last executing test programs: 2.80418078s ago: executing program 3 (id=3997): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x4c, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000300)="f30f0ddf66b9170800000f322c00660f18d70f1e6f008a2398f8f821f8ab1c3504008a90359035f82ee1d66526f30f2ce226360f01ca0f070fc7840400", 0x3d}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.626308607s ago: executing program 0 (id=4000): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000100)={0xd5, 0x0, 0x48}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x4, 0x3eea, 0x7fffc, 0x7f}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.481663424s ago: executing program 2 (id=4003): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x5, @loopback, 0x3}, 0x1c, 0x0}}], 0x1, 0x3404c8d4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x78, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000080)={0x41, 0x0, [{0x7, 0x8, 0x0, 0x100, 0xde, 0x3, 0x4}, {0x0, 0x3, 0x4, 0x8, 0x7843, 0x3, 0x4}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.432996606s ago: executing program 3 (id=4004): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7}]}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x121002, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1, 0x32, 0xffffffffffffffff, 0x99c99000) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x80000010}) epoll_pwait2(r1, &(0x7f0000000000)=[{}], 0xf7, 0x0, 0x0, 0x0) 2.206685075s ago: executing program 0 (id=4006): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x40000093, 0x7}}], 0x20}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) open(0x0, 0x143bc2, 0x1f0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000002c0)=[@rdmsr={0x66, 0x18, {0x40000073}}], 0x18}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.029781703s ago: executing program 2 (id=4007): syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x3}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001f80)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.882312989s ago: executing program 0 (id=4008): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x20048100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000208e052500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.695197457s ago: executing program 1 (id=4010): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000440)=[@in_dx={0x82, 0x20, {0xfd90, 0x6}}], 0x20}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000280)="f30f1bf066b9034d564b0f32f30f7f0266b80500000066b9b4e963a60f01c166b96a09000066b81080000066ba000000000f30d3c23e0fc71f360f50c9ba4200ed66b80500000066b922cd00000f01d9", 0x50}], 0x1, 0x16, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.581671422s ago: executing program 2 (id=4011): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=[@cpuid={0x64, 0x18, {0x7, 0x8}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0xa3, 0xfffffffffffffff7, 0x40, 0xfffffffffffffffb}}, @nested_load_code={0x12e, 0x5b, {0x2, "b9800000c00f3235008000000f30420f01f836410f23b4410f01c9431026c4a17e121dfe870000460f013bc4c33d426e071d66ba2000b87d1d8e71ef2e2666410f6f12"}}], 0xab}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000680)=[@cpuid={0x14, 0x18}], 0x18}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000000c0)={0x3}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000007c0)=[@wr_crn={0x46, 0x20, {0x4, 0x6}}, @wr_drn={0x6e, 0x20, {0x0, 0x5}}, @rdmsr={0x32, 0x18, {0x181}}, @code={0xa, 0x53, {"67735a2e0f019ee0000000650f01cfab66ba420066b89b1566ef4d0fc79ee388ef1966450f38803266baf80cb8947a2c89ef66bafc0ced40e80018000043d07c7800"}}, @out_dx={0xaa, 0x28, {0x5b77, 0x5, 0x8}}, @cpuid={0x14, 0x18, {0x10001, 0x9}}, @rdmsr={0x32, 0x18, {0xb7d}}, @rdmsr={0x32, 0x18, {0x2f0}}, @out_dx={0xaa, 0x28, {0xe6cb, 0x3, 0x80000000004}}, @code={0xa, 0x46, {"26640f35360f060f2084b9f70b00000f32420fc75d00c461fc298f0a630000c462c3f521c40299ac66410f01c9b8010000000f01d9"}}, @rdmsr={0x32, 0x18, {0x966}}, @rdmsr={0x32, 0x18, {0x4000009e}}, @nested_create_vm={0x12d, 0x18, 0x1}, @in_dx={0x82, 0x20, {0xbde0, 0x7}}], 0x1f1}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r0, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 1.581400022s ago: executing program 1 (id=4012): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r2, &(0x7f0000002d40)=""/4104, 0x1008) 1.565666553s ago: executing program 2 (id=4013): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000004040)={&(0x7f0000003e80)={0x34, r2, 0x1, 0x78bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, 0x0, 0x0) listen(r3, 0x9) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r4, &(0x7f00000000c0)="ab", 0x1, 0xc1, 0x0, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/20, 0x14}, {&(0x7f00000003c0)=""/153, 0x99}, {&(0x7f0000000480)=""/179, 0xb3}, {&(0x7f0000000100)=""/140, 0x8c}, {&(0x7f0000000600)=""/133, 0x85}, {&(0x7f00000006c0)=""/193, 0xc1}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/121, 0x79}], 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1, 0x1, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r6, 0x4068aea3, &(0x7f00000008c0)={0xcc, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="6c66b8ae00c4c1fd7ff265da00b8010000000f01d90f01df0fc7360f320fae8f00a0000066b81f018ee8b9840b00000f0e", 0x31}], 0x1, 0x18, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x2b, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c033, 0xffffffffffffffff, 0x0) 1.472172337s ago: executing program 3 (id=4014): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="c18000000000f966baa000ec0f01cf0f01d1c4e2f92aa300a00000b9b20200000f320fc75c1f062e0f019b020000008fc978d7e66464642e0fc73d00000000", 0x3f}], 0x1, 0x46, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x1, 0x0, @pic={0xd8, 0x3, 0x2, 0x8, 0x7f, 0x1, 0x8, 0x7f, 0x2, 0x8, 0x5, 0x2, 0x2, 0x7f, 0x9, 0xe2}}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000300)={0xffffffffffffffff, 0x7, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.030278125s ago: executing program 3 (id=4015): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd27, 0x2, {0x0, 0x0, 0x0, r9, {0xf, 0x1}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1b734}]}}]}, 0x44}}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 790.250846ms ago: executing program 1 (id=4016): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}}], 0x5f, 0x4850) 672.476261ms ago: executing program 1 (id=4017): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x7000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 488.665919ms ago: executing program 2 (id=4018): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 445.32253ms ago: executing program 3 (id=4019): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r4 = socket(0x10, 0x3, 0x0) close(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x2000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 405.701112ms ago: executing program 2 (id=4020): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000004040)={&(0x7f0000003e80)={0x34, r2, 0x1, 0x78bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r3, 0x9) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r4, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/20, 0x14}, {&(0x7f00000003c0)=""/153, 0x99}, {&(0x7f0000000480)=""/179, 0xb3}, {&(0x7f0000000100)=""/140, 0x8c}, {&(0x7f0000000600)=""/133, 0x85}, {&(0x7f00000006c0)=""/193, 0xc1}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/121, 0x79}], 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1, 0x1, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r6, 0x4068aea3, &(0x7f00000008c0)={0xcc, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="6c66b8ae00c4c1fd7ff265da00b8010000000f01d90f01df0fc7360f320fae8f00a0000066b81f018ee8b9840b00000f0e", 0x31}], 0x1, 0x18, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000240)=0xa414, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x2b, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c033, 0xffffffffffffffff, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet6_sctp(0xa, 0x5, 0x84) 324.988305ms ago: executing program 1 (id=4021): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000440)=[@in_dx={0x82, 0x20, {0xfd90, 0x6}}], 0x20}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000280)="f30f1bf066b9034d564b0f32f30f7f0266b80500000066b9b4e963a60f01c166b96a09000066b81080000066ba000000000f30d3c23e0fc71f360f50c9ba4200ed66b80500000066b922cd00000f01d9", 0x50}], 0x1, 0x16, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 290.910557ms ago: executing program 0 (id=4022): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=[@cpuid={0x64, 0x18, {0x7, 0x8}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0xa3, 0xfffffffffffffff7, 0x40, 0xfffffffffffffffb}}, @nested_load_code={0x12e, 0x5b, {0x2, "b9800000c00f3235008000000f30420f01f836410f23b4410f01c9431026c4a17e121dfe870000460f013bc4c33d426e071d66ba2000b87d1d8e71ef2e2666410f6f12"}}], 0xab}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000680)=[@cpuid={0x14, 0x18}], 0x18}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000000c0)={0x3}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000007c0)=[@wr_crn={0x46, 0x20, {0x4, 0x6}}, @wr_drn={0x6e, 0x20, {0x0, 0x5}}, @rdmsr={0x32, 0x18, {0x181}}, @code={0xa, 0x53, {"67735a2e0f019ee0000000650f01cfab66ba420066b89b1566ef4d0fc79ee388ef1966450f38803266baf80cb8947a2c89ef66bafc0ced40e80018000043d07c7800"}}, @out_dx={0xaa, 0x28, {0x5b77, 0x5, 0x8}}, @cpuid={0x14, 0x18, {0x10001, 0x9}}, @rdmsr={0x32, 0x18, {0xb7d}}, @rdmsr={0x32, 0x18, {0x2f0}}, @out_dx={0xaa, 0x28, {0xe6cb, 0x3, 0x80000000004}}, @code={0xa, 0x46, {"26640f35360f060f2084b9f70b00000f32420fc75d00c461fc298f0a630000c462c3f521c40299ac66410f01c9b8010000000f01d9"}}, @rdmsr={0x32, 0x18, {0x966}}, @rdmsr={0x32, 0x18, {0x4000009e}}, @nested_create_vm={0x12d, 0x18, 0x1}, @in_dx={0x82, 0x20, {0xbde0, 0x7}}], 0x1f1}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r1, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 104.172525ms ago: executing program 0 (id=4023): r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x4) fallocate(r0, 0x0, 0x200, 0x4) read(r0, &(0x7f0000001040)=""/4096, 0x81ff) 103.402785ms ago: executing program 1 (id=4024): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffd, @local, 0x2}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "5604ff", 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x4}}}}}}}, 0x0) 1.298529ms ago: executing program 0 (id=4025): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000480)) 0s ago: executing program 3 (id=4026): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e20, 0x7, @remote, 0x3}, r4, 0x5}}, 0x48) kernel console output (not intermixed with test programs): =0 ip=0x7f155558f749 code=0x7ffc0000 [ 352.388527][ T28] audit: type=1326 audit(352.187:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8302 comm="syz.3.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f155558f749 code=0x7ffc0000 [ 352.431722][ T28] audit: type=1326 audit(352.187:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8302 comm="syz.3.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155558f749 code=0x7ffc0000 [ 352.479846][ T28] audit: type=1326 audit(352.187:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8302 comm="syz.3.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155558f749 code=0x7ffc0000 [ 352.514542][ T28] audit: type=1326 audit(352.187:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8302 comm="syz.3.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155558f749 code=0x7ffc0000 [ 352.538481][ T28] audit: type=1326 audit(352.187:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8302 comm="syz.3.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155558f749 code=0x7ffc0000 [ 352.560743][ T28] audit: type=1326 audit(352.187:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8302 comm="syz.3.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f155558f749 code=0x7ffc0000 [ 357.759699][ T8410] kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 357.770594][ T8410] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 358.292698][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 358.292712][ T28] audit: type=1326 audit(358.257:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.1.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ea98f749 code=0x7ffc0000 [ 358.362006][ T28] audit: type=1326 audit(358.287:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.1.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ea98f749 code=0x7ffc0000 [ 358.406757][ T28] audit: type=1326 audit(358.287:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.1.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ea98f749 code=0x7ffc0000 [ 358.445965][ T28] audit: type=1326 audit(358.287:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.1.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff5ea98f749 code=0x7ffc0000 [ 358.491222][ T28] audit: type=1326 audit(358.287:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.1.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ea98f749 code=0x7ffc0000 [ 358.548151][ T28] audit: type=1326 audit(358.287:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.1.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ea98f749 code=0x7ffc0000 [ 358.576623][ T28] audit: type=1326 audit(358.287:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.1.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ea98f749 code=0x7ffc0000 [ 358.603051][ T28] audit: type=1326 audit(358.287:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.1.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ea98f749 code=0x7ffc0000 [ 358.640899][ T28] audit: type=1326 audit(358.287:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.1.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ea98f749 code=0x7ffc0000 [ 358.667152][ T28] audit: type=1326 audit(358.287:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.1.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7ff5ea98f749 code=0x7ffc0000 [ 361.728724][ T8513] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 363.973605][ T8533] syz.2.740 (8533) used greatest stack depth: 19976 bytes left [ 368.935183][ T8645] process 'syz.2.777' launched './file0' with NULL argv: empty string added [ 369.076365][ T8654] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 371.114245][ T28] kauditd_printk_skb: 196 callbacks suppressed [ 371.114258][ T28] audit: type=1326 audit(371.077:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9c18f749 code=0x7ffc0000 [ 371.171568][ T28] audit: type=1326 audit(371.117:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4c9c18f749 code=0x7ffc0000 [ 371.214189][ T28] audit: type=1326 audit(371.117:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9c18f749 code=0x7ffc0000 [ 371.242384][ T28] audit: type=1326 audit(371.117:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9c18f749 code=0x7ffc0000 [ 371.288467][ T28] audit: type=1326 audit(371.077:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9c18f749 code=0x7ffc0000 [ 371.328525][ T28] audit: type=1326 audit(371.117:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9c18f749 code=0x7ffc0000 [ 371.383334][ T28] audit: type=1326 audit(371.117:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9c18f749 code=0x7ffc0000 [ 371.561208][ T28] audit: type=1326 audit(371.117:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9c18f749 code=0x7ffc0000 [ 371.583120][ T28] audit: type=1326 audit(371.117:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f4c9c18f749 code=0x7ffc0000 [ 371.614098][ T28] audit: type=1326 audit(371.117:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9c18f749 code=0x7ffc0000 [ 378.209790][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 378.209802][ T28] audit: type=1326 audit(378.177:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8821 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7d78f749 code=0x7ffc0000 [ 378.250760][ T28] audit: type=1326 audit(378.177:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8821 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7d78f749 code=0x7ffc0000 [ 378.281648][ T28] audit: type=1326 audit(378.177:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8821 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7d78f749 code=0x7ffc0000 [ 378.403571][ T28] audit: type=1326 audit(378.177:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8821 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7d78f749 code=0x7ffc0000 [ 378.460229][ T28] audit: type=1326 audit(378.177:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8821 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5c7d78f749 code=0x7ffc0000 [ 378.518340][ T28] audit: type=1326 audit(378.267:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8821 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7d78f749 code=0x7ffc0000 [ 378.540595][ T28] audit: type=1326 audit(378.267:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8821 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7d78f749 code=0x7ffc0000 [ 378.566030][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.566125][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.581425][ T28] audit: type=1326 audit(378.277:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8829 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5c7d7c2005 code=0x7ffc0000 [ 378.706348][ T28] audit: type=1326 audit(378.277:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8821 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7d78f749 code=0x7ffc0000 [ 378.960243][ T28] audit: type=1326 audit(378.277:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8821 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7d78f749 code=0x7ffc0000 [ 382.110939][ T8905] syz.1.863(8905): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 388.507066][ T9067] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3183071107 (203716550848 ns) > initial count (190329080192 ns). Using initial count to start timer. [ 399.670400][ T9302] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 399.972497][ T9313] syz.3.1017 (9313): /proc/9312/oom_adj is deprecated, please use /proc/9312/oom_score_adj instead. [ 400.420753][ T9330] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 401.292230][ T9358] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 402.008111][ T28] kauditd_printk_skb: 163 callbacks suppressed [ 402.008127][ T28] audit: type=1326 audit(401.967:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9374 comm="syz.2.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7d78f749 code=0x7ffc0000 [ 402.085419][ T28] audit: type=1326 audit(401.967:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9374 comm="syz.2.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7d78f749 code=0x7ffc0000 [ 402.169445][ T28] audit: type=1326 audit(401.967:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9374 comm="syz.2.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5c7d78f749 code=0x7ffc0000 [ 402.259761][ T28] audit: type=1326 audit(401.967:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9374 comm="syz.2.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7d78f749 code=0x7ffc0000 [ 402.323759][ T28] audit: type=1326 audit(401.967:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9374 comm="syz.2.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f5c7d78f749 code=0x7ffc0000 [ 402.375822][ T28] audit: type=1326 audit(401.967:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9374 comm="syz.2.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7d78f749 code=0x7ffc0000 [ 402.857088][ T9386] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (128 ns). Using initial count to start timer. [ 402.879902][ T9386] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 402.889954][ T9386] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 404.160490][ T9444] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 404.778494][ T9464] kvm: faulting far call emulation tainted memory [ 407.095769][ T9525] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 407.307197][ T28] audit: type=1326 audit(407.257:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9529 comm="syz.3.1093" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f155558f749 code=0x0 [ 408.310589][ T9552] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 409.159328][ T9579] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 409.605235][ T9584] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 413.380703][ T28] audit: type=1326 audit(413.347:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9688 comm="syz.3.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155558f749 code=0x7ffc0000 [ 413.409185][ T28] audit: type=1326 audit(413.367:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9688 comm="syz.3.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155558f749 code=0x7ffc0000 [ 413.431809][ T28] audit: type=1326 audit(413.377:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9688 comm="syz.3.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155558f749 code=0x7ffc0000 [ 413.459510][ T28] audit: type=1326 audit(413.377:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9688 comm="syz.3.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155558f749 code=0x7ffc0000 [ 413.485280][ T28] audit: type=1326 audit(413.377:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9688 comm="syz.3.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f155558f749 code=0x7ffc0000 [ 413.511365][ T28] audit: type=1326 audit(413.377:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9688 comm="syz.3.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155558f749 code=0x7ffc0000 [ 413.538960][ T28] audit: type=1326 audit(413.377:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9688 comm="syz.3.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155558f749 code=0x7ffc0000 [ 413.574359][ T28] audit: type=1326 audit(413.377:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9688 comm="syz.3.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155558f749 code=0x7ffc0000 [ 413.604658][ T28] audit: type=1326 audit(413.377:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9688 comm="syz.3.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155558f749 code=0x7ffc0000 [ 413.627283][ T28] audit: type=1326 audit(413.377:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9688 comm="syz.3.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155558f749 code=0x7ffc0000 [ 414.596157][ T9731] kvm: emulating exchange as write [ 416.876863][ T9791] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (128 ns). Using initial count to start timer. [ 416.932107][ T9784] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 416.948440][ T9784] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 417.331405][ T9801] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 418.789329][ T9831] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (128 ns). Using initial count to start timer. [ 418.834532][ T9831] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 418.843375][ T9831] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 429.311819][T10164] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 430.392749][T10201] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 433.970069][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 433.970090][ T28] audit: type=1326 audit(433.937:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10340 comm="syz.1.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ea98f749 code=0x7ffc0000 [ 434.040758][ T28] audit: type=1326 audit(433.967:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10340 comm="syz.1.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ea98f749 code=0x7ffc0000 [ 434.101714][ T28] audit: type=1326 audit(433.967:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10340 comm="syz.1.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ea98f749 code=0x7ffc0000 [ 434.140144][ T28] audit: type=1326 audit(433.967:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10340 comm="syz.1.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ea98f749 code=0x7ffc0000 [ 434.191802][ T28] audit: type=1326 audit(433.967:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10340 comm="syz.1.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7ff5ea98f749 code=0x7ffc0000 [ 434.248852][ T28] audit: type=1326 audit(434.047:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10340 comm="syz.1.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5ea9c2005 code=0x7ffc0000 [ 434.301975][ T28] audit: type=1326 audit(434.047:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10340 comm="syz.1.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5ea9c2005 code=0x7ffc0000 [ 434.355848][ T28] audit: type=1326 audit(434.057:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10340 comm="syz.1.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5ea9c2005 code=0x7ffc0000 [ 434.397022][ T28] audit: type=1326 audit(434.057:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10340 comm="syz.1.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5ea9c2005 code=0x7ffc0000 [ 434.452731][ T28] audit: type=1326 audit(434.057:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10340 comm="syz.1.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5ea9c2005 code=0x7ffc0000 [ 435.573121][T10390] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 439.987611][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.994223][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.810554][T10600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1469'. [ 447.072770][T10722] kvm: MWAIT instruction emulated as NOP! [ 453.301840][T10864] Cannot find set identified by id 0 to match [ 453.558796][T10875] netlink: 'syz.3.1568': attribute type 10 has an invalid length. [ 457.223037][T10996] Bluetooth: MGMT ver 1.22 [ 458.514793][T11044] netlink: 'syz.2.1634': attribute type 1 has an invalid length. [ 464.365817][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1686'. [ 466.166013][T11222] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 467.415150][T11245] bridge0: port 3(syz_tun) entered blocking state [ 467.421931][T11245] bridge0: port 3(syz_tun) entered disabled state [ 467.435125][T11245] syz_tun: entered allmulticast mode [ 467.442417][T11245] syz_tun: entered promiscuous mode [ 467.480900][T11245] bridge0: port 3(syz_tun) entered blocking state [ 467.487783][T11245] bridge0: port 3(syz_tun) entered forwarding state [ 469.467272][T11294] kvm: vcpu 0: requested 16 ns lapic timer period limited to 200000 ns [ 469.484183][T11294] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 471.107538][T11321] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1738'. [ 471.161521][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1738'. [ 471.434567][T11330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1741'. [ 475.149183][T11406] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 475.279812][T11412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1770'. [ 475.994989][T11433] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1776'. [ 476.013629][T11433] block nbd0: not configured, cannot reconfigure [ 476.249321][T11438] nbd0: detected capacity change from 0 to 127 [ 476.275080][ T5787] block nbd0: Receive control failed (result -104) [ 476.443455][T11443] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 476.524464][T11448] tipc: Enabled bearer , priority 0 [ 476.545802][T11448] syzkaller0: entered promiscuous mode [ 476.551303][T11448] syzkaller0: entered allmulticast mode [ 476.622890][T11448] tipc: Resetting bearer [ 476.674218][T11447] tipc: Resetting bearer [ 476.718432][T11447] tipc: Disabling bearer [ 478.709110][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 481.409569][T11487] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 482.444807][T11526] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 482.662086][T11536] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 482.692822][T11536] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 482.769329][T11477] Set syz1 is full, maxelem 65536 reached [ 482.943648][T11553] tipc: Enabling of bearer rejected, failed to enable media [ 482.963286][T11553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1819'. [ 483.249782][T11565] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 486.014948][T11610] tipc: Started in network mode [ 486.053862][T11610] tipc: Node identity 72ea79932cd3, cluster identity 4711 [ 486.068643][T11610] tipc: Enabled bearer , priority 0 [ 486.112174][T11610] syzkaller0: entered promiscuous mode [ 486.137127][T11610] syzkaller0: entered allmulticast mode [ 486.242379][T11610] tipc: Resetting bearer [ 486.266951][T11608] tipc: Resetting bearer [ 486.317545][T11608] tipc: Disabling bearer [ 486.336329][T11618] warning: `syz.1.1841' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 486.366786][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1842'. [ 486.425533][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1842'. [ 486.509920][T11622] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 487.713950][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1853'. [ 487.911066][T11658] tipc: Started in network mode [ 487.920460][T11658] tipc: Node identity b26eecd87fab, cluster identity 4711 [ 488.064275][T11658] tipc: Enabled bearer , priority 0 [ 488.269650][T11661] syzkaller0: entered promiscuous mode [ 488.286623][T11661] syzkaller0: entered allmulticast mode [ 488.394534][T11658] tipc: Resetting bearer [ 488.412250][T11656] tipc: Resetting bearer [ 488.496181][T11656] tipc: Disabling bearer [ 488.760467][T11672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1860'. [ 488.998760][T11678] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 489.038540][T11678] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 489.827531][T11699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1871'. [ 490.456734][T11722] netlink: 592 bytes leftover after parsing attributes in process `syz.0.1877'. [ 493.135300][T11777] bridge_slave_0: left allmulticast mode [ 493.141185][T11777] bridge_slave_0: left promiscuous mode [ 493.155302][T11777] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.176141][T11777] bridge_slave_1: left allmulticast mode [ 493.183741][T11777] bridge_slave_1: left promiscuous mode [ 493.194755][T11777] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.227561][T11777] bond0: (slave bond_slave_0): Releasing backup interface [ 493.262588][T11777] bond0: (slave bond_slave_1): Releasing backup interface [ 493.316588][T11777] team0: Port device team_slave_0 removed [ 493.376919][T11777] team0: Port device team_slave_1 removed [ 493.393062][T11777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.400739][T11777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.413667][T11777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.438113][T11777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.695298][T11790] tipc: Enabled bearer , priority 0 [ 493.711752][T11790] syzkaller0: entered promiscuous mode [ 493.734023][T11790] syzkaller0: entered allmulticast mode [ 493.787121][T11790] tipc: Resetting bearer [ 493.821006][T11789] tipc: Resetting bearer [ 493.879791][T11789] tipc: Disabling bearer [ 494.076248][T11807] trusted_key: syz.0.1909 sent an empty control message without MSG_MORE. [ 494.180193][T11809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1910'. [ 495.418948][T11839] tipc: Enabled bearer , priority 0 [ 495.431827][T11839] syzkaller0: entered promiscuous mode [ 495.438728][T11839] syzkaller0: entered allmulticast mode [ 495.491628][T11839] tipc: Resetting bearer [ 495.516802][T11838] tipc: Resetting bearer [ 495.549388][T11838] tipc: Disabling bearer [ 499.139040][T11913] syz.3.1945 uses obsolete (PF_INET,SOCK_PACKET) [ 499.193383][T11911] syzkaller0: entered promiscuous mode [ 499.200501][T11911] syzkaller0: entered allmulticast mode [ 499.214846][T11916] tipc: Enabled bearer , priority 0 [ 499.231777][T11915] syzkaller0: entered promiscuous mode [ 499.242705][T11915] syzkaller0: entered allmulticast mode [ 499.260046][T11910] tipc: Resetting bearer [ 499.302871][T11910] tipc: Disabling bearer [ 499.329586][T11918] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1947'. [ 499.754432][T11942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1956'. [ 500.520243][T11967] tipc: Enabled bearer , priority 0 [ 500.549633][T11967] syzkaller0: entered promiscuous mode [ 500.566859][T11967] syzkaller0: entered allmulticast mode [ 500.612949][T11967] tipc: Resetting bearer [ 500.644780][T11964] tipc: Resetting bearer [ 500.650562][T11971] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1967'. [ 500.699094][T11964] tipc: Disabling bearer [ 501.066715][T11986] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 501.322679][T11997] tipc: Enabled bearer , priority 0 [ 501.331944][T11997] syzkaller0: entered promiscuous mode [ 501.340414][T11997] syzkaller0: entered allmulticast mode [ 501.375240][T11997] tipc: Resetting bearer [ 501.401785][T11996] tipc: Resetting bearer [ 501.432772][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.440825][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.455315][T12005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1980'. [ 501.471777][T11996] tipc: Disabling bearer [ 501.998472][T12026] block nbd0: Unsupported socket: should be TCP or UNIX. [ 502.019658][T12026] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1991'. [ 502.208143][T12034] tipc: Enabled bearer , priority 0 [ 502.232171][T12034] syzkaller0: entered promiscuous mode [ 502.250216][T12034] syzkaller0: entered allmulticast mode [ 502.272181][T12034] tipc: Resetting bearer [ 502.289259][T12033] tipc: Resetting bearer [ 502.331016][T12033] tipc: Disabling bearer [ 503.050623][T12065] tipc: Enabled bearer , priority 0 [ 503.062247][T12065] syzkaller0: entered promiscuous mode [ 503.072287][T12065] syzkaller0: entered allmulticast mode [ 503.097031][T12065] tipc: Resetting bearer [ 503.106412][T12064] tipc: Resetting bearer [ 503.139050][T12064] tipc: Disabling bearer [ 503.153665][T12068] tipc: Started in network mode [ 503.158675][T12068] tipc: Node identity 66851300a889, cluster identity 4711 [ 503.167133][T12068] tipc: Enabled bearer , priority 0 [ 503.175688][T12068] syzkaller0: entered promiscuous mode [ 503.181287][T12068] syzkaller0: entered allmulticast mode [ 503.198084][T12068] tipc: Resetting bearer [ 503.260568][T12068] tipc: Disabling bearer [ 503.856974][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2016'. [ 504.375138][T12103] tipc: Enabled bearer , priority 0 [ 504.397422][T12103] syzkaller0: entered promiscuous mode [ 504.413111][T12103] syzkaller0: entered allmulticast mode [ 504.443147][T12103] tipc: Resetting bearer [ 504.588862][T12102] tipc: Resetting bearer [ 504.648846][T12102] tipc: Disabling bearer [ 505.025016][T12114] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2027'. [ 505.301500][T12125] block nbd0: Unsupported socket: should be TCP or UNIX. [ 505.328209][T12125] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2030'. [ 505.884848][T12148] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 506.066003][T12148] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2036'. [ 506.151691][T12160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2037'. [ 506.732875][ T96] block nbd0: Possible stuck request ffff888021b58000: control (read@0,1024B). Runtime 30 seconds [ 506.744208][ T96] block nbd0: Possible stuck request ffff888021b58200: control (read@1024,1024B). Runtime 30 seconds [ 506.755180][ T96] block nbd0: Possible stuck request ffff888021b58400: control (read@2048,1024B). Runtime 30 seconds [ 506.766117][ T96] block nbd0: Possible stuck request ffff888021b58600: control (read@3072,1024B). Runtime 30 seconds [ 507.395003][T12171] tipc: Enabling of bearer rejected, failed to enable media [ 507.606877][T12176] pim6reg: entered allmulticast mode [ 508.858238][T12201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2047'. [ 509.362552][T12179] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.372617][T12179] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.382189][T12179] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.395411][T12179] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.521001][T12206] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2049'. [ 509.591510][T12173] pim6reg: left allmulticast mode [ 509.749341][T12232] block nbd0: Unsupported socket: should be TCP or UNIX. [ 509.951026][T12243] tipc: Enabled bearer , priority 0 [ 509.961143][T12243] syzkaller0: entered promiscuous mode [ 509.983462][T12243] syzkaller0: entered allmulticast mode [ 510.007137][T12243] tipc: Resetting bearer [ 510.018303][T12239] tipc: Resetting bearer [ 510.097803][T12239] tipc: Disabling bearer [ 510.143476][T12253] syzkaller0: entered promiscuous mode [ 510.154088][T12253] syzkaller0: entered allmulticast mode [ 510.762981][T12263] block nbd0: Unsupported socket: should be TCP or UNIX. [ 510.900529][T12267] bridge0: entered promiscuous mode [ 512.209869][T12290] block nbd0: Unsupported socket: should be TCP or UNIX. [ 513.120698][T12321] syzkaller0: entered promiscuous mode [ 513.134068][T12321] syzkaller0: entered allmulticast mode [ 513.295120][T12328] block nbd0: Unsupported socket: should be TCP or UNIX. [ 514.068718][T12352] netlink: 'syz.0.2092': attribute type 13 has an invalid length. [ 514.828204][T12367] syzkaller0: entered promiscuous mode [ 515.076091][T12367] syzkaller0: entered allmulticast mode [ 515.321884][T12370] block nbd0: Unsupported socket: should be TCP or UNIX. [ 516.591718][T12384] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2101'. [ 516.852240][T12394] syzkaller0: entered promiscuous mode [ 516.858452][T12394] syzkaller0: entered allmulticast mode [ 516.976234][T12396] netlink: 'syz.2.2106': attribute type 13 has an invalid length. [ 517.404808][T12402] syzkaller0: entered promiscuous mode [ 517.429920][T12402] syzkaller0: entered allmulticast mode [ 520.794542][T12453] syzkaller0: entered promiscuous mode [ 520.804482][T12453] syzkaller0: entered allmulticast mode [ 521.062683][T12455] netlink: 'syz.1.2119': attribute type 13 has an invalid length. [ 521.592261][T12478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2129'. [ 521.602807][T12478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2129'. [ 522.865076][T12493] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2135'. [ 522.976886][T12496] syzkaller0: entered promiscuous mode [ 522.982620][T12496] syzkaller0: entered allmulticast mode [ 524.514411][T12534] tipc: Enabled bearer , priority 0 [ 524.522281][T12534] syzkaller0: entered promiscuous mode [ 524.528272][T12534] syzkaller0: entered allmulticast mode [ 524.550637][T12533] tipc: Resetting bearer [ 524.589926][T12533] tipc: Disabling bearer [ 524.785094][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2147'. [ 524.990881][T12551] block nbd0: Unsupported socket: should be TCP or UNIX. [ 525.246890][T12558] syzkaller0: entered promiscuous mode [ 525.258623][T12558] syzkaller0: entered allmulticast mode [ 526.655451][T12571] tipc: Enabled bearer , priority 0 [ 526.695587][T12571] tipc: Resetting bearer [ 526.702279][T12573] syzkaller0: entered promiscuous mode [ 526.717019][T12573] syzkaller0: entered allmulticast mode [ 526.748177][T12570] tipc: Disabling bearer [ 527.145636][T12593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2164'. [ 527.195974][T12593] bridge0: port 3(syz_tun) entered disabled state [ 527.291485][T12593] syz_tun (unregistering): left allmulticast mode [ 527.309572][T12593] syz_tun (unregistering): left promiscuous mode [ 527.321256][T12593] bridge0: port 3(syz_tun) entered disabled state [ 528.509903][T12615] syzkaller0: entered promiscuous mode [ 528.515698][T12615] syzkaller0: entered allmulticast mode [ 528.663720][T12620] netlink: 'syz.1.2173': attribute type 5 has an invalid length. [ 529.758630][T12652] syzkaller0: entered promiscuous mode [ 529.766345][T12652] syzkaller0: entered allmulticast mode [ 533.144574][T12685] syzkaller0: entered promiscuous mode [ 533.150307][T12685] syzkaller0: entered allmulticast mode [ 533.474146][T12693] tipc: Enabled bearer , priority 0 [ 533.544293][T12693] syzkaller0: entered promiscuous mode [ 533.574059][T12693] syzkaller0: entered allmulticast mode [ 533.723328][T12693] tipc: Resetting bearer [ 534.105447][T12692] tipc: Resetting bearer [ 534.435573][T12692] tipc: Disabling bearer [ 534.494139][T12217] tipc: Node number set to 3452300504 [ 534.870524][T12721] syzkaller0: entered promiscuous mode [ 534.884049][T12721] syzkaller0: entered allmulticast mode [ 535.062893][T12728] syzkaller0: entered promiscuous mode [ 535.069022][T12728] syzkaller0: entered allmulticast mode [ 537.903013][ T96] block nbd0: Possible stuck request ffff888021b58000: control (read@0,1024B). Runtime 60 seconds [ 537.924000][ T96] block nbd0: Possible stuck request ffff888021b58200: control (read@1024,1024B). Runtime 60 seconds [ 537.935276][ T96] block nbd0: Possible stuck request ffff888021b58400: control (read@2048,1024B). Runtime 60 seconds [ 537.947136][ T96] block nbd0: Possible stuck request ffff888021b58600: control (read@3072,1024B). Runtime 60 seconds [ 538.159605][T12784] syzkaller0: entered promiscuous mode [ 538.166205][T12784] syzkaller0: entered allmulticast mode [ 538.730926][T12806] netdevsim netdevsim0: Direct firmware load for r failed with error -2 [ 538.764655][T12806] netdevsim netdevsim0: Falling back to sysfs fallback for: r [ 539.522030][T12815] tipc: Enabled bearer , priority 0 [ 539.555250][T12815] syzkaller0: entered promiscuous mode [ 539.560844][T12815] syzkaller0: entered allmulticast mode [ 539.636612][T12815] tipc: Resetting bearer [ 539.650792][T12814] tipc: Resetting bearer [ 539.710284][T12814] tipc: Disabling bearer [ 539.929569][T12828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2236'. [ 540.472926][T12853] tipc: Enabled bearer , priority 0 [ 540.481169][T12853] syzkaller0: entered promiscuous mode [ 540.486842][T12853] syzkaller0: entered allmulticast mode [ 540.513479][T12853] tipc: Resetting bearer [ 540.532796][T12852] tipc: Resetting bearer [ 540.564637][T12852] tipc: Disabling bearer [ 540.728102][T12828] syz.2.2236 (12828) used greatest stack depth: 17960 bytes left [ 540.836987][T12864] tipc: Enabling of bearer rejected, failed to enable media [ 541.139793][T12885] tipc: Enabled bearer , priority 0 [ 541.152024][T12885] syzkaller0: entered promiscuous mode [ 541.158914][T12885] syzkaller0: entered allmulticast mode [ 542.559418][ T5157] udevd[5157]: worker [8863] /devices/virtual/block/nbd0 is taking a long time [ 542.930319][T12893] tipc: Resetting bearer [ 542.948816][T12882] tipc: Resetting bearer [ 543.024657][T12882] tipc: Disabling bearer [ 543.084291][T12909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2263'. [ 544.588915][T12958] tipc: Enabled bearer , priority 0 [ 544.625690][T12958] tipc: Resetting bearer [ 544.657292][T12957] tipc: Disabling bearer [ 546.344704][T12971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 547.530006][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 547.540807][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 547.717492][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 547.733107][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 547.748689][ T5801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 547.758760][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 548.359113][T12998] tipc: Enabled bearer , priority 0 [ 548.382907][T12994] tipc: Resetting bearer [ 548.412438][T12993] tipc: Disabling bearer [ 548.595374][T13019] syzkaller0: entered promiscuous mode [ 548.600891][T13019] syzkaller0: entered allmulticast mode [ 548.613574][T13019] tipc: Enabled bearer , priority 0 [ 548.621491][T13018] tipc: Resetting bearer [ 548.653768][T13018] tipc: Disabling bearer [ 548.670932][T12996] chnl_net:caif_netlink_parms(): no params data found [ 548.766238][T12996] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.781967][T12996] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.793473][T12996] bridge_slave_0: entered allmulticast mode [ 548.820265][T12996] bridge_slave_0: entered promiscuous mode [ 548.842754][T12996] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.866312][T12996] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.873790][T12996] bridge_slave_1: entered allmulticast mode [ 548.884999][T12996] bridge_slave_1: entered promiscuous mode [ 548.953455][T12996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.978866][T12996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.037956][T12996] team0: Port device team_slave_0 added [ 549.047128][T12996] team0: Port device team_slave_1 added [ 549.111579][T12996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.132871][T12996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.159720][T12996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.172286][T12996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.179793][T12996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.212317][T12996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.302440][T12996] hsr_slave_0: entered promiscuous mode [ 549.310377][T12996] hsr_slave_1: entered promiscuous mode [ 549.317362][T12996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 549.327875][T12996] Cannot create hsr debugfs directory [ 549.725706][T12996] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.839543][ T5801] Bluetooth: hci3: command tx timeout [ 549.980179][T12996] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.106368][T12996] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.267002][T12996] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.367459][T12996] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 551.426661][T12996] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 551.440900][T13099] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2318'. [ 551.456486][T12996] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 551.473862][T12996] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 551.618282][T13113] block nbd0: Unsupported socket: should be TCP or UNIX. [ 551.697058][T12996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.733322][T12996] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.776751][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.784048][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.798490][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.805670][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.820032][T13125] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 551.909767][ T5801] Bluetooth: hci3: command tx timeout [ 552.646205][T12996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.752066][T12996] veth0_vlan: entered promiscuous mode [ 552.886337][T12996] veth1_vlan: entered promiscuous mode [ 552.979322][T12996] veth0_macvtap: entered promiscuous mode [ 553.000275][T12996] veth1_macvtap: entered promiscuous mode [ 553.041123][T12996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.060726][T12996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.072876][T12996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.092504][T12996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.103500][T12996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.120062][T12996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.131134][T12996] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.146984][T12996] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.174039][T12996] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.182808][T12996] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.411777][ T6724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.542241][ T6724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.113466][ T5801] Bluetooth: hci3: command tx timeout [ 554.974865][ T6718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.014464][ T6718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.144289][ T5801] Bluetooth: hci3: command tx timeout [ 556.881016][T13214] tipc: Enabled bearer , priority 0 [ 556.936765][T13214] tipc: Resetting bearer [ 556.970883][T13213] tipc: Disabling bearer [ 557.226087][T13231] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2354'. [ 557.375078][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2354'. [ 557.556191][T13245] tipc: Enabled bearer , priority 0 [ 557.637690][T13243] tipc: Disabling bearer [ 557.953116][T13268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2367'. [ 557.990513][T13268] vlan2: entered promiscuous mode [ 557.997741][T13268] gretap0: entered promiscuous mode [ 558.047258][T13267] tipc: Started in network mode [ 558.052170][T13267] tipc: Node identity f2a7e2e8909e, cluster identity 4711 [ 558.062849][T13267] tipc: Enabled bearer , priority 0 [ 558.097268][T13267] syzkaller0: entered promiscuous mode [ 558.102990][T13267] syzkaller0: entered allmulticast mode [ 558.176158][T13267] tipc: Resetting bearer [ 558.211995][T13265] tipc: Resetting bearer [ 558.253632][T13265] tipc: Disabling bearer [ 558.577690][T13298] Cannot find del_set index 1 as target [ 558.682776][T13306] @ÿ: renamed from veth0_vlan (while UP) [ 558.752622][T13308] tipc: Enabled bearer , priority 0 [ 558.767963][T13308] syzkaller0: entered promiscuous mode [ 558.785005][T13308] syzkaller0: entered allmulticast mode [ 558.824204][T13308] tipc: Resetting bearer [ 558.875666][T13307] tipc: Resetting bearer [ 558.980282][T13307] tipc: Disabling bearer [ 559.719027][T13352] tipc: Enabled bearer , priority 0 [ 559.805651][T13351] tipc: Disabling bearer [ 560.496692][T13375] tipc: Enabled bearer , priority 0 [ 560.542704][T13374] tipc: Disabling bearer [ 560.574985][T13382] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 560.585953][T13382] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 560.593988][T13382] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 560.619094][T13382] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 560.633670][T13382] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 560.645404][T13382] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 560.833255][T13388] tipc: Enabled bearer , priority 0 [ 560.853415][T13388] syzkaller0: entered promiscuous mode [ 560.858780][T13393] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 560.859139][T13388] syzkaller0: entered allmulticast mode [ 560.903888][T13388] tipc: Resetting bearer [ 560.919451][T13385] tipc: Resetting bearer [ 560.948373][T13385] tipc: Disabling bearer [ 561.151051][T13380] chnl_net:caif_netlink_parms(): no params data found [ 561.333712][T13380] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.342865][T13380] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.350790][T13380] bridge_slave_0: entered allmulticast mode [ 561.358316][T13380] bridge_slave_0: entered promiscuous mode [ 561.367159][T13380] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.374428][T13380] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.382122][T13380] bridge_slave_1: entered allmulticast mode [ 561.389487][T13380] bridge_slave_1: entered promiscuous mode [ 561.460124][T13380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.481919][T13416] netlink: 'syz.3.2423': attribute type 12 has an invalid length. [ 561.520614][T13380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.597637][T13413] tipc: Enabled bearer , priority 0 [ 561.658749][T13412] tipc: Disabling bearer [ 561.683039][T13380] team0: Port device team_slave_0 added [ 561.702988][T13380] team0: Port device team_slave_1 added [ 561.808516][T13380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.815684][T13380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.856460][T13380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.877933][T13380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.885238][T13380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.912758][T13380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.000466][T13380] hsr_slave_0: entered promiscuous mode [ 562.015362][T13380] hsr_slave_1: entered promiscuous mode [ 562.032857][T13380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 562.045025][T13380] Cannot create hsr debugfs directory [ 562.309070][T13427] tipc: Enabled bearer , priority 0 [ 562.317420][T13427] syzkaller0: entered promiscuous mode [ 562.323146][T13427] syzkaller0: entered allmulticast mode [ 562.384163][T13427] tipc: Resetting bearer [ 562.393774][T13426] tipc: Resetting bearer [ 562.430851][T13426] tipc: Disabling bearer [ 562.580673][T13429] netlink: 'syz.3.2430': attribute type 10 has an invalid length. [ 562.589607][T13429] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2430'. [ 562.601270][T13429] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.616846][T13429] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.629018][T13429] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.643091][T13429] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.666616][T13429] team0: Port device geneve0 added [ 562.784736][ T5801] Bluetooth: hci4: command tx timeout [ 562.840785][T13380] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 562.870275][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.876792][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.894635][T13380] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 562.923714][T13380] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 562.967238][T13380] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 563.200590][T13380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.254999][T13444] syzkaller0: entered promiscuous mode [ 563.260528][T13444] syzkaller0: entered allmulticast mode [ 563.279622][T13380] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.299277][T13446] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 563.420169][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.427456][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.452789][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.459975][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.899653][T13461] 8021q: VLANs not supported on ip6gre0 [ 563.957789][T13380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.068852][T13380] veth0_vlan: entered promiscuous mode [ 564.097862][T13380] veth1_vlan: entered promiscuous mode [ 564.147148][T13380] veth0_macvtap: entered promiscuous mode [ 564.176318][T13380] veth1_macvtap: entered promiscuous mode [ 564.210578][T13380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.229935][T13380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.240236][T13380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.259666][T13380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.280602][T13380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.302647][T13380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.322018][T13380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.340262][T13380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.352270][T13380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.370487][T13380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.386826][T13467] block nbd0: Unsupported socket: should be TCP or UNIX. [ 564.395410][T13380] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.415241][T13380] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.434019][T13380] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.454264][T13380] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.603775][ T6718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.623102][ T6718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.672547][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.682371][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.864215][ T5801] Bluetooth: hci4: command tx timeout [ 565.374436][T13382] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 565.385208][T13382] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 565.393766][T13382] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 565.404899][T13382] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 565.412505][T13382] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 565.420445][T13382] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 565.435995][T13494] tipc: Enabling of bearer rejected, failed to enable media [ 565.655859][T12217] IPVS: starting estimator thread 0... [ 565.760828][T13501] IPVS: using max 19 ests per chain, 45600 per kthread [ 566.038930][T13491] chnl_net:caif_netlink_parms(): no params data found [ 566.278242][T13491] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.292981][T13491] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.312327][T13521] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2462'. [ 566.329199][T13491] bridge_slave_0: entered allmulticast mode [ 566.336927][T13491] bridge_slave_0: entered promiscuous mode [ 566.358150][T13491] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.368549][T13491] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.375886][T13491] bridge_slave_1: entered allmulticast mode [ 566.384601][T13491] bridge_slave_1: entered promiscuous mode [ 566.392371][T13529] syzkaller1: entered promiscuous mode [ 566.399157][T13529] syzkaller1: entered allmulticast mode [ 566.410643][T13523] vxcan2: entered allmulticast mode [ 566.477106][T13491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.491383][T13491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.564959][T13491] team0: Port device team_slave_0 added [ 566.591894][T13491] team0: Port device team_slave_1 added [ 566.657941][T13536] tipc: Enabling of bearer rejected, failed to enable media [ 566.718859][T13491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.743592][T13491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.794641][T13491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.816695][T13491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.825026][T13491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.852063][T13491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.928872][T13549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2470'. [ 566.945177][ T5801] Bluetooth: hci4: command tx timeout [ 566.958968][T13491] hsr_slave_0: entered promiscuous mode [ 566.966260][T13491] hsr_slave_1: entered promiscuous mode [ 566.973357][T13491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 566.982126][T13491] Cannot create hsr debugfs directory [ 567.246814][T13558] tipc: Enabled bearer , priority 0 [ 567.254959][T13558] syzkaller0: entered promiscuous mode [ 567.260467][T13558] syzkaller0: entered allmulticast mode [ 567.287257][T13558] tipc: Resetting bearer [ 567.296824][T13557] tipc: Resetting bearer [ 567.323402][T13557] tipc: Disabling bearer [ 567.504162][ T5801] Bluetooth: hci2: command tx timeout [ 567.908113][T13491] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 567.919836][T13491] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 567.935840][T13491] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 567.948932][T13491] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 567.986790][ T96] block nbd0: Possible stuck request ffff888021b58000: control (read@0,1024B). Runtime 90 seconds [ 567.997966][ T96] block nbd0: Possible stuck request ffff888021b58200: control (read@1024,1024B). Runtime 90 seconds [ 568.009017][ T96] block nbd0: Possible stuck request ffff888021b58400: control (read@2048,1024B). Runtime 90 seconds [ 568.020813][ T96] block nbd0: Possible stuck request ffff888021b58600: control (read@3072,1024B). Runtime 90 seconds [ 568.157665][T13491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.212531][T13491] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.227426][ T6701] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.234617][ T6701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.283236][ T6718] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.290465][ T6718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.703596][T13491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.820594][T13491] veth0_vlan: entered promiscuous mode [ 568.860287][T13491] veth1_vlan: entered promiscuous mode [ 568.936665][T13491] veth0_macvtap: entered promiscuous mode [ 568.957939][T13491] veth1_macvtap: entered promiscuous mode [ 568.997367][T13491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.013919][T13491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.034072][ T5801] Bluetooth: hci4: command tx timeout [ 569.042647][T13491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.053314][T13491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.072629][T13491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.084629][T13491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.105817][T13491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.139009][T13491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.150444][T13491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.162161][T13491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.173404][T13491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.185424][T13491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.196159][T13491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.209083][T13491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.272620][T13491] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.301904][T13491] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.329121][T13491] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.341022][T13491] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.373274][T13607] syzkaller0: entered promiscuous mode [ 569.378937][T13607] syzkaller0: entered allmulticast mode [ 569.389026][T13605] tipc: Started in network mode [ 569.395088][T13605] tipc: Node identity 3a24b2482926, cluster identity 4711 [ 569.402462][T13605] tipc: Enabled bearer , priority 0 [ 569.441943][T13605] syzkaller0: entered promiscuous mode [ 569.452091][T13605] syzkaller0: entered allmulticast mode [ 569.504056][T13605] tipc: Resetting bearer [ 569.545746][T13604] tipc: Resetting bearer [ 569.584294][ T5801] Bluetooth: hci2: command tx timeout [ 569.608549][T13604] tipc: Disabling bearer [ 569.692399][T13612] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2488'. [ 569.751795][T13612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2488'. [ 569.816857][T13612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2488'. [ 569.828163][T13612] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 569.935258][T13615] fuse: Unknown parameter 'grou00000000000000000000' [ 570.621580][ T6724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.675673][ T6724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.745676][ T6724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.753528][ T6724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.776260][T13621] netlink: 'syz.3.2493': attribute type 4 has an invalid length. [ 571.068722][T13629] netlink: 'syz.2.2448': attribute type 10 has an invalid length. [ 571.116963][T13629] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.139489][T13629] bond0: (slave team0): Enslaving as an active interface with an up link [ 571.674147][ T5801] Bluetooth: hci2: command tx timeout [ 571.914175][T13644] tipc: Enabling of bearer rejected, failed to enable media [ 572.110553][T13382] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 572.121322][T13382] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 572.137513][T13382] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 572.149811][T13382] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 572.160947][T13382] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 572.169858][T13382] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 572.410431][ T6701] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.532468][ T6701] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.721914][ T6701] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.783273][T13666] netlink: 'syz.1.2507': attribute type 10 has an invalid length. [ 572.818565][T13666] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.836234][T13666] bond0: (slave team0): Enslaving as an active interface with an up link [ 572.880043][ T6701] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.912428][T13649] chnl_net:caif_netlink_parms(): no params data found [ 573.111466][T13649] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.119893][T13649] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.130234][T13649] bridge_slave_0: entered allmulticast mode [ 573.142604][T13649] bridge_slave_0: entered promiscuous mode [ 573.163739][T13649] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.180772][T13649] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.191387][T13649] bridge_slave_1: entered allmulticast mode [ 573.205633][T13649] bridge_slave_1: entered promiscuous mode [ 573.316085][T13649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.331416][T13649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.395364][ T6701] tipc: Left network mode [ 573.657837][T13649] team0: Port device team_slave_0 added [ 573.693383][T13678] tipc: Enabling of bearer rejected, failed to enable media [ 573.744261][ T5801] Bluetooth: hci2: command tx timeout [ 573.746137][T13649] team0: Port device team_slave_1 added [ 574.132321][T13649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.144106][T13649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.171003][T13649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.213341][T13649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.230474][ T5801] Bluetooth: hci0: command tx timeout [ 574.233885][T13649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.284372][T13649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.467039][T13649] hsr_slave_0: entered promiscuous mode [ 574.484397][T13649] hsr_slave_1: entered promiscuous mode [ 574.509822][T13649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 574.524195][T13649] Cannot create hsr debugfs directory [ 574.647639][T13713] batadv0: entered promiscuous mode [ 574.684184][T13713] vlan2: entered promiscuous mode [ 575.307405][T13731] fuse: Unknown parameter 'group_i00000000000000000000' [ 576.304812][ T5801] Bluetooth: hci0: command tx timeout [ 576.913496][ T6701] hsr_slave_0: left promiscuous mode [ 576.939516][ T6701] hsr_slave_1: left promiscuous mode [ 576.993066][ T6701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.036156][ T6701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.057862][ T6701] bridge_slave_1: left allmulticast mode [ 577.073973][ T6701] bridge_slave_1: left promiscuous mode [ 577.090405][ T6701] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.119632][ T6701] bridge_slave_0: left allmulticast mode [ 577.132170][ T6701] bridge_slave_0: left promiscuous mode [ 577.144338][ T6701] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.287575][ T6701] team0 (unregistering): Port device geneve0 removed [ 577.768817][ T6701] team0 (unregistering): Port device team_slave_1 removed [ 577.814870][ T6701] team0 (unregistering): Port device team_slave_0 removed [ 577.861540][ T6701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.908616][ T6701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.371654][ T6701] bond0 (unregistering): Released all slaves [ 578.384309][ T5801] Bluetooth: hci0: command tx timeout [ 578.449489][T13755] tipc: Enabling of bearer rejected, failed to enable media [ 578.898540][T13787] netlink: 'syz.1.2530': attribute type 1 has an invalid length. [ 579.012576][T13788] fuse: Unknown parameter 'group_i00000000000000000000' [ 579.597971][T13649] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 579.741087][T13649] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 579.805401][T13649] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 579.863998][T13649] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 579.935521][T13802] tipc: Enabled bearer , priority 0 [ 579.984640][T13802] syzkaller0: entered promiscuous mode [ 579.990145][T13802] syzkaller0: entered allmulticast mode [ 580.059378][T13801] tipc: Resetting bearer [ 580.150634][T13801] tipc: Disabling bearer [ 580.165760][T13816] block nbd0: Unsupported socket: should be TCP or UNIX. [ 580.305415][T13649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.364713][T13649] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.404130][ T6718] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.411316][ T6718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.454585][ T6718] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.461743][ T6718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.464097][ T5801] Bluetooth: hci0: command tx timeout [ 580.491740][T13830] tipc: Enabling of bearer rejected, failed to enable media [ 581.083389][T13649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.237084][T13649] veth0_vlan: entered promiscuous mode [ 581.296859][T13649] veth1_vlan: entered promiscuous mode [ 581.381715][T13649] veth0_macvtap: entered promiscuous mode [ 581.418492][T13649] veth1_macvtap: entered promiscuous mode [ 581.519773][T13649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.549405][T13649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.570269][T13649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.591124][T13649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.613642][T13649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.643858][T13649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.665020][T13649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.686731][T13866] block nbd0: Unsupported socket: should be TCP or UNIX. [ 581.693998][T13649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.715719][T13649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.748661][T13649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.780483][T13649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.814037][T13649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.844245][T13649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.876156][T13649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.896327][T13649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.928464][T13649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.939111][T13649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.958217][T13649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.029762][ T6701] IPVS: stop unused estimator thread 0... [ 582.041579][T13649] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.086311][T13649] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.104264][T13649] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.113071][T13649] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.248271][T13877] tipc: Enabling of bearer rejected, failed to enable media [ 582.461760][ T6392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.504034][ T6392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.724253][ T6707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.732221][ T6707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.615915][T13980] block nbd0: Unsupported socket: should be TCP or UNIX. [ 586.892808][T13985] SET target dimension over the limit! [ 587.146181][T13991] tipc: Enabled bearer , priority 0 [ 587.164854][T13991] syzkaller0: entered promiscuous mode [ 587.178757][T13991] syzkaller0: entered allmulticast mode [ 587.264589][T13990] tipc: Resetting bearer [ 587.345996][T13990] tipc: Disabling bearer [ 588.203488][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2587'. [ 588.562539][T14031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2588'. [ 588.787608][T14038] tipc: Started in network mode [ 588.807738][T14038] tipc: Node identity 4edabccd373d, cluster identity 4711 [ 588.830402][T14038] tipc: Enabled bearer , priority 0 [ 588.852193][T14041] syzkaller0: entered promiscuous mode [ 588.874346][T14041] syzkaller0: entered allmulticast mode [ 588.934573][T14038] tipc: Resetting bearer [ 589.004940][T14036] tipc: Resetting bearer [ 589.079182][T14036] tipc: Disabling bearer [ 590.644249][T14090] fuse: Bad value for 'user_id' [ 591.453002][T14094] tipc: Enabled bearer , priority 0 [ 591.494780][T14093] tipc: Disabling bearer [ 592.273421][T14115] fuse: Bad value for 'user_id' [ 593.137363][T14123] batman_adv: batadv0: Adding interface: dummy0 [ 593.143685][T14123] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.192640][T14123] batman_adv: batadv0: Interface activated: dummy0 [ 593.233535][T14123] batadv0: mtu less than device minimum [ 593.241539][T14123] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 593.254399][T14123] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 593.266678][T14123] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 593.279107][T14123] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 593.291320][T14123] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 593.303554][T14123] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 593.315812][T14123] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 593.328268][T14123] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 593.340725][T14123] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 593.373118][T14127] tipc: Enabled bearer , priority 0 [ 593.410730][T14124] tipc: Disabling bearer [ 594.398044][T14145] fuse: Bad value for 'user_id' [ 595.457557][T14163] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 595.666443][T14170] tipc: Enabled bearer , priority 0 [ 595.688529][T14170] syzkaller0: entered promiscuous mode [ 595.698011][T14170] syzkaller0: entered allmulticast mode [ 595.722235][T14170] tipc: Resetting bearer [ 595.750120][T14169] tipc: Resetting bearer [ 595.826017][T14169] tipc: Disabling bearer [ 596.149109][T14185] fuse: Bad value for 'fd' [ 597.059705][T14198] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 597.084011][T14198] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 597.109595][T14198] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 597.373632][T14207] tipc: Enabled bearer , priority 0 [ 597.389087][T14207] syzkaller0: entered promiscuous mode [ 597.401095][T14207] syzkaller0: entered allmulticast mode [ 597.472300][T14206] tipc: Resetting bearer [ 597.565741][T14206] tipc: Disabling bearer [ 597.945087][T14222] fuse: Bad value for 'fd' [ 598.668624][ T96] block nbd0: Possible stuck request ffff888021b58000: control (read@0,1024B). Runtime 120 seconds [ 598.680070][ T96] block nbd0: Possible stuck request ffff888021b58200: control (read@1024,1024B). Runtime 120 seconds [ 598.692335][ T96] block nbd0: Possible stuck request ffff888021b58400: control (read@2048,1024B). Runtime 120 seconds [ 598.703683][ T96] block nbd0: Possible stuck request ffff888021b58600: control (read@3072,1024B). Runtime 120 seconds [ 599.102498][T14244] tipc: Enabled bearer , priority 0 [ 599.120331][T14244] syzkaller0: entered promiscuous mode [ 599.133738][T14244] syzkaller0: entered allmulticast mode [ 599.181782][T14241] tipc: Resetting bearer [ 599.280850][T14241] tipc: Disabling bearer [ 599.459569][T14251] fuse: Bad value for 'fd' [ 600.197860][T14256] block nbd0: Unsupported socket: should be TCP or UNIX. [ 600.518099][T14265] tipc: Enabled bearer , priority 0 [ 600.564598][T14265] tipc: Resetting bearer [ 600.635510][T14262] tipc: Disabling bearer [ 600.689498][T14272] tipc: Enabled bearer , priority 0 [ 600.701975][T14272] syzkaller0: entered promiscuous mode [ 600.718716][T14272] syzkaller0: entered allmulticast mode [ 600.779612][T14271] tipc: Resetting bearer [ 600.859630][T14271] tipc: Disabling bearer [ 601.178380][T14282] fuse: Bad value for 'fd' [ 601.852274][T14284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2684'. [ 601.892060][T14286] block nbd0: Unsupported socket: should be TCP or UNIX. [ 602.399248][T14298] tipc: Enabled bearer , priority 0 [ 602.426738][T14298] tipc: Resetting bearer [ 602.479491][T14297] tipc: Disabling bearer [ 602.500549][T14306] tipc: Enabled bearer , priority 0 [ 602.636761][T14306] tipc: Resetting bearer [ 602.693255][T14305] tipc: Disabling bearer [ 602.824823][T14314] fuse: Bad value for 'fd' [ 604.745060][T14356] tipc: Started in network mode [ 604.750119][T14356] tipc: Node identity 7aadbf2eff5e, cluster identity 4711 [ 604.758264][T14356] tipc: Enabled bearer , priority 0 [ 604.770231][T14356] tipc: Resetting bearer [ 604.826902][T14355] tipc: Disabling bearer [ 606.888568][T14423] syzkaller0: entered promiscuous mode [ 606.906955][T14423] syzkaller0: entered allmulticast mode [ 607.332615][T14440] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2742'. [ 607.626051][T14452] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2747'. [ 609.050552][T14516] syzkaller0: entered promiscuous mode [ 609.060410][T14516] syzkaller0: entered allmulticast mode [ 611.748018][T14561] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2785'. [ 612.305174][T14580] syzkaller0: entered promiscuous mode [ 612.324005][T14580] syzkaller0: entered allmulticast mode [ 615.532487][T14642] syzkaller0: entered promiscuous mode [ 615.539742][T14642] syzkaller0: entered allmulticast mode [ 618.003823][T14676] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.128525][T14683] syzkaller0: entered promiscuous mode [ 618.148481][T14683] syzkaller0: entered allmulticast mode [ 618.273969][T14676] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.492209][T14676] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.561598][T14698] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.569608][T14698] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.655414][T14676] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.864399][T14676] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.900616][T14676] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.947946][T14706] syzkaller0: entered promiscuous mode [ 618.953549][T14706] syzkaller0: entered allmulticast mode [ 618.992341][T14676] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.634233][T14733] fuse: Bad value for 'rootmode' [ 622.232900][T14676] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.603354][T14759] syzkaller0: entered promiscuous mode [ 622.612777][T14759] syzkaller0: entered allmulticast mode [ 622.794073][T14764] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2841'. [ 622.866696][T14768] netlink: 'syz.3.2841': attribute type 2 has an invalid length. [ 623.033491][T14771] IPVS: Scheduler module ip_vs_sip not found [ 623.050984][T14775] IPVS: length: 8 != 418683829520 [ 623.170705][T14783] syzkaller0: entered promiscuous mode [ 623.183203][T14783] syzkaller0: entered allmulticast mode [ 624.045236][T14794] net_ratelimit: 10 callbacks suppressed [ 624.045251][T14794] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 624.364691][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.371181][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.184154][ T5801] Bluetooth: hci0: command tx timeout [ 625.716620][T14818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2856'. [ 625.726858][T14818] netlink: 'syz.3.2856': attribute type 30 has an invalid length. [ 625.742139][T14818] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.750924][T14818] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.759220][T14818] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.767487][T14818] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.569953][T14886] syzkaller0: entered promiscuous mode [ 627.575891][T14886] syzkaller0: entered allmulticast mode [ 627.995006][T14909] syzkaller0: entered promiscuous mode [ 628.000611][T14909] syzkaller0: entered allmulticast mode [ 628.141808][T14918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2893'. [ 628.152109][T14918] netlink: 'syz.1.2893': attribute type 30 has an invalid length. [ 628.182496][T14918] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 628.191330][T14918] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 628.200091][T14918] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 628.208893][T14918] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 628.338601][T14921] syzkaller0: entered promiscuous mode [ 628.347493][T14921] syzkaller0: entered allmulticast mode [ 628.786489][ T96] block nbd0: Possible stuck request ffff888021b58000: control (read@0,1024B). Runtime 150 seconds [ 628.797473][ T96] block nbd0: Possible stuck request ffff888021b58200: control (read@1024,1024B). Runtime 150 seconds [ 628.808915][ T96] block nbd0: Possible stuck request ffff888021b58400: control (read@2048,1024B). Runtime 150 seconds [ 628.821245][ T96] block nbd0: Possible stuck request ffff888021b58600: control (read@3072,1024B). Runtime 150 seconds [ 628.883030][T14955] syzkaller0: entered promiscuous mode [ 628.889603][T14955] syzkaller0: entered allmulticast mode [ 629.093416][T14959] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.277694][T14959] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.387361][T14959] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.498668][T14959] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.617924][T14978] syzkaller0: entered promiscuous mode [ 629.637117][T14978] syzkaller0: entered allmulticast mode [ 629.748597][T14959] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.808550][T14959] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.882813][T14959] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.940194][T14959] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.273750][T15000] fuse: Unknown parameter 'user_i00000000000000000000' [ 631.833593][T15048] fuse: Unknown parameter 'user_i00000000000000000000' [ 632.957786][T15066] IPVS: Scheduler module ip_vs_sip not found [ 633.015337][T15074] tipc: Enabled bearer , priority 0 [ 633.039082][T15074] tipc: Resetting bearer [ 633.085010][T15073] tipc: Disabling bearer [ 633.587843][T15111] syzkaller0: entered promiscuous mode [ 633.598352][T15103] IPVS: Scheduler module ip_vs_sip not found [ 633.610081][T15111] syzkaller0: entered allmulticast mode [ 633.636491][T15111] tipc: Enabled bearer , priority 0 [ 633.674303][T15109] tipc: Resetting bearer [ 633.762593][T15109] tipc: Disabling bearer [ 633.791715][T15118] syzkaller0: entered promiscuous mode [ 633.805345][T15118] syzkaller0: entered allmulticast mode [ 634.469588][T15139] IPVS: Scheduler module ip_vs_sip not found [ 634.955523][T15149] tipc: Enabled bearer , priority 0 [ 634.978652][T15149] tipc: Resetting bearer [ 635.024991][T15148] tipc: Disabling bearer [ 635.358988][T15158] IPVS: length: 8 != 418683829520 [ 635.739003][T15174] block nbd0: Unsupported socket: should be TCP or UNIX. [ 635.861369][T15179] IPVS: length: 8 != 418683829520 [ 636.277732][T15195] block nbd0: Unsupported socket: should be TCP or UNIX. [ 636.430343][T15201] syzkaller0: entered promiscuous mode [ 636.445359][T15201] syzkaller0: entered allmulticast mode [ 636.604077][T15203] fuse: Unknown parameter 'user_id00000000000000000000' [ 637.252195][T15205] IPVS: length: 8 != 418683829520 [ 637.386416][T15209] tipc: Enabled bearer , priority 0 [ 637.408735][T15209] tipc: Resetting bearer [ 637.445300][T15208] tipc: Disabling bearer [ 638.192034][T15235] syzkaller0: entered promiscuous mode [ 638.220660][T15237] fuse: Unknown parameter 'user_id00000000000000000000' [ 638.263480][T15235] syzkaller0: entered allmulticast mode [ 638.907403][T15240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3030'. [ 639.300342][T15246] syzkaller0: entered promiscuous mode [ 639.316441][T15246] syzkaller0: entered allmulticast mode [ 640.058746][T15281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3044'. [ 640.488611][T15296] syzkaller0: entered promiscuous mode [ 640.504097][T15296] syzkaller0: entered allmulticast mode [ 640.522926][T15298] syzkaller0: entered promiscuous mode [ 640.531900][T15298] syzkaller0: entered allmulticast mode [ 640.551131][T15296] tipc: Enabled bearer , priority 0 [ 640.568152][T15295] tipc: Resetting bearer [ 640.621553][T15295] tipc: Disabling bearer [ 640.764691][T15302] syzkaller0: entered promiscuous mode [ 640.770208][T15302] syzkaller0: entered allmulticast mode [ 640.857880][T15306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3053'. [ 641.340735][T15326] syzkaller0: entered promiscuous mode [ 641.368800][T15326] syzkaller0: entered allmulticast mode [ 641.910418][T15358] syzkaller0: entered promiscuous mode [ 641.917147][T15358] syzkaller0: entered allmulticast mode [ 643.509146][T15376] xt_hashlimit: max too large, truncated to 1048576 [ 643.794051][ T6410] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 644.034375][ T6410] usb 3-1: Using ep0 maxpacket: 16 [ 644.055590][ T6410] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 644.092263][ T6410] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.132149][ T6410] usb 3-1: config 0 has no interface number 0 [ 644.162052][ T6410] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 644.194040][ T6410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.234109][ T6410] usb 3-1: Product: syz [ 644.238315][ T6410] usb 3-1: Manufacturer: syz [ 644.272982][ T6410] usb 3-1: SerialNumber: syz [ 644.305047][ T6410] usb 3-1: config 0 descriptor?? [ 644.651879][ T6410] usb 3-1: Found UVC 0.00 device syz (046d:08d3) [ 644.659573][ T6410] usb 3-1: No valid video chain found. [ 644.674211][ T6410] usb 3-1: USB disconnect, device number 5 [ 644.804321][T12210] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 644.844151][T15389] syzkaller0: entered promiscuous mode [ 644.849718][T15389] syzkaller0: entered allmulticast mode [ 644.995898][T12210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.007198][T12210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.017913][T12210] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 645.027472][T12210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.038935][T12210] usb 1-1: config 0 descriptor?? [ 645.167535][T15397] tipc: Enabling of bearer rejected, failed to enable media [ 645.539786][T15404] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3093'. [ 645.888349][T15412] syzkaller0: entered promiscuous mode [ 645.902955][T15412] syzkaller0: entered allmulticast mode [ 646.267816][T12210] hid (null): report_id 0 is invalid [ 646.435318][T15417] syzkaller0: entered promiscuous mode [ 646.451663][T15417] syzkaller0: entered allmulticast mode [ 647.255881][T12210] hid-steam 0003:28DE:1142.0006: report_id 0 is invalid [ 647.262879][T12210] hid-steam 0003:28DE:1142.0006: item 0 1 1 8 parsing failed [ 647.271891][T12210] hid-steam 0003:28DE:1142.0006: steam_probe:parse of hid interface failed [ 647.469516][T12210] hid-steam: probe of 0003:28DE:1142.0006 failed with error -22 [ 647.482917][T12210] usb 1-1: USB disconnect, device number 4 [ 648.017307][T12210] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 648.094497][ T6410] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 648.282814][T12210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.364141][ T6410] usb 4-1: Using ep0 maxpacket: 16 [ 648.390701][T12210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.498381][ T6410] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 648.514700][T12210] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 648.535331][ T6410] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.557770][T12210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.578002][ T6410] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 648.615099][T12210] usb 1-1: config 0 descriptor?? [ 648.654874][ T6410] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 648.687305][ T6410] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.717072][ T6410] usb 4-1: config 0 descriptor?? [ 648.990919][T15433] tipc: Enabling of bearer rejected, failed to enable media [ 649.091442][T12210] pyra 0003:1E7D:2CF6.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 649.140577][ T6410] belkin 0003:1020:0006.0008: global environment stack underflow [ 649.204079][ T6410] belkin 0003:1020:0006.0008: item 0 1 1 11 parsing failed [ 649.271785][ T6410] belkin 0003:1020:0006.0008: parse failed [ 649.303042][ T6410] belkin: probe of 0003:1020:0006.0008 failed with error -22 [ 649.369041][ T6410] usb 4-1: USB disconnect, device number 5 [ 651.255702][T12210] pyra 0003:1E7D:2CF6.0007: couldn't init struct pyra_device [ 651.263217][T12210] pyra 0003:1E7D:2CF6.0007: couldn't install mouse [ 651.276369][T12210] pyra: probe of 0003:1E7D:2CF6.0007 failed with error -71 [ 651.286810][T15466] tipc: Enabling of bearer rejected, failed to enable media [ 651.529912][T12210] usb 1-1: USB disconnect, device number 5 [ 651.741706][T15483] syzkaller0: entered promiscuous mode [ 651.747682][T15483] syzkaller0: entered allmulticast mode [ 653.756326][T15502] syzkaller0: entered promiscuous mode [ 653.761929][T15502] syzkaller0: entered allmulticast mode [ 653.795216][T15502] tipc: Enabled bearer , priority 0 [ 653.846375][T15501] tipc: Resetting bearer [ 653.982739][T15501] tipc: Disabling bearer [ 654.021586][T15508] tipc: Enabling of bearer rejected, failed to enable media [ 654.099776][T15511] syzkaller0: entered promiscuous mode [ 654.126820][T15511] syzkaller0: entered allmulticast mode [ 654.235295][T15520] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3131'. [ 654.268545][T15520] nbd: must specify a device to reconfigure [ 654.681682][T15533] syzkaller0: entered promiscuous mode [ 654.691216][T15533] syzkaller0: entered allmulticast mode [ 655.735820][T15542] syzkaller0: entered promiscuous mode [ 655.741438][T15542] syzkaller0: entered allmulticast mode [ 655.758879][T15542] tipc: Enabled bearer , priority 0 [ 655.773439][T15539] tipc: Resetting bearer [ 655.875637][T15539] tipc: Disabling bearer [ 656.096582][T15547] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3141'. [ 656.122146][T15547] nbd: must specify a device to reconfigure [ 656.134161][ T5792] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 656.259417][T15550] tipc: Enabling of bearer rejected, failed to enable media [ 656.324033][ T5792] usb 3-1: Using ep0 maxpacket: 32 [ 656.333837][ T5792] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.354733][ T5792] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.378257][ T5792] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 656.403838][ T5792] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 656.434105][ T5792] usb 3-1: Product: syz [ 656.438307][ T5792] usb 3-1: Manufacturer: syz [ 656.485560][ T5792] hub 3-1:4.0: USB hub found [ 656.555419][T15560] syzkaller0: entered promiscuous mode [ 656.570510][T15560] syzkaller0: entered allmulticast mode [ 656.686611][ T5792] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 657.020078][ T8] usb 3-1: USB disconnect, device number 6 [ 657.114708][T15567] tipc: Enabling of bearer rejected, failed to enable media [ 657.137460][T15567] syzkaller0: entered promiscuous mode [ 657.159695][T15567] syzkaller0: entered allmulticast mode [ 658.332481][T15577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3150'. [ 658.344109][T15577] nbd: must specify a device to reconfigure [ 659.508011][T15587] tipc: Enabling of bearer rejected, failed to enable media [ 659.758673][ T96] block nbd0: Possible stuck request ffff888021b58000: control (read@0,1024B). Runtime 180 seconds [ 659.771158][ T96] block nbd0: Possible stuck request ffff888021b58200: control (read@1024,1024B). Runtime 180 seconds [ 659.782357][ T96] block nbd0: Possible stuck request ffff888021b58400: control (read@2048,1024B). Runtime 180 seconds [ 659.804004][ T96] block nbd0: Possible stuck request ffff888021b58600: control (read@3072,1024B). Runtime 180 seconds [ 660.114830][ T5157] udevd[5157]: worker [8863] /devices/virtual/block/nbd0 timeout; kill it [ 660.415082][ T5157] udevd[5157]: seq 12624 '/devices/virtual/block/nbd0' killed [ 660.440690][T15598] bridge: RTM_NEWNEIGH with invalid ether address [ 660.666580][T15604] usb usb1: check_ctrlrecip: process 15604 (syz.3.3158) requesting ep 01 but needs 81 [ 662.216640][T15629] tipc: Enabling of bearer rejected, failed to enable media [ 665.490663][T15648] syzkaller0: entered promiscuous mode [ 665.507044][T15648] syzkaller0: entered allmulticast mode [ 665.573518][T15648] tipc: Enabled bearer , priority 0 [ 665.629663][T15647] tipc: Resetting bearer [ 665.750120][T15647] tipc: Disabling bearer [ 666.040288][T15663] tipc: Enabling of bearer rejected, failed to enable media [ 668.842594][T15693] syzkaller0: entered promiscuous mode [ 668.863395][T15693] syzkaller0: entered allmulticast mode [ 668.893098][T15693] tipc: Enabled bearer , priority 0 [ 668.943169][T15692] tipc: Resetting bearer [ 669.065031][T15692] tipc: Disabling bearer [ 669.524460][ T5792] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 669.701705][T15709] tipc: Enabled bearer , priority 0 [ 669.717639][T15709] tipc: Resetting bearer [ 669.739742][T15708] tipc: Disabling bearer [ 669.752068][ T5792] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 669.761118][ T5792] usb 2-1: config 0 has no interface number 0 [ 669.774985][ T5792] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 669.786454][ T5792] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 669.817879][ T5792] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 669.834250][ T5792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.856362][ T5792] usb 2-1: Product: syz [ 669.866274][ T5792] usb 2-1: Manufacturer: syz [ 669.879038][ T5792] usb 2-1: SerialNumber: syz [ 669.915388][ T5792] usb 2-1: config 0 descriptor?? [ 669.929633][T15697] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 669.954414][ T5792] usb-storage 2-1:0.20: USB Mass Storage device detected [ 669.992137][ T5792] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 670.169502][ T5792] scsi host1: usb-storage 2-1:0.20 [ 670.371122][T12221] usb 2-1: USB disconnect, device number 3 [ 671.505778][T15720] IPVS: Scheduler module ip_vs_sip not found [ 672.404387][T15729] tipc: Enabled bearer , priority 0 [ 672.445075][T15728] tipc: Disabling bearer [ 672.757689][T15740] tipc: Enabled bearer , priority 0 [ 672.827440][T15740] tipc: Resetting bearer [ 672.879292][T15739] tipc: Disabling bearer [ 673.477016][T15744] IPVS: Scheduler module ip_vs_sip not found [ 674.356285][T15756] tipc: Enabled bearer , priority 0 [ 674.404312][T12217] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 674.426270][T15755] tipc: Disabling bearer [ 674.595837][T12217] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.620991][T12217] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.644293][T12217] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 674.663774][T12217] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.684189][T15758] bridge: RTM_NEWNEIGH with invalid ether address [ 674.685658][T12217] usb 4-1: config 0 descriptor?? [ 675.684726][T15768] fuse: Unknown parameter 'fd0x0000000000000006' [ 676.738089][T12217] steelseries 0003:1038:1410.0009: not enough fields in HID_OUTPUT_REPORT 0 [ 677.626823][T12217] usb 4-1: USB disconnect, device number 6 [ 677.741437][T15776] tipc: Enabling of bearer rejected, failed to enable media [ 677.781610][T15776] syzkaller0: entered promiscuous mode [ 677.803565][T15776] syzkaller0: entered allmulticast mode [ 678.876380][T13382] Bluetooth: hci3: command 0x0406 tx timeout [ 678.901961][T15785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3216'. [ 679.195158][T15792] syzkaller0: entered promiscuous mode [ 679.200686][T15792] syzkaller0: entered allmulticast mode [ 682.612984][T15825] tipc: Enabling of bearer rejected, failed to enable media [ 682.780174][T15827] syzkaller0: entered promiscuous mode [ 682.854260][T15827] syzkaller0: entered allmulticast mode [ 683.394150][T15831] syzkaller0: entered promiscuous mode [ 683.407600][T15831] syzkaller0: entered allmulticast mode [ 685.784261][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.799926][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.381076][T15865] syzkaller0: entered promiscuous mode [ 686.405110][T15865] syzkaller0: entered allmulticast mode [ 686.490245][T15874] syzkaller0: entered promiscuous mode [ 686.500996][T15874] syzkaller0: entered allmulticast mode [ 688.370568][T15870] Bluetooth: hci4: command 0x0406 tx timeout [ 688.376780][T15870] Bluetooth: hci2: command 0x0406 tx timeout [ 688.888551][T15922] tipc: Enabling of bearer rejected, failed to enable media [ 688.924548][T15920] syzkaller0: entered promiscuous mode [ 688.942975][T15920] syzkaller0: entered allmulticast mode [ 689.013859][T15924] syzkaller0: entered promiscuous mode [ 689.020722][T15924] syzkaller0: entered allmulticast mode [ 692.274002][ T96] block nbd0: Possible stuck request ffff888021b58000: control (read@0,1024B). Runtime 210 seconds [ 692.924728][T15954] syzkaller0: entered promiscuous mode [ 692.930248][T15954] syzkaller0: entered allmulticast mode [ 693.077413][T15957] nbd: must specify a device to reconfigure [ 693.254527][ T96] block nbd0: Possible stuck request ffff888021b58200: control (read@1024,1024B). Runtime 210 seconds [ 693.267394][ T96] block nbd0: Possible stuck request ffff888021b58400: control (read@2048,1024B). Runtime 210 seconds [ 693.475957][ T96] block nbd0: Possible stuck request ffff888021b58600: control (read@3072,1024B). Runtime 210 seconds [ 694.712993][T15986] nbd: must specify a device to reconfigure [ 694.722630][T15987] syzkaller0: entered promiscuous mode [ 694.732848][T15987] syzkaller0: entered allmulticast mode [ 698.485060][T16028] syzkaller0: entered promiscuous mode [ 698.490647][T16028] syzkaller0: entered allmulticast mode [ 698.585277][T16032] IPVS: length: 8 != 418683829520 [ 698.758476][T16033] syzkaller0: entered promiscuous mode [ 698.773964][T16033] syzkaller0: entered allmulticast mode [ 698.973856][T16047] block nbd0: Unsupported socket: should be TCP or UNIX. [ 700.969300][T16064] IPVS: length: 8 != 418683829520 [ 701.170373][T16070] syzkaller0: entered promiscuous mode [ 701.191214][T16070] syzkaller0: entered allmulticast mode [ 701.333017][T16074] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 701.370356][T16081] syzkaller0: entered promiscuous mode [ 701.381845][T16081] syzkaller0: entered allmulticast mode [ 701.703861][T16094] IPVS: length: 8 != 418683829520 [ 701.998071][T16106] syzkaller0: entered promiscuous mode [ 702.029524][T16106] syzkaller0: entered allmulticast mode [ 702.294285][T16115] kvm: user requested TSC rate below hardware speed [ 702.371174][T16115] kvm: pic: single mode not supported [ 702.371703][T16115] kvm: pic: non byte read [ 702.714004][T16115] kvm: pic: non byte write [ 702.718555][T16115] kvm: pic: non byte read [ 702.723023][T16115] kvm: pic: non byte write [ 702.759935][T16115] kvm: pic: non byte read [ 702.765140][T16115] kvm: pic: non byte write [ 702.780214][T16115] kvm: pic: non byte read [ 702.794278][T16115] kvm: pic: non byte write [ 702.822486][T16115] kvm: pic: non byte read [ 702.848176][T16115] kvm: pic: non byte write [ 702.867580][T16115] kvm: pic: non byte read [ 702.885255][T16115] kvm: pic: non byte write [ 702.897170][T16115] kvm: pic: non byte read [ 702.926222][T16115] kvm: pic: non byte write [ 702.943442][T16115] kvm: pic: non byte read [ 702.983153][T16115] kvm: pic: non byte write [ 702.988069][T16115] kvm: pic: non byte read [ 703.005462][T16115] kvm: pic: non byte write [ 703.014123][T16115] kvm: pic: non byte read [ 703.024577][T16115] kvm: pic: non byte write [ 703.034238][T16121] IPVS: Scheduler module ip_vs_sip not found [ 703.044210][T16129] IPVS: length: 8 != 378943128520 [ 703.240076][T16136] block nbd0: Unsupported socket: should be TCP or UNIX. [ 703.792166][T16155] IPVS: Scheduler module ip_vs_sip not found [ 703.804685][T16165] IPVS: length: 8 != 378943128520 [ 704.212810][T16175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3350'. [ 704.238183][T16175] nbd: must specify a device to reconfigure [ 704.279651][T16177] syzkaller0: entered promiscuous mode [ 704.288651][T16177] syzkaller0: entered allmulticast mode [ 704.682824][T16192] syzkaller0: entered promiscuous mode [ 704.688675][T16192] syzkaller0: entered allmulticast mode [ 705.132982][T16207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3362'. [ 705.158163][T16207] nbd: must specify a device to reconfigure [ 705.306271][T16214] syzkaller0: entered promiscuous mode [ 705.311790][T16214] syzkaller0: entered allmulticast mode [ 705.905922][T16230] syzkaller0: entered promiscuous mode [ 705.925888][T16230] syzkaller0: entered allmulticast mode [ 706.840962][T16239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3372'. [ 706.872790][T16239] nbd: must specify a device to reconfigure [ 707.172668][T16250] syzkaller0: entered promiscuous mode [ 707.185255][T16250] syzkaller0: entered allmulticast mode [ 710.015556][T16280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3384'. [ 710.031490][T16280] nbd: must specify a device to reconfigure [ 710.542444][T16303] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3394'. [ 710.565672][T16303] nbd: must specify a device to reconfigure [ 710.573360][T16306] syzkaller0: entered promiscuous mode [ 710.594047][T16306] syzkaller0: entered allmulticast mode [ 710.690503][T16307] syzkaller0: entered promiscuous mode [ 710.704798][T16307] syzkaller0: entered allmulticast mode [ 714.492859][T16367] syzkaller0: entered promiscuous mode [ 714.498575][T16367] syzkaller0: entered allmulticast mode [ 717.887569][T16421] kvm: kvm [16420]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 720.075560][T16453] syzkaller0: entered promiscuous mode [ 720.081083][T16453] syzkaller0: entered allmulticast mode [ 721.183398][T16458] syzkaller0: entered promiscuous mode [ 721.194314][T16458] syzkaller0: entered allmulticast mode [ 723.792729][ T96] block nbd0: Possible stuck request ffff888021b58000: control (read@0,1024B). Runtime 240 seconds [ 723.803837][ T96] block nbd0: Possible stuck request ffff888021b58200: control (read@1024,1024B). Runtime 240 seconds [ 723.815289][ T96] block nbd0: Possible stuck request ffff888021b58400: control (read@2048,1024B). Runtime 240 seconds [ 723.829034][ T96] block nbd0: Possible stuck request ffff888021b58600: control (read@3072,1024B). Runtime 240 seconds [ 725.289802][T16511] syzkaller0: entered promiscuous mode [ 725.295544][T16511] syzkaller0: entered allmulticast mode [ 725.611761][T16524] syzkaller0: entered promiscuous mode [ 725.617711][T16524] syzkaller0: entered allmulticast mode [ 729.329793][T16593] syzkaller0: entered promiscuous mode [ 729.336578][T16593] syzkaller0: entered allmulticast mode [ 729.349455][T16586] kvm: kvm [16584]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 729.632758][T16598] syzkaller0: entered promiscuous mode [ 729.642916][T16598] syzkaller0: entered allmulticast mode [ 730.605050][T16613] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2340085918 (2340085918 ns) > initial count (281086070 ns). Using initial count to start timer. [ 730.930584][T16624] syzkaller0: entered promiscuous mode [ 730.949942][T16624] syzkaller0: entered allmulticast mode [ 732.119177][T16647] tipc: Enabled bearer , priority 0 [ 732.150681][T16647] tipc: Resetting bearer [ 732.215075][T16645] tipc: Disabling bearer [ 732.285510][T16651] io-wq is not configured for unbound workers [ 733.813698][T16686] tipc: Enabled bearer , priority 0 [ 733.856505][T16686] tipc: Resetting bearer [ 733.905032][T16685] tipc: Disabling bearer [ 734.160375][T16699] kvm: kvm [16698]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 734.565862][T16722] IPVS: length: 8 != 401432845432 [ 735.158811][T16753] IPVS: length: 8 != 401432845432 [ 738.319214][T16836] syzkaller0: entered promiscuous mode [ 738.342212][T16836] syzkaller0: entered allmulticast mode [ 740.719603][T16843] syzkaller0: entered promiscuous mode [ 740.725272][T16843] syzkaller0: entered allmulticast mode [ 741.754002][ T28] kauditd_printk_skb: 198 callbacks suppressed [ 741.754017][ T28] audit: type=1326 audit(3873361250.600:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.2.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371a78f749 code=0x7ffc0000 [ 741.917815][ T28] audit: type=1326 audit(3873361250.600:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.2.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371a78f749 code=0x7ffc0000 [ 742.024319][ T28] audit: type=1326 audit(3873361250.600:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.2.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371a78f749 code=0x7ffc0000 [ 742.057702][ T28] audit: type=1326 audit(3873361250.920:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.2.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371a78f749 code=0x7ffc0000 [ 742.103952][ T28] audit: type=1326 audit(3873361250.920:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.2.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371a78f749 code=0x7ffc0000 [ 742.160184][ T28] audit: type=1326 audit(3873361250.960:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.2.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f371a78f749 code=0x7ffc0000 [ 742.193707][T16908] syzkaller0: entered promiscuous mode [ 742.199381][T16908] syzkaller0: entered allmulticast mode [ 742.216947][ T28] audit: type=1326 audit(3873361250.960:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371a78f749 code=0x7ffc0000 [ 742.274867][ T28] audit: type=1326 audit(3873361250.960:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371a78f749 code=0x7ffc0000 [ 742.302398][ T28] audit: type=1326 audit(3873361250.960:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.2.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371a78f749 code=0x7ffc0000 [ 742.336470][ T28] audit: type=1326 audit(3873361250.960:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.2.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371a78f749 code=0x7ffc0000 [ 745.822863][T16914] syzkaller0: entered promiscuous mode [ 745.828663][T16914] syzkaller0: entered allmulticast mode [ 747.189421][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.202452][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.550912][T16973] syzkaller0: entered promiscuous mode [ 747.563121][T16973] syzkaller0: entered allmulticast mode [ 747.720975][T16975] syzkaller0: entered promiscuous mode [ 747.732637][T16975] syzkaller0: entered allmulticast mode [ 749.281333][T13382] Bluetooth: hci0: command 0x0406 tx timeout [ 750.822272][T17014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3617'. [ 750.841516][T17014] nbd: must specify a device to reconfigure [ 751.467738][T17032] IPVS: Scheduler module ip_vs_sip not found [ 754.234728][ T96] block nbd0: Possible stuck request ffff888021b58000: control (read@0,1024B). Runtime 270 seconds [ 754.246615][ T96] block nbd0: Possible stuck request ffff888021b58200: control (read@1024,1024B). Runtime 270 seconds [ 754.257710][ T96] block nbd0: Possible stuck request ffff888021b58400: control (read@2048,1024B). Runtime 270 seconds [ 754.268849][ T96] block nbd0: Possible stuck request ffff888021b58600: control (read@3072,1024B). Runtime 270 seconds [ 754.575259][T17061] IPVS: Scheduler module ip_vs_sip not found [ 756.109372][T17093] syzkaller0: entered promiscuous mode [ 756.121566][T17093] syzkaller0: entered allmulticast mode [ 756.170789][T17095] syzkaller0: entered promiscuous mode [ 756.180758][T17095] syzkaller0: entered allmulticast mode [ 756.233750][T17101] IPVS: Scheduler module ip_vs_sip not found [ 756.379345][T17107] IPVS: Scheduler module ip_vs_sip not found [ 757.079408][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 757.079420][ T28] audit: type=1326 audit(3873361266.250:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17121 comm="syz.0.3646" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f649938f749 code=0x0 [ 759.915785][T17147] tipc: Enabled bearer , priority 0 [ 759.945397][T17148] syzkaller0: entered promiscuous mode [ 759.950905][T17148] syzkaller0: entered allmulticast mode [ 759.974552][T17143] tipc: Resetting bearer [ 760.000994][T17141] tipc: Resetting bearer [ 760.038917][T17141] tipc: Disabling bearer [ 760.061733][T17157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3656'. [ 760.070934][T17157] nbd: must specify a device to reconfigure [ 760.081149][T17155] syzkaller0: entered promiscuous mode [ 760.094947][T17155] syzkaller0: entered allmulticast mode [ 760.106463][T17155] tipc: Enabling of bearer rejected, failed to enable media [ 760.873530][T17177] syzkaller0: entered promiscuous mode [ 760.894132][T17177] syzkaller0: entered allmulticast mode [ 763.439232][T17199] tipc: Enabling of bearer rejected, failed to enable media [ 763.968675][T17234] syzkaller0: entered promiscuous mode [ 763.974637][T17232] ptrace attach of "./syz-executor exec"[17235] was attempted by "./syz-executor exec"[17232] [ 763.981621][T17234] syzkaller0: entered allmulticast mode [ 764.762948][T17252] tipc: Enabled bearer , priority 0 [ 764.771060][T17252] syzkaller0: entered promiscuous mode [ 764.777141][T17252] syzkaller0: entered allmulticast mode [ 764.796431][T17252] tipc: Resetting bearer [ 764.821518][T17251] tipc: Resetting bearer [ 764.901451][T17251] tipc: Disabling bearer [ 768.075496][T17316] tipc: Enabled bearer , priority 0 [ 768.103410][T17316] syzkaller0: entered promiscuous mode [ 768.119233][T17316] syzkaller0: entered allmulticast mode [ 768.154562][T17316] tipc: Resetting bearer [ 768.181068][T17315] tipc: Resetting bearer [ 768.282240][T17315] tipc: Disabling bearer [ 771.947299][T17395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3733'. [ 771.956429][T17395] nbd: must specify a device to reconfigure [ 775.035550][T17473] syzkaller0: entered promiscuous mode [ 775.048658][T17473] syzkaller0: entered allmulticast mode [ 776.459662][T17511] syzkaller0: entered promiscuous mode [ 776.465524][T17511] syzkaller0: entered allmulticast mode [ 777.270841][T17540] kvm: kvm [17539]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 777.877721][ T28] audit: type=1326 audit(3873361287.050:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17552 comm="syz.3.3770" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe4df8f749 code=0x0 [ 778.283582][T17559] syzkaller0: entered promiscuous mode [ 778.289488][T17559] syzkaller0: entered allmulticast mode [ 780.027193][T17612] syzkaller0: entered promiscuous mode [ 780.032729][T17612] syzkaller0: entered allmulticast mode [ 781.420570][T17663] syzkaller0: entered promiscuous mode [ 781.437304][T17663] syzkaller0: entered allmulticast mode [ 783.202585][T17720] syzkaller0: entered promiscuous mode [ 783.219284][T17720] syzkaller0: entered allmulticast mode [ 783.248279][T17720] tipc: Enabling of bearer rejected, failed to enable media [ 784.504976][ T96] block nbd0: Possible stuck request ffff888021b58000: control (read@0,1024B). Runtime 300 seconds [ 784.518736][ T96] block nbd0: Possible stuck request ffff888021b58200: control (read@1024,1024B). Runtime 300 seconds [ 784.530233][ T96] block nbd0: Possible stuck request ffff888021b58400: control (read@2048,1024B). Runtime 300 seconds [ 784.541576][ T96] block nbd0: Possible stuck request ffff888021b58600: control (read@3072,1024B). Runtime 300 seconds [ 784.903697][T17761] syzkaller0: entered promiscuous mode [ 784.909461][T17761] syzkaller0: entered allmulticast mode [ 785.119994][T17768] syzkaller0: entered promiscuous mode [ 785.133192][T17768] syzkaller0: entered allmulticast mode [ 785.351214][T17771] IPVS: Scheduler module ip_vs_sip not found [ 785.680637][T17784] syzkaller0: entered promiscuous mode [ 785.686666][T17784] syzkaller0: entered allmulticast mode [ 785.982938][T17798] syzkaller0: entered promiscuous mode [ 785.991398][T17798] syzkaller0: entered allmulticast mode [ 786.126955][T17804] syzkaller0: entered promiscuous mode [ 786.129656][T17801] IPVS: Scheduler module ip_vs_sip not found [ 786.142684][T17804] syzkaller0: entered allmulticast mode [ 786.635060][T17822] syzkaller0: entered promiscuous mode [ 786.652280][T17822] syzkaller0: entered allmulticast mode [ 787.033326][T17834] tipc: Enabling of bearer rejected, failed to enable media [ 787.050039][T17834] syzkaller0: entered promiscuous mode [ 787.071762][T17834] syzkaller0: entered allmulticast mode [ 787.280322][T17836] IPVS: Scheduler module ip_vs_sip not found [ 787.372404][ T28] audit: type=1326 audit(3873361296.540:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17839 comm="syz.1.3850" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f947978f749 code=0x0 [ 787.754167][T17852] syzkaller0: entered promiscuous mode [ 787.770097][T17852] syzkaller0: entered allmulticast mode [ 790.104409][T17916] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3879'. [ 790.133794][T17916] nbd: must specify at least one socket [ 791.140610][T17942] tipc: Enabled bearer , priority 0 [ 791.150183][T17942] syzkaller0: entered promiscuous mode [ 791.162227][T17942] syzkaller0: entered allmulticast mode [ 791.193080][T17942] tipc: Resetting bearer [ 791.219162][T17941] tipc: Resetting bearer [ 791.285953][T17941] tipc: Disabling bearer [ 791.484273][T17947] kvm: kvm [17946]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 792.172777][T17977] tipc: Enabling of bearer rejected, failed to enable media [ 792.197622][T17977] syzkaller0: entered promiscuous mode [ 792.204321][T17977] syzkaller0: entered allmulticast mode [ 792.405188][T17984] tipc: Enabled bearer , priority 0 [ 792.424979][T17984] syzkaller0: entered promiscuous mode [ 792.430838][T17984] syzkaller0: entered allmulticast mode [ 792.462750][T17984] tipc: Resetting bearer [ 792.478593][T17983] tipc: Resetting bearer [ 792.516643][T17987] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3903'. [ 792.525863][T17987] nbd: must specify at least one socket [ 792.541253][T17983] tipc: Disabling bearer [ 793.455758][T18009] syzkaller0: entered promiscuous mode [ 793.471518][T18009] syzkaller0: entered allmulticast mode [ 794.411896][T18018] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3916'. [ 794.458004][T18019] tipc: Enabled bearer , priority 0 [ 794.484604][T18019] syzkaller0: entered promiscuous mode [ 794.497940][T18019] syzkaller0: entered allmulticast mode [ 794.538147][T18019] tipc: Resetting bearer [ 794.556708][T18016] tipc: Resetting bearer [ 794.601848][T18016] tipc: Disabling bearer [ 796.441627][T18060] tipc: Enabled bearer , priority 0 [ 796.449955][T18060] syzkaller0: entered promiscuous mode [ 796.455850][T18060] syzkaller0: entered allmulticast mode [ 796.472252][T18060] tipc: Resetting bearer [ 796.483486][T18059] tipc: Resetting bearer [ 796.528932][T18059] tipc: Disabling bearer [ 796.695674][T18066] kvm: kvm [18065]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 796.972591][T18071] tipc: Enabling of bearer rejected, failed to enable media [ 796.987016][T18071] syzkaller0: entered promiscuous mode [ 796.997511][T18071] syzkaller0: entered allmulticast mode [ 797.912149][T18089] kvm: kvm [18088]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xa200 [ 797.947266][T18089] kvm: kvm [18088]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x2a00 [ 797.971537][T18089] kvm: kvm [18088]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xd200 [ 798.011858][T18089] kvm: kvm [18088]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5a00 [ 798.042030][T18089] kvm: kvm [18088]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xe200 [ 800.016934][T18136] tipc: Enabled bearer , priority 0 [ 800.045173][T18136] syzkaller0: entered promiscuous mode [ 800.060908][T18136] syzkaller0: entered allmulticast mode [ 800.226638][T18136] tipc: Resetting bearer [ 800.262789][T18134] tipc: Resetting bearer [ 800.335093][T18134] tipc: Disabling bearer [ 802.789802][T18198] tipc: Enabled bearer , priority 0 [ 802.805685][T18198] syzkaller0: entered promiscuous mode [ 802.821359][T18198] syzkaller0: entered allmulticast mode [ 802.899154][T18198] tipc: Resetting bearer [ 802.927170][T18197] tipc: Resetting bearer [ 802.991382][T18197] tipc: Disabling bearer [ 803.991760][T18236] tipc: Enabled bearer , priority 0 [ 803.999672][T18236] syzkaller0: entered promiscuous mode [ 804.005613][T18236] syzkaller0: entered allmulticast mode [ 804.052758][T18236] tipc: Resetting bearer [ 804.094726][T18235] tipc: Resetting bearer [ 804.162460][T18235] tipc: Disabling bearer [ 805.138534][T18277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3996'. [ 805.160919][T18277] nbd: must specify a device to reconfigure [ 805.649465][ T28] audit: type=1326 audit(3873361314.820:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18299 comm="syz.3.4004" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe4df8f749 code=0x0 [ 805.711464][T18296] kvm: kvm [18294]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 807.106545][T18340] syzkaller0: entered promiscuous mode [ 807.126361][T18340] syzkaller0: entered allmulticast mode [ 807.656251][T18350] syzkaller0: entered promiscuous mode [ 807.671210][T18350] syzkaller0: entered allmulticast mode [ 807.984296][ T29] INFO: task udevd:8863 blocked for more than 144 seconds. [ 807.991544][ T29] Not tainted syzkaller #0 [ 808.007172][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 808.053994][ T29] task:udevd state:D stack:25712 pid:8863 ppid:5157 flags:0x00004006 [ 808.092337][ T29] Call Trace: [ 808.105531][ T29] [ 808.117502][ T29] __schedule+0x14d2/0x44d0 [ 808.131119][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 808.150111][ T29] ? asan.module_dtor+0x20/0x20 [ 808.170607][ T29] ? mark_lock+0x94/0x320 [ 808.184164][ T29] ? lock_chain_count+0x20/0x20 [ 808.194854][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 808.199928][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 808.205441][ T29] schedule+0xbd/0x170 [ 808.209550][ T29] io_schedule+0x80/0xd0 [ 808.213943][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 808.222933][ T29] ? folio_wait_bit+0x30/0x30 [ 808.228020][ T29] ? _compound_head+0x120/0x120 [ 808.232937][ T29] ? filemap_add_folio+0x192/0x3c0 [ 808.238575][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 808.243944][ T29] ? blkdev_writepage+0x30/0x30 [ 808.248818][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 808.253983][ T29] ? blkdev_writepage+0x30/0x30 [ 808.258862][ T29] read_part_sector+0xd2/0x350 [ 808.263648][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 808.270051][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 808.275451][ T29] ? put_partition+0x350/0x350 [ 808.280258][ T29] ? alloc_pages+0x4dc/0x740 [ 808.285056][ T29] bdev_disk_changed+0x73a/0x1410 [ 808.290122][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 808.295482][ T29] ? iput+0x347/0x920 [ 808.299581][ T29] blkdev_get_whole+0x30d/0x390 [ 808.304563][ T29] blkdev_get_by_dev+0x279/0x600 [ 808.309538][ T29] blkdev_open+0x152/0x360 [ 808.314077][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 808.318690][ T29] do_dentry_open+0x8c6/0x1500 [ 808.323490][ T29] path_openat+0x274b/0x3190 [ 808.328184][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 808.333249][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 808.339762][ T29] ? verify_lock_unused+0x140/0x140 [ 808.345120][ T29] ? do_filp_open+0x3d0/0x3d0 [ 808.349847][ T29] ? __virt_addr_valid+0x18c/0x540 [ 808.355069][ T29] do_filp_open+0x1c5/0x3d0 [ 808.359601][ T29] ? vfs_tmpfile+0x490/0x490 [ 808.364302][ T29] ? _raw_spin_unlock+0x28/0x40 [ 808.369349][ T29] ? alloc_fd+0x58f/0x630 [ 808.374222][ T29] do_sys_openat2+0x12c/0x1c0 [ 808.378940][ T29] ? hrtimer_interrupt+0x7bb/0x9c0 [ 808.384201][ T29] ? do_sys_open+0xe0/0xe0 [ 808.388639][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 808.394717][ T29] ? lock_chain_count+0x20/0x20 [ 808.399588][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 808.405631][ T29] __x64_sys_openat+0x139/0x160 [ 808.410503][ T29] do_syscall_64+0x55/0xb0 [ 808.415087][ T29] ? clear_bhb_loop+0x40/0x90 [ 808.419787][ T29] ? clear_bhb_loop+0x40/0x90 [ 808.424531][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 808.430443][ T29] RIP: 0033:0x7f1bf22a7407 [ 808.434987][ T29] RSP: 002b:00007ffc9bc818f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 808.443410][ T29] RAX: ffffffffffffffda RBX: 00007f1bf2a54880 RCX: 00007f1bf22a7407 [ 808.451451][ T29] RDX: 00000000000a0800 RSI: 000055bea2311320 RDI: ffffffffffffff9c [ 808.459518][ T29] RBP: 000055bea22f4910 R08: 0000000000000000 R09: 0000000000000000 [ 808.467555][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055bea230ce00 [ 808.487140][ T29] R13: 000055bea230c410 R14: 0000000000000000 R15: 000055bea230ce00 [ 808.495337][ T29] [ 808.498574][ T29] [ 808.498574][ T29] Showing all locks held in the system: [ 808.516096][ T29] 1 lock held by khungtaskd/29: [ 808.521001][ T29] #0: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 808.531012][ T29] 2 locks held by getty/5549: [ 808.540563][ T29] #0: ffff88802cd060a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 808.551615][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 808.562015][ T29] 2 locks held by kworker/u4:14/6701: [ 808.567479][ T29] #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 808.578761][ T29] #1: ffffc900033b7d00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 808.592009][ T29] 1 lock held by udevd/8863: [ 808.598835][ T29] #0: ffff8880219dd4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 808.609276][ T29] 1 lock held by syz.2.4020/18349: [ 808.614490][ T29] #0: ffffffff8cd357c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x580 [ 808.628278][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.628341][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.642219][ T29] [ 808.644991][ T29] ============================================= [ 808.644991][ T29] [ 808.653415][ T29] NMI backtrace for cpu 0 [ 808.657776][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 808.664994][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 808.675054][ T29] Call Trace: [ 808.678347][ T29] [ 808.681296][ T29] dump_stack_lvl+0x16c/0x230 [ 808.685979][ T29] ? show_regs_print_info+0x20/0x20 [ 808.691182][ T29] ? load_image+0x3b0/0x3b0 [ 808.695705][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 808.700684][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 808.706851][ T29] ? _printk+0xd0/0x110 [ 808.711020][ T29] ? load_image+0x3b0/0x3b0 [ 808.715537][ T29] ? load_image+0x3b0/0x3b0 [ 808.720040][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 808.726109][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 808.732094][ T29] watchdog+0xf41/0xf80 [ 808.736249][ T29] ? watchdog+0x1e1/0xf80 [ 808.740583][ T29] kthread+0x2fa/0x390 [ 808.744647][ T29] ? hungtask_pm_notify+0x90/0x90 [ 808.749674][ T29] ? kthread_blkcg+0xd0/0xd0 [ 808.754276][ T29] ret_from_fork+0x48/0x80 [ 808.758709][ T29] ? kthread_blkcg+0xd0/0xd0 [ 808.763308][ T29] ret_from_fork_asm+0x11/0x20 [ 808.768171][ T29] [ 808.771821][ T29] Sending NMI from CPU 0 to CPUs 1: [ 808.777196][ C1] NMI backtrace for cpu 1 [ 808.777204][ C1] CPU: 1 PID: 6701 Comm: kworker/u4:14 Not tainted syzkaller #0 [ 808.777218][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 808.777227][ C1] Workqueue: bat_events batadv_purge_orig [ 808.777256][ C1] RIP: 0010:lock_is_held_type+0xb1/0x190 [ 808.777273][ C1] Code: 7e 4b 44 89 fd 49 89 df 49 81 c7 e0 0a 00 00 45 31 e4 49 83 fc 31 73 24 4c 89 ff 4c 89 f6 e8 26 02 00 00 85 c0 75 2a 49 ff c4 <48> 63 83 d8 0a 00 00 49 83 c7 28 49 39 c4 7c d8 eb 11 48 c7 c7 60 [ 808.777286][ C1] RSP: 0018:ffffc900033b7a58 EFLAGS: 00000002 [ 808.777297][ C1] RAX: 0000000000000000 RBX: ffff888059608000 RCX: 0000000000000000 [ 808.777307][ C1] RDX: 0000000000000000 RSI: ffff8880b8e3c018 RDI: ffff888059608ae0 [ 808.777334][ C1] RBP: 00000000ffffffff R08: ffffffff8e4a93ef R09: 1ffffffff1c9527d [ 808.777346][ C1] R10: dffffc0000000000 R11: fffffbfff1c9527e R12: 0000000000000001 [ 808.777358][ C1] R13: 0000000000000046 R14: ffff8880b8e3c018 R15: ffff888059608ae0 [ 808.777370][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 808.777384][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 808.777396][ C1] CR2: 00007f94799b9358 CR3: 00000000677b9000 CR4: 00000000003526e0 [ 808.777410][ C1] Call Trace: [ 808.777416][ C1] [ 808.777425][ C1] ttwu_do_activate+0x99/0x7d0 [ 808.777451][ C1] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 808.777476][ C1] try_to_wake_up+0x686/0x1140 [ 808.777506][ C1] kick_pool+0x320/0x420 [ 808.777523][ C1] process_scheduled_works+0x7b0/0x15b0 [ 808.777562][ C1] ? do_raw_spin_lock+0x121/0x2c0 [ 808.777592][ C1] ? assign_work+0x400/0x400 [ 808.777614][ C1] ? assign_work+0x39e/0x400 [ 808.777640][ C1] worker_thread+0xa55/0xfc0 [ 808.777671][ C1] kthread+0x2fa/0x390 [ 808.777696][ C1] ? pr_cont_work+0x560/0x560 [ 808.777715][ C1] ? kthread_blkcg+0xd0/0xd0 [ 808.777733][ C1] ret_from_fork+0x48/0x80 [ 808.777754][ C1] ? kthread_blkcg+0xd0/0xd0 [ 808.777771][ C1] ret_from_fork_asm+0x11/0x20 [ 808.777805][ C1] [ 808.787640][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 808.787653][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 808.787677][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 808.787689][ T29] Call Trace: [ 808.787696][ T29] [ 808.787706][ T29] dump_stack_lvl+0x16c/0x230 [ 808.787744][ T29] ? show_regs_print_info+0x20/0x20 [ 808.787775][ T29] ? load_image+0x3b0/0x3b0 [ 808.787816][ T29] panic+0x2c0/0x710 [ 808.787837][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 808.787877][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 808.787898][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 808.787930][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 808.787979][ T29] watchdog+0xf80/0xf80 [ 808.788010][ T29] ? watchdog+0x1e1/0xf80 [ 808.788045][ T29] kthread+0x2fa/0x390 [ 808.788064][ T29] ? hungtask_pm_notify+0x90/0x90 [ 808.788093][ T29] ? kthread_blkcg+0xd0/0xd0 [ 808.788115][ T29] ret_from_fork+0x48/0x80 [ 808.788141][ T29] ? kthread_blkcg+0xd0/0xd0 [ 808.788162][ T29] ret_from_fork_asm+0x11/0x20 [ 809.091730][ T29] [ 809.095082][ T29] Kernel Offset: disabled [ 809.099404][ T29] Rebooting in 86400 seconds..