last executing test programs: 57.567955607s ago: executing program 2 (id=10081): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000500", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 56.509152791s ago: executing program 2 (id=10101): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r1, 0x40, 0x1, 0x8, 0x4, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 56.264760088s ago: executing program 2 (id=10108): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x0, @remote, 'team_slave_0\x00'}}, 0x1e) 56.179117555s ago: executing program 2 (id=10110): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) close(0x3) 55.960073175s ago: executing program 2 (id=10115): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 55.895847422s ago: executing program 2 (id=10118): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x38}}, 0x1c, 0x0}}], 0x1, 0x2000c0c0) 39.792246043s ago: executing program 32 (id=10118): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x38}}, 0x1c, 0x0}}], 0x1, 0x2000c0c0) 24.736801996s ago: executing program 5 (id=10508): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x8, 0xa}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb22880f8ffaf633206e26df63a43bbc587a3d5a4dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5d5c527060057222f4bd2355ccab39fa20d4033b6b687491532080101805fd79c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a0d2a808be13beb51f37da6ec0046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0x2d26, 0x3, 0x1d, 0x2, 0x7, 0x1}}]}}]}, 0x154}}, 0x0) 24.669681393s ago: executing program 5 (id=10510): io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x1068, 0x0) 24.507375135s ago: executing program 5 (id=10512): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130703000000ffdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100000000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="06"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 24.443945401s ago: executing program 5 (id=10514): socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) 24.357150485s ago: executing program 5 (id=10516): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x34, r1, 0x852dd6c070cd7e4d, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}]}, 0x34}, 0x4, 0x700000000000000, 0x0, 0x4}, 0x8850) 24.247680653s ago: executing program 5 (id=10519): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 23.628307495s ago: executing program 0 (id=10527): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b00010062726964676500"], 0x6c}}, 0x40000) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 23.521429013s ago: executing program 0 (id=10528): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgget$private(0x0, 0x0) 23.26421091s ago: executing program 0 (id=10529): inotify_init1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) unshare(0x28000600) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x3, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x8}, 0x0, 0x0, 0x0) 23.184466928s ago: executing program 0 (id=10530): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 23.174003831s ago: executing program 0 (id=10531): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x45, @pic={0x81, 0x5, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x3, 0x0, 0x0, 0x1}}) 23.089455567s ago: executing program 0 (id=10532): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x6]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7ff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) 21.918547806s ago: executing program 4 (id=10545): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r0, 0x1) 21.88776015s ago: executing program 4 (id=10546): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsmount(0xffffffffffffffff, 0x0, 0xfc) 21.662224351s ago: executing program 4 (id=10547): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 21.498009236s ago: executing program 4 (id=10548): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 21.45488841s ago: executing program 4 (id=10549): r0 = fsopen(&(0x7f0000000280)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 21.406899705s ago: executing program 4 (id=10551): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r0, 0x121, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5}]}, 0x24}}, 0x0) 20.249435044s ago: executing program 3 (id=10558): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x4, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 20.067111919s ago: executing program 3 (id=10562): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x4100}], 0x1, 0x0, 0x0, 0x0) 19.999697003s ago: executing program 3 (id=10563): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0xaaaa782, 0x0, [{0x2, 0x7, 0x0, 0x7ffffffc, 0x3}, {0x40000001, 0xb17, 0xffff1c4c, 0x7, 0x10007}, {0x80000008, 0x0, 0xfffffff7, 0x2, 0x8}]}) 19.87634961s ago: executing program 3 (id=10564): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000180)=0x1000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x6) 19.852753901s ago: executing program 3 (id=10565): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000500)={0xb04, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x101}, @NL80211_ATTR_FRAME_MATCH={0xadd, 0x5b, "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"}]}, 0xb04}, 0x1, 0x0, 0x0, 0x240009c0}, 0x4800) 19.824160153s ago: executing program 3 (id=10566): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r0, 0x801, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "63f40000002bd63786733c8999"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac06}]}]}, 0x44}}, 0x0) 16.788427265s ago: executing program 1 (id=10585): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfdfff00c}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 16.762064093s ago: executing program 1 (id=10586): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000280)=0x8001) close(r0) 16.735256807s ago: executing program 1 (id=10587): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000040)={'nat\x00', 0x7003, [0x7, 0x8004000a, 0x129, 0x1007, 0x3]}, &(0x7f0000000000)=0x54) 16.45306022s ago: executing program 1 (id=10588): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x14) read(r0, &(0x7f00000019c0)=""/4097, 0x1001) 16.422665548s ago: executing program 1 (id=10589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 16.388638843s ago: executing program 1 (id=10590): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000016c0), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x2c, r2, 0xdcb2820860fc9ebd, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48c4}, 0x20000004) 8.009518504s ago: executing program 33 (id=10519): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 7.009226802s ago: executing program 34 (id=10532): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x6]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7ff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) 5.002175519s ago: executing program 35 (id=10551): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r0, 0x121, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5}]}, 0x24}}, 0x0) 3.504400722s ago: executing program 36 (id=10566): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r0, 0x801, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "63f40000002bd63786733c8999"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac06}]}]}, 0x44}}, 0x0) 0s ago: executing program 37 (id=10590): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000016c0), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x2c, r2, 0xdcb2820860fc9ebd, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48c4}, 0x20000004) kernel console output (not intermixed with test programs): number 121 [ 525.673647][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 525.838061][ T5858] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 526.009430][ T5858] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 526.033666][ T5858] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 526.050509][ T5858] usb 1-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 526.073528][ T5858] usb 1-1: config 220 has no interface number 2 [ 526.082456][ T5858] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 526.098426][ T5858] usb 1-1: config 220 interface 0 has no altsetting 0 [ 526.105808][ T5858] usb 1-1: config 220 interface 76 has no altsetting 0 [ 526.113210][ T5858] usb 1-1: config 220 interface 1 has no altsetting 0 [ 526.122379][ T5858] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 526.146503][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.161950][ T5858] usb 1-1: Product: syz [ 526.166527][ T5858] usb 1-1: Manufacturer: syz [ 526.171367][ T5858] usb 1-1: SerialNumber: syz [ 526.258276][T26872] netlink: 'syz.4.9720': attribute type 1 has an invalid length. [ 526.311924][T26872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.429448][ T5858] usb 1-1: selecting invalid altsetting 0 [ 526.442806][ T5858] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 526.454779][T26880] sp0: Synchronizing with TNC [ 526.461339][ T5858] uvcvideo 1-1:220.0: No valid video chain found. [ 526.507974][ T5858] usb 1-1: selecting invalid altsetting 0 [ 526.526280][ T5858] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 526.559694][ T5858] usb 1-1: USB disconnect, device number 127 [ 526.866228][T26907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9737'. [ 526.999711][T26913] gre3: entered promiscuous mode [ 527.067852][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 527.199499][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 527.265613][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 527.265630][ T30] audit: type=1326 audit(2000000083.362:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26922 comm="syz.1.9744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2b39acb9 code=0x7ffc0000 [ 527.339319][ T30] audit: type=1326 audit(2000000083.362:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26922 comm="syz.1.9744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2b39acb9 code=0x7ffc0000 [ 527.386390][ T30] audit: type=1326 audit(2000000083.372:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26922 comm="syz.1.9744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f0e2b39acb9 code=0x7ffc0000 [ 527.449680][T26933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9750'. [ 527.460071][ T30] audit: type=1326 audit(2000000083.372:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26922 comm="syz.1.9744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2b39acb9 code=0x7ffc0000 [ 527.522389][ T30] audit: type=1326 audit(2000000083.372:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26922 comm="syz.1.9744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2b39acb9 code=0x7ffc0000 [ 527.550472][ T30] audit: type=1326 audit(2000000083.372:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26922 comm="syz.1.9744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f0e2b39acb9 code=0x7ffc0000 [ 527.600895][ T30] audit: type=1326 audit(2000000083.475:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26922 comm="syz.1.9744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2b39acb9 code=0x7ffc0000 [ 527.687331][ T30] audit: type=1326 audit(2000000083.475:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26922 comm="syz.1.9744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2b39acb9 code=0x7ffc0000 [ 527.861439][ T30] audit: type=1400 audit(2000000083.924:1657): avc: denied { append } for pid=26950 comm="syz.1.9758" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 528.072616][ T30] audit: type=1400 audit(2000000084.120:1658): avc: denied { bind } for pid=26961 comm="syz.1.9764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 528.195776][T26971] netlink: 332 bytes leftover after parsing attributes in process `syz.4.9767'. [ 528.230875][T26971] netlink: 160 bytes leftover after parsing attributes in process `syz.4.9767'. [ 528.360057][T26982] gre1: entered promiscuous mode [ 528.509107][ T5858] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 528.690777][ T5858] usb 4-1: Using ep0 maxpacket: 32 [ 528.736051][ T5858] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 528.749298][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.757426][ T5858] usb 4-1: Product: syz [ 528.764846][ T5858] usb 4-1: Manufacturer: syz [ 528.771894][ T5858] usb 4-1: SerialNumber: syz [ 528.789201][ T5858] usb 4-1: config 0 descriptor?? [ 528.807342][ T5858] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 528.815391][ T5858] dvb-usb: bulk message failed: -22 (2/0) [ 528.828284][ T5858] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 528.849718][ T5858] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 528.860696][ T5858] usb 4-1: media controller created [ 528.876900][ T5858] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 528.914161][T27008] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9786'. [ 528.915818][ T5858] usb 4-1: selecting invalid altsetting 7 [ 528.929489][ T5858] cxusb: set interface failed [ 528.934192][ T5858] dvb-usb: bulk message failed: -22 (1/0) [ 529.007419][ T5858] DVB: Unable to find symbol lgdt330x_attach() [ 529.051594][ T5858] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 529.129172][ T5858] rc_core: IR keymap rc-dvico-portable not found [ 529.135840][ T5858] Registered IR keymap rc-empty [ 529.165339][ T5858] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 529.193145][ T5858] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input85 [ 529.213822][ T5858] dvb-usb: schedule remote query interval to 100 msecs. [ 529.223688][ T5858] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 529.267038][ T5858] usb 4-1: USB disconnect, device number 114 [ 529.362428][ T5858] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 530.535844][T27092] netlink: 774 bytes leftover after parsing attributes in process `syz.3.9825'. [ 530.546642][T27092] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9825'. [ 530.583097][ T5894] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 530.744655][ T5894] usb 2-1: Using ep0 maxpacket: 8 [ 530.753504][ T5894] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 66, changing to 10 [ 530.771966][ T5894] usb 2-1: config 0 interface 0 has no altsetting 0 [ 530.790847][ T5894] usb 2-1: New USB device found, idVendor=1e71, idProduct=200d, bcdDevice= 0.00 [ 530.813159][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.838891][ T5894] usb 2-1: config 0 descriptor?? [ 531.010115][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 531.115682][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 531.122536][T27117] netlink: 120 bytes leftover after parsing attributes in process `syz.0.9839'. [ 531.147438][T27117] netlink: 'syz.0.9839': attribute type 1 has an invalid length. [ 531.158342][T27117] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9839'. [ 531.238006][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 531.297134][ T5894] hid_parser_main: 2 callbacks suppressed [ 531.297155][ T5894] nzxt-smart2 0003:1E71:200D.0050: unknown main item tag 0x0 [ 531.336376][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 531.358391][ T5894] nzxt-smart2 0003:1E71:200D.0050: unknown main item tag 0x0 [ 531.374548][ T5894] nzxt-smart2 0003:1E71:200D.0050: unknown main item tag 0x0 [ 531.393229][ T5894] nzxt-smart2 0003:1E71:200D.0050: unknown main item tag 0x0 [ 531.410222][ T5894] nzxt-smart2 0003:1E71:200D.0050: unknown main item tag 0x0 [ 531.422118][ T5894] nzxt-smart2 0003:1E71:200D.0050: unknown main item tag 0x0 [ 531.431969][ T5894] nzxt-smart2 0003:1E71:200D.0050: unknown main item tag 0x0 [ 531.470408][ T5894] nzxt-smart2 0003:1E71:200D.0050: unknown main item tag 0x0 [ 531.485408][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 531.505435][ T5894] nzxt-smart2 0003:1E71:200D.0050: unknown main item tag 0x0 [ 531.526448][ T5894] nzxt-smart2 0003:1E71:200D.0050: unknown main item tag 0x0 [ 531.538966][ T5894] nzxt-smart2 0003:1E71:200D.0050: unbalanced collection at end of report description [ 531.557575][ T5894] nzxt-smart2 0003:1E71:200D.0050: probe with driver nzxt-smart2 failed with error -22 [ 531.582554][ T5894] usb 2-1: USB disconnect, device number 122 [ 531.623229][T15948] udevd[15948]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 531.705429][T27149] trusted_key: encrypted_key: key user:syz not found [ 531.755830][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 531.984572][T25507] udevd[25507]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 532.112092][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 532.239592][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 532.667248][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 532.667267][ T30] audit: type=1400 audit(2000000088.414:1671): avc: denied { append } for pid=27198 comm="syz.2.9877" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 532.918807][ T30] audit: type=1400 audit(2000000088.647:1672): avc: denied { bind } for pid=27209 comm="syz.1.9882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 533.024138][ T30] audit: type=1400 audit(2000000088.750:1673): avc: denied { getopt } for pid=27216 comm="syz.3.9885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 533.497240][T27235] macvlan1: entered allmulticast mode [ 533.510829][T27234] macvlan1: left allmulticast mode [ 533.677758][T27238] sp0: Synchronizing with TNC [ 533.712292][T27237] [U] è [ 533.844911][ T30] audit: type=1326 audit(2000000089.517:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27243 comm="syz.1.9898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2b39acb9 code=0x7ffc0000 [ 533.903996][ T30] audit: type=1326 audit(2000000089.517:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27243 comm="syz.1.9898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f0e2b39acb9 code=0x7ffc0000 [ 533.964429][ T30] audit: type=1326 audit(2000000089.517:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27243 comm="syz.1.9898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2b39acb9 code=0x7ffc0000 [ 533.990618][ T30] audit: type=1326 audit(2000000089.517:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27243 comm="syz.1.9898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2b39acb9 code=0x7ffc0000 [ 534.099182][ T30] audit: type=1326 audit(2000000089.517:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27243 comm="syz.1.9898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f0e2b39acb9 code=0x7ffc0000 [ 534.138174][ T30] audit: type=1326 audit(2000000089.517:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27243 comm="syz.1.9898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2b39acb9 code=0x7ffc0000 [ 534.171068][ T30] audit: type=1326 audit(2000000089.517:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27243 comm="syz.1.9898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2b39acb9 code=0x7ffc0000 [ 534.435606][T27272] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9911'. [ 534.711159][T27286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9919'. [ 535.100495][T27307] nftables ruleset with unbound set [ 535.306294][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 535.326165][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 535.344025][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 535.379811][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 536.227730][T25195] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 536.268687][T27378] netlink: 'syz.2.9963': attribute type 3 has an invalid length. [ 536.290765][T27378] netlink: 'syz.2.9963': attribute type 1 has an invalid length. [ 536.320683][T27378] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9963'. [ 536.365387][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 536.412511][T25195] usb 2-1: Using ep0 maxpacket: 16 [ 536.453369][T25195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.490639][T25195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.517966][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 536.522112][T25195] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 536.559568][T25195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.570252][T25195] usb 2-1: config 0 descriptor?? [ 536.730152][ T915] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 536.808519][T27413] netlink: 'syz.4.9978': attribute type 1 has an invalid length. [ 536.908250][ T915] usb 1-1: Using ep0 maxpacket: 32 [ 536.929879][ T915] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.947033][ T915] usb 1-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 536.960521][ T915] usb 1-1: config 0 interface 0 has no altsetting 0 [ 536.982114][ T915] usb 1-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 536.996070][ T915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.019769][ T915] usb 1-1: config 0 descriptor?? [ 537.033179][T25195] hid_parser_main: 120 callbacks suppressed [ 537.033199][T25195] apple 0003:05AC:024B.0051: unknown main item tag 0x0 [ 537.060818][T25195] apple 0003:05AC:024B.0051: unknown main item tag 0x0 [ 537.071592][T25195] apple 0003:05AC:024B.0051: unknown main item tag 0x0 [ 537.084226][T25195] apple 0003:05AC:024B.0051: unknown main item tag 0x0 [ 537.091466][T25195] apple 0003:05AC:024B.0051: unknown main item tag 0x0 [ 537.099070][T25195] apple 0003:05AC:024B.0051: unknown main item tag 0x0 [ 537.108232][T25195] apple 0003:05AC:024B.0051: unknown main item tag 0x0 [ 537.137110][T25195] apple 0003:05AC:024B.0051: unknown main item tag 0x0 [ 537.143998][T25195] apple 0003:05AC:024B.0051: unknown main item tag 0x0 [ 537.162807][T25195] apple 0003:05AC:024B.0051: unknown main item tag 0x0 [ 537.184595][T25195] apple 0003:05AC:024B.0051: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.1-1/input0 [ 537.279229][T25195] usb 2-1: USB disconnect, device number 123 [ 537.314938][T27432] fido_id[27432]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 537.506432][ T915] cypress 0003:04B4:DE64.0052: hidraw0: USB HID v0.06 Device [HID 04b4:de64] on usb-dummy_hcd.0-1/input0 [ 537.739098][ T5985] usb 1-1: USB disconnect, device number 2 [ 537.745783][T25195] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 537.921428][T27479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10008'. [ 537.928160][T25195] usb 4-1: Using ep0 maxpacket: 16 [ 537.939516][T25195] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 537.947697][T25195] usb 4-1: config 0 has no interface number 0 [ 537.962182][T25195] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 537.971180][T27481] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10009'. [ 537.971499][T25195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.987507][T27481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10009'. [ 537.988443][T25195] usb 4-1: Product: syz [ 538.001354][T25195] usb 4-1: Manufacturer: syz [ 538.006249][T25195] usb 4-1: SerialNumber: syz [ 538.015582][T25195] usb 4-1: config 0 descriptor?? [ 538.026326][T25195] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 538.330883][T27499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.344901][ T9191] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 538.383021][T15948] udevd[15948]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 538.467067][T15948] udevd[15948]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 538.516956][ T9191] usb 3-1: Using ep0 maxpacket: 32 [ 538.523761][ T9191] usb 3-1: config 0 has an invalid interface number: 191 but max is 0 [ 538.534226][ T9191] usb 3-1: config 0 has no interface number 0 [ 538.541252][ T9191] usb 3-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 538.557364][ T9191] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 538.566688][ T9191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.574930][ T9191] usb 3-1: Product: syz [ 538.579162][ T9191] usb 3-1: Manufacturer: syz [ 538.585159][ T9191] usb 3-1: SerialNumber: syz [ 538.592625][ T9191] usb 3-1: config 0 descriptor?? [ 538.598436][T27483] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 538.675458][T25195] gspca_spca1528: reg_w err -71 [ 538.707973][T25195] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 538.726022][T25195] usb 4-1: USB disconnect, device number 115 [ 538.740023][ T915] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 538.799296][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 538.799335][ T30] audit: type=1400 audit(2000000094.148:1690): avc: denied { setopt } for pid=27518 comm="syz.1.10028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 538.831512][T27483] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 538.862337][ T30] audit: type=1400 audit(2000000094.213:1691): avc: denied { name_connect } for pid=27520 comm="syz.1.10029" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 538.932871][ T915] usb 1-1: Using ep0 maxpacket: 32 [ 538.939523][ T915] usb 1-1: config 4 has an invalid interface number: 8 but max is 0 [ 538.947645][ T915] usb 1-1: config 4 has no interface number 0 [ 538.953861][ T915] usb 1-1: config 4 interface 8 has no altsetting 0 [ 538.962028][ T915] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 538.971523][ T915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.979559][ T915] usb 1-1: Product: syz [ 538.983739][ T915] usb 1-1: Manufacturer: syz [ 538.988373][ T915] usb 1-1: SerialNumber: syz [ 539.221302][ T915] opticon 1-1:4.8: opticon converter detected [ 539.229330][ T915] usb 1-1: opticon converter now attached to ttyUSB0 [ 539.239506][ T915] usb 1-1: USB disconnect, device number 3 [ 539.252009][ T915] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 539.262143][ T915] opticon 1-1:4.8: device disconnected [ 539.270718][ T9191] asix 3-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 539.283668][ T9191] asix 3-1:0.191 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 539.299580][ T9191] asix 3-1:0.191: probe with driver asix failed with error -71 [ 539.315770][ T9191] usb 3-1: USB disconnect, device number 101 [ 539.448826][ T30] audit: type=1400 audit(2000000094.765:1692): avc: denied { mount } for pid=27525 comm="syz.3.10031" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 539.473855][ T30] audit: type=1400 audit(2000000094.784:1693): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 539.650263][ T30] audit: type=1326 audit(2000000094.952:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27533 comm="syz.3.10035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f9f9acb9 code=0x7ffc0000 [ 539.674424][ T30] audit: type=1326 audit(2000000094.952:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27533 comm="syz.3.10035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f9f9acb9 code=0x7ffc0000 [ 539.698328][ T30] audit: type=1326 audit(2000000094.952:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27533 comm="syz.3.10035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f9f9acb9 code=0x7ffc0000 [ 539.723183][ T30] audit: type=1326 audit(2000000094.952:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27533 comm="syz.3.10035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f88f9f9acb9 code=0x7ffc0000 [ 539.747631][ T30] audit: type=1326 audit(2000000094.952:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27533 comm="syz.3.10035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f9f9acb9 code=0x7ffc0000 [ 539.771422][ T30] audit: type=1326 audit(2000000094.952:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27533 comm="syz.3.10035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f9f9acb9 code=0x7ffc0000 [ 539.802606][T27537] sg_write: data in/out 2268/32 bytes for SCSI command 0xfd-- guessing data in; [ 539.802606][T27537] program syz.1.10036 not setting count and/or reply_len properly [ 539.870099][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 539.990553][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 540.103528][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 540.184486][ T9191] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 540.197064][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 540.270369][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 540.344916][ T9191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.370791][ T9191] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 540.407746][ T9191] usb 2-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 540.435779][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 540.453460][ T9191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.469297][T27573] genirq: Flags mismatch irq 3. 00200000 (pcl818) vs. 00200000 (dt2814) [ 540.479166][ T9191] usb 2-1: config 0 descriptor?? [ 540.914730][T27590] netlink: 'syz.2.10060': attribute type 2 has an invalid length. [ 540.936880][ T9191] elecom 0003:056E:00FC.0053: hidraw0: USB HID v0.00 Device [HID 056e:00fc] on usb-dummy_hcd.1-1/input0 [ 541.001464][T27595] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 541.072750][T27597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10063'. [ 541.103867][T27599] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 541.110392][T27599] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 541.132584][T27599] vhci_hcd vhci_hcd.0: Device attached [ 541.151496][ T5985] usb 2-1: USB disconnect, device number 124 [ 541.181783][T27599] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 541.188291][T27599] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 541.197908][T27599] vhci_hcd vhci_hcd.0: Device attached [ 541.211075][T27599] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 541.217590][T27599] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 541.225414][T27599] vhci_hcd vhci_hcd.0: Device attached [ 541.234973][T27608] vhci_hcd: connection closed [ 541.235175][T27604] vhci_hcd: connection closed [ 541.240065][T27600] vhci_hcd: connection closed [ 541.240402][ T3588] vhci_hcd vhci_hcd.0: stop threads [ 541.265502][ T3588] vhci_hcd vhci_hcd.0: release socket [ 541.271116][ T3588] vhci_hcd vhci_hcd.0: disconnect device [ 541.277222][ T3588] vhci_hcd vhci_hcd.0: stop threads [ 541.282559][ T3588] vhci_hcd vhci_hcd.0: release socket [ 541.289107][ T3588] vhci_hcd vhci_hcd.0: disconnect device [ 541.299389][ T3588] vhci_hcd vhci_hcd.0: stop threads [ 541.306747][ T3588] vhci_hcd vhci_hcd.0: release socket [ 541.313711][ T3588] vhci_hcd vhci_hcd.0: disconnect device [ 541.327598][ T9191] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 541.613158][T25195] kernel read not supported for file /vga_arbiter (pid: 25195 comm: kworker/0:0) [ 541.858021][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 542.052880][T27657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10088'. [ 542.070843][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 542.206607][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 542.288274][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 542.405933][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 542.471907][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 542.644135][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 542.681031][ T9191] hid_parser_main: 64 callbacks suppressed [ 542.681051][ T9191] hid-generic 0000:0000:0000.0054: unknown main item tag 0x0 [ 542.704603][ T9191] hid-generic 0000:0000:0000.0054: hidraw0: HID v0.00 Device [syz0] on syz0 [ 542.808492][T27682] fido_id[27682]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 542.840703][T15948] udevd[15948]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 543.149621][T27704] sp0: Synchronizing with TNC [ 543.164928][T27704] [U] è [ 543.183192][T27708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10113'. [ 543.208156][T27708] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 543.216095][T27708] team0: Device ipvlan2 is already an upper device of the team interface [ 543.733448][T27730] [U] „ [ 543.843130][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 543.979455][T27740] syz.3.10129 (27740): drop_caches: 4 [ 543.990697][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 544.053892][T27744] bridge_slave_1: invalid flags given to default FDB implementation [ 544.267123][T25195] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 544.438121][T25195] usb 1-1: Using ep0 maxpacket: 16 [ 544.452075][T25195] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 544.476665][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 544.476682][ T30] audit: type=1400 audit(2000000099.461:1764): avc: denied { write } for pid=27761 comm="syz.1.10141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 544.480928][T25195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.535709][T25195] usb 1-1: Product: syz [ 544.539890][T25195] usb 1-1: Manufacturer: syz [ 544.544491][T25195] usb 1-1: SerialNumber: syz [ 544.567308][ T5894] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 544.576303][T25195] usb 1-1: config 0 descriptor?? [ 544.584803][T25195] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 544.739337][ T5894] usb 4-1: unable to get BOS descriptor or descriptor too short [ 544.748155][ T5894] usb 4-1: not running at top speed; connect to a high speed hub [ 544.781009][ T5894] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 544.798017][ T5894] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 544.844016][T25195] usb 1-1: USB disconnect, device number 4 [ 544.850051][ T5894] usb 4-1: config 1 interface 0 has no altsetting 0 [ 544.870776][ T5894] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 544.884213][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.895580][ T5894] usb 4-1: Product: syz [ 544.900198][ T5894] usb 4-1: Manufacturer: syz [ 544.904827][ T5894] usb 4-1: SerialNumber: syz [ 544.912762][T27756] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 545.171445][ T5894] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 116 if 0 alt 1 proto 2 vid 0x04B8 pid 0x0202 [ 545.204017][ T5894] usb 4-1: USB disconnect, device number 116 [ 545.225303][ T5894] usblp0: removed [ 545.515936][ T30] audit: type=1400 audit(2000000100.433:1765): avc: denied { getopt } for pid=27798 comm="syz.0.10158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 545.599305][T27801] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10159'. [ 545.731703][T25195] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 545.905130][T25195] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 545.924268][T25195] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 545.942821][T25195] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 545.975985][T25195] usb 2-1: config 220 has no interface number 2 [ 545.986945][T25195] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 546.009588][T25195] usb 2-1: config 220 interface 0 has no altsetting 0 [ 546.020374][T25195] usb 2-1: config 220 interface 76 has no altsetting 0 [ 546.030113][T25195] usb 2-1: config 220 interface 1 has no altsetting 0 [ 546.039605][T25195] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 546.049040][ T5894] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 546.060234][T25195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.070210][T25195] usb 2-1: Product: syz [ 546.074595][T25195] usb 2-1: Manufacturer: syz [ 546.079231][T25195] usb 2-1: SerialNumber: syz [ 546.199489][ T30] audit: type=1400 audit(2000000101.069:1766): avc: denied { setopt } for pid=27816 comm="syz.4.10167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 546.226746][ T5894] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.241948][ T5894] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 546.263976][ T5894] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 546.292754][ T5894] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 546.302865][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.321766][T27819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10168'. [ 546.325035][T25195] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 546.352372][T25195] uvcvideo 2-1:220.0: No valid video chain found. [ 546.359070][T25195] usb 2-1: selecting invalid altsetting 0 [ 546.367659][T27805] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 546.382245][ T5894] hub 1-1:1.0: bad descriptor, ignoring hub [ 546.393328][ T5894] hub 1-1:1.0: probe with driver hub failed with error -5 [ 546.421884][T25195] usb 2-1: selecting invalid altsetting 0 [ 546.422691][ T5894] cdc_wdm 1-1:1.0: skipping garbage [ 546.434128][T25195] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 546.434461][T27819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10168'. [ 546.461254][ T5894] cdc_wdm 1-1:1.0: skipping garbage [ 546.468687][T25195] usb 2-1: USB disconnect, device number 125 [ 546.485485][ T5894] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 546.504544][ T5894] cdc_wdm 1-1:1.0: Unknown control protocol [ 546.737044][T25195] usb 1-1: USB disconnect, device number 5 [ 546.874692][ T30] audit: type=1400 audit(2000000101.706:1767): avc: denied { connect } for pid=27820 comm="syz.4.10169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 547.002746][T27825] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10170'. [ 547.134315][T27832] SELinux: security_context_str_to_sid () failed with errno=-22 [ 547.244868][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 547.299868][T27836] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10175'. [ 547.346353][T27836] netlink: 212 bytes leftover after parsing attributes in process `syz.3.10175'. [ 547.355513][T27836] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10175'. [ 547.414185][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 547.449130][T27845] IPv6: NLM_F_CREATE should be specified when creating new route [ 547.483299][T27845] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 547.490589][T27845] IPv6: NLM_F_CREATE should be set when creating new route [ 547.497836][T27845] IPv6: NLM_F_CREATE should be set when creating new route [ 547.621760][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 547.642586][T27850] sp0: Synchronizing with TNC [ 547.749722][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 547.801489][ T5873] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 547.821847][ T5873] hid-generic 0000:0000:0000.0055: hidraw0: HID v0.00 Device [syz0] on syz0 [ 547.899782][T27862] fido_id[27862]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 547.950751][T15948] udevd[15948]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 548.064429][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 548.090592][T27870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10192'. [ 548.109969][T27870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10192'. [ 548.120433][T27870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10192'. [ 548.167083][T27870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10192'. [ 548.189881][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 548.208029][T27870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10192'. [ 548.324952][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 548.423557][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 548.499373][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 548.703626][ T5873] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 548.745727][ T30] audit: type=1400 audit(2000000103.455:1768): avc: denied { nlmsg_read } for pid=27892 comm="syz.0.10202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 548.864506][ T5873] usb 2-1: Using ep0 maxpacket: 8 [ 548.871123][ T5873] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.882829][ T5873] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 548.906708][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 548.914908][ T5873] usb 2-1: SerialNumber: syz [ 548.931428][ T5873] usb 2-1: config 0 descriptor?? [ 548.941182][ T5873] uvcvideo 2-1:0.0: Found UVC 0.00 device (05ac:8501) [ 548.948910][ T5873] uvcvideo 2-1:0.0: Failed to create links for entity 255 [ 548.982441][ T5873] uvcvideo 2-1:0.0: Failed to register entities (-22). [ 549.105485][T27901] netlink: 'syz.0.10206': attribute type 1 has an invalid length. [ 549.191627][ T5873] usb 2-1: USB disconnect, device number 126 [ 549.956021][T27932] netlink: 'syz.1.10221': attribute type 33 has an invalid length. [ 550.072776][ T5873] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 550.266042][ T5873] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 550.296500][ T5873] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.306620][ T30] audit: type=1400 audit(2000000104.914:1769): avc: denied { write } for pid=27944 comm="syz.1.10228" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 550.349951][ T5873] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 550.358940][ T5873] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.404858][ T5873] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.426393][ T30] audit: type=1400 audit(2000000104.914:1770): avc: denied { open } for pid=27944 comm="syz.1.10228" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 550.451534][ T5873] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 550.480255][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 550.488270][ T5873] usb 4-1: Product: syz [ 550.521483][ T5873] usb 4-1: Manufacturer: syz [ 550.536476][ T5873] cdc_wdm 4-1:1.0: skipping garbage [ 550.541696][ T5873] cdc_wdm 4-1:1.0: skipping garbage [ 550.566633][ T5873] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 550.572547][ T5873] cdc_wdm 4-1:1.0: Unknown control protocol [ 550.588147][ T30] audit: type=1400 audit(2000000105.185:1771): avc: denied { connect } for pid=27950 comm="syz.1.10231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 550.808570][ T5873] usb 4-1: USB disconnect, device number 117 [ 551.784136][ T5894] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 551.958653][ T5894] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 551.983832][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.013903][ T5894] usb 4-1: config 0 descriptor?? [ 552.031268][ T5894] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 552.630967][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 552.673965][ T5894] gspca_sunplus: reg_w_riv err -71 [ 552.690050][ T5894] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 552.725896][ T5894] usb 4-1: USB disconnect, device number 118 [ 552.794081][T15948] udevd[15948]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 552.909239][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 553.080936][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 553.182415][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 553.281967][ T915] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 553.300053][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 553.465427][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 553.479500][ T915] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.514606][ T915] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.535717][ T915] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 553.578483][ T915] usb 2-1: config 0 interface 0 has no altsetting 0 [ 553.585097][ T915] usb 2-1: New USB device found, idVendor=1b96, idProduct=0006, bcdDevice= 0.00 [ 553.638827][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 553.651635][T28047] nbd: must specify an index to disconnect [ 553.657533][ T915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.689063][ T915] usb 2-1: config 0 descriptor?? [ 553.786659][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 553.893421][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 554.047919][T28059] bridge_slave_1: left allmulticast mode [ 554.074297][T28062] netlink: 'syz.0.10284': attribute type 10 has an invalid length. [ 554.081176][T28059] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.095940][T28062] __nla_validate_parse: 3 callbacks suppressed [ 554.095957][T28062] netlink: 2 bytes leftover after parsing attributes in process `syz.0.10284'. [ 554.117125][ T5985] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 554.125621][T28059] bond0: (slave bond_slave_0): Releasing backup interface [ 554.139398][ T915] ntrig 0003:1B96:0006.0056: unknown main item tag 0x3 [ 554.167678][ T915] ntrig 0003:1B96:0006.0056: item fetching failed at offset 3/5 [ 554.175608][ T915] ntrig 0003:1B96:0006.0056: parse failed [ 554.192488][ T915] ntrig 0003:1B96:0006.0056: probe with driver ntrig failed with error -22 [ 554.203300][T28059] bond0: (slave bond_slave_1): Releasing backup interface [ 554.237348][T28059] team0: Port device team_slave_0 removed [ 554.253053][T28059] team0: Port device team_slave_1 removed [ 554.261959][T28059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.270456][T28059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.279340][T28059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.287065][T28059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.295709][ T5985] usb 4-1: too many endpoints for config 0 interface 0 altsetting 252: 250, using maximum allowed: 30 [ 554.297298][T28059] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 554.317933][ T5985] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 554.337766][T28062] team0: entered promiscuous mode [ 554.343036][T28062] bridge0: port 2(team0) entered blocking state [ 554.380494][ T5985] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 250 [ 554.395427][T25195] usb 2-1: USB disconnect, device number 127 [ 554.423232][T28062] bridge0: port 2(team0) entered disabled state [ 554.425945][ T5985] usb 4-1: config 0 interface 0 has no altsetting 0 [ 554.430480][T28062] team0: entered allmulticast mode [ 554.440689][ T5985] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 554.452150][ T5985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.454920][T28062] bridge0: port 2(team0) entered blocking state [ 554.466496][T28062] bridge0: port 2(team0) entered forwarding state [ 554.468690][ T5985] usb 4-1: config 0 descriptor?? [ 554.483758][T28053] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 554.507493][ T3438] bridge0: port 2(team0) entered disabled state [ 554.996550][ T5985] playstation 0003:054C:05C4.0057: item fetching failed at offset 0/3 [ 555.019371][ T5985] playstation 0003:054C:05C4.0057: Parse failed [ 555.045027][ T5985] playstation 0003:054C:05C4.0057: probe with driver playstation failed with error -22 [ 555.133117][T28084] sp0: Synchronizing with TNC [ 555.313001][ T5985] usb 4-1: USB disconnect, device number 119 [ 555.599078][ T5873] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 555.763632][ T30] audit: type=1400 audit(2000000110.021:1772): avc: denied { getopt } for pid=28103 comm="syz.1.10304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 555.788948][ T5873] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 555.798174][ T5873] usb 1-1: config 0 has no interface number 0 [ 555.807952][ T5873] usb 1-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 555.820474][ T5873] usb 1-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 555.832633][ T5873] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 65535, setting to 64 [ 555.844166][ T5873] usb 1-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 555.868650][ T5873] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 555.880496][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.890609][ T5873] usb 1-1: Product: syz [ 555.894827][ T5873] usb 1-1: Manufacturer: syz [ 555.899797][ T5873] usb 1-1: SerialNumber: syz [ 555.912699][ T5873] usb 1-1: config 0 descriptor?? [ 555.920755][T28094] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 555.938737][ T5873] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input86 [ 556.259306][T28116] netlink: 'syz.1.10310': attribute type 3 has an invalid length. [ 556.268290][T28116] netlink: 'syz.1.10310': attribute type 1 has an invalid length. [ 556.276557][T28116] netlink: 232 bytes leftover after parsing attributes in process `syz.1.10310'. [ 556.674587][ T30] audit: type=1400 audit(2000000110.872:1773): avc: denied { open } for pid=28130 comm="syz.1.10317" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 556.742522][ T30] audit: type=1400 audit(2000000110.901:1774): avc: denied { ioctl } for pid=28130 comm="syz.1.10317" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 556.839764][T28139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10320'. [ 556.852859][T28138] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10321'. [ 556.862845][T28139] veth0_macvtap: left promiscuous mode [ 557.001493][T28141] vlan2: entered promiscuous mode [ 557.006764][T28141] bridge0: entered promiscuous mode [ 558.261063][ T5873] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 558.424283][ T5873] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 558.439667][ T5873] usb 2-1: config 0 has no interface number 0 [ 558.452547][ T5873] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 558.468824][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.468853][ T5873] usb 2-1: Product: syz [ 558.468871][ T5873] usb 2-1: Manufacturer: syz [ 558.486786][ T5873] usb 2-1: SerialNumber: syz [ 558.494971][ T5873] usb 2-1: config 0 descriptor?? [ 558.526070][ T915] usb 1-1: USB disconnect, device number 6 [ 558.607609][T18147] udevd[18147]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 558.715212][T15948] udevd[15948]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 558.737112][ T5873] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 558.746878][ T5873] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 558.759831][ T5873] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 558.769691][ T5873] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 558.780991][ T5873] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 558.805531][T28178] tipc: Enabling of bearer rejected, failed to enable media [ 558.885885][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 559.168119][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 559.184725][ T5894] usb 2-1: USB disconnect, device number 2 [ 559.209077][ T5894] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 559.238215][ T5894] keyspan 2-1:0.133: device disconnected [ 559.303488][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 559.420584][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 559.543660][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 559.678300][ T5819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 559.689993][ T5819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 559.699174][ T5819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 559.714692][ T5819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 559.727769][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 559.739792][ T5819] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 559.758866][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 559.768234][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 559.776816][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 559.785413][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 559.793583][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 559.812765][ T30] audit: type=1400 audit(2000000113.810:1775): avc: denied { mounton } for pid=28204 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 559.856200][ T30] audit: type=1400 audit(2000000113.856:1776): avc: denied { bind } for pid=28207 comm="syz.0.10352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 560.002543][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 560.154189][ T5873] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 560.256400][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 560.327559][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 560.346761][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.373745][ T5873] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 560.383850][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.407281][ T5873] usb 2-1: config 0 descriptor?? [ 560.552453][ T3438] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.610795][T28229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10361'. [ 560.693945][ T3438] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.721318][T28231] netdevsim netdevsim0: Firmware load for '../file0/file0' refused, path contains '..' component [ 560.801769][ T3438] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.847268][T28204] chnl_net:caif_netlink_parms(): no params data found [ 560.861783][ T5873] logitech-djreceiver 0003:046D:C52B.0058: unknown main item tag 0x0 [ 560.870964][ T5873] logitech-djreceiver 0003:046D:C52B.0058: unknown main item tag 0x0 [ 560.891984][ T5873] logitech-djreceiver 0003:046D:C52B.0058: unknown main item tag 0x0 [ 560.902025][ T5873] logitech-djreceiver 0003:046D:C52B.0058: unknown main item tag 0x0 [ 560.910946][ T5873] logitech-djreceiver 0003:046D:C52B.0058: unknown main item tag 0x0 [ 560.945414][ T3438] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.092565][ T915] usb 2-1: USB disconnect, device number 3 [ 561.193630][T28252] xt_CT: You must specify a L4 protocol and not use inversions on it [ 561.240847][T28204] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.250395][T28204] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.258411][T28204] bridge_slave_0: entered allmulticast mode [ 561.291140][T28204] bridge_slave_0: entered promiscuous mode [ 561.301685][T28204] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.319098][T28204] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.330460][T28204] bridge_slave_1: entered allmulticast mode [ 561.351861][T28204] bridge_slave_1: entered promiscuous mode [ 561.365946][ T3438] bridge_slave_1: left allmulticast mode [ 561.376144][ T3438] bridge_slave_1: left promiscuous mode [ 561.385406][ T3438] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.463090][ T3438] bond_slave_0: left promiscuous mode [ 561.962014][ T5821] Bluetooth: hci5: command tx timeout [ 562.235162][ T3438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.245124][ T3438] bond0 (unregistering): Released all slaves [ 562.254548][ T3438] bond1 (unregistering): Released all slaves [ 562.265877][ T3438] bond2 (unregistering): Released all slaves [ 562.367464][T28204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.431689][T28204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.452624][ T3438] : left promiscuous mode [ 562.597609][T28204] team0: Port device team_slave_0 added [ 562.613062][ T3438] tipc: Disabling bearer [ 562.639650][T28204] team0: Port device team_slave_1 added [ 562.645388][ T3438] tipc: Left network mode [ 562.666013][T28291] binder: 28290:28291 ioctl c0306201 200000000080 returned -22 [ 562.678376][ T3438] IPVS: stopping backup sync thread 20476 ... [ 562.807960][T28204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.824169][T28204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.857693][ T30] audit: type=1400 audit(2000000116.653:1777): avc: denied { write } for pid=28299 comm="syz.1.10388" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 562.892441][T28204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.935555][T28204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.942881][T28204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.976632][T28204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.127502][T28204] hsr_slave_0: entered promiscuous mode [ 563.152452][T28204] hsr_slave_1: entered promiscuous mode [ 563.535261][ T3438] hsr_slave_0: left promiscuous mode [ 563.563086][ T3438] hsr_slave_1: left promiscuous mode [ 563.650175][ T3438] batadv_slave_0: left promiscuous mode [ 563.682785][ T3438] veth1_macvtap: left allmulticast mode [ 563.689804][ T3438] veth1_macvtap: left promiscuous mode [ 563.710099][ T3438] veth0_macvtap: left allmulticast mode [ 563.724271][ T3438] veth0_macvtap: left promiscuous mode [ 563.740632][ T3438] veth1_vlan: left promiscuous mode [ 563.758339][ T3438] veth0_vlan: left promiscuous mode [ 564.011762][ T3438] pim6reg (unregistering): left allmulticast mode [ 564.069327][ T3438] pimreg3 (unregistering): left allmulticast mode [ 564.190775][ T5821] Bluetooth: hci5: command tx timeout [ 564.316776][ T1165] smc: removing ib device syz0 [ 564.777129][ T3438] team0 (unregistering): Port device team_slave_1 removed [ 564.860056][ T3438] team0 (unregistering): Port device team_slave_0 removed [ 565.249107][T28352] dummy0: entered allmulticast mode [ 565.302892][T28355] vcan1: entered promiscuous mode [ 565.352522][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 565.381509][T28355] team0: Device vcan1 is up. Set it down before adding it as a team port [ 565.472079][ T915] syz0: Port: 1 Link DOWN [ 565.539697][T28351] dummy0: left allmulticast mode [ 565.545859][T28357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10412'. [ 565.855668][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 566.177393][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 566.331414][T15948] udevd[15948]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 566.407475][ T5821] Bluetooth: hci5: command tx timeout [ 566.883253][T28204] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 566.926917][T28204] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 566.983744][T28204] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 567.010320][T28204] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 567.423234][T28204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.475164][T28204] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.506447][ T3438] IPVS: stop unused estimator thread 0... [ 567.516256][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.523404][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.600564][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.607717][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.894057][ T5894] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 567.946434][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 568.162924][ T5894] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 568.188723][T16121] udevd[16121]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 568.215921][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.223935][ T5894] usb 4-1: Product: syz [ 568.262977][ T5894] usb 4-1: Manufacturer: syz [ 568.265384][T28204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.296622][ T5894] usb 4-1: SerialNumber: syz [ 568.320227][ T5894] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 568.329647][ T30] audit: type=1400 audit(2000000121.779:1778): avc: denied { firmware_load } for pid=25195 comm="kworker/0:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 568.429841][T25195] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 568.447343][T15948] udevd[15948]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 568.525133][T28435] nbd0: detected capacity change from 0 to 63 [ 568.568682][ T5821] block nbd0: Receive control failed (result -104) [ 568.631616][ T5821] Bluetooth: hci5: command tx timeout [ 568.689026][T15948] udevd[15948]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 568.705458][T28408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.802977][T28408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.954156][T15948] udevd[15948]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 569.018026][T28459] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 569.091703][ T915] usb 4-1: USB disconnect, device number 120 [ 569.275629][T15948] udevd[15948]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 569.377964][T28204] veth0_vlan: entered promiscuous mode [ 569.426853][T28204] veth1_vlan: entered promiscuous mode [ 569.430915][T28466] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 569.533307][T28204] veth0_macvtap: entered promiscuous mode [ 569.578779][T28204] veth1_macvtap: entered promiscuous mode [ 569.631894][T28204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.691176][T28204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.702454][ T30] audit: type=1400 audit(2000000123.061:1779): avc: denied { write } for pid=28474 comm="syz.0.10442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 569.740566][T28404] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.761948][T28404] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.908238][T28404] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.927535][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.999343][T25195] usb 4-1: Service connection timeout for: 256 [ 570.005511][T25195] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 570.053253][T25195] ath9k_htc: Failed to initialize the device [ 570.059533][ T915] usb 4-1: ath9k_htc: USB layer deinitialized [ 570.121453][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.142600][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.206973][T28404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.229179][T28404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.247474][ T30] audit: type=1400 audit(2000000123.575:1780): avc: denied { mounton } for pid=28204 comm="syz-executor" path="/root/syzkaller.xJ3518/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 570.295748][ T30] audit: type=1400 audit(2000000123.575:1781): avc: denied { mounton } for pid=28204 comm="syz-executor" path="/root/syzkaller.xJ3518/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 570.332736][ T30] audit: type=1400 audit(2000000123.575:1782): avc: denied { mounton } for pid=28204 comm="syz-executor" path="/root/syzkaller.xJ3518/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=85871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 570.385076][ T30] audit: type=1400 audit(2000000123.641:1783): avc: denied { mounton } for pid=28204 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 570.416932][ T915] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 570.467829][ T30] audit: type=1400 audit(2000000123.641:1784): avc: denied { mount } for pid=28204 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 570.521953][ T30] audit: type=1400 audit(2000000123.641:1785): avc: denied { mounton } for pid=28204 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 570.599793][ T915] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 570.599825][ T915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.601983][ T915] usb 4-1: config 0 descriptor?? [ 570.611590][ T915] cp210x 4-1:0.0: cp210x converter detected [ 570.783064][T15948] udevd[15948]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 571.191351][T15948] udevd[15948]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 571.284210][ T915] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 571.297953][ T915] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 571.327738][ T915] usb 4-1: cp210x converter now attached to ttyUSB0 [ 571.407264][T18147] udevd[18147]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 571.439813][ T915] usb 4-1: USB disconnect, device number 121 [ 571.466632][ T915] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 571.499051][ T915] cp210x 4-1:0.0: device disconnected [ 571.690715][ T5858] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 571.865922][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 571.898217][ T5858] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 571.934875][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 571.956770][ T5858] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 571.981282][ T5858] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 572.000041][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.019276][ T5858] usb 1-1: config 0 descriptor?? [ 572.213610][T28562] netlink: 'syz.5.10470': attribute type 8 has an invalid length. [ 572.234068][T28562] netlink: 'syz.5.10470': attribute type 4 has an invalid length. [ 572.249836][T28562] netlink: 164 bytes leftover after parsing attributes in process `syz.5.10470'. [ 572.268480][ T5858] hdpvr 1-1:0.0: firmware version 0x26 dated S¶zŸŒ‹“î‹ŽhHfÐï3;¨&X^„œ wÒΖŠ g/ƒ µn#»† [ 572.289145][ T5858] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 572.417095][T28571] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10474'. [ 572.497946][T28573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10475'. [ 572.633233][T28578] netlink: 'syz.5.10477': attribute type 9 has an invalid length. [ 572.660368][T28578] bond_slave_0: entered promiscuous mode [ 572.666128][T28578] bond_slave_1: entered promiscuous mode [ 572.699981][T28578] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 572.727865][T28580] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input87 [ 572.762749][ T5858] hdpvr 1-1:0.0: Could not setup controls [ 572.782431][ T5858] hdpvr 1-1:0.0: registering videodev failed [ 572.836171][ T5858] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 572.854186][ T5858] usb 1-1: USB disconnect, device number 7 [ 573.013509][T28596] loop8: detected capacity change from 0 to 7 [ 573.024352][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 573.034130][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 573.042316][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 573.051944][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 573.061482][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 573.071101][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 573.079343][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 573.088982][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 573.098515][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 573.108089][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 573.116223][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 573.125819][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 573.129741][ T30] audit: type=1400 audit(2000000378.267:1786): avc: denied { bind } for pid=28597 comm="syz.3.10485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 573.154744][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 573.164333][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 573.172308][T15948] ldm_validate_partition_table(): Disk read failed. [ 573.183713][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 573.193307][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 573.201728][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 573.211403][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 573.219801][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 573.229396][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 573.238440][T15948] Dev loop8: unable to read RDB block 0 [ 573.244942][T15948] loop8: unable to read partition table [ 573.259506][T15948] loop8: partition table beyond EOD, truncated [ 573.290499][T28596] ldm_validate_partition_table(): Disk read failed. [ 573.303802][T28596] Dev loop8: unable to read RDB block 0 [ 573.311616][T28596] loop8: unable to read partition table [ 573.318806][T28596] loop8: partition table beyond EOD, truncated [ 573.325424][T28596] loop_reread_partitions: partition scan of loop8 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œë) failed (rc=-5) [ 573.363809][T15948] udevd[15948]: symlink '../../loop8' '/dev/disk/by-diskseq/78.tmp-b7:8' failed: Read-only file system [ 573.423541][T15959] udevd[15959]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 573.433809][ T30] audit: type=1400 audit(2000000378.538:1787): avc: denied { mounton } for pid=28606 comm="syz.0.10489" path="/2067/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 573.447844][T15948] udevd[15948]: symlink '../../loop8' '/dev/disk/by-diskseq/78.tmp-b7:8' failed: Read-only file system [ 573.528684][T15948] udevd[15948]: symlink '../../loop8' '/dev/disk/by-diskseq/78.tmp-b7:8' failed: Read-only file system [ 573.584037][T18147] udevd[18147]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 573.636132][ T5886] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 573.706924][T18147] udevd[18147]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 573.755726][T28623] netlink: 'syz.1.10496': attribute type 3 has an invalid length. [ 573.765018][T28623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10496'. [ 573.812196][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 573.836106][T15948] udevd[15948]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 573.862655][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 573.880504][ T5886] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 573.896823][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 573.912633][ T5886] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 573.938087][ T5886] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 573.952502][ T5886] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 574.008265][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.030188][ T5886] usb 4-1: config 0 descriptor?? [ 574.238941][T28641] ªªªªªª: renamed from vlan0 (while UP) [ 574.265421][ T5886] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 122 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 574.287449][ T30] audit: type=1400 audit(2000000379.352:1788): avc: denied { execute } for pid=28640 comm="syz.5.10504" path="/proc/25/task/26/net/vlan/vlan0" dev="proc" ino=4026533619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 574.587119][ T30] audit: type=1400 audit(2000000379.632:1789): avc: denied { remount } for pid=28652 comm="syz.5.10510" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 574.990288][T28672] netlink: 'syz.5.10519': attribute type 3 has an invalid length. [ 575.004837][T28672] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10519'. [ 575.141529][ T5886] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 575.333957][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 575.342397][ T5886] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 575.355263][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 575.363332][ T5886] usb 2-1: Product: syz [ 575.383670][ T5886] usb 2-1: Manufacturer: syz [ 575.390115][ T5886] usb 2-1: SerialNumber: syz [ 575.397027][ T5886] usb 2-1: config 0 descriptor?? [ 575.608265][T28689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10527'. [ 575.618006][T28689] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10527'. [ 575.648739][ T5858] usb 2-1: USB disconnect, device number 4 [ 576.138394][T15948] udevd[15948]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 576.557491][ T5894] usb 4-1: USB disconnect, device number 122 [ 576.577528][ T5894] usblp0: removed [ 576.598973][T28709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10536'. [ 576.609078][ T5886] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 576.616920][T28709] netlink: 'syz.3.10536': attribute type 22 has an invalid length. [ 576.616940][T28709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10536'. [ 576.686681][ T30] audit: type=1400 audit(2000000381.587:1790): avc: denied { listen } for pid=28712 comm="syz.3.10538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 576.709165][ T30] audit: type=1400 audit(2000000381.587:1791): avc: denied { ioctl } for pid=28712 comm="syz.3.10538" path="socket:[87371]" dev="sockfs" ino=87371 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 576.781871][ T30] audit: type=1400 audit(2000000381.681:1792): avc: denied { mounton } for pid=28716 comm="syz.3.10540" path="/2116/file0" dev="gadgetfs" ino=7615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 576.806680][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 576.815860][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.827486][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 576.841827][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 576.853805][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 576.873211][ T5886] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 576.882414][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.892420][ T5886] usb 2-1: Product: syz [ 576.896745][ T5886] usb 2-1: Manufacturer: syz [ 576.901394][ T5886] usb 2-1: SerialNumber: syz [ 576.909699][ T5886] usb 2-1: config 0 descriptor?? [ 576.991353][ T5886] rc_core: IR keymap rc-xbox-dvd not found [ 576.997173][ T5886] Registered IR keymap rc-empty [ 577.003786][ T5886] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 577.018576][ T5886] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input88 [ 577.206587][ T5886] usb 2-1: USB disconnect, device number 5 [ 577.212451][ C1] xbox_remote 2-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 577.461887][ T5894] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 577.634215][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.644296][ T5894] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 577.653333][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.670583][ T5894] usb 4-1: config 0 descriptor?? [ 577.729102][T28739] netlink: 'syz.4.10548': attribute type 1 has an invalid length. [ 578.111408][ T5894] hid (null): global environment stack underflow [ 578.134278][ T5894] nintendo 0003:057E:200E.0059: global environment stack underflow [ 578.142633][ T5894] nintendo 0003:057E:200E.0059: item 0 4 1 11 parsing failed [ 578.150715][ T5894] nintendo 0003:057E:200E.0059: HID parse failed [ 578.159917][ T5894] nintendo 0003:057E:200E.0059: probe - fail = -22 [ 578.166462][ T5894] nintendo 0003:057E:200E.0059: probe with driver nintendo failed with error -22 [ 578.341499][ T5894] usb 4-1: USB disconnect, device number 123 [ 579.155810][ T2344] pvrusb2: request_firmware fatal error with code=-110 [ 579.164311][ T2344] pvrusb2: Failure uploading firmware1 [ 579.169791][ T2344] pvrusb2: Device initialization was not successful. [ 579.178947][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 579.189770][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 579.201403][ T929] pvrusb2: Device being rendered inoperable [ 579.314612][ T30] audit: type=1400 audit(2000000384.048:1793): avc: denied { execute } for pid=28776 comm="syz.3.10564" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 580.242133][ T30] audit: type=1400 audit(2000000384.917:1794): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 580.271542][ T5886] kernel write not supported for file /4522/clear_refs (pid: 5886 comm: kworker/1:5) [ 580.561692][ T929] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 580.722078][ T929] usb 2-1: Using ep0 maxpacket: 16 [ 580.728540][ T929] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 580.738704][ T929] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 580.749606][ T929] usb 2-1: config 0 interface 0 has no altsetting 0 [ 580.758636][ T929] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 580.768106][ T929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.776355][ T929] usb 2-1: Product: syz [ 580.780509][ T929] usb 2-1: Manufacturer: syz [ 580.785074][ T929] usb 2-1: SerialNumber: syz [ 580.791489][ T929] usb 2-1: config 0 descriptor?? [ 581.020656][ T929] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input89 [ 581.249835][ T929] usb 2-1: USB disconnect, device number 6 [ 582.032850][T28817] batman_adv: batadv0: Adding interface: ip6gretap1 [ 582.041404][T28817] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.067868][T28817] batman_adv: batadv0: Interface activated: ip6gretap1 [ 582.279637][ T30] audit: type=1400 audit(2000000386.826:1795): avc: denied { unlink } for pid=28826 comm="syz.1.10581" name="#1" dev="tmpfs" ino=11152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 582.328230][T28829] input: syz0 as /devices/virtual/input/input90 [ 582.799195][T28846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10589'. [ 591.269778][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 591.279760][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 591.288702][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 591.296895][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 591.304367][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 591.415366][T28894] chnl_net:caif_netlink_parms(): no params data found [ 591.469251][T28894] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.478599][T28894] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.485814][T28894] bridge_slave_0: entered allmulticast mode [ 591.492783][T28894] bridge_slave_0: entered promiscuous mode [ 591.500487][T28894] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.507585][T28894] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.515080][T28894] bridge_slave_1: entered allmulticast mode [ 591.521983][T28894] bridge_slave_1: entered promiscuous mode [ 591.545816][T28894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.557640][T28894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.582109][T28894] team0: Port device team_slave_0 added [ 591.589374][T28894] team0: Port device team_slave_1 added [ 591.608508][T28894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.615442][T28894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.641889][T28894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.654706][T28894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.661755][T28894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.688367][T28894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.722186][T28894] hsr_slave_0: entered promiscuous mode [ 591.728398][T28894] hsr_slave_1: entered promiscuous mode [ 591.734498][T28894] debugfs: 'hsr0' already exists in 'hsr' [ 591.740208][T28894] Cannot create hsr debugfs directory [ 592.338674][ T5821] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 592.347802][ T5821] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 592.357077][ T5821] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 592.371802][ T5821] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 592.379304][ T5821] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 592.502533][T28903] chnl_net:caif_netlink_parms(): no params data found [ 592.554972][T28903] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.562236][T28903] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.569800][T28903] bridge_slave_0: entered allmulticast mode [ 592.576527][T28903] bridge_slave_0: entered promiscuous mode [ 592.584403][T28903] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.591816][T28903] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.598967][T28903] bridge_slave_1: entered allmulticast mode [ 592.606441][T28903] bridge_slave_1: entered promiscuous mode [ 592.628787][T28903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.639798][T28903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.663070][T28903] team0: Port device team_slave_0 added [ 592.671114][T28903] team0: Port device team_slave_1 added [ 592.690788][T28903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.697822][T28903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.724212][T28903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.736158][T28903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.743195][T28903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.769734][T28903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.804670][T28903] hsr_slave_0: entered promiscuous mode [ 592.810776][T28903] hsr_slave_1: entered promiscuous mode [ 592.817001][T28903] debugfs: 'hsr0' already exists in 'hsr' [ 592.822716][T28903] Cannot create hsr debugfs directory [ 593.518955][ T5819] Bluetooth: hci4: command tx timeout [ 594.353907][ T5821] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 594.362099][ T5821] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 594.370424][ T5821] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 594.380009][ T5821] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 594.387921][ T5821] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 594.496147][T28912] chnl_net:caif_netlink_parms(): no params data found [ 594.545037][ T5819] Bluetooth: hci6: command tx timeout [ 594.554079][T28912] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.561297][T28912] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.568689][T28912] bridge_slave_0: entered allmulticast mode [ 594.575431][T28912] bridge_slave_0: entered promiscuous mode [ 594.583771][T28912] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.591282][T28912] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.598565][T28912] bridge_slave_1: entered allmulticast mode [ 594.605335][T28912] bridge_slave_1: entered promiscuous mode [ 594.627666][T28912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.639594][T28912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.664238][T28912] team0: Port device team_slave_0 added [ 594.671299][T28912] team0: Port device team_slave_1 added [ 594.698251][T28912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.705180][T28912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.732590][T28912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.744492][T28912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.751495][T28912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.777377][T28912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.812623][T28912] hsr_slave_0: entered promiscuous mode [ 594.818737][T28912] hsr_slave_1: entered promiscuous mode [ 594.825007][T28912] debugfs: 'hsr0' already exists in 'hsr' [ 594.830727][T28912] Cannot create hsr debugfs directory [ 595.744772][ T5819] Bluetooth: hci4: command tx timeout [ 595.858229][ T5821] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 595.867893][ T5821] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 595.876333][ T5821] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 595.884974][ T5821] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 595.893521][ T5821] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 596.006901][T28921] chnl_net:caif_netlink_parms(): no params data found [ 596.061481][T28921] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.068705][T28921] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.076465][T28921] bridge_slave_0: entered allmulticast mode [ 596.083189][T28921] bridge_slave_0: entered promiscuous mode [ 596.092634][T28921] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.099858][T28921] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.107443][T28921] bridge_slave_1: entered allmulticast mode [ 596.114336][T28921] bridge_slave_1: entered promiscuous mode [ 596.136491][T28921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.147875][T28921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.173363][T28921] team0: Port device team_slave_0 added [ 596.180801][T28921] team0: Port device team_slave_1 added [ 596.200833][T28921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.208098][T28921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.235016][T28921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.247052][T28921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.253970][T28921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.281109][T28921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.314877][T28921] hsr_slave_0: entered promiscuous mode [ 596.321385][T28921] hsr_slave_1: entered promiscuous mode [ 596.327313][T28921] debugfs: 'hsr0' already exists in 'hsr' [ 596.333123][T28921] Cannot create hsr debugfs directory [ 596.597709][ T5819] Bluetooth: hci7: command tx timeout [ 596.769258][ T5819] Bluetooth: hci6: command tx timeout [ 597.966205][ T5819] Bluetooth: hci4: command tx timeout [ 598.064840][ T5819] Bluetooth: hci8: command tx timeout [ 598.821623][ T5819] Bluetooth: hci7: command tx timeout [ 598.993061][ T5819] Bluetooth: hci6: command tx timeout [ 599.344762][ T5821] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 599.354835][ T5821] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 599.363339][ T5821] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 599.371145][ T5821] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 599.378905][ T5821] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 599.506473][T28930] chnl_net:caif_netlink_parms(): no params data found [ 599.558669][T28930] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.566055][T28930] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.573673][T28930] bridge_slave_0: entered allmulticast mode [ 599.580728][T28930] bridge_slave_0: entered promiscuous mode [ 599.588171][T28930] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.597765][T28930] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.605410][T28930] bridge_slave_1: entered allmulticast mode [ 599.612369][T28930] bridge_slave_1: entered promiscuous mode [ 599.634398][T28930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.645863][T28930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.670657][T28930] team0: Port device team_slave_0 added [ 599.680462][T28930] team0: Port device team_slave_1 added [ 599.700558][T28930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.707478][T28930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.734271][T28930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.746102][T28930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.753145][T28930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.779220][T28930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.813145][T28930] hsr_slave_0: entered promiscuous mode [ 599.819354][T28930] hsr_slave_1: entered promiscuous mode [ 599.825756][T28930] debugfs: 'hsr0' already exists in 'hsr' [ 599.831550][T28930] Cannot create hsr debugfs directory [ 600.189760][ T5821] Bluetooth: hci4: command tx timeout [ 600.275879][ T5821] Bluetooth: hci8: command tx timeout [ 601.056563][ T5821] Bluetooth: hci7: command tx timeout [ 601.073235][ T25] block nbd0: Possible stuck request ffff888026dd8000: control (read@0,1024B). Runtime 30 seconds [ 601.088519][ T25] block nbd0: Possible stuck request ffff888026dd8200: control (read@1024,1024B). Runtime 30 seconds [ 601.099737][ T25] block nbd0: Possible stuck request ffff888026dd8400: control (read@2048,1024B). Runtime 30 seconds [ 601.111007][ T25] block nbd0: Possible stuck request ffff888026dd8600: control (read@3072,1024B). Runtime 30 seconds [ 601.216278][ T5821] Bluetooth: hci6: command tx timeout [ 601.569563][ T5821] Bluetooth: hci9: command tx timeout [ 602.510120][ T5821] Bluetooth: hci8: command tx timeout [ 603.279360][ T5821] Bluetooth: hci7: command tx timeout [ 603.782047][ T5821] Bluetooth: hci9: command tx timeout [ 604.733689][ T5821] Bluetooth: hci8: command tx timeout [ 606.005646][ T5821] Bluetooth: hci9: command tx timeout [ 608.229188][ T5821] Bluetooth: hci9: command tx timeout [ 633.205826][ T25] block nbd0: Possible stuck request ffff888026dd8000: control (read@0,1024B). Runtime 60 seconds [ 633.216885][ T25] block nbd0: Possible stuck request ffff888026dd8200: control (read@1024,1024B). Runtime 60 seconds [ 633.227869][ T25] block nbd0: Possible stuck request ffff888026dd8400: control (read@2048,1024B). Runtime 60 seconds [ 633.238950][ T25] block nbd0: Possible stuck request ffff888026dd8600: control (read@3072,1024B). Runtime 60 seconds [ 635.618360][ T5189] udevd[5189]: worker [16121] /devices/virtual/block/nbd0 is taking a long time [ 655.843192][ T5819] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 655.851906][ T5819] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 655.860350][ T5819] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 655.871009][ T5819] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 655.879847][ T5819] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 655.992580][T29113] chnl_net:caif_netlink_parms(): no params data found [ 656.045339][T29113] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.053318][T29113] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.060572][T29113] bridge_slave_0: entered allmulticast mode [ 656.067376][T29113] bridge_slave_0: entered promiscuous mode [ 656.074937][T29113] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.082172][T29113] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.089288][T29113] bridge_slave_1: entered allmulticast mode [ 656.096745][T29113] bridge_slave_1: entered promiscuous mode [ 656.118475][T29113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.130533][T29113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.155380][T29113] team0: Port device team_slave_0 added [ 656.162488][T29113] team0: Port device team_slave_1 added [ 656.181899][T29113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.189191][T29113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.215453][T29113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.227454][T29113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.234607][T29113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.261669][T29113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.297239][T29113] hsr_slave_0: entered promiscuous mode [ 656.303556][T29113] hsr_slave_1: entered promiscuous mode [ 656.309676][T29113] debugfs: 'hsr0' already exists in 'hsr' [ 656.315789][T29113] Cannot create hsr debugfs directory [ 656.835445][ T5819] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 656.844578][ T5819] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 656.853436][ T5819] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 656.862304][ T5819] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 656.869814][ T5819] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 656.981743][T29122] chnl_net:caif_netlink_parms(): no params data found [ 657.034859][T29122] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.041968][T29122] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.049345][T29122] bridge_slave_0: entered allmulticast mode [ 657.056137][T29122] bridge_slave_0: entered promiscuous mode [ 657.063583][T29122] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.070700][T29122] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.080423][T29122] bridge_slave_1: entered allmulticast mode [ 657.087285][T29122] bridge_slave_1: entered promiscuous mode [ 657.115228][T29122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.126611][T29122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.151930][T29122] team0: Port device team_slave_0 added [ 657.159160][T29122] team0: Port device team_slave_1 added [ 657.178409][T29122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.185659][T29122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.211989][T29122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.225236][T29122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.232170][T29122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.259113][T29122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.293160][T29122] hsr_slave_0: entered promiscuous mode [ 657.299898][T29122] hsr_slave_1: entered promiscuous mode [ 657.305854][T29122] debugfs: 'hsr0' already exists in 'hsr' [ 657.311737][T29122] Cannot create hsr debugfs directory [ 658.089996][ T5819] Bluetooth: hci10: command tx timeout [ 658.842907][ T5821] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 658.852093][ T5821] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 658.861801][ T5821] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 658.869603][ T5821] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 658.878015][ T5821] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 658.986900][T29131] chnl_net:caif_netlink_parms(): no params data found [ 659.031174][ T5819] Bluetooth: hci11: command tx timeout [ 659.043733][T29131] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.051302][T29131] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.058717][T29131] bridge_slave_0: entered allmulticast mode [ 659.065509][T29131] bridge_slave_0: entered promiscuous mode [ 659.072847][T29131] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.080080][T29131] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.087259][T29131] bridge_slave_1: entered allmulticast mode [ 659.094002][T29131] bridge_slave_1: entered promiscuous mode [ 659.115952][T29131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.128304][T29131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.152405][T29131] team0: Port device team_slave_0 added [ 659.160621][T29131] team0: Port device team_slave_1 added [ 659.179318][T29131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.186398][T29131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.215240][T29131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.227038][T29131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.234136][T29131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.260057][T29131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.297759][T29131] hsr_slave_0: entered promiscuous mode [ 659.304491][T29131] hsr_slave_1: entered promiscuous mode [ 659.310636][T29131] debugfs: 'hsr0' already exists in 'hsr' [ 659.316340][T29131] Cannot create hsr debugfs directory [ 660.315999][ T5819] Bluetooth: hci10: command tx timeout [ 660.344315][ T5821] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 660.354038][ T5821] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 660.362882][ T5821] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 660.371328][ T5821] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 660.379119][ T5821] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 660.494067][T29140] chnl_net:caif_netlink_parms(): no params data found [ 660.547721][T29140] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.555058][T29140] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.562603][T29140] bridge_slave_0: entered allmulticast mode [ 660.569509][T29140] bridge_slave_0: entered promiscuous mode [ 660.579265][T29140] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.587146][T29140] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.594354][T29140] bridge_slave_1: entered allmulticast mode [ 660.601085][T29140] bridge_slave_1: entered promiscuous mode [ 660.622487][T29140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.633548][T29140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.659419][T29140] team0: Port device team_slave_0 added [ 660.666853][T29140] team0: Port device team_slave_1 added [ 660.685909][T29140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.693775][T29140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.719683][T29140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.731948][T29140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.738861][T29140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.766871][T29140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.800698][T29140] hsr_slave_0: entered promiscuous mode [ 660.807542][T29140] hsr_slave_1: entered promiscuous mode [ 660.813466][T29140] debugfs: 'hsr0' already exists in 'hsr' [ 660.819264][T29140] Cannot create hsr debugfs directory [ 661.083352][ T5819] Bluetooth: hci12: command tx timeout [ 661.256218][ T5819] Bluetooth: hci11: command tx timeout [ 662.539450][ T5819] Bluetooth: hci10: command tx timeout [ 662.539480][ T5821] Bluetooth: hci13: command tx timeout [ 663.306949][ T5821] Bluetooth: hci12: command tx timeout [ 663.477996][ T5821] Bluetooth: hci11: command tx timeout [ 663.844870][ T5819] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 663.854854][ T5819] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 663.862608][ T5819] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 663.872157][ T5819] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 663.880282][ T5819] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 663.992171][T29149] chnl_net:caif_netlink_parms(): no params data found [ 664.045049][T29149] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.052157][T29149] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.059704][T29149] bridge_slave_0: entered allmulticast mode [ 664.066814][T29149] bridge_slave_0: entered promiscuous mode [ 664.075458][T29149] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.083478][T29149] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.090829][T29149] bridge_slave_1: entered allmulticast mode [ 664.097620][T29149] bridge_slave_1: entered promiscuous mode [ 664.120665][T29149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.132116][T29149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.156978][T29149] team0: Port device team_slave_0 added [ 664.165749][T29149] team0: Port device team_slave_1 added [ 664.185634][T29149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.192549][T29149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.219417][T29149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.230976][T29149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.238077][T29149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.264702][T29149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.299668][T29149] hsr_slave_0: entered promiscuous mode [ 664.306914][T29149] hsr_slave_1: entered promiscuous mode [ 664.313742][T29149] debugfs: 'hsr0' already exists in 'hsr' [ 664.319443][T29149] Cannot create hsr debugfs directory [ 664.761050][ T5821] Bluetooth: hci13: command tx timeout [ 664.763377][ T5819] Bluetooth: hci10: command tx timeout [ 665.360304][ T25] block nbd0: Possible stuck request ffff888026dd8000: control (read@0,1024B). Runtime 90 seconds [ 665.370949][ T25] block nbd0: Possible stuck request ffff888026dd8200: control (read@1024,1024B). Runtime 90 seconds [ 665.381961][ T25] block nbd0: Possible stuck request ffff888026dd8400: control (read@2048,1024B). Runtime 90 seconds [ 665.392880][ T25] block nbd0: Possible stuck request ffff888026dd8600: control (read@3072,1024B). Runtime 90 seconds [ 665.530631][ T5819] Bluetooth: hci12: command tx timeout [ 665.701847][ T5819] Bluetooth: hci11: command tx timeout [ 666.043924][ T5819] Bluetooth: hci14: command tx timeout [ 666.985084][ T5819] Bluetooth: hci13: command tx timeout [ 667.765053][ T5819] Bluetooth: hci12: command tx timeout [ 668.267886][ T5819] Bluetooth: hci14: command tx timeout [ 669.208424][ T5819] Bluetooth: hci13: command tx timeout [ 670.491051][ T5819] Bluetooth: hci14: command tx timeout [ 672.205684][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 672.725452][ T5819] Bluetooth: hci14: command tx timeout [ 697.538398][ T25] block nbd0: Possible stuck request ffff888026dd8000: control (read@0,1024B). Runtime 120 seconds [ 697.549163][ T25] block nbd0: Possible stuck request ffff888026dd8200: control (read@1024,1024B). Runtime 120 seconds [ 697.560134][ T25] block nbd0: Possible stuck request ffff888026dd8400: control (read@2048,1024B). Runtime 120 seconds [ 697.571098][ T25] block nbd0: Possible stuck request ffff888026dd8600: control (read@3072,1024B). Runtime 120 seconds [ 707.277990][ T5819] Bluetooth: hci5: command 0x0406 tx timeout [ 720.408562][ T5821] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 720.419314][ T5821] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 720.427543][ T5821] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 720.435359][ T5821] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 720.445200][ T5821] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 720.553764][T29161] chnl_net:caif_netlink_parms(): no params data found [ 720.607506][T29161] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.614882][T29161] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.622127][T29161] bridge_slave_0: entered allmulticast mode [ 720.628926][T29161] bridge_slave_0: entered promiscuous mode [ 720.636603][T29161] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.643828][T29161] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.650943][T29161] bridge_slave_1: entered allmulticast mode [ 720.658123][T29161] bridge_slave_1: entered promiscuous mode [ 720.680201][T29161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.692186][T29161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.717191][T29161] team0: Port device team_slave_0 added [ 720.724445][T29161] team0: Port device team_slave_1 added [ 720.743327][T29161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.750650][T29161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.776896][T29161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.790051][T29161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.797211][T29161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.823959][T29161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.858561][T29161] hsr_slave_0: entered promiscuous mode [ 720.864712][T29161] hsr_slave_1: entered promiscuous mode [ 720.871234][T29161] debugfs: 'hsr0' already exists in 'hsr' [ 720.877019][T29161] Cannot create hsr debugfs directory [ 721.405992][ T5821] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 721.415130][ T5821] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 721.424961][ T5821] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 721.432829][ T5821] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 721.440372][ T5821] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 721.568632][T29170] chnl_net:caif_netlink_parms(): no params data found [ 721.621803][T29170] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.629232][T29170] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.637560][T29170] bridge_slave_0: entered allmulticast mode [ 721.644338][T29170] bridge_slave_0: entered promiscuous mode [ 721.660151][T29170] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.667781][T29170] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.674923][T29170] bridge_slave_1: entered allmulticast mode [ 721.682444][T29170] bridge_slave_1: entered promiscuous mode [ 721.705426][T29170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.717023][T29170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.742003][T29170] team0: Port device team_slave_0 added [ 721.749271][T29170] team0: Port device team_slave_1 added [ 721.769191][T29170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.777179][T29170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.803162][T29170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.815315][T29170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.822282][T29170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.848404][T29170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.883425][T29170] hsr_slave_0: entered promiscuous mode [ 721.890079][T29170] hsr_slave_1: entered promiscuous mode [ 721.898723][T29170] debugfs: 'hsr0' already exists in 'hsr' [ 721.907242][T29170] Cannot create hsr debugfs directory [ 722.661800][ T5826] Bluetooth: hci15: command tx timeout [ 723.420603][T29182] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 723.428691][T29182] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 723.439997][T29182] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 723.448934][T29182] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 723.456935][T29182] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 723.568735][T29180] chnl_net:caif_netlink_parms(): no params data found [ 723.604635][ T5826] Bluetooth: hci16: command tx timeout [ 723.631065][T29180] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.638664][T29180] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.646124][T29180] bridge_slave_0: entered allmulticast mode [ 723.653022][T29180] bridge_slave_0: entered promiscuous mode [ 723.660628][T29180] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.668102][T29180] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.675310][T29180] bridge_slave_1: entered allmulticast mode [ 723.682799][T29180] bridge_slave_1: entered promiscuous mode [ 723.689808][T29182] Bluetooth: hci6: command 0x0406 tx timeout [ 723.696846][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 723.720728][T29180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.732013][T29180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.756024][T29180] team0: Port device team_slave_0 added [ 723.764247][T29180] team0: Port device team_slave_1 added [ 723.785684][T29180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.792603][T29180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.818766][T29180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.834464][T29180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.841481][T29180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.868858][T29180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.902963][T29180] hsr_slave_0: entered promiscuous mode [ 723.909095][T29180] hsr_slave_1: entered promiscuous mode [ 723.915324][T29180] debugfs: 'hsr0' already exists in 'hsr' [ 723.921024][T29180] Cannot create hsr debugfs directory [ 724.885999][ T5819] Bluetooth: hci15: command tx timeout [ 724.914887][ T5821] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 724.923798][ T5821] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 724.931691][ T5821] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 724.939488][ T5821] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 724.946989][ T5821] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 725.065424][T29190] chnl_net:caif_netlink_parms(): no params data found [ 725.118298][T29190] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.125566][T29190] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.133607][T29190] bridge_slave_0: entered allmulticast mode [ 725.140362][T29190] bridge_slave_0: entered promiscuous mode [ 725.149195][T29190] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.156405][T29190] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.163814][T29190] bridge_slave_1: entered allmulticast mode [ 725.170606][T29190] bridge_slave_1: entered promiscuous mode [ 725.192707][T29190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.204513][T29190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.230403][T29190] team0: Port device team_slave_0 added [ 725.238457][T29190] team0: Port device team_slave_1 added [ 725.258199][T29190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.265960][T29190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.292437][T29190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.304296][T29190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.311209][T29190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.338770][T29190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.371768][T29190] hsr_slave_0: entered promiscuous mode [ 725.379084][T29190] hsr_slave_1: entered promiscuous mode [ 725.385037][T29190] debugfs: 'hsr0' already exists in 'hsr' [ 725.390797][T29190] Cannot create hsr debugfs directory [ 725.654984][ T5819] Bluetooth: hci17: command tx timeout [ 725.826505][ T5819] Bluetooth: hci16: command tx timeout [ 727.109712][ T5821] Bluetooth: hci15: command tx timeout [ 727.119399][ T5821] Bluetooth: hci18: command tx timeout [ 727.878315][ T5821] Bluetooth: hci17: command tx timeout [ 728.049435][ T5821] Bluetooth: hci16: command tx timeout [ 728.415147][T29182] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 728.424222][T29182] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 728.431986][T29182] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 728.440887][T29182] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 728.450226][T29182] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 728.568950][T29199] chnl_net:caif_netlink_parms(): no params data found [ 728.624616][T29199] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.631867][T29199] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.639307][T29199] bridge_slave_0: entered allmulticast mode [ 728.646115][T29199] bridge_slave_0: entered promiscuous mode [ 728.654238][T29199] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.662211][T29199] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.669447][T29199] bridge_slave_1: entered allmulticast mode [ 728.676256][T29199] bridge_slave_1: entered promiscuous mode [ 728.698163][T29199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.710028][T29199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.735597][T29199] team0: Port device team_slave_0 added [ 728.743117][T29199] team0: Port device team_slave_1 added [ 728.762409][T29199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.769671][T29199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.795616][T29199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.807649][T29199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.814607][T29199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.842402][T29199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.877914][T29199] hsr_slave_0: entered promiscuous mode [ 728.884182][T29199] hsr_slave_1: entered promiscuous mode [ 728.890172][T29199] debugfs: 'hsr0' already exists in 'hsr' [ 728.895934][T29199] Cannot create hsr debugfs directory [ 729.161324][ T5821] Bluetooth: hci8: command 0x0406 tx timeout [ 729.167346][T29182] Bluetooth: hci7: command 0x0406 tx timeout [ 729.333269][ T5819] Bluetooth: hci18: command tx timeout [ 729.333281][ T5826] Bluetooth: hci15: command tx timeout [ 729.678532][ T25] block nbd0: Possible stuck request ffff888026dd8000: control (read@0,1024B). Runtime 150 seconds [ 729.691263][ T25] block nbd0: Possible stuck request ffff888026dd8200: control (read@1024,1024B). Runtime 150 seconds [ 729.702377][ T25] block nbd0: Possible stuck request ffff888026dd8400: control (read@2048,1024B). Runtime 150 seconds [ 729.713436][ T25] block nbd0: Possible stuck request ffff888026dd8600: control (read@3072,1024B). Runtime 150 seconds [ 730.101944][ T5826] Bluetooth: hci17: command tx timeout [ 730.274214][ T5826] Bluetooth: hci16: command tx timeout [ 730.615290][ T5826] Bluetooth: hci19: command tx timeout [ 731.556920][ T5826] Bluetooth: hci18: command tx timeout [ 732.325938][ T5826] Bluetooth: hci17: command tx timeout [ 732.839004][ T5826] Bluetooth: hci19: command tx timeout [ 733.782365][ T5826] Bluetooth: hci18: command tx timeout [ 734.645450][ T5826] Bluetooth: hci9: command 0x0406 tx timeout [ 735.062500][ T5819] Bluetooth: hci19: command tx timeout [ 737.286078][ T5819] Bluetooth: hci19: command tx timeout [ 741.306121][ T31] INFO: task syz.5.10519:28672 blocked for more than 143 seconds. [ 741.313957][ T31] Tainted: G L syzkaller #0 [ 741.321623][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 741.330419][ T31] task:syz.5.10519 state:D stack:26328 pid:28672 tgid:28671 ppid:28204 task_flags:0x480140 flags:0x00080002 [ 741.342418][ T31] Call Trace: [ 741.345689][ T31] [ 741.349104][ T31] ? __schedule+0xf65/0x5e10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 741.353952][ T31] __schedule+0xfe4/0x5e10 [ 741.358530][ T31] ? __lock_acquire+0x4a5/0x2630 [ 741.359277][ T30] audit: type=1400 audit(2000000535.620:1796): avc: denied { write } for pid=5802 comm="syz-executor" path="pipe:[5189]" dev="pipefs" ino=5189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 741.363612][ T31] ? __pfx___schedule+0x10/0x10 [ 741.392420][ T31] ? find_held_lock+0x2b/0x80 [ 741.397117][ T31] ? schedule+0x2bf/0x390 [ 741.401480][ T31] schedule+0xdd/0x390 [ 741.454155][ T31] blk_mq_freeze_queue_wait+0x14a/0x1b0 [ 741.461491][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 741.468588][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 741.474694][ T31] queue_limits_commit_update_frozen+0x60/0xd0 [ 741.483118][ T31] nbd_set_size+0x4cd/0x720 [ 741.487757][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 741.492801][ T31] ? __asan_memcpy+0x3c/0x60 [ 741.497377][ T31] nbd_genl_size_set+0x2ab/0x3d0 [ 741.502407][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 741.507866][ T31] ? bpf_lsm_capable+0x9/0x10 [ 741.512672][ T31] ? __radix_tree_lookup+0x217/0x2b0 [ 741.517973][ T31] nbd_genl_reconfigure+0x548/0x1a00 [ 741.523321][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 741.530284][ T31] ? rcu_is_watching+0x12/0xc0 [ 741.535049][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 741.542072][ T31] ? trace_kmalloc+0x83/0xb0 [ 741.546671][ T31] ? __kmalloc_noprof+0x365/0x9c0 [ 741.551808][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 741.557541][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 741.565594][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 741.572567][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 741.578296][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 741.584492][ T31] ? genl_get_cmd+0x3ef/0x720 [ 741.589182][ T31] ? __sys_sendmsg+0x170/0x220 [ 741.594326][ T31] ? do_syscall_64+0xc9/0xf80 [ 741.599006][ T31] ? __radix_tree_lookup+0x217/0x2b0 [ 741.604284][ T31] genl_rcv_msg+0x560/0x800 [ 741.608959][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 741.613982][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 741.619720][ T31] ? __lock_acquire+0x4a5/0x2630 [ 741.624656][ T31] netlink_rcv_skb+0x159/0x420 [ 741.629551][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 741.634570][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 741.639921][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 741.645217][ T31] genl_rcv+0x28/0x40 [ 741.649717][ T31] netlink_unicast+0x5aa/0x870 [ 741.654492][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 741.659814][ T31] netlink_sendmsg+0x8b0/0xda0 [ 741.664584][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.670046][ T31] ? PageHuge+0x180/0x180 [ 741.674383][ T31] ____sys_sendmsg+0xa54/0xc30 [ 741.679139][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 741.684496][ T31] ? __pfx___futex_wait+0x10/0x10 [ 741.689525][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 741.694984][ T31] ___sys_sendmsg+0x190/0x1e0 [ 741.700117][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 741.705392][ T31] ? find_held_lock+0x2b/0x80 [ 741.710084][ T31] __sys_sendmsg+0x170/0x220 [ 741.714772][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 741.719886][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 741.724906][ T31] do_syscall_64+0xc9/0xf80 [ 741.729417][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.735498][ T31] RIP: 0033:0x7f002199acb9 [ 741.739909][ T31] RSP: 002b:00007f002277f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.748358][ T31] RAX: ffffffffffffffda RBX: 00007f0021c15fa0 RCX: 00007f002199acb9 [ 741.756472][ T31] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000004 [ 741.764435][ T31] RBP: 00007f0021a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 741.772454][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.780488][ T31] R13: 00007f0021c16038 R14: 00007f0021c15fa0 R15: 00007ffd38218be8 [ 741.788502][ T31] [ 741.791521][ T31] INFO: task syz.0.10532:28700 blocked for more than 143 seconds. [ 741.799475][ T31] Tainted: G L syzkaller #0 [ 741.805962][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 741.815258][ T31] task:syz.0.10532 state:D stack:28072 pid:28700 tgid:28699 ppid:5814 task_flags:0x400040 flags:0x00080002 [ 741.827458][ T31] Call Trace: [ 741.830773][ T31] [ 741.833694][ T31] ? __schedule+0xf65/0x5e10 [ 741.838266][ T31] __schedule+0xfe4/0x5e10 [ 741.842778][ T31] ? __lock_acquire+0x4a5/0x2630 [ 741.847721][ T31] ? __pfx___schedule+0x10/0x10 [ 741.852642][ T31] ? find_held_lock+0x2b/0x80 [ 741.857322][ T31] ? schedule+0x2bf/0x390 [ 741.861734][ T31] schedule+0xdd/0x390 [ 741.865814][ T31] schedule_preempt_disabled+0x13/0x30 [ 741.871247][ T31] __mutex_lock+0xc9a/0x1b90 [ 741.875852][ T31] ? netdev_pick_tx+0x4ab/0xe50 [ 741.880703][ T31] ? genl_rcv_msg+0x57b/0x800 [ 741.885461][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 741.890486][ T31] ? find_held_lock+0x2b/0x80 [ 741.895248][ T31] ? __local_bh_enable_ip+0x9e/0x120 [ 741.900539][ T31] ? __dev_queue_xmit+0x7dc/0x46f0 [ 741.908537][ T31] ? __dev_queue_xmit+0x7fd/0x46f0 [ 741.913632][ T31] ? __radix_tree_lookup+0x217/0x2b0 [ 741.919391][ T31] ? genl_rcv_msg+0x57b/0x800 [ 741.924068][ T31] genl_rcv_msg+0x57b/0x800 [ 741.928751][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 741.933782][ T31] ? __lock_acquire+0x4a5/0x2630 [ 741.938831][ T31] netlink_rcv_skb+0x159/0x420 [ 741.943601][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 741.948695][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 741.953999][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 741.959317][ T31] genl_rcv+0x28/0x40 [ 741.963299][ T31] netlink_unicast+0x5aa/0x870 [ 741.968050][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 741.973535][ T31] netlink_sendmsg+0x8b0/0xda0 [ 741.978308][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.983673][ T31] __sys_sendto+0x4aa/0x520 [ 741.988179][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 741.993641][ T31] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 742.000085][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 742.004863][ T31] ? do_syscall_64+0x94/0xf80 [ 742.009533][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 742.014821][ T31] do_syscall_64+0xc9/0xf80 [ 742.019325][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.025263][ T31] RIP: 0033:0x7f10d0b5b58e [ 742.030044][ T31] RSP: 002b:00007f10d1996e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 742.038552][ T31] RAX: ffffffffffffffda RBX: 00007f10d19986c0 RCX: 00007f10d0b5b58e [ 742.046605][ T31] RDX: 0000000000000020 RSI: 00007f10d1997000 RDI: 0000000000000004 [ 742.054654][ T31] RBP: 0000000000000000 R08: 00007f10d1996f04 R09: 000000000000000c [ 742.062625][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 742.070675][ T31] R13: 00007f10d1996f58 R14: 00007f10d1997000 R15: 0000000000000000 [ 742.078785][ T31] [ 742.081848][ T31] INFO: task syz.4.10551:28745 blocked for more than 144 seconds. [ 742.090004][ T31] Tainted: G L syzkaller #0 [ 742.096500][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 742.107575][ T31] task:syz.4.10551 state:D stack:28792 pid:28745 tgid:28744 ppid:5817 task_flags:0x400040 flags:0x00080002 [ 742.120002][ T31] Call Trace: [ 742.123265][ T31] [ 742.126171][ T31] ? __schedule+0xf65/0x5e10 [ 742.131898][ T31] __schedule+0xfe4/0x5e10 [ 742.136309][ T31] ? __lock_acquire+0x4a5/0x2630 [ 742.141430][ T31] ? __pfx___schedule+0x10/0x10 [ 742.146287][ T31] ? find_held_lock+0x2b/0x80 [ 742.151357][ T31] ? schedule+0x2bf/0x390 [ 742.155700][ T31] schedule+0xdd/0x390 [ 742.159748][ T31] schedule_preempt_disabled+0x13/0x30 [ 742.165561][ T31] __mutex_lock+0xc9a/0x1b90 [ 742.170153][ T31] ? netdev_pick_tx+0x4ab/0xe50 [ 742.175154][ T31] ? genl_rcv_msg+0x57b/0x800 [ 742.179830][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 742.185259][ T31] ? find_held_lock+0x2b/0x80 [ 742.189939][ T31] ? __local_bh_enable_ip+0x9e/0x120 [ 742.195398][ T31] ? __dev_queue_xmit+0x7dc/0x46f0 [ 742.200514][ T31] ? __dev_queue_xmit+0x7fd/0x46f0 [ 742.205703][ T31] ? __radix_tree_lookup+0x217/0x2b0 [ 742.210995][ T31] ? genl_rcv_msg+0x57b/0x800 [ 742.215803][ T31] genl_rcv_msg+0x57b/0x800 [ 742.220312][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 742.225379][ T31] ? __lock_acquire+0x4a5/0x2630 [ 742.230322][ T31] netlink_rcv_skb+0x159/0x420 [ 742.235074][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 742.240257][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 742.245559][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 742.251490][ T31] genl_rcv+0x28/0x40 [ 742.255487][ T31] netlink_unicast+0x5aa/0x870 [ 742.260371][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 742.265671][ T31] netlink_sendmsg+0x8b0/0xda0 [ 742.270481][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 742.275775][ T31] __sys_sendto+0x4aa/0x520 [ 742.280451][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 742.285463][ T31] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 742.292000][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 742.296766][ T31] ? do_syscall_64+0x94/0xf80 [ 742.301534][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 742.306731][ T31] do_syscall_64+0xc9/0xf80 [ 742.311273][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.317161][ T31] RIP: 0033:0x7f02c735b58e [ 742.321676][ T31] RSP: 002b:00007f02c8265e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 742.330090][ T31] RAX: ffffffffffffffda RBX: 00007f02c82676c0 RCX: 00007f02c735b58e [ 742.338095][ T31] RDX: 0000000000000020 RSI: 00007f02c8266000 RDI: 0000000000000003 [ 742.346171][ T31] RBP: 0000000000000000 R08: 00007f02c8265f04 R09: 000000000000000c [ 742.354209][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 742.362532][ T31] R13: 00007f02c8265f58 R14: 00007f02c8266000 R15: 0000000000000000 [ 742.370643][ T31] [ 742.373662][ T31] INFO: task syz.3.10566:28781 blocked for more than 144 seconds. [ 742.381504][ T31] Tainted: G L syzkaller #0 [ 742.388044][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 742.396842][ T31] task:syz.3.10566 state:D stack:28792 pid:28781 tgid:28780 ppid:5816 task_flags:0x400040 flags:0x00080002 [ 742.408873][ T31] Call Trace: [ 742.412140][ T31] [ 742.415044][ T31] ? __schedule+0xf65/0x5e10 [ 742.419835][ T31] __schedule+0xfe4/0x5e10 [ 742.424270][ T31] ? __lock_acquire+0x4a5/0x2630 [ 742.429280][ T31] ? __pfx___schedule+0x10/0x10 [ 742.434138][ T31] ? find_held_lock+0x2b/0x80 [ 742.438877][ T31] ? schedule+0x2bf/0x390 [ 742.443215][ T31] schedule+0xdd/0x390 [ 742.447267][ T31] schedule_preempt_disabled+0x13/0x30 [ 742.452824][ T31] __mutex_lock+0xc9a/0x1b90 [ 742.457420][ T31] ? netdev_pick_tx+0x4ab/0xe50 [ 742.462310][ T31] ? genl_rcv_msg+0x57b/0x800 [ 742.467443][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 742.472563][ T31] ? find_held_lock+0x2b/0x80 [ 742.477248][ T31] ? __local_bh_enable_ip+0x9e/0x120 [ 742.482608][ T31] ? __dev_queue_xmit+0x7dc/0x46f0 [ 742.487716][ T31] ? __dev_queue_xmit+0x7fd/0x46f0 [ 742.492907][ T31] ? __radix_tree_lookup+0x217/0x2b0 [ 742.498203][ T31] ? genl_rcv_msg+0x57b/0x800 [ 742.502860][ T31] genl_rcv_msg+0x57b/0x800 [ 742.508072][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 742.513102][ T31] ? __lock_acquire+0x4a5/0x2630 [ 742.518182][ T31] netlink_rcv_skb+0x159/0x420 [ 742.522951][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 742.528012][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 742.533329][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 742.538734][ T31] genl_rcv+0x28/0x40 [ 742.542723][ T31] netlink_unicast+0x5aa/0x870 [ 742.547507][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 742.552800][ T31] netlink_sendmsg+0x8b0/0xda0 [ 742.557630][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 742.562927][ T31] __sys_sendto+0x4aa/0x520 [ 742.567490][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 742.572518][ T31] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 742.579589][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 742.584357][ T31] ? do_syscall_64+0x94/0xf80 [ 742.590596][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 742.595773][ T31] do_syscall_64+0xc9/0xf80 [ 742.600354][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.606242][ T31] RIP: 0033:0x7f88f9f5b58e [ 742.610703][ T31] RSP: 002b:00007f88faf23e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 742.619110][ T31] RAX: ffffffffffffffda RBX: 00007f88faf256c0 RCX: 00007f88f9f5b58e [ 742.627247][ T31] RDX: 0000000000000020 RSI: 00007f88faf24000 RDI: 0000000000000003 [ 742.635288][ T31] RBP: 0000000000000000 R08: 00007f88faf23f04 R09: 000000000000000c [ 742.643305][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 742.651266][ T31] R13: 00007f88faf23f58 R14: 00007f88faf24000 R15: 0000000000000000 [ 742.659286][ T31] [ 742.662304][ T31] INFO: task syz.1.10590:28848 blocked for more than 144 seconds. [ 742.670375][ T31] Tainted: G L syzkaller #0 [ 742.677807][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 742.687047][ T31] task:syz.1.10590 state:D stack:28728 pid:28848 tgid:28847 ppid:5815 task_flags:0x400140 flags:0x00080002 [ 742.699146][ T31] Call Trace: [ 742.702419][ T31] [ 742.705348][ T31] ? __schedule+0xf65/0x5e10 [ 742.710097][ T31] __schedule+0xfe4/0x5e10 [ 742.714540][ T31] ? __lock_acquire+0x4a5/0x2630 [ 742.719539][ T31] ? find_held_lock+0x2b/0x80 [ 742.724223][ T31] ? __pfx___schedule+0x10/0x10 [ 742.729169][ T31] ? find_held_lock+0x2b/0x80 [ 742.733855][ T31] ? schedule+0x2bf/0x390 [ 742.738256][ T31] schedule+0xdd/0x390 [ 742.742332][ T31] schedule_preempt_disabled+0x13/0x30 [ 742.747761][ T31] __mutex_lock+0xc9a/0x1b90 [ 742.752510][ T31] ? genl_rcv_msg+0x57b/0x800 [ 742.757186][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 742.762715][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 742.768096][ T31] ? kasan_save_stack+0x3f/0x50 [ 742.773014][ T31] ? kasan_save_stack+0x30/0x50 [ 742.777868][ T31] ? netlink_alloc_large_skb+0x69/0x150 [ 742.783481][ T31] ? netlink_sendmsg+0x680/0xda0 [ 742.788425][ T31] ? __sys_sendto+0x4aa/0x520 [ 742.793213][ T31] ? __x64_sys_sendto+0xe0/0x1c0 [ 742.798509][ T31] ? do_syscall_64+0xc9/0xf80 [ 742.803245][ T31] ? __radix_tree_lookup+0x217/0x2b0 [ 742.808540][ T31] ? genl_rcv_msg+0x57b/0x800 [ 742.813314][ T31] genl_rcv_msg+0x57b/0x800 [ 742.817823][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 742.822824][ T31] ? __lock_acquire+0x4a5/0x2630 [ 742.827834][ T31] ? __lock_acquire+0x4a5/0x2630 [ 742.832777][ T31] netlink_rcv_skb+0x159/0x420 [ 742.837662][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 742.842704][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 742.848066][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 742.853357][ T31] genl_rcv+0x28/0x40 [ 742.857423][ T31] netlink_unicast+0x5aa/0x870 [ 742.862192][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 742.867637][ T31] netlink_sendmsg+0x8b0/0xda0 [ 742.872387][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 742.877795][ T31] __sys_sendto+0x4aa/0x520 [ 742.882309][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 742.887324][ T31] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 742.893780][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 742.898651][ T31] ? do_syscall_64+0x94/0xf80 [ 742.903310][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 742.908860][ T31] do_syscall_64+0xc9/0xf80 [ 742.913456][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.919347][ T31] RIP: 0033:0x7f0e2b35b58e [ 742.923897][ T31] RSP: 002b:00007f0e2c29fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 742.932501][ T31] RAX: ffffffffffffffda RBX: 00007f0e2c2a16c0 RCX: 00007f0e2b35b58e [ 742.940467][ T31] RDX: 0000000000000028 RSI: 00007f0e2c2a0000 RDI: 0000000000000005 [ 742.948499][ T31] RBP: 0000000000000000 R08: 00007f0e2c29ff04 R09: 000000000000000c [ 742.956546][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 742.964603][ T31] R13: 00007f0e2c29ff58 R14: 00007f0e2c2a0000 R15: 0000000000000000 [ 742.972593][ T31] [ 742.975717][ T31] [ 742.975717][ T31] Showing all locks held in the system: [ 742.983426][ T31] 1 lock held by khungtaskd/31: [ 742.988583][ T31] #0: ffffffff8e5e3360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 742.998496][ T31] 2 locks held by getty/5571: [ 743.003157][ T31] #0: ffff88814de5d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 743.013362][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 743.025958][ T31] 1 lock held by udevd/16121: [ 743.030712][ T31] #0: ffff888026c2c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 743.040108][ T31] 1 lock held by ipvs-e:1:0/24349: [ 743.045198][ T31] #0: ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 743.055205][ T31] 6 locks held by syz.5.10519/28672: [ 743.060503][ T31] #0: ffffffff9049ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 743.068661][ T31] #1: ffffffff9049ed28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 743.077700][ T31] #2: ffff888026d04278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4a7/0x1a00 [ 743.088115][ T31] #3: ffff8881413c3ff0 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2a5/0x720 [ 743.097622][ T31] #4: ffff8881413c3990 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 743.109508][ T31] #5: ffff8881413c39c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 743.121565][ T31] 2 locks held by syz.0.10532/28700: [ 743.127385][ T31] #0: ffffffff9049ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 743.135697][ T31] #1: ffffffff9049ed28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 743.144702][ T31] 2 locks held by syz.4.10551/28745: [ 743.149971][ T31] #0: ffffffff9049ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 743.158228][ T31] #1: ffffffff9049ed28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 743.167247][ T31] 2 locks held by syz.3.10566/28781: [ 743.172501][ T31] #0: ffffffff9049ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 743.180759][ T31] #1: ffffffff9049ed28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 743.190084][ T31] 2 locks held by syz.1.10590/28848: [ 743.195366][ T31] #0: ffffffff9049ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 743.203626][ T31] #1: ffffffff9049ed28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 743.212622][ T31] 2 locks held by syz-executor/28894: [ 743.217966][ T31] #0: ffffffff9049ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 743.226316][ T31] #1: ffffffff9049ed28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 743.235684][ T31] 2 locks held by syz-executor/28903: [ 743.241154][ T31] #0: ffffffff9049ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 743.249354][ T31] #1: ffffffff9049ed28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 743.258366][ T31] 2 locks held by syz-executor/28912: [ 743.263818][ T31] #0: ffffffff9049ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 743.272020][ T31] #1: ffffffff9049ed28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 743.281179][ T31] 2 locks held by syz-executor/28921: [ 743.286605][ T31] #0: ffffffff9049ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 743.294831][ T31] #1: ffffffff9049ed28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 743.303804][ T31] 2 locks held by syz-executor/28930: [ 743.310030][ T31] #0: ffffffff9049ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 743.318260][ T31] #1: ffffffff9049ed28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 743.327282][ T31] 2 locks held by syz-executor/29113: [ 743.332637][ T31] #0: ffffffff9049ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 743.340933][ T31] #1: ffffffff9049ed28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 743.350443][ T31] 2 locks held by syz-executor/29122: [ 743.355810][ T31] #0: ffffffff9049ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 743.364126][ T31] #1: ffffffff9049ed28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 743.373285][ T31] 2 locks held by syz-executor/29131: [ 743.378723][ T31] #0: ffffffff9049ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 743.387152][ T31] #1: ffffffff9049ed28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 743.396309][ T31] 2 locks held by syz-executor/29140: [ 743.401721][ T31] #0: ffffffff9049ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 743.409928][ T31] #1: ffffffff9049ed28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 743.418979][ T31] 2 locks held by syz-executor/29149: [ 743.424369][ T31] #0: ffffffff9049ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 743.432529][ T31] #1: ffffffff9049ed28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 743.441546][ T31] 2 locks held by syz-executor/29161: [ 743.446932][ T31] #0: ffffffff9049ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 743.455598][ T31] #1: ffffffff9049ed28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 743.464586][ T31] 2 locks held by syz-executor/29170: [ 743.469959][ T31] #0: ffffffff9049ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 743.478217][ T31] #1: ffffffff9049ed28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 743.487194][ T31] 2 locks held by syz-executor/29180: [ 743.492548][ T31] #0: ffffffff9049ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 743.500803][ T31] #1: ffffffff9049ed28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 743.509804][ T31] 2 locks held by syz-executor/29190: [ 743.515144][ T31] #0: ffffffff9049ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 743.523395][ T31] #1: ffffffff9049ed28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 743.532468][ T31] 2 locks held by syz-executor/29199: [ 743.537826][ T31] #0: ffffffff9049ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 743.546119][ T31] #1: ffffffff9049ed28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 743.555123][ T31] [ 743.557430][ T31] ============================================= [ 743.557430][ T31] [ 743.566361][ T31] NMI backtrace for cpu 1 [ 743.566386][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 743.566417][ T31] Tainted: [L]=SOFTLOCKUP [ 743.566425][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 743.566438][ T31] Call Trace: [ 743.566445][ T31] [ 743.566453][ T31] dump_stack_lvl+0x100/0x190 [ 743.566484][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 743.566516][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 743.566542][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 743.566575][ T31] sys_info+0x141/0x190 [ 743.566601][ T31] watchdog+0xcc3/0xfe0 [ 743.566642][ T31] ? __pfx_watchdog+0x10/0x10 [ 743.566674][ T31] ? __kthread_parkme+0x18c/0x230 [ 743.566708][ T31] ? __pfx_watchdog+0x10/0x10 [ 743.566740][ T31] ? __pfx_watchdog+0x10/0x10 [ 743.566768][ T31] kthread+0x3b3/0x730 [ 743.566801][ T31] ? __pfx_kthread+0x10/0x10 [ 743.566823][ T31] ? ret_from_fork+0x79/0xaf0 [ 743.566849][ T31] ? ret_from_fork+0x79/0xaf0 [ 743.566874][ T31] ? rcu_is_watching+0x12/0xc0 [ 743.566904][ T31] ? __pfx_kthread+0x10/0x10 [ 743.566930][ T31] ret_from_fork+0x754/0xaf0 [ 743.566956][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 743.566983][ T31] ? __switch_to+0x7b9/0x10c0 [ 743.567014][ T31] ? __pfx_kthread+0x10/0x10 [ 743.567039][ T31] ret_from_fork_asm+0x1a/0x30 [ 743.567073][ T31] [ 743.567082][ T31] Sending NMI from CPU 1 to CPUs 0: [ 743.712541][ C0] NMI backtrace for cpu 0 [ 743.712559][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 743.712589][ C0] Tainted: [L]=SOFTLOCKUP [ 743.712596][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 743.712609][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 743.712634][ C0] Code: 76 78 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 dc 14 00 fb f4 fc 31 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 743.712655][ C0] RSP: 0018:ffffffff8e207e00 EFLAGS: 00000246 [ 743.712671][ C0] RAX: 000000000042eb7d RBX: ffffffff8e297ac0 RCX: ffffffff8b76a4b5 [ 743.712686][ C0] RDX: 0000000000000000 RSI: ffffffff8dc44a41 RDI: ffffffff8bfa35a0 [ 743.712700][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed101708673d [ 743.712713][ C0] R10: ffff8880b84339eb R11: 0000000000000000 R12: fffffbfff1c52f58 [ 743.712726][ C0] R13: 0000000000000000 R14: ffffffff90b735d0 R15: 0000000000000000 [ 743.712740][ C0] FS: 0000000000000000(0000) GS:ffff8881245dc000(0000) knlGS:0000000000000000 [ 743.712760][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 743.712774][ C0] CR2: 000055661d19da78 CR3: 000000000e392000 CR4: 00000000003526f0 [ 743.712787][ C0] Call Trace: [ 743.712794][ C0] [ 743.712801][ C0] default_idle+0x9/0x10 [ 743.712825][ C0] default_idle_call+0x6c/0xb0 [ 743.712849][ C0] do_idle+0x35b/0x4b0 [ 743.712877][ C0] ? __pfx_do_idle+0x10/0x10 [ 743.712908][ C0] cpu_startup_entry+0x4f/0x60 [ 743.712944][ C0] rest_init+0x251/0x260 [ 743.712969][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 743.712992][ C0] start_kernel+0x47a/0x480 [ 743.713024][ C0] x86_64_start_reservations+0x24/0x30 [ 743.713049][ C0] x86_64_start_kernel+0x122/0x130 [ 743.713070][ C0] common_startup_64+0x13e/0x148 [ 743.713106][ C0] [ 743.900182][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 743.907019][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 743.917672][ T31] Tainted: [L]=SOFTLOCKUP [ 743.921973][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 743.932007][ T31] Call Trace: [ 743.935266][ T31] [ 743.938182][ T31] dump_stack_lvl+0x100/0x190 [ 743.942856][ T31] vpanic+0x20d/0x630 [ 743.946823][ T31] panic+0xd1/0xd1 [ 743.950528][ T31] ? __pfx_panic+0x10/0x10 [ 743.954932][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 743.961079][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 743.967226][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 743.973371][ T31] ? watchdog.cold+0x198/0x1ca [ 743.978123][ T31] ? watchdog+0xcd3/0xfe0 [ 743.982450][ T31] watchdog.cold+0x1a9/0x1ca [ 743.987036][ T31] ? __pfx_watchdog+0x10/0x10 [ 743.991707][ T31] ? __kthread_parkme+0x18c/0x230 [ 743.996729][ T31] ? __pfx_watchdog+0x10/0x10 [ 744.001405][ T31] ? __pfx_watchdog+0x10/0x10 [ 744.006073][ T31] kthread+0x3b3/0x730 [ 744.010133][ T31] ? __pfx_kthread+0x10/0x10 [ 744.014707][ T31] ? ret_from_fork+0x79/0xaf0 [ 744.019375][ T31] ? ret_from_fork+0x79/0xaf0 [ 744.024040][ T31] ? rcu_is_watching+0x12/0xc0 [ 744.028797][ T31] ? __pfx_kthread+0x10/0x10 [ 744.033374][ T31] ret_from_fork+0x754/0xaf0 [ 744.037953][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 744.043055][ T31] ? __switch_to+0x7b9/0x10c0 [ 744.047728][ T31] ? __pfx_kthread+0x10/0x10 [ 744.052310][ T31] ret_from_fork_asm+0x1a/0x30 [ 744.057070][ T31] [ 744.060344][ T31] Kernel Offset: disabled [ 744.064643][ T31] Rebooting in 86400 seconds..