: failed to resolve './file1': -2 [ 1248.940667][T11697] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1259.847863][T11760] overlayfs: missing 'lowerdir' [ 1266.312964][T11802] overlayfs: missing 'lowerdir' [ 1267.495657][T11810] tipc: Enabling of bearer rejected, already enabled [ 1268.720918][ T5811] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1269.040149][ T26] audit: type=1107 audit(1784490910.316:27): pid=11821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 1269.040149][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 1269.040149][ T26] Вh0VZ2' [ 1269.369562][ T5811] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1269.668004][ T5811] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1269.777181][ T5811] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 1269.813458][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.282604][ T5811] usb 1-1: config 0 descriptor?? [ 1270.288940][T11825] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1270.939186][ T5811] usbhid 1-1:0.0: can't add hid device: -71 [ 1271.488132][ T5811] usbhid: probe of 1-1:0.0 failed with error -71 [ 1271.496204][ T5811] usb 1-1: USB disconnect, device number 15 [ 1274.910639][ T9324] Bluetooth: hci1: command 0x0409 tx timeout [ 1277.098594][T11875] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1279.235688][T11885] tipc: Enabled bearer , priority 0 [ 1279.283454][T11885] device syzkaller0 entered promiscuous mode [ 1279.347859][T11885] tipc: Resetting bearer [ 1279.751559][T11884] tipc: Resetting bearer [ 1279.933472][T11884] tipc: Disabling bearer [ 1280.032797][ T5811] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1280.249260][ T5811] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1280.271054][ T5811] usb 1-1: config 220 descriptor has 1 excess byte, ignoring [ 1280.292259][ T5811] usb 1-1: config 220 has no interface number 2 [ 1280.306670][ T5811] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1280.334598][ T5811] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1280.343403][ T5811] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1280.350338][ T5811] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1280.366256][ T5811] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1280.376018][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.385596][ T5811] usb 1-1: Product: syz [ 1280.399946][ T5811] usb 1-1: Manufacturer: syz [ 1280.416112][ T5811] usb 1-1: SerialNumber: syz [ 1280.750376][ T5811] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1280.760652][ T5811] usb 1-1: No valid video chain found. [ 1280.773189][ T5811] usb 1-1: selecting invalid altsetting 0 [ 1280.823255][ T5811] usb 1-1: selecting invalid altsetting 0 [ 1280.829384][ T5811] usbtest: probe of 1-1:220.1 failed with error -22 [ 1280.862768][ T5811] usb 1-1: USB disconnect, device number 16 [ 1281.318685][T11906] tipc: Enabled bearer , priority 0 [ 1281.363012][T11906] device syzkaller0 entered promiscuous mode [ 1281.542076][T11906] tipc: Resetting bearer [ 1281.659851][T11905] tipc: Resetting bearer [ 1282.152545][T11905] tipc: Disabling bearer [ 1287.668600][T11946] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1287.980103][T11946] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1287.998545][T11946] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1290.638956][T11964] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1291.617625][T11972] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1291.693309][T11972] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1291.875471][T11972] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1292.795583][T11986] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1292.804215][T11986] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1292.815762][T11986] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1294.720968][ T8849] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1294.951245][ T8849] usb 1-1: Using ep0 maxpacket: 8 [ 1295.009389][ T8849] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1295.116989][T12006] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1295.278974][ T8849] usb 1-1: config 0 has no interface number 0 [ 1295.334900][ T8849] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1295.341560][T12006] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1295.354423][T12006] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1296.813096][ T8849] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1296.822312][ T8849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.847442][ T8849] usb 1-1: config 0 descriptor?? [ 1296.926562][ T8849] usb 1-1: can't set config #0, error -71 [ 1296.950757][ T8849] usb 1-1: USB disconnect, device number 17 [ 1298.265121][T12025] device syzkaller0 entered promiscuous mode [ 1299.415545][T12035] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1299.709121][T12035] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1300.032720][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.039053][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1304.560298][T12054] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1304.600743][T12054] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1304.640872][T12054] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1305.090676][ T7] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 1305.361926][T12077] tipc: Enabling of bearer rejected, already enabled [ 1305.452256][ T7] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1305.489750][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1305.504898][ T7] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 1305.518566][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.557610][ T7] usb 5-1: config 0 descriptor?? [ 1305.572455][T12067] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1305.947391][T12080] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1305.955737][T12080] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1305.964927][T12080] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1308.460615][ T7] usbhid 5-1:0.0: can't add hid device: -71 [ 1308.470137][ T7] usbhid: probe of 5-1:0.0 failed with error -71 [ 1308.478509][ T7] usb 5-1: USB disconnect, device number 13 [ 1309.992984][T12105] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1310.084048][T12105] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1310.352240][T12103] snd_dummy snd_dummy.0: control 6:65278:-4:syz0:-259 is already present [ 1310.688526][T12110] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1310.709082][T12110] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1310.717888][T12110] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1311.649731][T12116] fuse: Bad value for 'fd' [ 1313.817783][T12133] snd_dummy snd_dummy.0: control 6:65278:-4:syz0:-259 is already present [ 1314.021883][T12136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.254142][T12142] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1315.274674][T12142] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1316.332768][T12142] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1317.646635][T12162] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.020619][ T125] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1319.920777][ T125] usb 3-1: Using ep0 maxpacket: 8 [ 1319.932388][ T125] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1320.027659][ T125] usb 3-1: config 0 has no interface number 0 [ 1320.754231][ T125] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1320.908170][ T125] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1320.919355][ T125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.937829][ T125] usb 3-1: config 0 descriptor?? [ 1321.069717][ T125] usb 3-1: can't set config #0, error -71 [ 1321.085680][ T125] usb 3-1: USB disconnect, device number 9 [ 1321.611298][T12196] fuse: Bad value for 'fd' [ 1322.750640][T12183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.600655][ T8948] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1324.277116][T12218] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.532869][ T8948] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1324.583344][ T8948] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1324.600194][ T8948] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 1324.638217][ T8948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.025581][ T8948] usb 5-1: config 0 descriptor?? [ 1326.032116][T12214] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1326.768994][ T8948] usbhid 5-1:0.0: can't add hid device: -71 [ 1326.780322][ T8948] usbhid: probe of 5-1:0.0 failed with error -71 [ 1326.842864][ T8948] usb 5-1: USB disconnect, device number 14 [ 1329.385866][T12255] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.919044][ T9324] Bluetooth: hci0: command 0x0409 tx timeout [ 1333.938171][T12283] overlayfs: missing 'lowerdir' [ 1335.414272][T12292] tipc: Enabling of bearer rejected, already enabled [ 1335.965765][T12301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.158648][T12315] fuse: Bad value for 'fd' [ 1339.036121][T12324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.701187][T12333] overlayfs: missing 'lowerdir' [ 1343.901281][T12350] fuse: Bad value for 'fd' [ 1345.672326][T12363] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1345.737246][T12363] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1346.708961][T12367] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1347.006334][T12366] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1347.091106][T12370] fuse: Bad value for 'fd' [ 1347.935721][T12378] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1347.955946][T12378] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1348.005725][T12378] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1348.337282][T12384] overlayfs: missing 'lowerdir' [ 1348.450883][T12388] fuse: Bad value for 'fd' [ 1350.827238][ T26] audit: type=1107 audit(1784490992.036:28): pid=12401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 1350.827238][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 1350.827238][ T26] Вh0VZ2' [ 1352.350682][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 1355.003857][T12428] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1355.111490][T12428] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1356.531168][T12428] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1357.027124][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2245'. [ 1357.145999][T12446] fuse: Bad value for 'fd' [ 1358.590132][T12457] capability: warning: `syz.2.2250' uses deprecated v2 capabilities in a way that may be insecure [ 1359.577626][T12461] lo speed is unknown, defaulting to 1000 [ 1359.584511][T12461] lo speed is unknown, defaulting to 1000 [ 1359.599617][T12461] lo speed is unknown, defaulting to 1000 [ 1359.626251][T12461] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1359.665055][T12461] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1359.749811][T12461] lo speed is unknown, defaulting to 1000 [ 1359.761555][T12461] lo speed is unknown, defaulting to 1000 [ 1359.773979][T12461] lo speed is unknown, defaulting to 1000 [ 1359.784656][T12461] lo speed is unknown, defaulting to 1000 [ 1359.795272][T12461] lo speed is unknown, defaulting to 1000 [ 1360.198058][T12463] overlayfs: missing 'lowerdir' [ 1361.472345][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.478755][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.744283][T12473] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1361.752643][T12473] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1361.761219][T12473] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1362.666072][T12481] fuse: Bad value for 'fd' [ 1363.562058][T12494] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1363.730571][T12494] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1364.613770][T12502] overlayfs: missing 'lowerdir' [ 1364.818168][T12506] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1365.800312][ T26] audit: type=1107 audit(1784491007.076:29): pid=12513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 1365.800312][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 1365.800312][ T26] Вh0VZ2' [ 1368.831384][T12526] fuse: Bad value for 'fd' [ 1369.149357][ T26] audit: type=1107 audit(1784491010.426:30): pid=12533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 1369.149357][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 1369.149357][ T26] Вh0VZ2' [ 1371.011439][T12540] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1371.020606][T12540] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1371.033323][T12540] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1372.021698][T12543] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1372.711054][T12552] siw: device registration error -23 [ 1373.318019][T12558] fuse: Bad value for 'fd' [ 1373.375604][T12556] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1373.384314][T12564] overlayfs: missing 'workdir' [ 1373.400639][T12556] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1373.410426][T12556] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1373.418297][T12566] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1374.231999][T12561] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1375.491160][T12560] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1376.403573][T12588] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1376.544344][T12588] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1377.340623][ T1171] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1377.568041][ T1171] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1377.929774][ T1171] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.940623][ T1171] usb 5-1: config 220 has no interface number 2 [ 1377.954392][ T1171] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1377.967087][T12601] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1377.967905][ T1171] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1377.987659][ T1171] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1377.994829][ T1171] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1378.064252][T12604] batman_adv: batadv0: Interface deactivated: wlan0 [ 1378.071471][T12604] batman_adv: batadv0: Removing interface: wlan0 [ 1378.131010][T12601] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1378.256409][ T1171] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1378.260760][T12601] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1378.481778][ T1171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.029670][ T1171] usb 5-1: Product: syz [ 1379.034152][ T1171] usb 5-1: Manufacturer: syz [ 1379.046182][ T1171] usb 5-1: SerialNumber: syz [ 1379.232331][T12607] fuse: Bad value for 'fd' [ 1379.257336][T12611] overlayfs: missing 'workdir' [ 1379.269925][ T1171] usb 5-1: selecting invalid altsetting 0 [ 1379.286516][ T1171] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1379.299786][ T1171] usb 5-1: No valid video chain found. [ 1379.349756][ T1171] usb 5-1: selecting invalid altsetting 0 [ 1379.410216][ T1171] usbtest: probe of 5-1:220.1 failed with error -22 [ 1379.453942][ T1171] usb 5-1: USB disconnect, device number 15 [ 1383.437120][T12639] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1383.454634][T12639] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1383.463548][T12639] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1385.437347][T12655] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1385.445838][T12655] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1385.480141][T12655] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1385.641501][T12665] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1386.210707][T12667] siw: device registration error -23 [ 1389.771837][T12691] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1389.780188][T12691] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1389.788718][T12691] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1391.380733][T12700] siw: device registration error -23 [ 1393.519136][T12715] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1393.572878][T12715] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1393.581537][T12715] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1395.868712][T12729] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1395.977899][T12729] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1396.729976][T12733] fuse: Bad value for 'fd' [ 1396.730522][T12736] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1396.777558][T12736] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1396.805223][T12736] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1398.323480][T12752] netlink: 'syz.1.2327': attribute type 29 has an invalid length. [ 1399.080665][T12752] netlink: 'syz.1.2327': attribute type 29 has an invalid length. [ 1399.107300][T12758] netlink: 'syz.1.2327': attribute type 29 has an invalid length. [ 1399.571043][ T4965] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1399.606589][T12760] fuse: Bad value for 'fd' [ 1399.911599][ T4965] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1400.610653][ T4965] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1400.621379][ T4965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1400.635086][ T4965] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1400.661846][ T4965] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1400.700741][ T4965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.709337][ T4965] usb 1-1: Product: syz [ 1400.713676][ T4965] usb 1-1: Manufacturer: syz [ 1400.718296][ T4965] usb 1-1: SerialNumber: syz [ 1400.724826][ T4965] usb 1-1: config 0 descriptor?? [ 1400.732035][ T4965] garmin_gps 1-1:0.0: Garmin GPS usb/tty converter detected [ 1400.740193][ T4965] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1400.750992][ T4965] garmin_gps: probe of ttyUSB0 failed with error -8 [ 1400.832269][T12749] batman_adv: batadv0: Adding interface: wlan0 [ 1400.838463][T12749] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1400.863733][T12749] batman_adv: batadv0: Interface activated: wlan0 [ 1401.056863][ T14] usb 1-1: USB disconnect, device number 18 [ 1401.066638][ T14] garmin_gps 1-1:0.0: device disconnected [ 1402.839881][T12791] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1402.938604][T12791] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1403.118533][T12793] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1403.127345][T12793] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1403.135931][T12793] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1407.655633][T12827] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1409.294843][T12827] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1409.436391][T12827] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1411.088188][T12845] fuse: Bad value for 'fd' [ 1412.757160][T12858] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1412.889342][T12854] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1412.928015][ T26] audit: type=1107 audit(1784491054.206:31): pid=12861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 1412.928015][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 1412.928015][ T26] Вh0VZ2' [ 1415.209614][T12886] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 1415.216301][T12886] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 1415.224276][T12886] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 1415.230851][T12886] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 1415.237536][T12886] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff7,4) [ 1415.245579][T12886] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 1415.253838][T12886] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 1415.268669][T12886] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 1415.276783][T12886] comedi comedi0: 8255: I/O port conflict (0xc3,4) [ 1415.283638][T12886] comedi comedi0: 8255: I/O port conflict (0x1000007,4) [ 1415.290926][T12886] comedi comedi0: 8255: I/O port conflict (0x1,4) [ 1415.297576][T12886] comedi comedi0: 8255: I/O port conflict (0x10003,4) [ 1415.304626][T12886] comedi comedi0: 8255: I/O port conflict (0x801000,4) [ 1415.311807][T12886] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4) [ 1415.319119][T12886] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 1415.326010][T12886] comedi comedi0: 8255: I/O port conflict (0x1001010,4) [ 1415.333250][T12886] comedi comedi0: 8255: I/O port conflict (0x1ff,4) [ 1415.340050][T12886] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 1415.346772][T12886] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 1415.353927][T12886] comedi comedi0: 8255: I/O port conflict (0x8001,4) [ 1415.360877][T12886] comedi comedi0: 8255: I/O port conflict (0x7,4) [ 1415.367521][T12886] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 1415.501029][T12886] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 1415.507723][T12886] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 1415.514402][T12886] comedi comedi0: 8255: I/O port conflict (0xfffd,4) [ 1416.989411][T12883] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1417.014979][T12883] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1417.023807][T12883] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1417.948300][T12898] fuse: Bad value for 'fd' [ 1418.953177][ T4965] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1419.165550][ T4965] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.267695][ T4965] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1419.376950][T12914] fuse: Bad value for 'fd' [ 1419.385373][ T4965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1419.448784][ T4965] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1419.492114][ T4965] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1419.501290][ T4965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.509402][ T4965] usb 4-1: Product: syz [ 1419.513905][ T4965] usb 4-1: Manufacturer: syz [ 1419.518518][ T4965] usb 4-1: SerialNumber: syz [ 1419.574151][ T4965] usb 4-1: config 0 descriptor?? [ 1419.598937][ T4965] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 1420.620827][ T4965] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1420.631370][ T4965] garmin_gps: probe of ttyUSB0 failed with error -8 [ 1420.640099][ T4965] usb 4-1: USB disconnect, device number 14 [ 1420.647554][ T4965] garmin_gps 4-1:0.0: device disconnected [ 1420.715710][T12930] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1420.750260][T12930] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1421.957819][T12939] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1421.966645][T12939] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1421.976203][T12939] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1422.995916][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.034982][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.360506][T12945] I/O error, dev loop2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1424.797205][T12965] tipc: Enabling of bearer rejected, already enabled [ 1425.994057][T12977] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.985443][T12983] fuse: Bad value for 'fd' [ 1427.501945][ T4645] Bluetooth: Error in BCSP hdr checksum [ 1428.020705][ T9321] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1428.230013][T12999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.535798][ T31] Bluetooth: Error in BCSP hdr checksum [ 1428.612162][ T31] Bluetooth: Error in BCSP hdr checksum [ 1428.796361][ T9321] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.990763][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1428.990790][ T9324] Bluetooth: hci5: command 0x1003 tx timeout [ 1429.275347][ T9321] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1429.304249][ T9321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1429.317928][ T9321] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1429.344260][ T9321] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1429.353818][ T9321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.386733][ T9321] usb 3-1: Product: syz [ 1429.403463][ T9321] usb 3-1: Manufacturer: syz [ 1429.408171][ T9321] usb 3-1: SerialNumber: syz [ 1429.455374][ T9321] usb 3-1: config 0 descriptor?? [ 1429.475547][ T9321] garmin_gps 3-1:0.0: Garmin GPS usb/tty converter detected [ 1429.531290][ T9321] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1429.626148][ T9321] garmin_gps: probe of ttyUSB0 failed with error -8 [ 1430.026019][ T9321] usb 3-1: USB disconnect, device number 10 [ 1430.035291][ T9321] garmin_gps 3-1:0.0: device disconnected [ 1430.701321][T13008] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1430.764187][ T26] audit: type=1107 audit(1784491072.046:32): pid=13012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 1430.764187][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 1430.764187][ T26] Вh0VZ2' [ 1430.861297][T13008] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1430.893596][T13008] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1431.409134][T13025] tipc: Enabling of bearer rejected, already enabled [ 1432.497382][T13033] tipc: Enabling of bearer rejected, already enabled [ 1433.377644][T13036] overlayfs: failed to resolve './file1': -2 [ 1437.548623][T13071] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1437.569752][T13071] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1437.600688][T13071] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1439.810849][T10926] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1440.677010][T10926] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1440.707485][T10926] usb 5-1: config 220 descriptor has 1 excess byte, ignoring [ 1440.740343][T10926] usb 5-1: config 220 has no interface number 2 [ 1440.767434][T10926] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1440.798379][T10926] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1440.907802][T10926] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1440.940669][T10926] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1441.622307][T10926] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1441.741627][T10926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.781139][T10926] usb 5-1: Product: syz [ 1441.785347][T10926] usb 5-1: Manufacturer: syz [ 1441.789947][T10926] usb 5-1: SerialNumber: syz [ 1443.353904][T10926] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1443.380958][T10926] usb 5-1: No valid video chain found. [ 1443.386501][T10926] usb 5-1: selecting invalid altsetting 0 [ 1443.491515][T10926] usb 5-1: selecting invalid altsetting 0 [ 1443.497300][T10926] usbtest: probe of 5-1:220.1 failed with error -22 [ 1443.700711][T10926] usb 5-1: USB disconnect, device number 16 [ 1447.166071][T13150] tipc: Enabling of bearer rejected, already enabled [ 1450.495127][ T26] audit: type=1107 audit(1784491091.776:33): pid=13168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 1450.495127][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 1450.495127][ T26] Вh0VZ2' [ 1450.964664][T13179] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1451.711794][T13179] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1451.840650][T13179] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1452.816308][T13190] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1452.843187][T13192] overlayfs: failed to clone upperpath [ 1454.941871][T13210] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1454.966357][ T26] audit: type=1107 audit(1784491096.246:34): pid=13208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 1454.966357][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 1454.966357][ T26] Вh0VZ2' [ 1455.011032][T13210] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1455.024154][T13210] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1456.516771][T13223] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1458.221810][T13233] tmpfs: Unknown parameter 'quota' [ 1460.061417][T13237] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 1460.068024][T13237] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 1460.076266][T13237] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 1460.082929][T13237] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 1460.089568][T13237] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff7,4) [ 1460.098379][T13237] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 1460.106334][T13237] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 1460.123209][T13237] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 1460.131329][T13237] comedi comedi0: 8255: I/O port conflict (0xc3,4) [ 1460.138710][T13237] comedi comedi0: 8255: I/O port conflict (0x1000007,4) [ 1460.145938][T13237] comedi comedi0: 8255: I/O port conflict (0x1,4) [ 1460.152613][T13237] comedi comedi0: 8255: I/O port conflict (0x10003,4) [ 1460.159584][T13237] comedi comedi0: 8255: I/O port conflict (0x801000,4) [ 1460.166721][T13237] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4) [ 1460.174157][T13237] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 1460.180979][T13237] comedi comedi0: 8255: I/O port conflict (0x1001010,4) [ 1460.188159][T13237] comedi comedi0: 8255: I/O port conflict (0x1ff,4) [ 1460.195018][T13237] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 1460.203161][T13237] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 1460.209788][T13237] comedi comedi0: 8255: I/O port conflict (0x8001,4) [ 1460.216788][T13237] comedi comedi0: 8255: I/O port conflict (0x7,4) [ 1460.224945][T13237] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 1460.231816][T13237] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 1460.238520][T13237] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 1460.245251][T13237] comedi comedi0: 8255: I/O port conflict (0xfffd,4) [ 1463.729837][T13252] overlayfs: failed to clone upperpath [ 1463.809367][T13254] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1463.949532][T13254] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1465.595897][T13268] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1465.604339][T13268] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1465.628491][T13268] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1468.461781][T13287] siw: device registration error -23 [ 1468.833041][T13290] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1468.866226][T13290] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1469.052261][T13290] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1469.804129][T13299] fuse: Bad value for 'fd' [ 1470.734814][ T4645] Bluetooth: Error in BCSP hdr checksum [ 1472.285788][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1472.286949][ T4286] Bluetooth: hci5: command 0x1003 tx timeout [ 1472.311690][T13321] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1472.384885][T13321] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1472.821823][T13331] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1472.830049][T13331] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1472.889992][T13331] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1473.870692][T13346] tmpfs: Unknown parameter 'quota' [ 1473.935092][T13339] fuse: Bad value for 'fd' [ 1476.472344][T13371] tipc: Enabled bearer , priority 0 [ 1476.491237][T13371] device syzkaller0 entered promiscuous mode [ 1477.991655][T13371] tipc: Resetting bearer [ 1478.025514][T13370] tipc: Resetting bearer [ 1478.068621][T13370] tipc: Disabling bearer [ 1479.018982][T13379] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1479.090427][T13379] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1480.169468][T13389] fuse: Bad value for 'fd' [ 1482.691004][T13408] fuse: Bad value for 'fd' [ 1484.373347][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.379670][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.428907][ T26] audit: type=1107 audit(1784491126.706:35): pid=13415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 1485.428907][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 1485.428907][ T26] Вh0VZ2' [ 1489.940384][T13443] I/O error, dev loop2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1494.503358][T13481] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1494.689335][T13481] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1495.228135][T13484] fuse: Bad value for 'fd' [ 1495.348808][T13489] 9pnet_fd: Insufficient options for proto=fd [ 1496.302009][T13306] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1496.623106][T13306] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 1496.634043][T13306] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1496.690780][T13502] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1496.871577][T13306] usb 4-1: config 0 has no interface number 0 [ 1496.931143][T13306] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1496.943790][T13502] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1497.160285][T13306] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1497.171396][T13502] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1497.650585][T13306] usb 4-1: Manufacturer: syz [ 1497.700711][T13306] usb 4-1: SerialNumber: syz [ 1498.437582][T13306] usb 4-1: config 0 descriptor?? [ 1498.530476][T13306] usb 4-1: can't set config #0, error -71 [ 1498.560854][T13306] usb 4-1: USB disconnect, device number 15 [ 1500.110757][T13306] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1500.321023][T13306] usb 2-1: Using ep0 maxpacket: 8 [ 1500.338875][T13306] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1500.363497][T13306] usb 2-1: config 0 has no interface number 0 [ 1500.379801][T13306] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1500.396171][T13306] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1500.406666][T13306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.421463][T13306] usb 2-1: config 0 descriptor?? [ 1500.443918][T13306] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 1501.580444][ T14] usb 2-1: USB disconnect, device number 15 [ 1502.751131][T13329] Bluetooth: hci2: command 0x0409 tx timeout [ 1503.284473][ T26] audit: type=1107 audit(1784491144.566:36): pid=13559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 1503.284473][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 1503.284473][ T26] Вh0VZ2' [ 1505.068106][T13531] device wlan0 entered promiscuous mode [ 1505.074371][T13531] batman_adv: batadv0: Adding interface: wlan0 [ 1505.084325][T13531] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1505.109893][T13531] batman_adv: batadv0: Interface activated: wlan0 [ 1505.278211][T13568] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1505.356723][T13568] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1505.367615][T13568] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1505.730654][ T4314] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1506.500965][ T4314] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1506.556505][ T4314] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1506.637274][ T4314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1506.759617][ T4314] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1507.651518][ T4314] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1507.665296][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.685775][ T4314] usb 3-1: Product: syz [ 1507.690077][ T4314] usb 3-1: Manufacturer: syz [ 1507.700332][ T4314] usb 3-1: SerialNumber: syz [ 1507.751571][ T4314] usb 3-1: config 0 descriptor?? [ 1507.773725][ T4314] garmin_gps 3-1:0.0: Garmin GPS usb/tty converter detected [ 1507.793964][ T4314] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1507.807793][ T4314] garmin_gps: probe of ttyUSB0 failed with error -8 [ 1508.135582][ T4314] usb 3-1: USB disconnect, device number 11 [ 1508.145794][ T4314] garmin_gps 3-1:0.0: device disconnected [ 1508.234388][T13600] fuse: Bad value for 'fd' [ 1508.542391][T13608] siw: device registration error -23 [ 1508.830773][T13610] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1508.983504][T13610] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1518.430704][T13714] siw: device registration error -23 [ 1521.367070][T13734] overlayfs: failed to clone upperpath [ 1521.686489][T13744] tipc: Enabling of bearer rejected, already enabled [ 1525.551439][ T9324] Bluetooth: hci4: command 0x0409 tx timeout [ 1526.998867][T13777] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.690663][ T4317] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1527.883875][ T4317] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1527.923731][ T4317] usb 4-1: config 228 has an invalid interface number: 86 but max is 0 [ 1527.957133][ T4317] usb 4-1: config 228 has no interface number 0 [ 1528.000680][ T4317] usb 4-1: config 228 interface 86 has no altsetting 0 [ 1528.024342][ T4317] usb 4-1: New USB device found, idVendor=0b57, idProduct=9de3, bcdDevice=87.f6 [ 1528.960237][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.969910][ T4317] usb 4-1: Product: syz [ 1528.974419][ T4317] usb 4-1: Manufacturer: syz [ 1528.980783][ T4317] usb 4-1: SerialNumber: syz [ 1529.301365][ T4317] usbhid 4-1:228.86: couldn't find an input interrupt endpoint [ 1529.327931][ T4317] usb 4-1: USB disconnect, device number 16 [ 1534.024119][T13829] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1534.070691][T13829] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1534.099903][T13829] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1534.783302][T13848] I/O error, dev loop2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1535.741666][T13858] fuse: Bad value for 'fd' [ 1537.189243][T13870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.214477][T13889] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1540.837729][T13899] tmpfs: Unknown parameter 'quota' [ 1541.659870][T13911] fuse: Bad value for 'fd' [ 1541.950060][T13919] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1542.030801][T13919] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1544.738174][T13946] tmpfs: Unknown parameter 'quota' [ 1544.822993][T13950] tmpfs: Unknown parameter 'quota' [ 1545.792008][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.798297][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.186183][T13951] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1546.197422][T13951] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1547.419129][T13956] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1552.857176][T14012] tmpfs: Unknown parameter 'quota' [ 1553.106614][T14018] fuse: Bad value for 'fd' [ 1553.552009][T14022] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1553.587702][T14022] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1553.640482][T14022] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1557.336304][ T26] audit: type=1107 audit(1784491198.616:37): pid=14048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 1557.336304][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 1557.336304][ T26] Вh0VZ2' [ 1558.546239][T14054] tipc: Enabling of bearer rejected, already enabled [ 1560.358645][T14070] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1560.411281][T14070] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1560.982048][T14070] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1563.319698][ T26] audit: type=1107 audit(1784491204.596:38): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 1563.319698][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 1563.319698][ T26] Вh0VZ2' [ 1563.528985][T14103] fuse: Bad value for 'fd' [ 1564.759011][T14118] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1564.768809][T14118] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1564.778103][T14118] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1566.442463][ T26] audit: type=1107 audit(1784491207.726:39): pid=14142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 1566.442463][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 1566.442463][ T26] Вh0VZ2' [ 1566.520797][T14145] tipc: Enabling of bearer rejected, already enabled [ 1567.446151][T14149] fuse: Bad value for 'fd' [ 1568.988534][T14172] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1568.996990][T14172] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1569.007851][T14172] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1570.152648][ T26] audit: type=1107 audit(1784491211.436:40): pid=14181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 1570.152648][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 1570.152648][ T26] Вh0VZ2' [ 1572.180676][ T4317] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1572.377103][ T4317] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1572.400835][ T4317] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1573.357140][T14209] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1573.367096][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1573.378412][ T4317] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1573.446472][ T4317] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1573.456148][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.466786][ T4317] usb 4-1: Product: syz [ 1573.471816][ T4317] usb 4-1: Manufacturer: syz [ 1573.476440][ T4317] usb 4-1: SerialNumber: syz [ 1573.490106][ T4317] usb 4-1: config 0 descriptor?? [ 1573.498983][ T4317] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 1573.509408][ T4317] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1573.529911][ T4317] garmin_gps: probe of ttyUSB0 failed with error -8 [ 1574.059335][ T4317] usb 4-1: USB disconnect, device number 17 [ 1574.068592][ T4317] garmin_gps 4-1:0.0: device disconnected [ 1574.071250][T14217] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1574.099943][T14217] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1574.122497][T14217] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1575.120859][ T8948] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1575.546270][ T8948] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1575.736159][ T8948] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1575.746266][ T8948] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1575.787422][ T8948] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1575.793494][ T26] audit: type=1107 audit(1784491217.066:41): pid=14236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 1575.793494][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 1575.793494][ T26] Вh0VZ2' [ 1575.845504][ T8948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.914866][ T8948] usb 2-1: Product: syz [ 1575.919079][ T8948] usb 2-1: Manufacturer: syz [ 1575.935086][ T8948] usb 2-1: SerialNumber: syz [ 1576.475284][ T8948] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1576.490822][ T8948] usb 2-1: No valid video chain found. [ 1576.527063][ T8948] usb 2-1: USB disconnect, device number 16 [ 1576.667370][T14260] ================================================================== [ 1576.675562][T14260] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 [ 1576.682998][T14260] Read of size 8 at addr ffff888141b85818 by task syz.2.2785/14260 [ 1576.690964][T14260] [ 1576.693317][T14260] CPU: 0 PID: 14260 Comm: syz.2.2785 Not tainted syzkaller #0 [ 1576.700821][T14260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1576.710889][T14260] Call Trace: [ 1576.714240][T14260] [ 1576.717252][T14260] dump_stack_lvl+0x188/0x24e [ 1576.722023][T14260] ? read_lock_is_recursive+0x10/0x10 [ 1576.727458][T14260] ? show_regs_print_info+0x12/0x12 [ 1576.732675][T14260] ? load_image+0x410/0x410 [ 1576.737222][T14260] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1576.742772][T14260] ? __virt_addr_valid+0x188/0x540 [ 1576.747967][T14260] ? __virt_addr_valid+0x467/0x540 [ 1576.753091][T14260] ? dvb_device_open+0xc5/0x360 [ 1576.757955][T14260] print_report+0xa8/0x210 [ 1576.762409][T14260] kasan_report+0x10b/0x140 [ 1576.767053][T14260] ? dvb_device_open+0xc5/0x360 [ 1576.771936][T14260] dvb_device_open+0xc5/0x360 [ 1576.776628][T14260] chrdev_open+0x585/0x5f0 [ 1576.781125][T14260] ? cd_forget+0x160/0x160 [ 1576.785551][T14260] ? fsnotify_perm+0x39b/0x550 [ 1576.790396][T14260] ? cd_forget+0x160/0x160 [ 1576.794824][T14260] do_dentry_open+0x7dd/0x10b0 [ 1576.799662][T14260] path_openat+0x2674/0x2f10 [ 1576.804268][T14260] ? do_filp_open+0x420/0x420 [ 1576.808950][T14260] ? __sched_text_start+0x8/0x8 [ 1576.813879][T14260] ? preempt_schedule+0xbc/0xd0 [ 1576.818743][T14260] do_filp_open+0x1ee/0x420 [ 1576.823260][T14260] ? vfs_tmpfile+0x470/0x470 [ 1576.827864][T14260] ? _raw_spin_unlock+0x24/0x40 [ 1576.832725][T14260] ? alloc_fd+0x590/0x640 [ 1576.837159][T14260] do_sys_openat2+0x14b/0x4f0 [ 1576.841846][T14260] ? do_sys_open+0xe0/0xe0 [ 1576.846271][T14260] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1576.852267][T14260] ? lock_chain_count+0x20/0x20 [ 1576.857130][T14260] __x64_sys_openat+0x135/0x160 [ 1576.861996][T14260] do_syscall_64+0x4c/0xa0 [ 1576.866429][T14260] ? clear_bhb_loop+0x60/0xb0 [ 1576.871117][T14260] ? clear_bhb_loop+0x60/0xb0 [ 1576.875800][T14260] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1576.881713][T14260] RIP: 0033:0x7efd6535e6ce [ 1576.886203][T14260] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1576.905873][T14260] RSP: 002b:00007efd66303b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1576.914373][T14260] RAX: ffffffffffffffda RBX: 00007efd663046c0 RCX: 00007efd6535e6ce [ 1576.922352][T14260] RDX: 0000000000040002 RSI: 00007efd66303c00 RDI: ffffffffffffff9c [ 1576.930327][T14260] RBP: 00007efd66303c00 R08: 0000000000000000 R09: 0000000000000000 [ 1576.938305][T14260] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1576.946283][T14260] R13: 00007efd65626128 R14: 00007efd65626090 R15: 00007fff20389998 [ 1576.954270][T14260] [ 1576.957288][T14260] [ 1576.959608][T14260] Allocated by task 1: [ 1576.963743][T14260] kasan_set_track+0x4b/0x70 [ 1576.968347][T14260] __kasan_kmalloc+0x8e/0xa0 [ 1576.972942][T14260] dvb_register_device+0x305/0x1dc0 [ 1576.978147][T14260] dvb_register_frontend+0x629/0x900 [ 1576.983584][T14260] vidtv_bridge_probe+0x9cf/0xf50 [ 1576.988692][T14260] platform_probe+0x137/0x1c0 [ 1576.993463][T14260] really_probe+0x24a/0xb40 [ 1576.997973][T14260] __driver_probe_device+0x1f5/0x390 [ 1577.003262][T14260] driver_probe_device+0x4f/0x420 [ 1577.008291][T14260] __driver_attach+0x43d/0x6c0 [ 1577.013058][T14260] bus_for_each_dev+0x182/0x1f0 [ 1577.017918][T14260] bus_add_driver+0x324/0x5d0 [ 1577.022602][T14260] driver_register+0x32d/0x430 [ 1577.027369][T14260] vidtv_bridge_init+0x39/0x67 [ 1577.032276][T14260] do_one_initcall+0x257/0x800 [ 1577.037065][T14260] do_initcall_level+0x13d/0x1ed [ 1577.042032][T14260] do_initcalls+0x4b/0x8a [ 1577.046364][T14260] kernel_init_freeable+0x401/0x5ab [ 1577.051560][T14260] kernel_init+0x19/0x1b0 [ 1577.055961][T14260] ret_from_fork+0x1f/0x30 [ 1577.060383][T14260] [ 1577.062709][T14260] Freed by task 14209: [ 1577.066768][T14260] kasan_set_track+0x4b/0x70 [ 1577.071366][T14260] kasan_save_free_info+0x27/0x40 [ 1577.076395][T14260] ____kasan_slab_free+0x126/0x1f0 [ 1577.081520][T14260] slab_free_freelist_hook+0x133/0x1b0 [ 1577.086990][T14260] __kmem_cache_free+0xb6/0x200 [ 1577.091855][T14260] dvb_device_open+0x2d2/0x360 [ 1577.096631][T14260] chrdev_open+0x585/0x5f0 [ 1577.101051][T14260] do_dentry_open+0x7dd/0x10b0 [ 1577.105818][T14260] path_openat+0x2674/0x2f10 [ 1577.110406][T14260] do_filp_open+0x1ee/0x420 [ 1577.114914][T14260] do_sys_openat2+0x14b/0x4f0 [ 1577.119597][T14260] __x64_sys_openat+0x135/0x160 [ 1577.124454][T14260] do_syscall_64+0x4c/0xa0 [ 1577.128891][T14260] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1577.134798][T14260] [ 1577.137121][T14260] The buggy address belongs to the object at ffff888141b85800 [ 1577.137121][T14260] which belongs to the cache kmalloc-256 of size 256 [ 1577.151350][T14260] The buggy address is located 24 bytes inside of [ 1577.151350][T14260] 256-byte region [ffff888141b85800, ffff888141b85900) [ 1577.164549][T14260] [ 1577.166871][T14260] The buggy address belongs to the physical page: [ 1577.173360][T14260] page:ffffea000506e100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x141b84 [ 1577.183600][T14260] head:ffffea000506e100 order:1 compound_mapcount:0 compound_pincount:0 [ 1577.191927][T14260] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 1577.200004][T14260] raw: 057ff00000010200 0000000000000000 dead000000000122 ffff888017441b40 [ 1577.208594][T14260] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1577.217175][T14260] page dumped because: kasan: bad access detected [ 1577.223597][T14260] page_owner tracks the page as allocated [ 1577.229306][T14260] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9165087487, free_ts 0 [ 1577.248940][T14260] post_alloc_hook+0x173/0x1a0 [ 1577.253799][T14260] get_page_from_freelist+0x206b/0x2180 [ 1577.259354][T14260] __alloc_pages+0x1ec/0x4f0 [ 1577.263964][T14260] alloc_page_interleave+0x24/0x1e0 [ 1577.269192][T14260] alloc_slab_page+0x5d/0x180 [ 1577.273875][T14260] new_slab+0x87/0x2d0 [ 1577.278466][T14260] ___slab_alloc+0xbc5/0x1240 [ 1577.283146][T14260] __kmem_cache_alloc_node+0x126/0x270 [ 1577.288606][T14260] kmalloc_trace+0x26/0xe0 [ 1577.293113][T14260] bus_add_driver+0xdc/0x5d0 [ 1577.297706][T14260] driver_register+0x32d/0x430 [ 1577.302472][T14260] usb_register_driver+0x201/0x3c0 [ 1577.307623][T14260] do_one_initcall+0x257/0x800 [ 1577.312390][T14260] do_initcall_level+0x13d/0x1ed [ 1577.317335][T14260] do_initcalls+0x4b/0x8a [ 1577.321665][T14260] kernel_init_freeable+0x401/0x5ab [ 1577.326872][T14260] page_owner free stack trace missing [ 1577.332234][T14260] [ 1577.334558][T14260] Memory state around the buggy address: [ 1577.340256][T14260] ffff888141b85700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1577.348319][T14260] ffff888141b85780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1577.356379][T14260] >ffff888141b85800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1577.364437][T14260] ^ [ 1577.369283][T14260] ffff888141b85880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1577.377345][T14260] ffff888141b85900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1577.385402][T14260] ================================================================== [ 1577.410096][T14260] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1577.417332][T14260] CPU: 0 PID: 14260 Comm: syz.2.2785 Not tainted syzkaller #0 [ 1577.424791][T14260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1577.434849][T14260] Call Trace: [ 1577.438129][T14260] [ 1577.441059][T14260] dump_stack_lvl+0x188/0x24e [ 1577.445745][T14260] ? memcpy+0x3c/0x60 [ 1577.449730][T14260] ? show_regs_print_info+0x12/0x12 [ 1577.454940][T14260] ? load_image+0x410/0x410 [ 1577.459457][T14260] panic+0x2d3/0x710 [ 1577.463356][T14260] ? bpf_jit_dump+0xd0/0xd0 [ 1577.467864][T14260] ? check_panic_on_warn+0x6c/0xa0 [ 1577.473105][T14260] check_panic_on_warn+0x80/0xa0 [ 1577.478047][T14260] ? dvb_device_open+0xc5/0x360 [ 1577.482903][T14260] end_report+0x66/0x110 [ 1577.487154][T14260] kasan_report+0x118/0x140 [ 1577.491669][T14260] ? dvb_device_open+0xc5/0x360 [ 1577.496536][T14260] dvb_device_open+0xc5/0x360 [ 1577.501223][T14260] chrdev_open+0x585/0x5f0 [ 1577.505649][T14260] ? cd_forget+0x160/0x160 [ 1577.510073][T14260] ? fsnotify_perm+0x39b/0x550 [ 1577.514837][T14260] ? cd_forget+0x160/0x160 [ 1577.519257][T14260] do_dentry_open+0x7dd/0x10b0 [ 1577.524028][T14260] path_openat+0x2674/0x2f10 [ 1577.528636][T14260] ? do_filp_open+0x420/0x420 [ 1577.533314][T14260] ? __sched_text_start+0x8/0x8 [ 1577.538174][T14260] ? preempt_schedule+0xbc/0xd0 [ 1577.543032][T14260] do_filp_open+0x1ee/0x420 [ 1577.547537][T14260] ? vfs_tmpfile+0x470/0x470 [ 1577.552146][T14260] ? _raw_spin_unlock+0x24/0x40 [ 1577.557002][T14260] ? alloc_fd+0x590/0x640 [ 1577.561341][T14260] do_sys_openat2+0x14b/0x4f0 [ 1577.566024][T14260] ? do_sys_open+0xe0/0xe0 [ 1577.570446][T14260] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1577.576440][T14260] ? lock_chain_count+0x20/0x20 [ 1577.581297][T14260] __x64_sys_openat+0x135/0x160 [ 1577.586154][T14260] do_syscall_64+0x4c/0xa0 [ 1577.590575][T14260] ? clear_bhb_loop+0x60/0xb0 [ 1577.595256][T14260] ? clear_bhb_loop+0x60/0xb0 [ 1577.599936][T14260] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1577.605837][T14260] RIP: 0033:0x7efd6535e6ce [ 1577.610254][T14260] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1577.629863][T14260] RSP: 002b:00007efd66303b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1577.638282][T14260] RAX: ffffffffffffffda RBX: 00007efd663046c0 RCX: 00007efd6535e6ce [ 1577.646252][T14260] RDX: 0000000000040002 RSI: 00007efd66303c00 RDI: ffffffffffffff9c [ 1577.654234][T14260] RBP: 00007efd66303c00 R08: 0000000000000000 R09: 0000000000000000 [ 1577.662205][T14260] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1577.670177][T14260] R13: 00007efd65626128 R14: 00007efd65626090 R15: 00007fff20389998 [ 1577.678157][T14260] [ 1577.681439][T14260] Kernel Offset: disabled [ 1577.685752][T14260] Rebooting in 86400 seconds..