last executing test programs: 2.311293694s ago: executing program 0 (id=134): bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x2, 0x16, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000001a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001a80), 0xffffffffffffff15, 0x10, &(0x7f0000001ac0), 0xf000000}, 0x48) 2.311139638s ago: executing program 0 (id=135): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) close(0x3) 1.550948992s ago: executing program 3 (id=147): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000400)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f00000003c0)={'syz_tun\x00', @random="e80300"}) 1.507904089s ago: executing program 3 (id=149): bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="050000000a0000000a0000000902"], 0x50) 1.45141241s ago: executing program 3 (id=151): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x10200, 0x81) add_key(0x0, 0x0, 0x0, 0x0, r1) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@remote, 0x34ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1.451202646s ago: executing program 3 (id=152): r0 = socket$key(0xf, 0x3, 0x2) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f0000000080)={0x60890244, 0xfff, 0x3, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x0, 0x10, r1, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0xf000, 0x40, 0x3, 0x1}, {0x8, 0xb, 0x10, 0x4}, {0x8, 0x5, 0x1, 0xfff}]}, 0x10) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x2}, 0x1c) connect$inet6(r5, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4040881) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r6, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c01000010000100fe75e79b9f010000fe8e0000000000000000000a00000001e0003f74000000000000000000000000000107144e230005000000803a000000afed59e97e9d2f53fc4a4eb6f75310f02e527dd31aa1ff3d3567301edec3fd91", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x7, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x8}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) ioctl$FICLONERANGE(r8, 0x4020940d, &(0x7f00000000c0)={{r7}, 0x7, 0x8000, 0x600000}) 910.80062ms ago: executing program 0 (id=153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000198500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000170000008500000023000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 910.644549ms ago: executing program 0 (id=154): listen(0xffffffffffffffff, 0x0) r0 = syz_create_resource$futex(&(0x7f0000000180)) futex(0x0, 0xc, 0x1, 0x0, r0, 0x1) r1 = syz_create_resource$futex(&(0x7f00000001c0)=0x1) r2 = syz_create_resource$futex(&(0x7f0000000200)) futex(r1, 0xb, 0x1, 0x0, r2, 0x2) futex(r2, 0xd, 0x2, 0x0, r1, 0x0) futex(r1, 0xc, 0x1, 0x0, r2, 0x1) exit(0x3) 801.166908ms ago: executing program 1 (id=156): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000500)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r1, &(0x7f0000001d80)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x4, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x5, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x7, 0x0, 0x5, 0xba, 0x1, 0x7fe, 0x7fff, 0x2, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x7, 0xb66, 0x2, 0xd5c4, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81319d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0xfffffffd, 0x5, 0xe46, 0xfffffb66, 0x80, 0x2, 0x84, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x807, 0x2, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008f, 0x10000, 0xfe4, 0x3ff], [0x2, 0xffffffff, 0x4, 0x3, 0x3, 0x20000010, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x1, 0xffffffff, 0x0, 0x9, 0x13, 0x10001, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x401, 0x4, 0xf, 0x7, 0x47, 0x7, 0x0, 0x11, 0xfffffffd, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0xe, 0x10001, 0x1, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x3, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb02d, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x2, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) 691.278868ms ago: executing program 1 (id=157): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001300)={0x0, 0x0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 691.149952ms ago: executing program 1 (id=158): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x802) 558.892608ms ago: executing program 1 (id=159): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='vers\x00', &(0x7f0000000200)='3\x00', 0x0) 556.034342ms ago: executing program 3 (id=161): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x501}]}, 0x34}}, 0x0) 555.937655ms ago: executing program 1 (id=162): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x20041) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000080)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xfffffffb], [0xffffffff, 0xffffffff, 0x3ff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffdf7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xfdffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x81, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x3388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x8, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000300)=0xfd8) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 500.858026ms ago: executing program 3 (id=164): connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) r3 = add_key(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000580)='asymmetric\x00', 0x0, &(0x7f00000005c0)="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", 0x559, r3) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000b40)={r4, 0xe3}, 0x0, &(0x7f0000000b80)="cb44032c2a3a518de9000000c11a536275a146d65e2988ef1a4992f9a2675b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62dd70ef53038a0e38940ef7f799a4257d4bf67e86244beee88b1e3e5bac3ad4dea44fc08db9f741b76996bf785368bc3b208158713c814e6e9e7a9cb923bdcf8df50500000000878700b8bf19da1095e6b47db929f5277a39b2c121f0adffea4fc3cdf6578298601882835783433d69235c8e4d17ab168bb112970ed88899356456c2167044a93025dfc78a7c91890e00", 0x0) 430.931988ms ago: executing program 1 (id=168): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)=@newnexthop={0x18, 0x68, 0x900, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x4, 0x0, 0xb}}, 0x18}, 0x1, 0x0, 0x0, 0x4008004}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r0, 0x0, 0x2004c084) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd5000f8dbdf2555000000080001004f00000008000300", @ANYRES32=r2, @ANYBLOB="b3e2ee97c92fd739f154c4d04afb024d65759299643b038a8676092af5be3b3072082845813e4fa1df94d97cc4a70a70ee6f83c47d837e09dd8c122f82109fcf62dea454b633cfc2753c3e0a1b20017db1930e1431a4c2363c6996a44fb4001f5f690723ebd26e71dde4"], 0x30}, 0x1, 0x0, 0x0, 0x20044041}, 0x24008000) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r7) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000900)={'veth1_to_bond\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000fedbdf251200000008000700020000000c00018008000100", @ANYRES32=r9, @ANYBLOB='\b\x00\b\x00\x00\x00'], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x44) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a00)={'ip6tnl0\x00', r9, 0x29, 0x70, 0x1, 0x5, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @loopback, 0x7800, 0x80, 0x0, 0x40}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DM_DEV_RENAME(r11, 0xc138fd05, &(0x7f0000000740)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x0, 0x0, 0x400, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, @uuid={'CRP-syz', 0x0, '2\x00'}}) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x200000000622c, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r10, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r3, 0x905, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x7, 0x51}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xa}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000081}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r11, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000003c0)={0x1c, r13, 0x1, 0x70bd08, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8c4}, 0x2000c010) 430.855318ms ago: executing program 2 (id=169): rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) socket(0x8000000010, 0x2, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204032, 0xffffffffffffffff, 0xec776000) 357.708986ms ago: executing program 2 (id=170): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7ffffdff}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) 201.397736ms ago: executing program 2 (id=171): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000700)="8e2f7830c123", 0x6}], 0x1) 141.519094ms ago: executing program 2 (id=172): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@exit_looper]}) 141.418284ms ago: executing program 2 (id=173): write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000600) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/ping_group_range\x00', 0x40242, 0x0) unshare(0x0) write$binfmt_format(r0, 0x0, 0x0) 259.761µs ago: executing program 0 (id=174): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd9}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 146.781µs ago: executing program 0 (id=175): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x9}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000700), 0x82, 0x2) syz_usb_ep_write(r0, 0x81, 0xda, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6") 0s ago: executing program 2 (id=176): r0 = syz_open_dev$loop(&(0x7f0000001200), 0xffffffff7ffffffd, 0x1ea1e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001240)='/sys/kernel/fscaps', 0x103a00, 0x150) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000001280)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x800000000000008, 0x0, 0x0, 0x9, 0x1d, "faf97557e5a1140400fc81bec3bddbb82a65350000099cebdc25f5ac000000000000000000000800", "32d82cfc06c89f3d9e234b00c50997d3bef409ff2176ff7b55cd0a5d81cd4a524bd3ffe70c7f2a04002f7b6aa54cc50a1fcaed1e1508374800", "715237641a8ccf162e43ac61f700000000009b4100", [0x8, 0x24]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:33048' (ED25519) to the list of known hosts. [ 40.091826][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 40.091840][ T42] audit: type=1400 audit(1792761650.463:138): avc: denied { name_bind } for pid=5766 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.137057][ T42] audit: type=1400 audit(1792761650.513:139): avc: denied { execute } for pid=5767 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.137658][ T42] audit: type=1400 audit(1792761650.513:140): avc: denied { execute_no_trans } for pid=5767 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.559725][ T42] audit: type=1400 audit(1792761652.933:141): avc: denied { mounton } for pid=5767 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.561370][ T42] audit: type=1400 audit(1792761652.933:142): avc: denied { mount } for pid=5767 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.563197][ T5767] cgroup: Unknown subsys name 'net' [ 42.564586][ T42] audit: type=1400 audit(1792761652.933:143): avc: denied { unmount } for pid=5767 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.668983][ T5767] cgroup: Unknown subsys name 'cpuset' [ 42.674099][ T5767] cgroup: Unknown subsys name 'rlimit' [ 42.810971][ T42] audit: type=1400 audit(1792761653.183:144): avc: denied { setattr } for pid=5767 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.811538][ T42] audit: type=1400 audit(1792761653.183:145): avc: denied { create } for pid=5767 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.811833][ T42] audit: type=1400 audit(1792761653.183:146): avc: denied { write } for pid=5767 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.812200][ T42] audit: type=1400 audit(1792761653.183:147): avc: denied { read } for pid=5767 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.885784][ T5771] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.979913][ T5767] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.971287][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 48.971304][ T42] audit: type=1400 audit(1792761659.343:154): avc: denied { execmem } for pid=5774 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 49.233079][ T42] audit: type=1400 audit(1792761659.603:155): avc: denied { create } for pid=5778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.233841][ T42] audit: type=1400 audit(1792761659.603:156): avc: denied { read write } for pid=5778 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.234855][ T42] audit: type=1400 audit(1792761659.603:157): avc: denied { open } for pid=5779 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.244527][ T42] audit: type=1400 audit(1792761659.613:158): avc: denied { ioctl } for pid=5779 comm="syz-executor" path="socket:[6481]" dev="sockfs" ino=6481 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.261426][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 49.262134][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 49.264188][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 49.264548][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 49.265142][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 49.265790][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 49.266501][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 49.267066][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 49.269458][ T5139] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 49.269979][ T5139] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 49.274732][ T42] audit: type=1400 audit(1792761659.643:159): avc: denied { read } for pid=5779 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.275012][ T42] audit: type=1400 audit(1792761659.653:160): avc: denied { open } for pid=5779 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.277477][ T42] audit: type=1400 audit(1792761659.653:161): avc: denied { mounton } for pid=5779 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 49.283987][ T42] audit: type=1400 audit(1792761659.653:162): avc: denied { module_request } for pid=5779 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 49.285940][ T68] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 49.287182][ T68] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 49.287948][ T68] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 49.288869][ T68] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 49.289336][ T68] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 49.291850][ T42] audit: type=1400 audit(1792761659.663:163): avc: denied { module_request } for pid=5778 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 49.296286][ T68] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 49.297560][ T68] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 49.297927][ T68] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 49.298591][ T68] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 49.299246][ T68] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 49.507509][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.512267][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.516910][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.531487][ T5779] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 49.536657][ T5778] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 49.585791][ T5786] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 49.658842][ T5788] infiniband rxe0: set active [ 49.661631][ T5788] infiniband rxe0: added rxe_eth0 [ 49.672185][ T1049] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.673332][ T5788] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 49.673361][ T5788] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 49.673395][ T5788] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 49.692490][ T5788] RDS/IB: rxe0: added [ 49.692701][ T5788] smc: adding ib device rxe0 with port count 1 [ 49.692765][ T5788] smc: ib device rxe0 port 1 has no pnetid [ 49.710289][ T1049] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.722230][ T1356] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.730815][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.849586][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.905954][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.906455][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.906518][ T5779] bridge_slave_0: entered allmulticast mode [ 49.907323][ T5779] bridge_slave_0: entered promiscuous mode [ 49.920251][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.920292][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.920370][ T5778] bridge_slave_0: entered allmulticast mode [ 49.921093][ T5778] bridge_slave_0: entered promiscuous mode [ 49.922777][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.922817][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.922873][ T5778] bridge_slave_1: entered allmulticast mode [ 49.923646][ T5778] bridge_slave_1: entered promiscuous mode [ 49.932085][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.932145][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.932212][ T5779] bridge_slave_1: entered allmulticast mode [ 49.933211][ T5779] bridge_slave_1: entered promiscuous mode [ 49.982625][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.983349][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.984562][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.984713][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.984803][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.984951][ T5786] bridge_slave_0: entered allmulticast mode [ 49.986774][ T5786] bridge_slave_0: entered promiscuous mode [ 49.990373][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.990439][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.990480][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.990538][ T5786] bridge_slave_1: entered allmulticast mode [ 49.991614][ T5786] bridge_slave_1: entered promiscuous mode [ 50.000373][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.046063][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.048529][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.056268][ T5779] team0: Port device team_slave_0 added [ 50.068723][ T5778] team0: Port device team_slave_0 added [ 50.077373][ T5779] team0: Port device team_slave_1 added [ 50.078323][ T5786] team0: Port device team_slave_0 added [ 50.079315][ T5778] team0: Port device team_slave_1 added [ 50.080140][ T5786] team0: Port device team_slave_1 added [ 50.116171][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.116182][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.116195][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.116994][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.117657][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.117664][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.117677][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.122724][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.122732][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.122744][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.123725][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.123732][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.123745][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.136592][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.136605][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.136624][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.138005][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.138013][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.138025][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.175805][ T5786] hsr_slave_0: entered promiscuous mode [ 50.176785][ T5786] hsr_slave_1: entered promiscuous mode [ 50.183222][ T5778] hsr_slave_0: entered promiscuous mode [ 50.183946][ T5778] hsr_slave_1: entered promiscuous mode [ 50.184490][ T5778] debugfs: 'hsr0' already exists in 'hsr' [ 50.184544][ T5778] Cannot create hsr debugfs directory [ 50.205360][ T5779] hsr_slave_0: entered promiscuous mode [ 50.205867][ T5779] hsr_slave_1: entered promiscuous mode [ 50.206162][ T5779] debugfs: 'hsr0' already exists in 'hsr' [ 50.206174][ T5779] Cannot create hsr debugfs directory [ 50.539247][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.543342][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.544318][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.546615][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.547064][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.548837][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.549258][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.552526][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.626611][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.626702][ T5778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.627105][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.627204][ T5778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.659046][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.659290][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.659390][ T5788] bridge_slave_0: entered allmulticast mode [ 50.660849][ T5788] bridge_slave_0: entered promiscuous mode [ 50.670336][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.674548][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.675609][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.681046][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.685103][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.685165][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.685258][ T5788] bridge_slave_1: entered allmulticast mode [ 50.686581][ T5788] bridge_slave_1: entered promiscuous mode [ 50.701488][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.704519][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.705668][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.709086][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.742771][ T105] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.743844][ T105] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.759385][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.771591][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.801578][ T5788] team0: Port device team_slave_0 added [ 50.805760][ T5788] team0: Port device team_slave_1 added [ 50.837045][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.837061][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.837082][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.837295][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.840143][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.840894][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.843661][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.846646][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.850281][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.850914][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.858799][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.864107][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.864118][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.864139][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.913525][ T5788] hsr_slave_0: entered promiscuous mode [ 50.913987][ T5788] hsr_slave_1: entered promiscuous mode [ 50.914294][ T5788] debugfs: 'hsr0' already exists in 'hsr' [ 50.914306][ T5788] Cannot create hsr debugfs directory [ 50.962067][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.073444][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.093319][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.093412][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.113448][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.113539][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.124422][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.163746][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.167937][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.169902][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.172373][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.173211][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.177200][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.178772][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.183947][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.191880][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.198341][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.216430][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.216551][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.232438][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.239443][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.239525][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.242298][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.242403][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.259759][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.259856][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.285812][ T5139] Bluetooth: hci0: command tx timeout [ 51.367316][ T5139] Bluetooth: hci3: command tx timeout [ 51.367422][ T68] Bluetooth: hci2: command tx timeout [ 51.367485][ T5789] Bluetooth: hci1: command tx timeout [ 51.377979][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.389033][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.397077][ T1060] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.397150][ T1060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.403187][ T1060] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.403313][ T1060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.547671][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.590670][ T5778] veth0_vlan: entered promiscuous mode [ 51.607520][ T5778] veth1_vlan: entered promiscuous mode [ 51.630945][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.631341][ T5778] veth0_macvtap: entered promiscuous mode [ 51.638740][ T5778] veth1_macvtap: entered promiscuous mode [ 51.653364][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.661039][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.694207][ T5779] veth0_vlan: entered promiscuous mode [ 51.703655][ T5779] veth1_vlan: entered promiscuous mode [ 51.740272][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.743709][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.743727][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.770915][ T5779] veth0_macvtap: entered promiscuous mode [ 51.778631][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.778649][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.782203][ T5779] veth1_macvtap: entered promiscuous mode [ 51.785276][ T5883] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.785451][ T5883] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.785483][ T5883] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.795547][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.806873][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.811562][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.826570][ T5786] veth0_vlan: entered promiscuous mode [ 51.831544][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.837879][ T5786] veth1_vlan: entered promiscuous mode [ 51.912278][ T5778] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.914950][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.914966][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.925377][ T5883] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.925748][ T5883] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.925778][ T5883] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.925806][ T5883] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.929860][ T5788] veth0_vlan: entered promiscuous mode [ 51.942409][ T5786] veth0_macvtap: entered promiscuous mode [ 51.951036][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.951049][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.952533][ T5786] veth1_macvtap: entered promiscuous mode [ 51.953892][ T5788] veth1_vlan: entered promiscuous mode [ 51.968935][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.977812][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.003464][ T5788] veth0_macvtap: entered promiscuous mode [ 52.013114][ T5788] veth1_macvtap: entered promiscuous mode [ 52.040393][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.071435][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.071452][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.075797][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.117223][ T1060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.117242][ T1060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.128014][ T5950] Bluetooth: MGMT ver 1.23 [ 52.128040][ T5950] Bluetooth: hci0: too big key_count value 62977 [ 52.160429][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.160443][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.177871][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.182208][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.182219][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.186374][ T5651] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.186410][ T5651] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.186440][ T5651] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.186467][ T5651] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.186496][ T5651] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.186524][ T5651] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.186552][ T5651] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.373559][ T5966] netlink: 'syz.2.8': attribute type 11 has an invalid length. [ 52.755680][ T5500] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.916000][ T5500] usb 7-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90 [ 52.923242][ T5500] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.931323][ T5500] usb 7-1: config 0 descriptor?? [ 52.950407][ T5500] bfusb 7-1:0.0: probe with driver bfusb failed with error -5 [ 53.155457][ T5500] usb 7-1: USB disconnect, device number 2 [ 53.233212][ T5994] ip_tables: iptables: counters copy to user failed while replacing table [ 53.341585][ T5998] SELinux: failed to load policy [ 53.367563][ T5789] Bluetooth: hci0: command tx timeout [ 53.444810][ T5789] Bluetooth: hci1: command tx timeout [ 53.445529][ T5789] Bluetooth: hci3: command tx timeout [ 53.445553][ T5789] Bluetooth: hci2: command tx timeout [ 53.728620][ T6016] netlink: 1 bytes leftover after parsing attributes in process `syz.0.29'. [ 53.984779][ T5889] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 54.026756][ T42] kauditd_printk_skb: 73 callbacks suppressed [ 54.026771][ T42] audit: type=1400 audit(1792761664.403:237): avc: denied { setopt } for pid=6033 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 54.026808][ T42] audit: type=1400 audit(1792761664.403:238): avc: denied { accept } for pid=6033 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 54.154850][ T5889] usb 7-1: Using ep0 maxpacket: 8 [ 54.155392][ T5889] usb 7-1: New USB device found, idVendor=1bc7, idProduct=9200, bcdDevice=63.ed [ 54.156648][ T5889] usb 7-1: config 1 has an invalid interface number: 134 but max is 0 [ 54.156669][ T5889] usb 7-1: config 1 has no interface number 0 [ 54.156693][ T5889] usb 7-1: config 1 interface 134 has no altsetting 0 [ 54.159388][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.159407][ T5889] usb 7-1: Product: syz [ 54.159421][ T5889] usb 7-1: Manufacturer: syz [ 54.159433][ T5889] usb 7-1: SerialNumber: syz [ 54.307869][ T42] audit: type=1400 audit(1792761664.683:239): avc: denied { append } for pid=6048 comm="syz.3.39" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 54.386089][ T5889] option 7-1:1.134: GSM modem (1-port) converter detected [ 54.395060][ T5889] usb 7-1: USB disconnect, device number 3 [ 54.396227][ T5889] option 7-1:1.134: device disconnected [ 54.479580][ T42] audit: type=1400 audit(1792761664.853:240): avc: denied { connect } for pid=6054 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.648908][ T42] audit: type=1400 audit(1792761665.023:241): avc: denied { read } for pid=6061 comm="syz.1.45" name="event2" dev="devtmpfs" ino=1179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.649180][ T42] audit: type=1400 audit(1792761665.023:242): avc: denied { open } for pid=6061 comm="syz.1.45" path="/dev/input/event2" dev="devtmpfs" ino=1179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.651360][ T42] audit: type=1400 audit(1792761665.023:243): avc: denied { ioctl } for pid=6061 comm="syz.1.45" path="/dev/input/event2" dev="devtmpfs" ino=1179 ioctlcmd=0x40104593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.717026][ T42] audit: type=1326 audit(1792761665.093:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6065 comm="syz.0.47" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f331459f559 code=0x0 [ 54.764871][ T5500] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.792921][ T42] audit: type=1400 audit(1792761665.163:245): avc: denied { read } for pid=6069 comm="syz.1.49" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 54.793264][ T42] audit: type=1400 audit(1792761665.163:246): avc: denied { open } for pid=6069 comm="syz.1.49" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 54.886290][ T6074] warning: `syz.1.51' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 54.926439][ T5500] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 54.929378][ T5500] usb 8-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 54.929404][ T5500] usb 8-1: Product: syz [ 54.929417][ T5500] usb 8-1: Manufacturer: syz [ 54.929427][ T5500] usb 8-1: SerialNumber: syz [ 54.933476][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.933508][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.933522][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.933533][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.933545][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.933556][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.933567][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.933579][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.933590][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.933601][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.933705][ T5500] usb 8-1: config 0 descriptor?? [ 54.935955][ T5500] ch341 8-1:0.0: ch341-uart converter detected [ 54.941884][ T9] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 54.969801][ T6079] fido_id[6079]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 55.067280][ T6088] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6088 comm=syz.2.56 [ 55.107657][ T6092] capability: warning: `syz.1.59' uses deprecated v2 capabilities in a way that may be insecure [ 55.445092][ T5789] Bluetooth: hci0: command tx timeout [ 55.464711][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 55.524818][ T5789] Bluetooth: hci2: command tx timeout [ 55.524853][ T5789] Bluetooth: hci3: command tx timeout [ 55.524871][ T5789] Bluetooth: hci1: command tx timeout [ 55.541077][ T5500] usb 8-1: failed to send control message: -71 [ 55.541105][ T5500] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 55.545085][ T5500] usb 8-1: USB disconnect, device number 2 [ 55.545842][ T5500] ch341 8-1:0.0: device disconnected [ 55.624777][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 55.625490][ T9] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 55.626410][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 55.628245][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.628263][ T9] usb 6-1: Product: syz [ 55.628295][ T9] usb 6-1: Manufacturer: syz [ 55.628308][ T9] usb 6-1: SerialNumber: syz [ 55.630398][ T9] usb 6-1: config 0 descriptor?? [ 55.635993][ T9] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 55.637792][ T9] usb 6-1: Detected FT232R [ 55.837195][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 56.046129][ T9] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 56.244340][ T5500] usb 6-1: USB disconnect, device number 2 [ 56.259818][ T5500] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 56.260590][ T5500] ftdi_sio 6-1:0.0: device disconnected [ 56.773582][ T6137] ip_tables: iptables: counters copy to user failed while replacing table [ 56.869849][ T6146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.84'. [ 56.883149][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'. [ 57.081698][ T6172] input: syz0 as /devices/virtual/input/input7 [ 57.101101][ T6174] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 57.535328][ T5780] Bluetooth: hci0: command tx timeout [ 57.542675][ T6210] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 57.605231][ T5780] Bluetooth: hci1: command tx timeout [ 57.605255][ T5780] Bluetooth: hci2: command tx timeout [ 57.615163][ T5789] Bluetooth: hci3: command 0x0419 tx timeout [ 57.634707][ T5872] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 57.786435][ T5872] usb 8-1: New USB device found, idVendor=0421, idProduct=0178, bcdDevice=a8.c0 [ 57.787709][ T5872] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 57.787728][ T5872] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.787741][ T5872] usb 8-1: config 0 has no interface number 0 [ 57.787772][ T5872] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.790814][ T5872] usb 8-1: config 0 descriptor?? [ 57.997888][ T5872] usb 8-1: string descriptor 0 read error: -71 [ 58.002712][ T5872] rndis_host 8-1:0.89: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 58.013866][ T5872] usb 8-1: USB disconnect, device number 3 [ 58.314744][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.375181][ T1489] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 58.464880][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 58.465628][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 58.466572][ T9] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 58.466591][ T9] usb 5-1: config 0 has no interface number 0 [ 58.469323][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.469340][ T9] usb 5-1: Product: syz [ 58.469351][ T9] usb 5-1: Manufacturer: syz [ 58.469362][ T9] usb 5-1: SerialNumber: syz [ 58.471350][ T9] usb 5-1: config 0 descriptor?? [ 58.525294][ T1489] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 58.528249][ T1489] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.528300][ T1489] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.528321][ T1489] usb 7-1: config 0 interface 0 has no altsetting 0 [ 58.528347][ T1489] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.530890][ T1489] usb 7-1: config 0 descriptor?? [ 58.877532][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 58.877550][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 58.966096][ T1489] hid-multitouch 0003:0EEF:72C4.0003: hidraw1: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.2-1/input0 [ 59.141501][ T5870] usb 7-1: USB disconnect, device number 4 [ 59.681764][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 59.681882][ T9] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 59.686205][ T68] Bluetooth: hci3: command 0x0419 tx timeout [ 59.688693][ T9] usb 5-1: USB disconnect, device number 2 [ 59.730943][ T42] kauditd_printk_skb: 30 callbacks suppressed [ 59.730955][ T42] audit: type=1400 audit(1792761670.103:277): avc: denied { read write } for pid=6245 comm="syz.2.128" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 59.730979][ T42] audit: type=1400 audit(1792761670.103:278): avc: denied { open } for pid=6245 comm="syz.2.128" path="/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 59.733784][ T42] audit: type=1400 audit(1792761670.103:279): avc: denied { ioctl } for pid=6245 comm="syz.2.128" path="/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xc138fd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 59.738200][ T6246] device-mapper: table: 248:0: crypt: Not enough arguments (-EINVAL) [ 59.738219][ T6246] device-mapper: ioctl: error adding target to table [ 59.782526][ T42] audit: type=1400 audit(1792761670.153:280): avc: denied { create } for pid=6248 comm="syz.2.129" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 59.784043][ T42] audit: type=1400 audit(1792761670.153:281): avc: denied { ioctl } for pid=6248 comm="syz.2.129" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11098 ioctlcmd=0xc018aa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 59.831298][ T6251] bridge1: entered promiscuous mode [ 59.874532][ T42] audit: type=1400 audit(1792761670.243:282): avc: denied { read write } for pid=6252 comm="syz.2.131" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 59.874837][ T42] audit: type=1400 audit(1792761670.243:283): avc: denied { open } for pid=6252 comm="syz.2.131" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 59.875235][ T42] audit: type=1400 audit(1792761670.253:284): avc: denied { mounton } for pid=6252 comm="syz.2.131" path="/15/file0" dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.986767][ T42] audit: type=1804 audit(1792761670.363:285): pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.131" name="/newroot/15/file0" dev="fuse" ino=1 res=1 errno=0 [ 60.037314][ T42] audit: type=1400 audit(1792761670.413:286): avc: denied { mounton } for pid=6252 comm="syz.2.131" path="/15/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 60.037403][ T6255] 9p: Bad value for 'rfdno' [ 60.037961][ T6255] 9p: Bad value for 'rfdno' [ 60.624754][ T5871] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 60.745388][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 60.784781][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 60.785241][ T5871] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 60.786053][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.786068][ T5871] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 60.786086][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.789418][ T5871] usb 5-1: config 0 descriptor?? [ 60.894772][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 60.897205][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 60.898199][ T9] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 60.898219][ T9] usb 6-1: config 0 has no interface number 0 [ 60.900203][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.900222][ T9] usb 6-1: Product: syz [ 60.900233][ T9] usb 6-1: Manufacturer: syz [ 60.900245][ T9] usb 6-1: SerialNumber: syz [ 60.902537][ T9] usb 6-1: config 0 descriptor?? [ 60.933815][ T5870] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.042725][ T6280] ftl_cs: FTL header not found. [ 61.072425][ T6280] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [6] [ 61.073003][ T6288] block2mtd: error: cannot open device /dev/zram0 [ 61.109595][ T9] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 61.109639][ T9] uvcvideo 6-1:0.31: No valid video chain found. [ 61.196957][ T5871] usbhid 5-1:0.0: can't add hid device: -71 [ 61.197042][ T5871] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 61.199681][ T5871] usb 5-1: USB disconnect, device number 3 [ 61.311433][ T9] usb 6-1: USB disconnect, device number 3 [ 61.398845][ T6319] netlink: 108 bytes leftover after parsing attributes in process `syz.3.152'. [ 61.900105][ T6328] input: syz0 as /devices/virtual/input/input8 [ 62.135877][ T6343] SELinux: Context is not valid (left unmapped). [ 62.265607][ T6357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.168'. [ 62.321201][ T6360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.168'. [ 62.545504][ T6368] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.702280][ T6376] loop5: detected capacity change from 0 to 7 [ 62.707954][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.708201][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 62.708949][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.709011][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 62.709437][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.709498][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 62.710200][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.710255][ C3] Buffer I/O error on dev loop5, logical block ** replaying previous printk message ** [ 62.710255][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 62.711407][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.711460][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 62.711615][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.711666][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 62.711808][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.711859][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 62.711976][ T6376] ldm_validate_partition_table(): Disk read failed. [ 62.712141][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.712191][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 62.712341][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.712392][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 62.712559][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.712611][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 62.712795][ T6376] Dev loop5: unable to read RDB block 0 [ 62.713538][ T6376] loop5: unable to read partition table [ 62.713695][ T6376] loop5: partition table beyond EOD, truncated [ 62.713741][ T6376] loop_reread_partitions: partition scan of loop5 (úùuWå¡) failed (rc=-5) [ 62.735007][ T6376] [ 62.781135][ T6376] ====================================================== [ 62.783297][ T6376] WARNING: possible circular locking dependency detected [ 62.785689][ T6376] syzkaller #0 Not tainted [ 62.787126][ T6376] ------------------------------------------------------ [ 62.789336][ T6376] syz.2.176/6376 is trying to acquire lock: [ 62.791900][ T6376] ffff88801eaa5a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 62.795112][ T6376] [ 62.795112][ T6376] but task is already holding lock: [ 62.797444][ T6376] ffff88802a0b1300 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 62.800909][ T6376] [ 62.800909][ T6376] which lock already depends on the new lock. [ 62.800909][ T6376] [ 62.804141][ T6376] [ 62.804141][ T6376] the existing dependency chain (in reverse order) is: [ 62.807013][ T6376] [ 62.807013][ T6376] -> #2 (&q->q_usage_counter(io)#22){++++}-{0:0}: [ 62.809712][ T6376] lock_acquire+0x1d1/0x380 [ 62.811299][ T6376] blk_alloc_queue+0x610/0x790 [ 62.812983][ T6376] blk_mq_alloc_queue+0x174/0x290 [ 62.814732][ T6376] __blk_mq_alloc_disk+0x29/0x120 [ 62.816433][ T6376] loop_add+0x498/0xb60 [ 62.817877][ T6376] loop_init+0x1d3/0x200 [ 62.819298][ T6376] do_one_initcall+0x11c/0x6f0 [ 62.820892][ T6376] kernel_init_freeable+0x6ea/0x7b0 [ 62.822586][ T6376] kernel_init+0x21/0x1d0 [ 62.824054][ T6376] ret_from_fork+0x730/0xd60 [ 62.825618][ T6376] ret_from_fork_asm+0x1a/0x30 [ 62.827227][ T6376] [ 62.827227][ T6376] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 62.829355][ T6376] lock_acquire+0x1d1/0x380 [ 62.830855][ T6376] fs_reclaim_acquire+0xc4/0x100 [ 62.832480][ T6376] kmem_cache_alloc_noprof+0x63/0x6a0 [ 62.834249][ T6376] __kernfs_iattrs+0x126/0x450 [ 62.835970][ T6376] __kernfs_setattr+0x4d/0x3c0 [ 62.837554][ T6376] kernfs_iop_setattr+0xda/0x130 [ 62.839184][ T6376] notify_change+0xb25/0x1330 [ 62.840834][ T6376] do_truncate+0x1df/0x240 [ 62.842385][ T6376] path_openat+0x1e93/0x23f0 [ 62.843983][ T6376] do_file_open+0x20e/0x430 [ 62.845530][ T6376] do_sys_openat2+0x163/0x1d0 [ 62.847052][ T6376] __x64_sys_openat+0x12d/0x210 [ 62.848763][ T6376] do_syscall_64+0x123/0x790 [ 62.850372][ T6376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.852371][ T6376] [ 62.852371][ T6376] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 62.855016][ T6376] check_prev_add+0xeb/0xe60 [ 62.856640][ T6376] __lock_acquire+0x1528/0x1f40 [ 62.858345][ T6376] lock_acquire+0x1d1/0x380 [ 62.859936][ T6376] down_read+0x94/0x4c0 [ 62.861417][ T6376] kernfs_iop_getattr+0x9c/0xf0 [ 62.863095][ T6376] vfs_getattr_nosec+0x31b/0x470 [ 62.864854][ T6376] vfs_getattr+0x4a/0x60 [ 62.866362][ T6376] loop_update_dio_alignment+0x13c/0x410 [ 62.868317][ T6376] lo_ioctl+0x15c8/0x1df0 [ 62.869853][ T6376] blkdev_ioctl+0x5ad/0x6f0 [ 62.871451][ T6376] __x64_sys_ioctl+0x18e/0x210 [ 62.873124][ T6376] do_syscall_64+0x123/0x790 [ 62.874749][ T6376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.876830][ T6376] [ 62.876830][ T6376] other info that might help us debug this: [ 62.876830][ T6376] [ 62.880011][ T6376] Chain exists of: [ 62.880011][ T6376] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#22 [ 62.880011][ T6376] [ 62.884452][ T6376] Possible unsafe locking scenario: [ 62.884452][ T6376] [ 62.886783][ T6376] CPU0 CPU1 [ 62.888490][ T6376] ---- ---- [ 62.890168][ T6376] lock(&q->q_usage_counter(io)#22); [ 62.891847][ T6376] lock(fs_reclaim); [ 62.893893][ T6376] lock(&q->q_usage_counter(io)#22); [ 62.896480][ T6376] rlock(&root->kernfs_iattr_rwsem); [ 62.898178][ T6376] [ 62.898178][ T6376] *** DEADLOCK *** [ 62.898178][ T6376] [ 62.900735][ T6376] locks held by syz.2.176/6376: 3, last CPU#0: [ 62.902649][ T6376] #0: ffff88802a219430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 62.905821][ T6376] #1: ffff88802a0b1300 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 62.909437][ T6376] #2: ffff88802a0b1338 (&q->q_usage_counter(queue)#6){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 62.913090][ T6376] [ 62.913090][ T6376] stack backtrace: [ 62.914715][ T5872] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 62.917265][ T6376] CPU: 0 UID: 0 PID: 6376 Comm: syz.2.176 Not tainted syzkaller #0 PREEMPT(full) [ 62.920127][ T6376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.923258][ T6376] Call Trace: [ 62.924342][ T6376] [ 62.925306][ T6376] dump_stack_lvl+0x100/0x190 [ 62.926793][ T6376] print_circular_bug.cold+0x178/0x1be [ 62.928514][ T6376] check_noncircular+0x146/0x160 [ 62.930104][ T6376] check_prev_add+0xeb/0xe60 [ 62.931557][ T6376] __lock_acquire+0x1528/0x1f40 [ 62.933105][ T6376] lock_acquire+0x1d1/0x380 [ 62.934543][ T6376] ? kernfs_iop_getattr+0x9c/0xf0 [ 62.936147][ T6376] ? __pfx___might_resched+0x10/0x10 [ 62.937841][ T6376] down_read+0x94/0x4c0 [ 62.939190][ T6376] ? kernfs_iop_getattr+0x9c/0xf0 [ 62.940793][ T6376] ? find_held_lock+0x2b/0x80 [ 62.942280][ T6376] ? __pfx_down_read+0x10/0x10 [ 62.943786][ T6376] ? kernfs_root+0xee/0x2a0 [ 62.945348][ T6376] kernfs_iop_getattr+0x9c/0xf0 [ 62.946871][ T6376] vfs_getattr_nosec+0x31b/0x470 [ 62.948442][ T6376] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 62.950215][ T6376] vfs_getattr+0x4a/0x60 [ 62.951539][ T6376] loop_update_dio_alignment+0x13c/0x410 [ 62.953318][ T6376] ? __pfx_loop_update_dio_alignment+0x10/0x10 [ 62.955263][ T6376] ? mark_held_locks+0x40/0x70 [ 62.956779][ T6376] lo_ioctl+0x15c8/0x1df0 [ 62.958150][ T6376] ? __lock_acquire+0x5c0/0x1f40 [ 62.959733][ T6376] ? __kasan_slab_free+0x5f/0x80 [ 62.961321][ T6376] ? kfree+0x22b/0x6d0 [ 62.962613][ T6376] ? tomoyo_path_number_perm+0x46d/0x580 [ 62.964395][ T6376] ? security_file_ioctl+0xd3/0x230 [ 62.966122][ T6376] ? __x64_sys_ioctl+0xb7/0x210 [ 62.967671][ T6376] ? do_syscall_64+0x123/0x790 [ 62.969192][ T6376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.971119][ T6376] ? __pfx_lo_ioctl+0x10/0x10 [ 62.972613][ T6376] ? avc_has_extended_perms+0x201/0x10b0 [ 62.974385][ T6376] ? find_held_lock+0x2b/0x80 [ 62.975913][ T6376] ? avc_has_extended_perms+0x33a/0x10b0 [ 62.977701][ T6376] ? avc_has_extended_perms+0x33a/0x10b0 [ 62.979619][ T6376] ? avc_has_extended_perms+0x4a5/0x10b0 [ 62.981425][ T6376] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 62.983274][ T6376] ? kasan_quarantine_put+0x104/0x240 [ 62.984988][ T6376] ? blk_get_meta_cap+0xd4/0x6c0 [ 62.986535][ T6376] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 62.988230][ T6376] ? tomoyo_path_number_perm+0x28f/0x580 [ 62.990073][ T6376] ? blkdev_common_ioctl+0x515/0x2b80 [ 62.991744][ T6376] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 62.993517][ T6376] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 62.995382][ T6376] ? do_vfs_ioctl+0x226/0x13e0 [ 62.996894][ T6376] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 62.998470][ T6376] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 63.000533][ T6376] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 63.002644][ T6376] ? __fget_files+0x34/0x3d0 [ 63.004818][ T6376] ? __pfx_lo_ioctl+0x10/0x10 [ 63.006301][ T6376] blkdev_ioctl+0x5ad/0x6f0 [ 63.007723][ T6376] ? __pfx_blkdev_ioctl+0x10/0x10 [ 63.009316][ T6376] ? selinux_file_ioctl+0x1e0/0x290 [ 63.010960][ T6376] ? selinux_file_ioctl+0x1e7/0x290 [ 63.012582][ T6376] ? __pfx_blkdev_ioctl+0x10/0x10 [ 63.014181][ T6376] __x64_sys_ioctl+0x18e/0x210 [ 63.015703][ T6376] do_syscall_64+0x123/0x790 [ 63.017195][ T6376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.019024][ T6376] RIP: 0033:0x7f93baf9f559 [ 63.020465][ T6376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.026374][ T6376] RSP: 002b:00007f93b91f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.028942][ T6376] RAX: ffffffffffffffda RBX: 00007f93bb225fa0 RCX: 00007f93baf9f559 [ 63.031408][ T6376] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 63.033856][ T6376] RBP: 00007f93bb036b20 R08: 0000000000000000 R09: 0000000000000000 [ 63.036326][ T6376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.038753][ T6376] R13: 00007f93bb226038 R14: 00007f93bb225fa0 R15: 00007fffb9ddad28 [ 63.041244][ T6376] [ 63.046368][ T6376] ldm_validate_partition_table(): Disk read failed. [ 63.047341][ T6376] Dev loop5: unable to read RDB block 0 [ 63.047818][ T6376] loop5: unable to read partition table [ 63.047952][ T6376] loop5: partition table beyond EOD, truncated [ 63.047989][ T6376] loop_reread_partitions: partition scan of loop5 (úùuWå¡) failed (rc=-5) [ 63.085075][ T5872] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 63.085864][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.085924][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.087031][ T5872] usb 5-1: config 0 descriptor?? [ 63.491604][ T5872] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 63.492637][ T5872] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0926:3333.0004/input/input9 [ 63.552501][ T5872] keytouch 0003:0926:3333.0004: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 63.953131][ T5872] usb 5-1: USB disconnect, device number 4 [ 71.125466][ T1449] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.125508][ T1449] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.126011][ T50] cfg80211: failed to load regulatory.db