last executing test programs: 4.920112869s ago: executing program 1 (id=1305): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000400)=0xc3e, 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) 3.943834461s ago: executing program 1 (id=1327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 3.536163341s ago: executing program 1 (id=1332): socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x91, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 2.232609937s ago: executing program 2 (id=1334): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000300000014000180100001006574683a69703667051af6b8"], 0x28}}, 0x4000) 2.049811874s ago: executing program 2 (id=1339): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x2, 0x18, 0x0, 0x0, 0x7, 0x0, 0x0, 0x25dfdbff, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x4}}}]}, 0x38}}, 0x0) 1.904198499s ago: executing program 2 (id=1342): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="94000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e300000000000000000000000080004000e040000580016805400018028000100"], 0x94}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) 1.715224672s ago: executing program 2 (id=1345): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @multicast1}, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) 1.600084511s ago: executing program 2 (id=1347): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r1, 0x0, 0x0, 0x20048880, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r3, 0x1, 0xff1f, 0x9000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) 976.171079ms ago: executing program 4 (id=1359): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x3d}, 0x10040007, 0x1}, 0x20) 955.171432ms ago: executing program 4 (id=1361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="280000000306010489011f7b0a698fc407001f000900020073797a32000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10) 760.132054ms ago: executing program 4 (id=1365): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp_reply={0xe, 0x0, 0x0, 0x7, 0x9, 0x9, 0x9, 0x3}}}}}, 0x0) 759.96022ms ago: executing program 0 (id=1366): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10) 721.445827ms ago: executing program 2 (id=1367): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000)=0x81, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 663.349452ms ago: executing program 4 (id=1369): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x14, 0x0, 0x331, 0x0, 0x25dfdbfb, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x44}}, 0x40084) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 638.10577ms ago: executing program 3 (id=1370): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000006d0000006d00000009"], &(0x7f00000000c0)=""/192, 0x91, 0xc0, 0x1, 0x3c75}, 0x28) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000108000604"], 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 595.550403ms ago: executing program 0 (id=1371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) 510.665663ms ago: executing program 3 (id=1372): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @local}, 0x1c) 485.572433ms ago: executing program 0 (id=1373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x13d}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 465.592439ms ago: executing program 1 (id=1374): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180200007700000000000000626f00008500000027000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000025000000850000007b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x77, 0xfffffffffffffe2b, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 348.092158ms ago: executing program 3 (id=1375): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x28, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x4, 0x700000000000000}, 0x40) 345.970247ms ago: executing program 4 (id=1376): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8}]}, 0x2c}}, 0x80) 313.389713ms ago: executing program 0 (id=1377): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x64, 0x64, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x8}]}}, @filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x64}}, 0x48010) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 298.040023ms ago: executing program 1 (id=1378): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 196.17982ms ago: executing program 3 (id=1379): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xe8}}, 0x0) 196.051925ms ago: executing program 4 (id=1380): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 161.929597ms ago: executing program 0 (id=1381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x20040000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x14, 0x3, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0) 153.225788ms ago: executing program 1 (id=1382): r0 = socket(0x28, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000000)={0x48, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d6}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 95.061061ms ago: executing program 3 (id=1383): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x3, 0xa, 0xa4, 0x100}, 0x20) 205.427µs ago: executing program 0 (id=1384): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x5a303}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_ISOLATED={0x5, 0x21, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 3 (id=1385): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaeaaaaaaaaaaaa07000000cd60"], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f86dd", 0x5ea}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) kernel console output (not intermixed with test programs): : renamed from eth3 [ 95.713137][ T5868] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.729508][ T5868] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.746820][ T5868] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.773778][ T5868] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.840570][ T5866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.884748][ T5866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.934538][ T5866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.953910][ T5867] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.969583][ T5866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.991885][ T5867] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.003556][ T5867] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.036986][ T5867] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.062705][ T5874] Bluetooth: hci3: command tx timeout [ 96.063242][ T51] Bluetooth: hci1: command tx timeout [ 96.140548][ T51] Bluetooth: hci2: command tx timeout [ 96.141766][ T5865] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.167560][ T5865] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.191543][ T5865] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.209278][ T5865] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.221939][ T51] Bluetooth: hci0: command tx timeout [ 96.221947][ T5874] Bluetooth: hci4: command tx timeout [ 96.253764][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.298354][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.317462][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.344532][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.351972][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.389358][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.411280][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.418520][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.453563][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.460783][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.513004][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.520234][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.619396][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.677730][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.713589][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.739617][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.783821][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.791080][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.805089][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.835962][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.843202][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.885759][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.892993][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.932359][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.939543][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.976906][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.023869][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.031071][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.083210][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.097443][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.104671][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.122212][ T5866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.345541][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.408420][ T5871] veth0_vlan: entered promiscuous mode [ 97.502148][ T5871] veth1_vlan: entered promiscuous mode [ 97.595240][ T5868] veth0_vlan: entered promiscuous mode [ 97.676748][ T5871] veth0_macvtap: entered promiscuous mode [ 97.704154][ T5868] veth1_vlan: entered promiscuous mode [ 97.729520][ T5871] veth1_macvtap: entered promiscuous mode [ 97.759625][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.834912][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.851415][ T5868] veth0_macvtap: entered promiscuous mode [ 97.873675][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.894111][ T5868] veth1_macvtap: entered promiscuous mode [ 97.916853][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.969084][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.008344][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.020566][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.046303][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.056267][ T1147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.072617][ T1147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.099443][ T5866] veth0_vlan: entered promiscuous mode [ 98.111553][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.141866][ T5874] Bluetooth: hci1: command tx timeout [ 98.142051][ T51] Bluetooth: hci3: command tx timeout [ 98.184835][ T5866] veth1_vlan: entered promiscuous mode [ 98.194871][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.204816][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.230827][ T51] Bluetooth: hci2: command tx timeout [ 98.247470][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.267950][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.300189][ T51] Bluetooth: hci0: command tx timeout [ 98.303069][ T5874] Bluetooth: hci4: command tx timeout [ 98.368772][ T5866] veth0_macvtap: entered promiscuous mode [ 98.417153][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.426307][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.426428][ T5866] veth1_macvtap: entered promiscuous mode [ 98.478138][ T5865] veth0_vlan: entered promiscuous mode [ 98.529727][ T5867] veth0_vlan: entered promiscuous mode [ 98.538881][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.549328][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.554028][ T5865] veth1_vlan: entered promiscuous mode [ 98.594314][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.628256][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.652003][ T5867] veth1_vlan: entered promiscuous mode [ 98.659437][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.667868][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.678291][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.687379][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.727330][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.753726][ T1038] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.769395][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.778252][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.801988][ T5871] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.835128][ T5865] veth0_macvtap: entered promiscuous mode [ 98.887785][ T5867] veth0_macvtap: entered promiscuous mode [ 98.921731][ T5865] veth1_macvtap: entered promiscuous mode [ 98.947456][ T5867] veth1_macvtap: entered promiscuous mode [ 99.046890][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.059332][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.083473][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.108364][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.143336][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.210942][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.234395][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.326336][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.457700][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.468522][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.504486][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.518905][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.528977][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.538279][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.602815][ T5989] netlink: 13 bytes leftover after parsing attributes in process `syz.3.6'. [ 99.635830][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.653834][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.716051][ T5996] netlink: 'syz.0.1': attribute type 2 has an invalid length. [ 99.724593][ T5996] netlink: 'syz.0.1': attribute type 8 has an invalid length. [ 99.735500][ T5996] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1'. [ 99.965311][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.008012][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.153914][ T6004] syz.2.8 uses obsolete (PF_INET,SOCK_PACKET) [ 100.228004][ T5874] Bluetooth: hci3: command tx timeout [ 100.228728][ T51] Bluetooth: hci1: command tx timeout [ 100.303137][ T51] Bluetooth: hci2: command tx timeout [ 100.333598][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.371141][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.381383][ T51] Bluetooth: hci0: command tx timeout [ 100.383415][ T5874] Bluetooth: hci4: command tx timeout [ 100.448190][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.463447][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.591678][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.599545][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.894649][ T6017] tipc: Started in network mode [ 100.899706][ T6017] tipc: Node identity 9e86fb433643, cluster identity 4711 [ 100.947617][ T6017] tipc: Enabled bearer , priority 0 [ 101.009113][ T6021] syzkaller0: entered promiscuous mode [ 101.077533][ T6021] syzkaller0: entered allmulticast mode [ 101.213184][ T6017] tipc: Resetting bearer [ 101.650446][ T6016] tipc: Resetting bearer [ 101.691952][ T6016] tipc: Disabling bearer [ 101.868621][ T6044] netlink: 68 bytes leftover after parsing attributes in process `syz.4.18'. [ 102.376279][ T6064] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.554470][ T6074] Zero length message leads to an empty skb [ 103.198688][ T6092] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.247518][ T6089] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.315411][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.360940][ T6095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'. [ 103.795178][ T6095] bridge_slave_1: left allmulticast mode [ 103.822394][ T6095] bridge_slave_1: left promiscuous mode [ 103.841110][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.904467][ T6095] bridge_slave_0: left allmulticast mode [ 103.933351][ T6095] bridge_slave_0: left promiscuous mode [ 103.949059][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.244952][ T6110] !: renamed from dummy0 (while UP) [ 104.364486][ T6123] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 104.415134][ T6123] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 104.440404][ T6123] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 104.502073][ T6129] warning: `syz.0.35' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.711279][ T6140] netlink: 24 bytes leftover after parsing attributes in process `syz.2.36'. [ 104.848475][ T6145] netlink: 'syz.0.37': attribute type 10 has an invalid length. [ 105.952196][ T6180] netlink: 'syz.0.40': attribute type 2 has an invalid length. [ 105.973194][ T6180] netlink: 164 bytes leftover after parsing attributes in process `syz.0.40'. [ 106.202377][ T6184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.41'. [ 106.261528][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.41'. [ 106.270590][ T6184] netlink: 'syz.2.41': attribute type 5 has an invalid length. [ 106.278170][ T6184] netlink: 20 bytes leftover after parsing attributes in process `syz.2.41'. [ 106.369164][ T6184] geneve2: entered promiscuous mode [ 106.380998][ T6184] geneve2: entered allmulticast mode [ 106.395995][ T36] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 106.439628][ T36] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 106.456666][ T36] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 106.510549][ T36] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 106.638795][ T6199] netlink: 28 bytes leftover after parsing attributes in process `syz.0.46'. [ 106.676689][ T6199] netlink: 80 bytes leftover after parsing attributes in process `syz.0.46'. [ 107.194742][ T6210] bond0: (slave bond_slave_0): Releasing backup interface [ 107.213113][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.50'. [ 107.239665][ T6216] netlink: 7 bytes leftover after parsing attributes in process `syz.0.50'. [ 107.241249][ T6210] bond0: (slave bond_slave_1): Releasing backup interface [ 107.285605][ T6210] team0: Port device team_slave_0 removed [ 107.314276][ T6220] netlink: 'syz.1.51': attribute type 13 has an invalid length. [ 107.325654][ T6210] team0: Port device team_slave_1 removed [ 107.341123][ T6220] netlink: 'syz.1.51': attribute type 17 has an invalid length. [ 107.364442][ T6210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.378485][ T6214] netlink: 48 bytes leftover after parsing attributes in process `syz.2.48'. [ 107.406876][ T6210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.442699][ T6210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.479245][ T6210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.498334][ T6225] netlink: 'syz.2.48': attribute type 10 has an invalid length. [ 107.523788][ T6210] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 107.696874][ T6220] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.726395][ T6223] tipc: Invalid UDP bearer configuration [ 107.726450][ T6223] tipc: Enabling of bearer rejected, failed to enable media [ 107.778848][ T6230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.815280][ T6225] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 108.835147][ T6262] tipc: MTU too low for tipc bearer [ 108.922600][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22 [ 109.215141][ T6284] pimreg: entered allmulticast mode [ 109.228092][ T6286] IPv6: sit1: Disabled Multicast RS [ 109.275435][ T6276] geneve2: entered promiscuous mode [ 109.305585][ T6276] geneve2: entered allmulticast mode [ 109.794853][ T6300] __nla_validate_parse: 7 callbacks suppressed [ 109.794873][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'. [ 109.839423][ T6300] bridge_slave_1: left allmulticast mode [ 109.894291][ T6300] bridge_slave_1: left promiscuous mode [ 109.981031][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.059409][ T3430] hid-generic 0005:16BF:0E11.0001: unknown main item tag 0x0 [ 110.108524][ T3430] hid-generic 0005:16BF:0E11.0001: unknown main item tag 0x0 [ 110.129393][ T6300] bridge_slave_0: left allmulticast mode [ 110.150942][ T3430] hid-generic 0005:16BF:0E11.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 110.161062][ T6300] bridge_slave_0: left promiscuous mode [ 110.198003][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.421991][ T6314] netlink: 'syz.2.74': attribute type 1 has an invalid length. [ 110.488017][ T6311] tipc: Invalid UDP bearer configuration [ 110.488077][ T6311] tipc: Enabling of bearer rejected, failed to enable media [ 110.739220][ T6325] netlink: 68 bytes leftover after parsing attributes in process `syz.2.77'. [ 110.977931][ T6337] Bluetooth: MGMT ver 1.23 [ 111.279848][ T6352] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 111.291365][ T6340] IPVS: stopping backup sync thread 6352 ... [ 111.459445][ T6354] netlink: 'syz.3.81': attribute type 29 has an invalid length. [ 111.786595][ T6359] team_slave_0: entered promiscuous mode [ 111.792564][ T6359] team_slave_1: entered promiscuous mode [ 111.852178][ T6359] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 111.942007][ T6366] syz_tun: entered allmulticast mode [ 112.021952][ T6367] dvmrp8: entered allmulticast mode [ 112.030876][ T6371] tipc: Invalid UDP bearer configuration [ 112.030925][ T6371] tipc: Enabling of bearer rejected, failed to enable media [ 112.080444][ T6366] netlink: 'syz.3.84': attribute type 23 has an invalid length. [ 112.422910][ T6377] netlink: 'syz.4.88': attribute type 1 has an invalid length. [ 112.440269][ T6377] netlink: 216 bytes leftover after parsing attributes in process `syz.4.88'. [ 112.524087][ T6378] nbd0: detected capacity change from 0 to 127 [ 112.555094][ T5874] block nbd0: Receive control failed (result -104) [ 112.722413][ T6362] syz_tun: left allmulticast mode [ 112.727752][ T6362] dvmrp8: left allmulticast mode [ 112.806534][ T3430] IPVS: starting estimator thread 0... [ 112.843041][ T6383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.90'. [ 112.910123][ T6385] IPVS: using max 30 ests per chain, 72000 per kthread [ 112.945931][ T6391] netlink: 48 bytes leftover after parsing attributes in process `syz.2.90'. [ 113.056046][ T6389] tap0: tun_chr_ioctl cmd 1074025677 [ 113.061712][ T6389] tap0: linktype set to 270 [ 113.068107][ T6395] tap0: tun_chr_ioctl cmd 1074025673 [ 113.135864][ T6396] tipc: Enabled bearer , priority 0 [ 113.294305][ T6396] syzkaller0: entered promiscuous mode [ 113.310092][ T6396] syzkaller0: entered allmulticast mode [ 113.382992][ T6404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.94'. [ 113.555060][ T6408] netlink: 'syz.0.95': attribute type 1 has an invalid length. [ 113.706922][ T6413] trusted_key: syz.0.95 sent an empty control message without MSG_MORE. [ 114.256000][ T5855] tipc: Node number set to 2831547203 [ 114.851228][ T6398] tipc: Resetting bearer [ 114.862577][ T6408] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 114.869495][ T6410] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 114.903047][ T6394] tipc: Resetting bearer [ 115.004632][ T6419] netlink: 'syz.3.98': attribute type 1 has an invalid length. [ 115.014412][ T6394] tipc: Disabling bearer [ 115.048177][ T6415] tipc: Invalid UDP bearer configuration [ 115.048234][ T6415] tipc: Enabling of bearer rejected, failed to enable media [ 115.354615][ T6440] vlan2: entered promiscuous mode [ 115.359739][ T6440] macvtap0: entered promiscuous mode [ 115.446267][ T6447] netlink: 104 bytes leftover after parsing attributes in process `syz.2.102'. [ 115.519615][ T6448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.537400][ T6451] netlink: 'syz.4.105': attribute type 10 has an invalid length. [ 115.580970][ T6451] team0: Device ipvlan1 failed to register rx_handler [ 115.629269][ T6451] netlink: 20 bytes leftover after parsing attributes in process `syz.4.105'. [ 115.745484][ T6455] netlink: 188 bytes leftover after parsing attributes in process `syz.0.107'. [ 115.827704][ T6457] tipc: Enabled bearer , priority 0 [ 115.851161][ T6457] syzkaller0: entered promiscuous mode [ 115.856697][ T6457] syzkaller0: entered allmulticast mode [ 115.923591][ T6457] tipc: Resetting bearer [ 115.945092][ T6463] netlink: 'syz.4.111': attribute type 6 has an invalid length. [ 115.986268][ T6456] tipc: Resetting bearer [ 116.077577][ T6470] netlink: 'syz.4.111': attribute type 12 has an invalid length. [ 116.089514][ T6470] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.111'. [ 116.143655][ T6456] tipc: Disabling bearer [ 116.483368][ T6481] xt_policy: too many policy elements [ 116.651756][ T6485] lo speed is unknown, defaulting to 1000 [ 116.739821][ T6485] lo speed is unknown, defaulting to 1000 [ 116.751963][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 116.809778][ T6485] lo speed is unknown, defaulting to 1000 [ 116.836611][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.115'. [ 116.854314][ T6485] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 116.882637][ T6491] netlink: 'syz.3.117': attribute type 3 has an invalid length. [ 116.890619][ T6485] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 116.927826][ T6485] lo speed is unknown, defaulting to 1000 [ 116.936466][ T6485] lo speed is unknown, defaulting to 1000 [ 116.951754][ T6485] lo speed is unknown, defaulting to 1000 [ 117.017227][ T6485] lo speed is unknown, defaulting to 1000 [ 117.025326][ T6485] lo speed is unknown, defaulting to 1000 [ 117.247952][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.121'. [ 117.301974][ T6504] nbd: nbd0 already in use [ 117.315149][ T6504] block nbd0: NBD_DISCONNECT [ 117.330394][ T6504] block nbd0: Send disconnect failed -32 [ 117.336294][ T6504] block nbd0: shutting down sockets [ 117.365681][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.375011][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 117.382909][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.392005][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 117.399819][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.408938][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 117.416778][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.425900][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 117.433800][ T5869] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.452164][ T5869] Buffer I/O error on dev nbd0, logical block 0, async page read [ 117.478428][ T5869] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.495711][ T6505] bridge_slave_1: left allmulticast mode [ 117.505778][ T5869] Buffer I/O error on dev nbd0, logical block 1, async page read [ 117.530252][ T5869] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.550369][ T6505] bridge_slave_1: left promiscuous mode [ 117.586385][ T5869] Buffer I/O error on dev nbd0, logical block 2, async page read [ 117.595536][ T5869] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.614277][ T5869] Buffer I/O error on dev nbd0, logical block 3, async page read [ 117.615520][ T6505] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.625220][ T5869] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.670123][ T5869] Buffer I/O error on dev nbd0, logical block 0, async page read [ 117.693330][ T5869] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.739093][ T5869] Buffer I/O error on dev nbd0, logical block 1, async page read [ 117.776844][ T6505] bridge_slave_0: left allmulticast mode [ 117.787131][ T5869] ldm_validate_partition_table(): Disk read failed. [ 117.817725][ T6505] bridge_slave_0: left promiscuous mode [ 117.827159][ T5869] Dev nbd0: unable to read RDB block 0 [ 117.853218][ T6505] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.858662][ T5869] nbd0: unable to read partition table [ 117.915236][ T5869] ldm_validate_partition_table(): Disk read failed. [ 118.039308][ T5869] Dev nbd0: unable to read RDB block 0 [ 118.048379][ T5869] nbd0: unable to read partition table [ 118.180308][ T6509] netlink: 'syz.1.124': attribute type 12 has an invalid length. [ 118.188322][ T6509] netlink: 'syz.1.124': attribute type 29 has an invalid length. [ 118.198983][ T6509] netlink: 148 bytes leftover after parsing attributes in process `syz.1.124'. [ 118.208602][ T6509] netlink: 'syz.1.124': attribute type 1 has an invalid length. [ 118.219714][ T6509] netlink: 'syz.1.124': attribute type 2 has an invalid length. [ 118.263538][ T6509] netlink: 3 bytes leftover after parsing attributes in process `syz.1.124'. [ 118.645114][ T6543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.130'. [ 118.837797][ T6542] syzkaller0: entered promiscuous mode [ 118.856063][ T6542] syzkaller0: entered allmulticast mode [ 119.447488][ T6579] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 120.469342][ T6582] veth3: entered promiscuous mode [ 120.510270][ T6586] netlink: 36 bytes leftover after parsing attributes in process `syz.2.143'. [ 120.578298][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.143'. [ 120.592856][ T6586] netlink: 84 bytes leftover after parsing attributes in process `syz.2.143'. [ 120.650943][ T6588] bond0: (slave bond_slave_0): Releasing backup interface [ 120.735546][ T6588] bond0: (slave bond_slave_1): Releasing backup interface [ 120.794141][ T6588] team_slave_0: left promiscuous mode [ 120.826386][ T6588] team0: Port device team_slave_0 removed [ 120.872622][ T6588] team_slave_1: left promiscuous mode [ 120.898457][ T6588] team0: Port device team_slave_1 removed [ 120.908545][ T6588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.917081][ T6588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.928721][ T6588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.939321][ T6588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.952891][ T6588] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 121.028947][ T6601] lo speed is unknown, defaulting to 1000 [ 121.612326][ T6615] netlink: 256 bytes leftover after parsing attributes in process `syz.0.151'. [ 121.634061][ T6615] netlink: 48 bytes leftover after parsing attributes in process `syz.0.151'. [ 121.941581][ T6627] syzkaller0: entered promiscuous mode [ 121.947200][ T6627] syzkaller0: entered allmulticast mode [ 123.383730][ T6652] bridge: RTM_NEWNEIGH with invalid ether address [ 123.696095][ T6665] lo speed is unknown, defaulting to 1000 [ 123.716182][ T6668] lo speed is unknown, defaulting to 1000 [ 123.795137][ T6664] syzkaller0: create flow: hash 3017976418 index 1 [ 123.814077][ T49] syzkaller0: tun_net_xmit 76 [ 123.819335][ T49] syzkaller0: tun_net_xmit 48 [ 123.840924][ T3430] syzkaller0: tun_net_xmit 76 [ 123.862673][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 123.874016][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 123.893216][ T6678] netlink: 28 bytes leftover after parsing attributes in process `syz.1.166'. [ 124.043850][ T6683] netlink: 'syz.1.167': attribute type 13 has an invalid length. [ 124.057521][ T6683] netlink: 'syz.1.167': attribute type 17 has an invalid length. [ 124.101263][ T3430] syzkaller0: tun_net_xmit 76 [ 124.109494][ T6683] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.129395][ T6661] syzkaller0: delete flow: hash 3017976418 index 1 [ 125.289780][ T43] lo speed is unknown, defaulting to 1000 [ 125.344131][ T6688] lo speed is unknown, defaulting to 1000 [ 125.519682][ T6696] lo speed is unknown, defaulting to 1000 [ 125.541496][ T6702] netlink: 16 bytes leftover after parsing attributes in process `syz.3.171'. [ 125.787252][ T6698] lo speed is unknown, defaulting to 1000 [ 125.897936][ T6711] syzkaller0: entered promiscuous mode [ 125.906302][ T6711] syzkaller0: entered allmulticast mode [ 127.248905][ T6724] netlink: 'syz.4.176': attribute type 1 has an invalid length. [ 127.259079][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.176'. [ 127.545972][ T6733] netlink: 52 bytes leftover after parsing attributes in process `syz.1.179'. [ 127.613337][ T6735] netlink: 'syz.4.181': attribute type 4 has an invalid length. [ 127.764355][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 127.774114][ T6738] lo speed is unknown, defaulting to 1000 [ 127.782758][ T6743] netlink: 'syz.2.183': attribute type 19 has an invalid length. [ 127.792859][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'. [ 127.850133][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 127.875708][ T6743] netlink: 'syz.2.183': attribute type 19 has an invalid length. [ 127.896479][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'. [ 127.963303][ T59] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.995654][ T59] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.162275][ T59] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.193720][ T59] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.399270][ T6770] lo speed is unknown, defaulting to 1000 [ 128.426152][ T6766] netlink: 'syz.2.190': attribute type 21 has an invalid length. [ 128.450043][ T6766] netlink: 'syz.2.190': attribute type 1 has an invalid length. [ 128.478490][ T6766] netlink: 132 bytes leftover after parsing attributes in process `syz.2.190'. [ 128.691639][ T6778] netlink: 24 bytes leftover after parsing attributes in process `syz.4.192'. [ 128.737967][ T6782] netlink: 'syz.0.191': attribute type 4 has an invalid length. [ 129.210175][ T6805] netlink: 20 bytes leftover after parsing attributes in process `syz.1.196'. [ 131.159657][ T6871] __nla_validate_parse: 2 callbacks suppressed [ 131.159677][ T6871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.209'. [ 131.179382][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 132.545545][ T6890] netlink: 'syz.1.214': attribute type 13 has an invalid length. [ 132.562678][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'. [ 132.580353][ T6890] netlink: 'syz.1.214': attribute type 17 has an invalid length. [ 132.681315][ T6890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.828525][ T6890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.935417][ T6905] tipc: Invalid UDP bearer configuration [ 132.935476][ T6905] tipc: Enabling of bearer rejected, failed to enable media [ 133.020782][ T6901] lo speed is unknown, defaulting to 1000 [ 133.549257][ T6935] IPVS: set_ctl: invalid protocol: 1 100.1.1.1:20002 [ 133.667800][ T6938] netlink: 'syz.0.224': attribute type 1 has an invalid length. [ 133.710716][ T6938] netlink: 'syz.0.224': attribute type 1 has an invalid length. [ 133.718635][ T6938] netlink: 'syz.0.224': attribute type 1 has an invalid length. [ 133.727276][ T6945] sctp: [Deprecated]: syz.4.223 (pid 6945) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.727276][ T6945] Use struct sctp_sack_info instead [ 133.752109][ T6938] netlink: 'syz.0.224': attribute type 1 has an invalid length. [ 133.780831][ T6938] netlink: 'syz.0.224': attribute type 1 has an invalid length. [ 133.811577][ T6943] lo speed is unknown, defaulting to 1000 [ 133.824812][ T6938] netlink: 'syz.0.224': attribute type 1 has an invalid length. [ 133.853826][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 133.873813][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'. [ 134.328940][ T6963] netlink: 'syz.0.229': attribute type 33 has an invalid length. [ 134.337629][ T6963] netlink: 152 bytes leftover after parsing attributes in process `syz.0.229'. [ 134.528334][ T6959] lo speed is unknown, defaulting to 1000 [ 134.643351][ T6966] lo speed is unknown, defaulting to 1000 [ 134.975741][ T6980] netlink: 124 bytes leftover after parsing attributes in process `syz.4.235'. [ 135.449025][ T6995] tipc: Started in network mode [ 135.458275][ T6995] tipc: Node identity , cluster identity 4711 [ 135.474894][ T6995] tipc: Failed to obtain node identity [ 135.486189][ T6995] tipc: Enabling of bearer rejected, failed to enable media [ 135.528608][ T6988] lo speed is unknown, defaulting to 1000 [ 135.614556][ T7001] syzkaller0: entered promiscuous mode [ 135.626216][ T7001] syzkaller0: entered allmulticast mode [ 135.743801][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.238'. [ 135.760130][ T7009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.238'. [ 135.794382][ T7010] netlink: 24 bytes leftover after parsing attributes in process `syz.3.238'. [ 136.950041][ T7014] netlink: 'syz.3.239': attribute type 21 has an invalid length. [ 137.023994][ T7014] netlink: 132 bytes leftover after parsing attributes in process `syz.3.239'. [ 137.064866][ T7014] openvswitch: netlink: IP tunnel TTL not specified. [ 137.075421][ T7017] netlink: 24 bytes leftover after parsing attributes in process `syz.1.240'. [ 137.232694][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.241'. [ 137.398300][ T7022] pimreg: left allmulticast mode [ 137.518630][ T7029] lo speed is unknown, defaulting to 1000 [ 138.030368][ T7056] validate_nla: 1 callbacks suppressed [ 138.030388][ T7056] netlink: 'syz.2.250': attribute type 1 has an invalid length. [ 138.097181][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.109448][ T7056] netlink: 76 bytes leftover after parsing attributes in process `syz.2.250'. [ 138.110157][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.264751][ T7052] lo speed is unknown, defaulting to 1000 [ 138.340683][ T7061] Driver unsupported XDP return value 0 on prog (id 87) dev N/A, expect packet loss! [ 138.426001][ T7058] lo speed is unknown, defaulting to 1000 [ 138.445348][ T7066] netlink: 20 bytes leftover after parsing attributes in process `syz.3.253'. [ 138.572366][ T7063] lo speed is unknown, defaulting to 1000 [ 138.721018][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.255'. [ 138.942115][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.256'. [ 138.982759][ T10] IPVS: starting estimator thread 0... [ 139.142655][ T7076] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.180304][ T7081] IPVS: using max 26 ests per chain, 62400 per kthread [ 139.188582][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 139.207981][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 139.228488][ T7086] netlink: 32 bytes leftover after parsing attributes in process `syz.2.259'. [ 139.303935][ T7075] lo speed is unknown, defaulting to 1000 [ 139.716707][ T7108] netlink: 'syz.3.262': attribute type 10 has an invalid length. [ 139.761263][ T5873] IPVS: starting estimator thread 0... [ 139.852843][ T7108] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.870055][ T7113] IPVS: using max 27 ests per chain, 64800 per kthread [ 139.892176][ T7108] bond0: (slave team0): Enslaving as an active interface with an up link [ 140.409611][ T7117] dvmrp8: entered allmulticast mode [ 140.496861][ T7131] dvmrp1: entered allmulticast mode [ 140.563691][ T7127] lo speed is unknown, defaulting to 1000 [ 140.603003][ T7123] lo speed is unknown, defaulting to 1000 [ 140.831943][ T7138] netlink: 'syz.3.269': attribute type 3 has an invalid length. [ 141.821314][ T7150] lo speed is unknown, defaulting to 1000 [ 142.517649][ T7162] lo speed is unknown, defaulting to 1000 [ 142.548530][ T7185] __nla_validate_parse: 1 callbacks suppressed [ 142.548550][ T7185] netlink: 16 bytes leftover after parsing attributes in process `syz.3.280'. [ 142.750354][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.281'. [ 142.776841][ T7187] netlink: 'syz.2.281': attribute type 29 has an invalid length. [ 142.797928][ T7187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.281'. [ 143.236819][ T7206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.285'. [ 143.457169][ T7206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.501311][ T7206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.601924][ T7221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 143.624522][ T7221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 143.787873][ T7233] Bluetooth: MGMT ver 1.23 [ 143.956434][ T7241] gtp0: entered promiscuous mode [ 143.973614][ T7241] gtp0: entered allmulticast mode [ 144.057214][ T7245] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 144.073985][ T7245] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 144.233168][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 144.335346][ T7258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.299'. [ 144.558811][ T7272] netlink: 232 bytes leftover after parsing attributes in process `syz.3.302'. [ 144.584859][ T7272] netlink: 232 bytes leftover after parsing attributes in process `syz.3.302'. [ 144.803628][ T7279] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR [ 144.856101][ T7278] lo speed is unknown, defaulting to 1000 [ 145.453401][ T7303] netlink: 'syz.3.312': attribute type 13 has an invalid length. [ 145.481631][ T7303] netlink: 'syz.3.312': attribute type 17 has an invalid length. [ 145.771189][ T7303] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.962278][ T7311] xfrm0: entered promiscuous mode [ 145.981509][ T7311] xfrm0: entered allmulticast mode [ 146.086881][ T7317] lo speed is unknown, defaulting to 1000 [ 146.192635][ T7302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.236744][ T7328] lo speed is unknown, defaulting to 1000 [ 146.548595][ T7333] lo speed is unknown, defaulting to 1000 [ 146.991865][ T7364] 0ªX¹¦À: renamed from caif0 [ 146.999312][ T7364] 0ªX¹¦À: entered allmulticast mode [ 147.008228][ T7364] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 147.367617][ T7378] syz_tun: entered allmulticast mode [ 147.449173][ T7378] dvmrp8: entered allmulticast mode [ 147.694125][ T7378] lo speed is unknown, defaulting to 1000 [ 147.731035][ T7383] __nla_validate_parse: 3 callbacks suppressed [ 147.731054][ T7383] netlink: 72 bytes leftover after parsing attributes in process `syz.0.331'. [ 147.781987][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'. [ 147.812976][ T7386] netlink: 'syz.1.332': attribute type 1 has an invalid length. [ 148.091116][ T7391] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 148.273396][ T7377] syz_tun: left allmulticast mode [ 148.289804][ T7377] dvmrp8: left allmulticast mode [ 148.451581][ T7417] netlink: 'syz.2.342': attribute type 1 has an invalid length. [ 148.490324][ T7418] netlink: 'syz.2.342': attribute type 1 has an invalid length. [ 148.553323][ T7415] bridge_slave_0: left allmulticast mode [ 148.581523][ T7415] bridge_slave_0: left promiscuous mode [ 148.612606][ T7415] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.717597][ T7415] bridge_slave_1: left allmulticast mode [ 148.735914][ T7415] bridge_slave_1: left promiscuous mode [ 148.741930][ T7415] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.787969][ T7432] Bluetooth: MGMT ver 1.23 [ 148.808068][ T7415] bond0: (slave bond_slave_0): Releasing backup interface [ 148.856272][ T7415] bond0: (slave bond_slave_1): Releasing backup interface [ 148.899160][ T7415] team0: Port device team_slave_0 removed [ 148.927158][ T7415] team0: Port device team_slave_1 removed [ 148.949154][ T7415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.959740][ T7415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.975662][ T7445] netlink: 48 bytes leftover after parsing attributes in process `syz.3.348'. [ 148.995835][ T7415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.004348][ T7415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.018421][ T7415] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 149.043288][ T7417] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 149.044450][ T7418] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 149.313431][ T7459] sctp: [Deprecated]: syz.3.351 (pid 7459) Use of int in max_burst socket option deprecated. [ 149.313431][ T7459] Use struct sctp_assoc_value instead [ 149.346172][ T7456] netlink: 16 bytes leftover after parsing attributes in process `syz.2.352'. [ 149.366870][ T7440] lo speed is unknown, defaulting to 1000 [ 149.448204][ T7442] lo speed is unknown, defaulting to 1000 [ 149.499569][ T7463] pim6reg: entered allmulticast mode [ 149.738062][ T7473] netlink: 64 bytes leftover after parsing attributes in process `syz.4.356'. [ 149.890130][ T7485] netlink: 16 bytes leftover after parsing attributes in process `syz.1.360'. [ 150.072889][ T7485] IPv6: sit1: Disabled Multicast RS [ 150.085983][ T7485] sit1: entered allmulticast mode [ 150.096591][ T7491] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 150.130055][ T7491] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 150.149098][ T7478] lo speed is unknown, defaulting to 1000 [ 150.313893][ T7488] lo speed is unknown, defaulting to 1000 [ 150.438962][ T7480] netlink: 'syz.2.358': attribute type 4 has an invalid length. [ 151.076639][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.369'. [ 151.418012][ T7545] netlink: 'syz.2.374': attribute type 10 has an invalid length. [ 151.472750][ T7545] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 151.665985][ T7558] netlink: 68 bytes leftover after parsing attributes in process `syz.3.378'. [ 151.668279][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'. [ 151.803648][ T7561] lo speed is unknown, defaulting to 1000 [ 151.997924][ T7571] netlink: 28 bytes leftover after parsing attributes in process `syz.4.382'. [ 152.089290][ T7574] lo speed is unknown, defaulting to 1000 [ 152.540482][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 153.244473][ T7574] netlink: 'syz.0.383': attribute type 6 has an invalid length. [ 153.434474][ T30] audit: type=1800 audit(1757894756.238:2): pid=7616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.391" name="blkio.bfq.time_recursive" dev="tmpfs" ino=432 res=0 errno=0 [ 153.532353][ T7617] netlink: 44 bytes leftover after parsing attributes in process `syz.4.391'. [ 153.755039][ T7627] netlink: 16 bytes leftover after parsing attributes in process `syz.2.393'. [ 153.773656][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'. [ 153.795016][ T7627] netlink: 56 bytes leftover after parsing attributes in process `syz.2.393'. [ 154.212885][ T7646] netlink: 56 bytes leftover after parsing attributes in process `syz.2.401'. [ 154.615161][ T7659] netlink: 48 bytes leftover after parsing attributes in process `syz.0.405'. [ 154.680306][ T7668] netlink: 'syz.3.409': attribute type 5 has an invalid length. [ 154.698392][ T7668] netlink: 'syz.3.409': attribute type 7 has an invalid length. [ 154.754636][ T7670] sctp: [Deprecated]: syz.4.407 (pid 7670) Use of int in max_burst socket option deprecated. [ 154.754636][ T7670] Use struct sctp_assoc_value instead [ 154.756325][ T7669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.409'. [ 154.799322][ T7668] : entered promiscuous mode [ 155.075035][ T979] IPVS: starting estimator thread 0... [ 155.107986][ T7680] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.188997][ T7676] lo speed is unknown, defaulting to 1000 [ 155.232042][ T7681] IPVS: using max 25 ests per chain, 60000 per kthread [ 155.246961][ T7679] netlink: 'syz.0.410': attribute type 5 has an invalid length. [ 155.711050][ T7698] netlink: 52 bytes leftover after parsing attributes in process `syz.0.413'. [ 155.726126][ T7692] netlink: 16 bytes leftover after parsing attributes in process `syz.4.414'. [ 155.782057][ T7692] netlink: 16 bytes leftover after parsing attributes in process `syz.4.414'. [ 156.055766][ T7699] lo speed is unknown, defaulting to 1000 [ 156.109190][ T7709] netlink: 'syz.3.418': attribute type 3 has an invalid length. [ 156.117397][ T7706] vlan2: entered promiscuous mode [ 156.123155][ T7706] macvtap0: entered promiscuous mode [ 156.382968][ T7718] ipvlan0: entered promiscuous mode [ 157.033458][ T7743] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 157.040792][ T7743] dummy0: entered promiscuous mode [ 157.050695][ T7743] vlan2: entered promiscuous mode [ 157.059353][ T7743] bond0: entered promiscuous mode [ 157.173627][ T7751] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 157.305848][ T7759] FAULT_INJECTION: forcing a failure. [ 157.305848][ T7759] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 157.351734][ T7752] geneve2: entered promiscuous mode [ 157.361835][ T7752] geneve2: entered allmulticast mode [ 157.367296][ T7759] CPU: 0 UID: 0 PID: 7759 Comm: syz.4.433 Not tainted syzkaller #0 PREEMPT(full) [ 157.367324][ T7759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 157.367344][ T7759] Call Trace: [ 157.367353][ T7759] [ 157.367362][ T7759] dump_stack_lvl+0x189/0x250 [ 157.367398][ T7759] ? __pfx____ratelimit+0x10/0x10 [ 157.367421][ T7759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.367446][ T7759] ? __pfx__printk+0x10/0x10 [ 157.367473][ T7759] ? __might_fault+0xb0/0x130 [ 157.367509][ T7759] should_fail_ex+0x414/0x560 [ 157.367543][ T7759] _copy_from_user+0x2d/0xb0 [ 157.367571][ T7759] __sys_bpf+0x1ed/0x870 [ 157.367601][ T7759] ? __pfx___sys_bpf+0x10/0x10 [ 157.367642][ T7759] ? ksys_write+0x22a/0x250 [ 157.367673][ T7759] ? __pfx_ksys_write+0x10/0x10 [ 157.367695][ T7759] ? rcu_is_watching+0x15/0xb0 [ 157.367717][ T7759] __x64_sys_bpf+0x7c/0x90 [ 157.367743][ T7759] do_syscall_64+0xfa/0x3b0 [ 157.367767][ T7759] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.367791][ T7759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.367811][ T7759] ? clear_bhb_loop+0x60/0xb0 [ 157.367836][ T7759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.367854][ T7759] RIP: 0033:0x7f44d038eba9 [ 157.367876][ T7759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.367893][ T7759] RSP: 002b:00007f44d1140038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 157.367918][ T7759] RAX: ffffffffffffffda RBX: 00007f44d05d5fa0 RCX: 00007f44d038eba9 [ 157.367933][ T7759] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 000000000000000f [ 157.367946][ T7759] RBP: 00007f44d1140090 R08: 0000000000000000 R09: 0000000000000000 [ 157.367958][ T7759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.367969][ T7759] R13: 00007f44d05d6038 R14: 00007f44d05d5fa0 R15: 00007fff3ddd9fa8 [ 157.368002][ T7759] [ 158.156485][ T7797] lo speed is unknown, defaulting to 1000 [ 158.650146][ T7803] bridge0: port 1(erspan0) entered blocking state [ 158.660390][ T7803] bridge0: port 1(erspan0) entered disabled state [ 158.676112][ T7803] erspan0: entered allmulticast mode [ 158.687266][ T7803] erspan0: entered promiscuous mode [ 158.708513][ T7803] bridge0: port 1(erspan0) entered blocking state [ 158.715502][ T7803] bridge0: port 1(erspan0) entered forwarding state [ 158.757825][ T7819] __nla_validate_parse: 10 callbacks suppressed [ 158.757844][ T7819] netlink: 56 bytes leftover after parsing attributes in process `syz.2.441'. [ 159.193705][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.444'. [ 159.544808][ T7843] netlink: 'syz.1.450': attribute type 1 has an invalid length. [ 159.564637][ T7843] netlink: 20 bytes leftover after parsing attributes in process `syz.1.450'. [ 159.713324][ T7854] netlink: 'syz.3.452': attribute type 1 has an invalid length. [ 159.759237][ T7854] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.867925][ T7853] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 159.897776][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'. [ 159.910819][ T7865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.456'. [ 159.944741][ T7862] netlink: 48 bytes leftover after parsing attributes in process `syz.2.455'. [ 159.945947][ T7865] syzkaller0: entered promiscuous mode [ 159.956818][ T7861] netlink: 48 bytes leftover after parsing attributes in process `syz.2.455'. [ 159.979868][ T7865] syzkaller0: entered allmulticast mode [ 160.048450][ T7870] FAULT_INJECTION: forcing a failure. [ 160.048450][ T7870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.061941][ T7870] CPU: 1 UID: 0 PID: 7870 Comm: syz.0.457 Not tainted syzkaller #0 PREEMPT(full) [ 160.061967][ T7870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 160.061979][ T7870] Call Trace: [ 160.061987][ T7870] [ 160.061995][ T7870] dump_stack_lvl+0x189/0x250 [ 160.062047][ T7870] ? __pfx____ratelimit+0x10/0x10 [ 160.062073][ T7870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.062099][ T7870] ? __pfx__printk+0x10/0x10 [ 160.062129][ T7870] ? cmp_ex_search+0x1e/0x80 [ 160.062156][ T7870] ? bsearch+0x95/0xc0 [ 160.062184][ T7870] ? strncpy_from_user+0x1bc/0x290 [ 160.062223][ T7870] should_fail_ex+0x414/0x560 [ 160.062260][ T7870] strncpy_from_user+0x36/0x290 [ 160.062295][ T7870] strncpy_from_user_nofault+0x72/0x150 [ 160.062326][ T7870] bpf_bprintf_prepare+0xbbc/0x13d0 [ 160.062370][ T7870] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 160.062399][ T7870] ? rb_add_timestamp+0x1f6/0x660 [ 160.062431][ T7870] ? bpf_trace_printk+0xc1/0x190 [ 160.062458][ T7870] bpf_trace_printk+0xdb/0x190 [ 160.062478][ T7870] ? __lock_acquire+0xab9/0xd20 [ 160.062510][ T7870] ? __pfx_bpf_trace_printk+0x10/0x10 [ 160.062535][ T7870] ? bpf_trace_run2+0x186/0x4b0 [ 160.062569][ T7870] ? ring_buffer_lock_reserve+0xc3f/0x1010 [ 160.062600][ T7870] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 160.062620][ T7870] bpf_trace_run2+0x284/0x4b0 [ 160.062647][ T7870] ? bpf_trace_run2+0x186/0x4b0 [ 160.062684][ T7870] ? __pfx_bpf_trace_run2+0x10/0x10 [ 160.062717][ T7870] ? __bpf_trace_contention_begin+0xcd/0x130 [ 160.062747][ T7870] __bpf_trace_contention_begin+0xdc/0x130 [ 160.062769][ T7870] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 160.062792][ T7870] ? bpf_obj_get_info_by_fd+0x9b9/0x2fa0 [ 160.062825][ T7870] ? bpf_obj_get_info_by_fd+0x9b9/0x2fa0 [ 160.062862][ T7870] ? trace_event_raw_event_bpf_trace_printk+0x187/0x260 [ 160.062888][ T7870] trace_contention_begin+0xf4/0x120 [ 160.062913][ T7870] __mutex_lock+0x198/0x1350 [ 160.062942][ T7870] ? __lock_acquire+0xab9/0xd20 [ 160.062987][ T7870] ? bpf_obj_get_info_by_fd+0x9b9/0x2fa0 [ 160.063029][ T7870] ? __pfx___mutex_lock+0x10/0x10 [ 160.063056][ T7870] ? from_kuid_munged+0x1f4/0x690 [ 160.063088][ T7870] ? __pfx_from_kuid_munged+0x10/0x10 [ 160.063121][ T7870] ? bpf_obj_get_info_by_fd+0x996/0x2fa0 [ 160.063159][ T7870] bpf_obj_get_info_by_fd+0x9b9/0x2fa0 [ 160.063208][ T7870] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 160.063250][ T7870] ? get_pid_task+0x20/0x1f0 [ 160.063329][ T7870] ? bpf_lsm_bpf+0x9/0x20 [ 160.063355][ T7870] ? security_bpf+0x7e/0x300 [ 160.063389][ T7870] __sys_bpf+0x5d1/0x870 [ 160.063419][ T7870] ? __pfx___sys_bpf+0x10/0x10 [ 160.063463][ T7870] ? ksys_write+0x22a/0x250 [ 160.063495][ T7870] ? __pfx_ksys_write+0x10/0x10 [ 160.063520][ T7870] ? rcu_is_watching+0x15/0xb0 [ 160.063550][ T7870] __x64_sys_bpf+0x7c/0x90 [ 160.063576][ T7870] do_syscall_64+0xfa/0x3b0 [ 160.063601][ T7870] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.063624][ T7870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.063646][ T7870] ? clear_bhb_loop+0x60/0xb0 [ 160.063672][ T7870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.063692][ T7870] RIP: 0033:0x7f997bf8eba9 [ 160.063710][ T7870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.063727][ T7870] RSP: 002b:00007f997cd4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 160.063749][ T7870] RAX: ffffffffffffffda RBX: 00007f997c1d5fa0 RCX: 00007f997bf8eba9 [ 160.063764][ T7870] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 000000000000000f [ 160.063777][ T7870] RBP: 00007f997cd4b090 R08: 0000000000000000 R09: 0000000000000000 [ 160.063790][ T7870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.063802][ T7870] R13: 00007f997c1d6038 R14: 00007f997c1d5fa0 R15: 00007ffe68f4a398 [ 160.063836][ T7870] [ 160.516719][ T7872] IPv6: addrconf: prefix option has invalid lifetime [ 160.601243][ T7878] lo speed is unknown, defaulting to 1000 [ 160.767526][ T7889] netlink: 32 bytes leftover after parsing attributes in process `syz.1.464'. [ 160.794511][ T7889] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.464'. [ 160.805995][ T7889] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 160.816688][ T7889] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 160.987760][ T7886] netlink: 32 bytes leftover after parsing attributes in process `syz.4.462'. [ 161.004210][ T7886] tipc: Invalid UDP bearer configuration [ 161.004295][ T7886] tipc: Enabling of bearer rejected, failed to enable media [ 161.562979][ T7916] IPVS: set_ctl: invalid protocol: 1 100.1.1.1:20002 [ 161.722703][ T7923] sctp: [Deprecated]: syz.1.470 (pid 7923) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.722703][ T7923] Use struct sctp_sack_info instead [ 162.102734][ T7936] syz_tun: entered allmulticast mode [ 162.164056][ T7936] lo speed is unknown, defaulting to 1000 [ 162.216562][ T7939] tipc: Can't bind to reserved service type 1 [ 162.353958][ T7929] syz.3.473 (7929) used greatest stack depth: 17864 bytes left [ 162.671306][ T7958] lo speed is unknown, defaulting to 1000 [ 163.005397][ T7933] syz_tun: left allmulticast mode [ 163.388038][ T7987] netlink: 'syz.0.489': attribute type 10 has an invalid length. [ 163.421967][ T7987] team0: Port device geneve0 added [ 163.487209][ T7991] syzkaller0: entered promiscuous mode [ 163.510231][ T7991] syzkaller0: entered allmulticast mode [ 163.553962][ T7994] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 164.172409][ T8024] __nla_validate_parse: 5 callbacks suppressed [ 164.172429][ T8024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.498'. [ 164.220445][ T8024] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 164.257564][ T8024] tipc: Started in network mode [ 164.267923][ T8024] tipc: Node identity 361be4df2b56, cluster identity 4711 [ 164.288382][ T8024] tipc: Enabled bearer , priority 0 [ 164.314117][ T8034] syzkaller0: entered promiscuous mode [ 164.320626][ T8029] netlink: 16 bytes leftover after parsing attributes in process `syz.1.499'. [ 164.340112][ T8034] syzkaller0: entered allmulticast mode [ 164.363476][ T8029] netlink: 48 bytes leftover after parsing attributes in process `syz.1.499'. [ 164.380650][ T8024] tipc: Resetting bearer [ 164.437223][ T8023] tipc: Resetting bearer [ 164.521060][ T8023] tipc: Disabling bearer [ 164.762523][ T8049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.813408][ T8049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.019548][ T8060] bridge2: entered promiscuous mode [ 165.030572][ T8063] netlink: 'syz.2.509': attribute type 1 has an invalid length. [ 165.079189][ T8060] tipc: Enabling of bearer rejected, failed to enable media [ 165.079623][ T8067] netlink: 212388 bytes leftover after parsing attributes in process `syz.3.510'. [ 165.103298][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'. [ 165.111030][ T8063] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 165.140859][ T8067] netlink: get zone limit has 8 unknown bytes [ 165.583355][ T5874] Bluetooth: hci0: command tx timeout [ 165.907504][ T8107] netlink: 28 bytes leftover after parsing attributes in process `syz.4.521'. [ 165.971170][ T8103] nbd0: detected capacity change from 0 to 63 [ 165.986854][ T5874] block nbd0: Receive control failed (result -32) [ 166.003734][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.522'. [ 166.018121][ T5869] block nbd0: Dead connection, failed to find a fallback [ 166.040779][ T5869] block nbd0: shutting down sockets [ 166.046267][ T5869] blk_print_req_error: 138 callbacks suppressed [ 166.046296][ T5869] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.067910][ T5869] buffer_io_error: 138 callbacks suppressed [ 166.067927][ T5869] Buffer I/O error on dev nbd0, logical block 0, async page read [ 166.115002][ T5869] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.124412][ T5869] Buffer I/O error on dev nbd0, logical block 1, async page read [ 166.132830][ T5869] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.142644][ T5869] Buffer I/O error on dev nbd0, logical block 2, async page read [ 166.152371][ T5869] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.161587][ T5869] Buffer I/O error on dev nbd0, logical block 3, async page read [ 166.169509][ T5869] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.244551][ T5869] Buffer I/O error on dev nbd0, logical block 0, async page read [ 166.272835][ T5869] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.301286][ T5869] Buffer I/O error on dev nbd0, logical block 1, async page read [ 166.326700][ T5869] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.350687][ T5869] Buffer I/O error on dev nbd0, logical block 2, async page read [ 166.411712][ T5869] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.475443][ T5869] Buffer I/O error on dev nbd0, logical block 3, async page read [ 166.516914][ T5869] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.552908][ T8136] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 166.555064][ T5869] Buffer I/O error on dev nbd0, logical block 0, async page read [ 166.575191][ T8136] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 166.591428][ T5869] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.604897][ T8133] lo speed is unknown, defaulting to 1000 [ 166.618369][ T5869] Buffer I/O error on dev nbd0, logical block 1, async page read [ 166.729775][ T5869] ldm_validate_partition_table(): Disk read failed. [ 166.748132][ T5869] Dev nbd0: unable to read RDB block 0 [ 166.912367][ T5869] nbd0: unable to read partition table [ 166.967196][ T5869] ldm_validate_partition_table(): Disk read failed. [ 167.049103][ T5869] Dev nbd0: unable to read RDB block 0 [ 167.073241][ T5869] nbd0: unable to read partition table [ 167.986751][ T8196] netlink: zone id is out of range [ 167.996315][ T8196] netlink: zone id is out of range [ 167.997104][ T8197] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 168.005959][ T8196] netlink: zone id is out of range [ 168.019705][ T8196] netlink: zone id is out of range [ 168.020758][ T8184] IPVS: stopping backup sync thread 8197 ... [ 168.036821][ T8195] netlink: 'syz.0.541': attribute type 1 has an invalid length. [ 168.044297][ T8196] netlink: zone id is out of range [ 168.054372][ T8196] netlink: zone id is out of range [ 168.072449][ T8196] netlink: zone id is out of range [ 168.077647][ T8196] netlink: zone id is out of range [ 168.128082][ T8196] netlink: zone id is out of range [ 168.347213][ T8186] lo speed is unknown, defaulting to 1000 [ 168.830944][ T8220] lo speed is unknown, defaulting to 1000 [ 169.355042][ T8217] batadv_slave_0: entered promiscuous mode [ 169.523894][ T8211] batadv_slave_0: left promiscuous mode [ 170.211626][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 170.238162][ T8270] tipc: Enabled bearer , priority 0 [ 170.271620][ T8270] syzkaller0: entered promiscuous mode [ 170.283705][ T8270] syzkaller0: entered allmulticast mode [ 170.307928][ T8272] lo speed is unknown, defaulting to 1000 [ 170.353082][ T8270] tipc: Resetting bearer [ 170.401605][ T8269] tipc: Resetting bearer [ 170.445853][ T8269] tipc: Disabling bearer [ 170.571662][ T8280] netlink: 64 bytes leftover after parsing attributes in process `syz.4.562'. [ 170.600256][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.562'. [ 170.686741][ T8286] tipc: Started in network mode [ 170.736704][ T8286] tipc: Node identity 52c13afe1e5, cluster identity 4711 [ 170.774508][ T8286] tipc: Enabled bearer , priority 0 [ 170.788630][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.568'. [ 170.804683][ T8293] netlink: 44 bytes leftover after parsing attributes in process `syz.3.568'. [ 170.843617][ T8286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.566'. [ 170.855431][ T8303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.568'. [ 171.105982][ T8286] tipc: Disabling bearer [ 171.188697][ T8316] netlink: 40 bytes leftover after parsing attributes in process `syz.1.571'. [ 171.290268][ T8322] netlink: 'syz.4.572': attribute type 6 has an invalid length. [ 171.330700][ T8321] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.588968][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'. [ 171.893726][ T8342] net_ratelimit: 16 callbacks suppressed [ 171.893748][ T8342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.720250][ T8379] netlink: 'syz.3.594': attribute type 4 has an invalid length. [ 172.722530][ T8380] netlink: 'syz.3.594': attribute type 4 has an invalid length. [ 172.928475][ T8394] vlan2: entered promiscuous mode [ 172.933769][ T8394] bond0: entered promiscuous mode [ 173.001716][ T8392] lo speed is unknown, defaulting to 1000 [ 173.271445][ T8405] netlink: 'syz.1.603': attribute type 1 has an invalid length. [ 173.489772][ T8415] netlink: 16 bytes leftover after parsing attributes in process `syz.4.606'. [ 173.623998][ T8418] netlink: 'syz.3.607': attribute type 1 has an invalid length. [ 173.687278][ T8418] 8021q: adding VLAN 0 to HW filter on device bond4 [ 173.797036][ T8419] 8021q: adding VLAN 0 to HW filter on device bond4 [ 173.821959][ T8419] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 173.834628][ T8419] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 176.737593][ T8429] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 176.756027][ T8429] netdevsim netdevsim0 netdevsim0: refused to change device tx_queue_len [ 176.774068][ T59] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 176.794583][ T59] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 176.802779][ T7776] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 176.880130][ T8440] __nla_validate_parse: 2 callbacks suppressed [ 176.880160][ T8440] netlink: 220 bytes leftover after parsing attributes in process `syz.3.612'. [ 176.940306][ T8440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.975331][ T8440] tipc: Invalid UDP bearer configuration [ 176.975389][ T8440] tipc: Enabling of bearer rejected, failed to enable media [ 177.017180][ T8444] gretap0: entered promiscuous mode [ 177.026710][ T8448] xt_l2tp: missing protocol rule (udp|l2tpip) [ 177.033679][ T8444] vlan2: entered promiscuous mode [ 177.059164][ T8448] netlink: 100 bytes leftover after parsing attributes in process `syz.2.616'. [ 177.171299][ T7776] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 177.252187][ T8454] sch_tbf: burst 2 is lower than device lo mtu (81) ! [ 177.322710][ T8456] tipc: Enabling of bearer rejected, failed to enable media [ 177.411340][ T8464] netlink: 'syz.1.622': attribute type 2 has an invalid length. [ 177.464876][ T8464] ave_0: entered promiscuous mode [ 177.488392][ T8474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.622'. [ 177.500464][ T8459] nbd4: detected capacity change from 0 to 63 [ 177.508355][ T8470] syz.0.623: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 177.535873][ T8461] block nbd4: NBD_DISCONNECT [ 177.543677][ T8470] CPU: 0 UID: 0 PID: 8470 Comm: syz.0.623 Not tainted syzkaller #0 PREEMPT(full) [ 177.543704][ T8470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 177.543717][ T8470] Call Trace: [ 177.543725][ T8470] [ 177.543759][ T8470] dump_stack_lvl+0x189/0x250 [ 177.543795][ T8470] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.543822][ T8470] ? __pfx__printk+0x10/0x10 [ 177.543854][ T8470] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 177.543880][ T8470] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 177.543909][ T8470] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 177.543938][ T8470] warn_alloc+0x214/0x310 [ 177.543980][ T8470] ? __pfx_warn_alloc+0x10/0x10 [ 177.544024][ T8470] ? __get_vm_area_node+0x28f/0x300 [ 177.544056][ T8470] ? xskq_create+0xbf/0x170 [ 177.544085][ T8470] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 177.544151][ T8470] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 177.544190][ T8470] ? __kasan_kmalloc+0x93/0xb0 [ 177.544223][ T8470] vmalloc_user_noprof+0xad/0xf0 [ 177.544256][ T8470] ? xskq_create+0xbf/0x170 [ 177.544280][ T8470] xskq_create+0xbf/0x170 [ 177.544308][ T8470] xsk_init_queue+0xb0/0x110 [ 177.544333][ T8470] xsk_setsockopt+0x57b/0x8d0 [ 177.544359][ T8470] ? __pfx_xsk_setsockopt+0x10/0x10 [ 177.544380][ T8470] ? __pfx_aa_sk_perm+0x10/0x10 [ 177.544417][ T8470] ? __fget_files+0x2a/0x420 [ 177.544433][ T8470] ? aa_sock_opt_perm+0xff/0x1b0 [ 177.544459][ T8470] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 177.544483][ T8470] ? __pfx_xsk_setsockopt+0x10/0x10 [ 177.544506][ T8470] do_sock_setsockopt+0x17c/0x1b0 [ 177.544540][ T8470] __x64_sys_setsockopt+0x13f/0x1b0 [ 177.544575][ T8470] do_syscall_64+0xfa/0x3b0 [ 177.544602][ T8470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.544623][ T8470] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 177.544644][ T8470] ? clear_bhb_loop+0x60/0xb0 [ 177.544669][ T8470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.544688][ T8470] RIP: 0033:0x7f997bf8eba9 [ 177.544707][ T8470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.544725][ T8470] RSP: 002b:00007f997a1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 177.544748][ T8470] RAX: ffffffffffffffda RBX: 00007f997c1d6090 RCX: 00007f997bf8eba9 [ 177.544770][ T8470] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000007 [ 177.544783][ T8470] RBP: 00007f997c011e19 R08: 0000000000000004 R09: 0000000000000000 [ 177.544796][ T8470] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 177.544809][ T8470] R13: 00007f997c1d6128 R14: 00007f997c1d6090 R15: 00007ffe68f4a398 [ 177.544843][ T8470] [ 177.544865][ T8470] Mem-Info: [ 177.554716][ T8461] block nbd4: Disconnected due to user request. [ 177.574788][ T8470] active_anon:8134 inactive_anon:0 isolated_anon:0 [ 177.574788][ T8470] active_file:3297 inactive_file:39925 isolated_file:0 [ 177.574788][ T8470] unevictable:768 dirty:291 writeback:0 [ 177.574788][ T8470] slab_reclaimable:11222 slab_unreclaimable:128587 [ 177.574788][ T8470] mapped:29362 shmem:1360 pagetables:1046 [ 177.574788][ T8470] sec_pagetables:0 bounce:0 [ 177.574788][ T8470] kernel_misc_reclaimable:0 [ 177.574788][ T8470] free:1290544 free_pcp:19149 free_cma:0 [ 177.590592][ T8461] block nbd4: shutting down sockets [ 177.599620][ T8470] Node 0 active_anon:32536kB inactive_anon:0kB active_file:13188kB inactive_file:159500kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117448kB dirty:1160kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12300kB pagetables:4068kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 177.908304][ T8470] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 177.909359][ T7776] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 177.939916][ C1] blk_print_req_error: 138 callbacks suppressed [ 177.939942][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.946803][ T8470] Node 0 [ 177.952026][ C1] buffer_io_error: 138 callbacks suppressed [ 177.952042][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 177.952156][ C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.963067][ T8470] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 177.964064][ C1] Buffer I/O error on dev nbd4, logical block 1, async page read [ 177.964172][ C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.970712][ T8470] lowmem_reserve[]: [ 177.977726][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 177.977830][ C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.987966][ T8470] 0 [ 178.015288][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 178.069806][ T8470] 2497 2499 2499 2499 [ 178.070167][ T5869] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.136217][ T5869] Buffer I/O error on dev nbd4, logical block 0, async page read [ 178.160136][ T5869] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.177749][ T5869] Buffer I/O error on dev nbd4, logical block 1, async page read [ 178.209603][ T5869] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.220341][ T8470] Node 0 DMA32 free:1255724kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32200kB inactive_anon:0kB active_file:13188kB inactive_file:157912kB unevictable:1536kB writepending:1204kB present:3129332kB managed:2557384kB mlocked:0kB bounce:0kB free_pcp:59224kB local_pcp:18416kB free_cma:0kB [ 178.260481][ T5869] Buffer I/O error on dev nbd4, logical block 2, async page read [ 178.288761][ T5869] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.328799][ T5869] Buffer I/O error on dev nbd4, logical block 3, async page read [ 178.335573][ T8470] lowmem_reserve[]: 0 0 1 1 1 [ 178.345457][ T5869] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.355311][ T5869] Buffer I/O error on dev nbd4, logical block 0, async page read [ 178.363706][ T5869] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.373163][ T5869] Buffer I/O error on dev nbd4, logical block 1, async page read [ 178.385247][ T5869] ldm_validate_partition_table(): Disk read failed. [ 178.394018][ T5869] Dev nbd4: unable to read RDB block 0 [ 178.402475][ T5869] nbd4: unable to read partition table [ 178.411505][ T8470] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1592kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 178.420554][ T8488] lo speed is unknown, defaulting to 1000 [ 178.446750][ T5869] ldm_validate_partition_table(): Disk read failed. [ 178.456066][ T5869] Dev nbd4: unable to read RDB block 0 [ 178.467768][ T5869] nbd4: unable to read partition table [ 178.535388][ T8470] lowmem_reserve[]: 0 0 0 0 0 [ 178.544352][ T8470] Node 1 Normal free:3891092kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18176kB local_pcp:7616kB free_cma:0kB [ 178.581689][ T8494] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.642549][ T8470] lowmem_reserve[]: 0 0 0 0 0 [ 178.724440][ T8470] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 178.727760][ T8501] netlink: 40 bytes leftover after parsing attributes in process `syz.4.627'. [ 178.753678][ T8470] Node 0 DMA32: 113*4kB (UME) 57*8kB (ME) 118*16kB (UME) 106*32kB (UME) 36*64kB (UM) 14*128kB (UME) 5*256kB (UME) 6*512kB (UM) 4*1024kB (UME) 4*2048kB (UM) 300*4096kB (M) = 1255724kB [ 178.790238][ T8501] netlink: 40 bytes leftover after parsing attributes in process `syz.4.627'. [ 178.810619][ T8501] netlink: 22 bytes leftover after parsing attributes in process `syz.4.627'. [ 178.833946][ T8470] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 178.910220][ T8470] Node 1 Normal: 171*4kB (UE) 51*8kB (UME) 41*16kB (UME) 78*32kB (UME) 30*64kB (UME) 11*128kB (UME) 4*256kB (UM) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3891092kB [ 178.960620][ T8470] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 178.993314][ T8470] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 179.031644][ T8470] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 179.057873][ T8470] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 179.087759][ T8470] 44579 total pagecache pages [ 179.101982][ T8515] netlink: 'syz.2.633': attribute type 10 has an invalid length. [ 179.129309][ T8470] 0 pages in swap cache [ 179.139253][ T8470] Free swap = 124996kB [ 179.148269][ T8470] Total swap = 124996kB [ 179.157604][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.633'. [ 179.183118][ T8470] 2097051 pages RAM [ 179.187047][ T8470] 0 pages HighMem/MovableOnly [ 179.273552][ T8470] 425679 pages reserved [ 179.278251][ T8470] 0 pages cma reserved [ 179.280436][ T8535] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.636'. [ 179.747323][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 180.871144][ T8605] lo speed is unknown, defaulting to 1000 [ 180.949637][ T8614] netlink: 24 bytes leftover after parsing attributes in process `syz.4.658'. [ 181.111268][ T8626] netlink: 'syz.2.662': attribute type 8 has an invalid length. [ 181.180108][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 181.235869][ T8634] netlink: 'syz.2.662': attribute type 6 has an invalid length. [ 181.266492][ T8634] netlink: 'syz.2.662': attribute type 4 has an invalid length. [ 181.303926][ T8634] GUP no longer grows the stack in syz.2.662 (8634): 200000003000-20000000a000 (200000001000) [ 181.324985][ T8634] CPU: 0 UID: 0 PID: 8634 Comm: syz.2.662 Not tainted syzkaller #0 PREEMPT(full) [ 181.325016][ T8634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 181.325035][ T8634] Call Trace: [ 181.325044][ T8634] [ 181.325054][ T8634] dump_stack_lvl+0x189/0x250 [ 181.325117][ T8634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.325145][ T8634] ? __pfx__printk+0x10/0x10 [ 181.325173][ T8634] ? find_vma+0xe7/0x160 [ 181.325200][ T8634] ? __lock_acquire+0xab9/0xd20 [ 181.325250][ T8634] __get_user_pages+0x24d0/0x2ce0 [ 181.325280][ T8634] ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190 [ 181.325344][ T8634] ? rcu_is_watching+0x15/0xb0 [ 181.325379][ T8634] __gup_longterm_locked+0xde9/0x1660 [ 181.325430][ T8634] ? sanity_check_pinned_pages+0x123a/0x1300 [ 181.325470][ T8634] gup_fast_fallback+0x1e6a/0x2010 [ 181.325541][ T8634] ? __pfx_gup_fast_fallback+0x10/0x10 [ 181.325588][ T8634] ? pin_user_pages_fast+0x4d/0xb0 [ 181.325620][ T8634] iov_iter_extract_pages+0x35a/0x5e0 [ 181.325664][ T8634] extract_iter_to_sg+0xe46/0x24e0 [ 181.325709][ T8634] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 181.325758][ T8634] ? __asan_memset+0x22/0x50 [ 181.325788][ T8634] af_alg_get_rsgl+0x436/0x810 [ 181.325845][ T8634] aead_recvmsg+0x4cc/0x13f0 [ 181.325894][ T8634] ? __pfx_aead_recvmsg+0x10/0x10 [ 181.325920][ T8634] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 181.325946][ T8634] ? __pfx_aead_recvmsg+0x10/0x10 [ 181.325969][ T8634] sock_recvmsg_nosec+0x186/0x1c0 [ 181.325998][ T8634] ____sys_recvmsg+0x3aa/0x460 [ 181.326041][ T8634] ? __pfx_____sys_recvmsg+0x10/0x10 [ 181.326094][ T8634] ? import_iovec+0x74/0xa0 [ 181.326128][ T8634] ___sys_recvmsg+0x1b5/0x510 [ 181.326168][ T8634] ? __pfx____sys_recvmsg+0x10/0x10 [ 181.326242][ T8634] ? __might_fault+0xb0/0x130 [ 181.326291][ T8634] do_recvmmsg+0x307/0x770 [ 181.326333][ T8634] ? __pfx_do_recvmmsg+0x10/0x10 [ 181.326372][ T8634] ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0 [ 181.326424][ T8634] ? __pfx_do_futex+0x10/0x10 [ 181.326469][ T8634] __x64_sys_recvmmsg+0x190/0x240 [ 181.326502][ T8634] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 181.326529][ T8634] ? rcu_is_watching+0x15/0xb0 [ 181.326555][ T8634] ? do_syscall_64+0xbe/0x3b0 [ 181.326585][ T8634] do_syscall_64+0xfa/0x3b0 [ 181.326608][ T8634] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.326631][ T8634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.326651][ T8634] ? clear_bhb_loop+0x60/0xb0 [ 181.326675][ T8634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.326694][ T8634] RIP: 0033:0x7f82a3d8eba9 [ 181.326713][ T8634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.326729][ T8634] RSP: 002b:00007f82a4b76038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 181.326750][ T8634] RAX: ffffffffffffffda RBX: 00007f82a3fd6090 RCX: 00007f82a3d8eba9 [ 181.326765][ T8634] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000c [ 181.326777][ T8634] RBP: 00007f82a3e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 181.326789][ T8634] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 181.326801][ T8634] R13: 00007f82a3fd6128 R14: 00007f82a3fd6090 R15: 00007fff1c6a1108 [ 181.326836][ T8634] [ 182.007493][ T8664] tipc: Enabled bearer , priority 0 [ 182.141926][ T8646] lo speed is unknown, defaulting to 1000 [ 182.154382][ T8664] __nla_validate_parse: 6 callbacks suppressed [ 182.154399][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 182.177527][ T8664] tipc: Resetting bearer [ 182.200616][ T8663] tipc: Disabling bearer [ 184.819436][ T8690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.678'. [ 185.092905][ T8704] lo speed is unknown, defaulting to 1000 [ 185.212394][ T8708] netlink: 67 bytes leftover after parsing attributes in process `syz.3.682'. [ 185.772112][ T8727] netlink: 28 bytes leftover after parsing attributes in process `syz.4.685'. [ 186.275160][ T8739] netlink: 32 bytes leftover after parsing attributes in process `syz.4.689'. [ 186.441268][ T8743] netlink: 248 bytes leftover after parsing attributes in process `syz.4.693'. [ 186.464513][ T8746] netlink: 24 bytes leftover after parsing attributes in process `syz.1.692'. [ 186.904790][ T8760] tipc: Started in network mode [ 186.933862][ T8760] tipc: Node identity 0e6a41dc9b3, cluster identity 4711 [ 186.956159][ T8760] tipc: Enabled bearer , priority 0 [ 187.076884][ T8764] syzkaller0: entered promiscuous mode [ 187.082633][ T8764] syzkaller0: entered allmulticast mode [ 187.089141][ T8764] tipc: Resetting bearer [ 187.111187][ T8759] tipc: Resetting bearer [ 187.209073][ T8771] netlink: 'syz.1.699': attribute type 1 has an invalid length. [ 187.232890][ T8771] netlink: 224 bytes leftover after parsing attributes in process `syz.1.699'. [ 187.950138][ T43] tipc: Node number set to 2505720284 [ 189.099561][ T8759] tipc: Disabling bearer [ 189.427566][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 189.615509][ T8801] netlink: 28 bytes leftover after parsing attributes in process `syz.4.709'. [ 190.085410][ T8827] tipc: Enabled bearer , priority 0 [ 190.333166][ T8827] syzkaller0: entered promiscuous mode [ 190.338713][ T8827] syzkaller0: entered allmulticast mode [ 190.430786][ T8827] tipc: Resetting bearer [ 190.540191][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 190.627922][ T1147] tipc: Resetting bearer [ 190.713947][ T8825] tipc: Resetting bearer [ 190.839086][ T8857] netlink: 'syz.1.721': attribute type 8 has an invalid length. [ 190.847129][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.721'. [ 191.164085][ T43] tipc: Node number set to 491644127 [ 191.871033][ T8875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.724'. [ 191.977328][ T8878] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20002 [ 193.384477][ T8825] tipc: Disabling bearer [ 193.448691][ T8875] xfrm1: entered promiscuous mode [ 193.467783][ T8875] xfrm1: entered allmulticast mode [ 193.750792][ T8900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.728'. [ 193.761139][ T8899] netlink: 'syz.4.729': attribute type 2 has an invalid length. [ 193.761163][ T8899] netlink: 16 bytes leftover after parsing attributes in process `syz.4.729'. [ 193.761181][ T8899] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 193.874163][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.728'. [ 194.041444][ T8899] netlink: 'syz.4.729': attribute type 9 has an invalid length. [ 194.088233][ T8899] netlink: 'syz.4.729': attribute type 7 has an invalid length. [ 194.119525][ T8902] vlan2: entered allmulticast mode [ 194.136068][ T8902] bond2: entered allmulticast mode [ 194.141877][ T8899] netlink: 'syz.4.729': attribute type 8 has an invalid length. [ 194.421611][ T8916] tipc: Started in network mode [ 194.450004][ T8916] tipc: Node identity 3e1c8786708b, cluster identity 4711 [ 194.457363][ T8916] tipc: Enabled bearer , priority 0 [ 194.485555][ T8918] nbd: couldn't find device at index 536870912 [ 194.505629][ T8921] syzkaller0: entered promiscuous mode [ 194.515492][ T8921] syzkaller0: entered allmulticast mode [ 194.643369][ T8916] tipc: Resetting bearer [ 194.685074][ T8915] tipc: Resetting bearer [ 194.728982][ T8915] tipc: Disabling bearer [ 194.794671][ T8929] netlink: 'syz.2.737': attribute type 3 has an invalid length. [ 194.835076][ T8929] netlink: 'syz.2.737': attribute type 1 has an invalid length. [ 194.847997][ T8926] lo speed is unknown, defaulting to 1000 [ 194.891447][ T8929] netlink: 192 bytes leftover after parsing attributes in process `syz.2.737'. [ 194.930118][ T8929] NCSI netlink: No device for ifindex 0 [ 195.197696][ T8942] netlink: 34 bytes leftover after parsing attributes in process `syz.1.739'. [ 195.555553][ T8947] netlink: 'syz.0.740': attribute type 13 has an invalid length. [ 195.604175][ T8947] netlink: 'syz.0.740': attribute type 17 has an invalid length. [ 195.922809][ T8956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'. [ 195.980610][ T8947] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.259210][ T8956] erspan0: left allmulticast mode [ 196.269409][ T8956] erspan0: left promiscuous mode [ 196.301167][ T8956] bridge0: port 1(erspan0) entered disabled state [ 196.576214][ T8966] ipvlan0: entered promiscuous mode [ 196.619394][ T8965] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 196.870133][ T8965] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 196.926123][ T8970] lo speed is unknown, defaulting to 1000 [ 197.014581][ T8965] netlink: 'syz.4.747': attribute type 10 has an invalid length. [ 197.075820][ T8965] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 197.084268][ T8983] netlink: 'syz.0.750': attribute type 10 has an invalid length. [ 197.122781][ T8965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.173005][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.750'. [ 197.592724][ T8983] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 197.610859][ T8983] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 197.627721][ T8983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.645913][ T8983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.791441][ T8983] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 197.925670][ T8996] batadv1: entered promiscuous mode [ 197.931456][ T8996] batadv1: entered allmulticast mode [ 197.946327][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.955460][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.995308][ T1147] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.023429][ T1147] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.032981][ T9008] tipc: Enabled bearer , priority 0 [ 198.039755][ T9005] lo speed is unknown, defaulting to 1000 [ 198.097004][ T9008] syzkaller0: entered promiscuous mode [ 198.103167][ T9008] syzkaller0: entered allmulticast mode [ 198.109400][ T9008] tipc: Resetting bearer [ 198.165677][ T9007] tipc: Resetting bearer [ 198.508111][ T9020] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.514656][ T9019] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.521817][ T9020] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.528533][ T9019] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.160926][ T5873] tipc: Node number set to 1284586238 [ 199.508080][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.873991][ T9007] tipc: Disabling bearer [ 199.958200][ T9016] lo speed is unknown, defaulting to 1000 [ 200.232634][ T9030] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 200.242635][ T9030] CPU: 1 UID: 0 PID: 9030 Comm: syz.0.762 Not tainted syzkaller #0 PREEMPT(full) [ 200.242663][ T9030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 200.242676][ T9030] Call Trace: [ 200.242685][ T9030] [ 200.242694][ T9030] dump_stack_lvl+0x189/0x250 [ 200.242735][ T9030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.242763][ T9030] ? __pfx__printk+0x10/0x10 [ 200.242801][ T9030] ? kernfs_path_from_node+0x2f/0x290 [ 200.242826][ T9030] ? kernfs_path_from_node+0x250/0x290 [ 200.242849][ T9030] ? kernfs_path_from_node+0x2f/0x290 [ 200.242880][ T9030] sysfs_warn_dup+0x8e/0xa0 [ 200.242904][ T9030] sysfs_do_create_link_sd+0xc0/0x110 [ 200.242931][ T9030] device_add_class_symlinks+0x1cf/0x240 [ 200.242964][ T9030] device_add+0x475/0xb50 [ 200.242996][ T9030] wiphy_register+0x1c81/0x2aa0 [ 200.243045][ T9030] ? __pfx_wiphy_register+0x10/0x10 [ 200.243072][ T9030] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 200.243113][ T9030] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 200.243150][ T9030] ieee80211_register_hw+0x3442/0x40a0 [ 200.243201][ T9030] ? ieee80211_register_hw+0x13a1/0x40a0 [ 200.243246][ T9030] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 200.243283][ T9030] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 200.243317][ T9030] ? __hrtimer_setup+0x187/0x210 [ 200.243337][ T9030] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 200.243364][ T9030] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 200.243436][ T9030] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 200.243488][ T9030] ? trace_kmalloc+0x1f/0xd0 [ 200.243515][ T9030] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 200.243547][ T9030] ? kstrndup+0xbf/0x160 [ 200.243583][ T9030] hwsim_new_radio_nl+0xea4/0x1b10 [ 200.243622][ T9030] ? __pfx___nla_validate_parse+0x10/0x10 [ 200.243665][ T9030] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 200.243718][ T9030] ? __nla_parse+0x40/0x60 [ 200.243752][ T9030] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 200.243800][ T9030] genl_family_rcv_msg_doit+0x212/0x300 [ 200.243844][ T9030] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 200.243896][ T9030] ? bpf_lsm_capable+0x9/0x20 [ 200.243926][ T9030] ? security_capable+0x7e/0x2e0 [ 200.243970][ T9030] genl_rcv_msg+0x60e/0x790 [ 200.244013][ T9030] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.244046][ T9030] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 200.244100][ T9030] netlink_rcv_skb+0x208/0x470 [ 200.244124][ T9030] ? __lock_acquire+0xab9/0xd20 [ 200.244158][ T9030] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.244194][ T9030] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.244246][ T9030] ? down_read+0x1ad/0x2e0 [ 200.244279][ T9030] genl_rcv+0x28/0x40 [ 200.244310][ T9030] netlink_unicast+0x82c/0x9e0 [ 200.244345][ T9030] ? __pfx_netlink_unicast+0x10/0x10 [ 200.244372][ T9030] ? netlink_sendmsg+0x642/0xb30 [ 200.244396][ T9030] ? skb_put+0x11b/0x210 [ 200.244430][ T9030] netlink_sendmsg+0x805/0xb30 [ 200.244470][ T9030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.244504][ T9030] ? aa_sock_msg_perm+0xf1/0x1d0 [ 200.244530][ T9030] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 200.244555][ T9030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.244584][ T9030] __sock_sendmsg+0x219/0x270 [ 200.244612][ T9030] ____sys_sendmsg+0x505/0x830 [ 200.244651][ T9030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.244695][ T9030] ? import_iovec+0x74/0xa0 [ 200.244736][ T9030] ___sys_sendmsg+0x21f/0x2a0 [ 200.244771][ T9030] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.244847][ T9030] ? __fget_files+0x2a/0x420 [ 200.244867][ T9030] ? __fget_files+0x3a0/0x420 [ 200.244892][ T9030] __x64_sys_sendmsg+0x19b/0x260 [ 200.244918][ T9030] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 200.244950][ T9030] ? rcu_is_watching+0x15/0xb0 [ 200.244971][ T9030] ? do_syscall_64+0xbe/0x3b0 [ 200.244994][ T9030] do_syscall_64+0xfa/0x3b0 [ 200.245013][ T9030] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.245030][ T9030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.245046][ T9030] ? clear_bhb_loop+0x60/0xb0 [ 200.245065][ T9030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.245081][ T9030] RIP: 0033:0x7f997bf8eba9 [ 200.245095][ T9030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.245108][ T9030] RSP: 002b:00007f997cd4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.245125][ T9030] RAX: ffffffffffffffda RBX: 00007f997c1d5fa0 RCX: 00007f997bf8eba9 [ 200.245137][ T9030] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c [ 200.245146][ T9030] RBP: 00007f997c011e19 R08: 0000000000000000 R09: 0000000000000000 [ 200.245156][ T9030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.245165][ T9030] R13: 00007f997c1d6038 R14: 00007f997c1d5fa0 R15: 00007ffe68f4a398 [ 200.245191][ T9030] [ 200.727409][ T9034] bond_slave_0: entered promiscuous mode [ 200.729410][ T9038] validate_nla: 1 callbacks suppressed [ 200.729438][ T9038] netlink: 'syz.2.764': attribute type 1 has an invalid length. [ 200.733460][ T9034] bond_slave_1: entered promiscuous mode [ 200.739012][ T9038] netlink: 112 bytes leftover after parsing attributes in process `syz.2.764'. [ 200.746738][ T9034] team_slave_0: entered promiscuous mode [ 200.767301][ T9034] team_slave_1: entered promiscuous mode [ 200.773898][ T9034] vlan3: entered promiscuous mode [ 200.779236][ T9034] bond0: entered promiscuous mode [ 200.785276][ T9034] team0: entered promiscuous mode [ 201.028662][ T9042] tipc: Enabled bearer , priority 0 [ 201.100936][ T9042] syzkaller0: entered promiscuous mode [ 201.106472][ T9042] syzkaller0: entered allmulticast mode [ 201.216351][ T9042] tipc: Resetting bearer [ 201.268814][ T9061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.768'. [ 201.346707][ T9041] tipc: Resetting bearer [ 201.365688][ T9041] tipc: Disabling bearer [ 201.378044][ T9064] tipc: Enabled bearer , priority 0 [ 201.398042][ T9055] tipc: Resetting bearer [ 201.605531][ T9080] netlink: 'syz.0.774': attribute type 1 has an invalid length. [ 203.369917][ T9055] tipc: Disabling bearer [ 203.380278][ T9080] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 204.049343][ T9131] netlink: 'syz.3.784': attribute type 13 has an invalid length. [ 204.066422][ T9131] netlink: 'syz.3.784': attribute type 17 has an invalid length. [ 204.085212][ T9131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.108490][ T9133] netlink: 132 bytes leftover after parsing attributes in process `syz.2.787'. [ 204.132059][ T9135] lo speed is unknown, defaulting to 1000 [ 204.508520][ T9152] bridge0: entered promiscuous mode [ 204.807880][ T9166] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 204.939138][ T9172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.795'. [ 205.011045][ T9164] lo speed is unknown, defaulting to 1000 [ 205.406218][ T9194] lo speed is unknown, defaulting to 1000 [ 205.498007][ T9197] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 206.077110][ T9211] syzkaller1: entered promiscuous mode [ 206.112379][ T9211] syzkaller1: entered allmulticast mode [ 206.626347][ T9246] geneve2: entered promiscuous mode [ 206.833421][ T9250] netlink: 'syz.2.815': attribute type 1 has an invalid length. [ 206.851632][ T9250] netlink: 244 bytes leftover after parsing attributes in process `syz.2.815'. [ 206.973000][ T30] audit: type=1800 audit(1757894809.778:3): pid=9254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.814" name="blkio.bfq.time_recursive" dev="tmpfs" ino=903 res=0 errno=0 [ 207.108116][ T9262] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20001 [ 207.187639][ T9266] vlan2: entered allmulticast mode [ 207.200209][ T9266] hsr0: entered allmulticast mode [ 207.217741][ T9266] hsr_slave_0: entered allmulticast mode [ 207.251021][ T9266] hsr_slave_1: entered allmulticast mode [ 207.551672][ T9283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.822'. [ 207.691439][ T9279] tipc: Enabled bearer , priority 0 [ 207.743594][ T9279] syzkaller0: entered promiscuous mode [ 207.759484][ T9279] syzkaller0: entered allmulticast mode [ 207.788530][ T9279] tipc: Resetting bearer [ 207.881839][ T9278] tipc: Resetting bearer [ 208.520107][ T9303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.730314][ T5873] tipc: Node number set to 1318553478 [ 209.110150][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 209.773839][ T9313] openvswitch: netlink: Message has 176 unknown bytes. [ 209.787519][ T9313] netlink: 60 bytes leftover after parsing attributes in process `syz.0.830'. [ 210.419489][ T9278] tipc: Disabling bearer [ 210.429137][ T9303] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 210.440780][ T9303] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 210.637452][ T9325] netlink: 'syz.3.831': attribute type 4 has an invalid length. [ 210.720340][ T9333] netlink: 'syz.3.831': attribute type 4 has an invalid length. [ 210.751435][ T9330] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 210.818662][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'. [ 210.844297][ T9336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.836'. [ 210.860495][ T9336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.836'. [ 210.869660][ T9336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.836'. [ 210.905637][ T9336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.836'. [ 210.915524][ T9336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.836'. [ 210.924757][ T9336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.836'. [ 211.322120][ T9367] netlink: 'syz.2.842': attribute type 83 has an invalid length. [ 211.444544][ T9369] netlink: 'syz.0.843': attribute type 10 has an invalid length. [ 211.548002][ T9373] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 211.708716][ T9378] sctp: [Deprecated]: syz.0.847 (pid 9378) Use of int in maxseg socket option. [ 211.708716][ T9378] Use struct sctp_assoc_value instead [ 211.844082][ T9383] lo speed is unknown, defaulting to 1000 [ 212.619477][ T9414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.629000][ T9414] bridge0: port 1(bond1) entered blocking state [ 212.635627][ T9414] bridge0: port 1(bond1) entered disabled state [ 212.642878][ T9414] bond1: entered allmulticast mode [ 212.650953][ T9414] bond1: entered promiscuous mode [ 212.659528][ T9414] bridge0: port 1(bond1) entered blocking state [ 212.666082][ T9414] bridge0: port 1(bond1) entered forwarding state [ 212.724496][ T12] bridge0: port 1(bond1) entered disabled state [ 212.851505][ T9427] __nla_validate_parse: 1 callbacks suppressed [ 212.851525][ T9427] netlink: 32 bytes leftover after parsing attributes in process `syz.2.864'. [ 212.907309][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.864'. [ 213.000354][ T9425] 8021q: adding VLAN 0 to HW filter on device bond3 [ 213.155652][ T9448] netlink: 32 bytes leftover after parsing attributes in process `syz.0.869'. [ 213.865706][ T9479] geneve2: entered promiscuous mode [ 214.327973][ T9485] lo speed is unknown, defaulting to 1000 [ 214.381677][ T9489] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 214.776337][ T9498] netlink: 16 bytes leftover after parsing attributes in process `syz.4.884'. [ 214.800782][ T9498] netlink: 64 bytes leftover after parsing attributes in process `syz.4.884'. [ 214.826127][ T9498] tipc: Invalid UDP bearer configuration [ 214.826191][ T9498] tipc: Enabling of bearer rejected, failed to enable media [ 214.983589][ T9498] lo speed is unknown, defaulting to 1000 [ 215.156321][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.888'. [ 215.320620][ T9518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.889'. [ 215.344086][ T9518] vlan2: entered promiscuous mode [ 215.349195][ T9518] macvtap0: entered promiscuous mode [ 215.428962][ T9511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.888'. [ 215.710877][ T9527] 8021q: VLANs not supported on sit0 [ 216.953751][ T5880] Bluetooth: hci3: command 0x0406 tx timeout [ 216.965447][ T5877] Bluetooth: hci1: command 0x0406 tx timeout [ 216.965536][ T5884] Bluetooth: hci2: command 0x0406 tx timeout [ 217.016327][ T9555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.902'. [ 217.134711][ T9572] netlink: 20 bytes leftover after parsing attributes in process `syz.0.906'. [ 217.370464][ T9573] netlink: 'syz.0.906': attribute type 5 has an invalid length. [ 217.845478][ T9597] netlink: 'syz.1.916': attribute type 3 has an invalid length. [ 217.894314][ T9595] IPVS: lc: FWM 3 0x00000003 - no destination available [ 217.901610][ T3430] IPVS: starting estimator thread 0... [ 217.920738][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 217.929521][ T9592] bond1: entered promiscuous mode [ 217.952895][ T9592] 8021q: adding VLAN 0 to HW filter on device bond1 [ 217.979809][ T9603] bridge2: entered promiscuous mode [ 218.003027][ T9610] netlink: 'syz.3.915': attribute type 10 has an invalid length. [ 218.010128][ T9604] IPVS: using max 27 ests per chain, 64800 per kthread [ 218.038575][ T9607] bridge3: entered promiscuous mode [ 218.126529][ T9610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.161824][ T9616] __nla_validate_parse: 2 callbacks suppressed [ 218.161842][ T9616] netlink: 36 bytes leftover after parsing attributes in process `syz.0.909'. [ 218.207068][ T9610] batadv0: entered promiscuous mode [ 218.236055][ T9610] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 218.349259][ T9625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.919'. [ 218.388223][ T9624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.919'. [ 218.733501][ T9644] netlink: 168 bytes leftover after parsing attributes in process `syz.3.924'. [ 218.874816][ T9648] netlink: 'syz.4.926': attribute type 1 has an invalid length. [ 219.051503][ T9662] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 219.121746][ T9669] netlink: 240 bytes leftover after parsing attributes in process `syz.0.927'. [ 219.439763][ T9678] netlink: 27 bytes leftover after parsing attributes in process `syz.2.933'. [ 220.356622][ T9711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.940'. [ 220.434067][ T9711] netlink: 20 bytes leftover after parsing attributes in process `syz.3.940'. [ 220.469963][ T30] audit: type=1800 audit(1757894823.268:4): pid=9696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.939" name="cgroup.controllers" dev="tmpfs" ino=948 res=0 errno=0 [ 220.518869][ T9719] netlink: 124 bytes leftover after parsing attributes in process `syz.1.941'. [ 220.568133][ T9720] netlink: 124 bytes leftover after parsing attributes in process `syz.1.941'. [ 220.700289][ T9719] nbd1: detected capacity change from 0 to 63 [ 220.707113][ T9720] block nbd0: NBD_DISCONNECT [ 220.711836][ T9720] block nbd0: Send disconnect failed -32 [ 220.736571][ T51] Bluetooth: hci4: link tx timeout [ 220.742914][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.753787][ T5876] Bluetooth: hci4: link tx timeout [ 220.772066][ T5876] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.790057][ T5876] Bluetooth: hci4: link tx timeout [ 220.795276][ T5876] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.806053][ T5874] block nbd1: Receive control failed (result -104) [ 220.885807][ T9733] IPVS: set_ctl: invalid protocol: 41 10.1.1.2:20004 [ 221.065616][ T9739] IPVS: Error connecting to the multicast addr [ 221.089321][ T9741] batadv1: entered promiscuous mode [ 221.111071][ T9741] batadv1: entered allmulticast mode [ 221.153831][ T9744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.218723][ T9747] tipc: Enabled bearer , priority 0 [ 221.232330][ T9749] netlink: 'syz.2.950': attribute type 9 has an invalid length. [ 221.311750][ T9745] lo speed is unknown, defaulting to 1000 [ 221.317650][ T9750] veth0: entered promiscuous mode [ 221.327295][ T9747] syzkaller0: entered promiscuous mode [ 221.335575][ T9747] syzkaller0: entered allmulticast mode [ 221.394178][ T9747] tipc: Resetting bearer [ 221.446729][ T9746] tipc: Resetting bearer [ 221.510661][ T9746] tipc: Disabling bearer [ 221.545682][ T9757] !: renamed from dummy0 (while UP) [ 221.585947][ T9754] tipc: Enabled bearer , priority 0 [ 221.616263][ T9754] syzkaller0: entered promiscuous mode [ 221.645580][ T9754] syzkaller0: entered allmulticast mode [ 221.717821][ T9750] veth0: left promiscuous mode [ 221.895399][ T9778] tipc: Resetting bearer [ 222.059602][ T9752] tipc: Resetting bearer [ 222.098015][ T9752] tipc: Disabling bearer [ 222.578180][ T9802] lo speed is unknown, defaulting to 1000 [ 222.780088][ T5874] Bluetooth: hci4: command 0x0405 tx timeout [ 223.087992][ T9809] bond0: (slave dummy0): Releasing backup interface [ 223.112941][ T9809] dummy0: left promiscuous mode [ 223.205547][ T9809] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 223.240914][ T9818] netlink: 'syz.0.967': attribute type 4 has an invalid length. [ 223.356758][ T9821] __nla_validate_parse: 2 callbacks suppressed [ 223.356777][ T9821] netlink: 68 bytes leftover after parsing attributes in process `syz.1.968'. [ 223.611462][ T9838] ÿ@0Ù: renamed from veth1_to_bond (while UP) [ 223.816906][ T9851] openvswitch: netlink: Message has 8 unknown bytes. [ 224.425968][ T9847] lo speed is unknown, defaulting to 1000 [ 224.591902][ T9858] lo speed is unknown, defaulting to 1000 [ 224.662444][ T9871] netlink: 44 bytes leftover after parsing attributes in process `syz.2.981'. [ 224.686134][ T9869] tipc: Enabled bearer , priority 0 [ 224.729571][ T9875] netlink: 32 bytes leftover after parsing attributes in process `syz.0.982'. [ 224.784063][ T9869] syzkaller0: entered promiscuous mode [ 224.803055][ T9869] syzkaller0: entered allmulticast mode [ 224.906120][ T9868] tipc: Resetting bearer [ 224.952570][ T9868] tipc: Disabling bearer [ 225.489987][ T9878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.541412][ T9901] netlink: 40 bytes leftover after parsing attributes in process `syz.0.986'. [ 225.609501][ T9895] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.617345][ T9895] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.941722][ T9895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.985705][ T9895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.004780][ T9895] xfrm0: left promiscuous mode [ 226.021980][ T9895] xfrm0: left allmulticast mode [ 226.206940][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 226.217015][ T6162] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.220687][ T9904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.986'. [ 226.237831][ T6162] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.258886][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 226.278110][ T9904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.986'. [ 226.496033][ T6162] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.518421][ T6162] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.699790][ T9920] netlink: 'syz.3.990': attribute type 21 has an invalid length. [ 226.903272][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.991'. [ 227.278187][ T9936] bridge1: entered promiscuous mode [ 227.287399][ T9936] bridge1: entered allmulticast mode [ 228.254326][ T9964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.618947][ T9952] tipc: Enabling of bearer rejected, failed to enable media [ 229.645673][ T9981] 8021q: VLANs not supported on vcan0 [ 230.035400][T10018] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1015'. [ 230.138987][T10023] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1015'. [ 230.288604][T10025] lo speed is unknown, defaulting to 1000 [ 230.437565][T10034] netlink: 'syz.0.1019': attribute type 10 has an invalid length. [ 230.518057][T10034] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.529030][T10034] bond0: (slave team0): Enslaving as an active interface with an up link [ 230.549076][T10038] tipc: Enabled bearer , priority 0 [ 230.666148][T10038] syzkaller0: entered promiscuous mode [ 230.675320][T10038] syzkaller0: entered allmulticast mode [ 230.683143][T10038] tipc: Resetting bearer [ 230.758068][ T59] tipc: Resetting bearer [ 230.773658][T10037] tipc: Resetting bearer [ 230.920838][T10053] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1022'. [ 230.999449][T10051] netlink: 'syz.1.1022': attribute type 1 has an invalid length. [ 232.085840][T10037] tipc: Disabling bearer [ 232.106631][T10051] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 232.266064][T10061] 8021q: VLANs not supported on vcan0 [ 232.558539][T10076] dvmrp0: entered allmulticast mode [ 232.709672][T10078] tipc: Enabled bearer , priority 0 [ 232.718034][T10078] syzkaller0: entered promiscuous mode [ 232.728149][T10078] syzkaller0: entered allmulticast mode [ 232.893348][T10081] sctp: [Deprecated]: syz.1.1033 (pid 10081) Use of int in maxseg socket option. [ 232.893348][T10081] Use struct sctp_assoc_value instead [ 233.042691][T10086] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 233.123313][T10078] tipc: Resetting bearer [ 233.201302][T10078] tipc: Disabling bearer [ 233.247876][T10092] tipc: Enabled bearer , priority 0 [ 233.519000][T10095] syzkaller0: entered promiscuous mode [ 233.562464][T10095] syzkaller0: entered allmulticast mode [ 233.568802][T10095] tipc: Resetting bearer [ 233.676617][T10103] vxcan1: entered allmulticast mode [ 233.684496][T10088] tipc: Resetting bearer [ 234.882391][T10125] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1044'. [ 235.012735][T10127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1044'. [ 235.301659][T10088] tipc: Disabling bearer [ 235.314345][T10106] vxcan1: left allmulticast mode [ 235.319464][T10106] pim6reg: left allmulticast mode [ 235.694271][T10139] netlink: 'syz.3.1049': attribute type 3 has an invalid length. [ 235.796441][T10146] netlink: 'syz.3.1049': attribute type 3 has an invalid length. [ 236.053117][T10157] tipc: Enabled bearer , priority 0 [ 236.401077][T10157] syzkaller0: entered promiscuous mode [ 236.406618][T10157] syzkaller0: entered allmulticast mode [ 236.481568][T10157] tipc: Resetting bearer [ 236.716097][ T59] tipc: Resetting bearer [ 236.748232][T10156] tipc: Resetting bearer [ 237.041997][T10177] netlink: 'syz.2.1057': attribute type 7 has an invalid length. [ 237.067307][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'. [ 237.323278][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1062'. [ 237.338513][T10188] netlink: 'syz.4.1062': attribute type 1 has an invalid length. [ 237.346673][T10188] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.1062'. [ 238.541714][T10156] tipc: Disabling bearer [ 238.583471][T10180] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 238.799343][T10207] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1066'. [ 238.998467][T10221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1071'. [ 239.061697][T10201] block nbd0: server does not support multiple connections per device. [ 239.070945][T10201] block nbd0: shutting down sockets [ 239.201745][T10232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1075'. [ 239.212134][T10232] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 239.383510][T10237] tipc: Enabled bearer , priority 0 [ 239.443714][T10237] syzkaller0: entered promiscuous mode [ 239.451372][T10237] syzkaller0: entered allmulticast mode [ 239.458501][T10237] tipc: Resetting bearer [ 239.475433][T10236] tipc: Resetting bearer [ 240.988383][T10236] tipc: Disabling bearer [ 241.032226][T10247] 8021q: VLANs not supported on vcan0 [ 241.227188][T10261] netlink: 'syz.4.1081': attribute type 13 has an invalid length. [ 241.235967][T10261] netlink: 'syz.4.1081': attribute type 17 has an invalid length. [ 241.395355][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1080'. [ 241.419103][T10261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.449332][T10261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 241.491866][T10264] lo speed is unknown, defaulting to 1000 [ 241.537489][T10271] veth1_macvtap: left promiscuous mode [ 241.642796][T10284] netlink: 'syz.2.1085': attribute type 7 has an invalid length. [ 241.651060][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1085'. [ 241.657875][T10276] lo speed is unknown, defaulting to 1000 [ 241.820690][T10291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1088'. [ 241.922497][T10291] nbd: socks must be embedded in a SOCK_ITEM attr [ 242.128299][T10301] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1090'. [ 242.177231][T10305] netlink: 'syz.4.1091': attribute type 1 has an invalid length. [ 242.196208][T10304] lo speed is unknown, defaulting to 1000 [ 242.860794][T10338] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1101'. [ 243.117397][T10343] syzkaller0: entered promiscuous mode [ 243.140698][T10343] syzkaller0: entered allmulticast mode [ 243.525404][T10374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1113'. [ 243.661510][T10376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1111'. [ 244.226673][ T5874] block nbd0: Receive control failed (result -32) [ 244.940120][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 245.021263][T10387] tipc: Enabling of bearer rejected, failed to enable media [ 245.578386][T10430] tipc: Enabled bearer , priority 0 [ 245.605764][T10430] syzkaller0: entered promiscuous mode [ 245.622592][T10430] syzkaller0: entered allmulticast mode [ 245.681044][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'. [ 245.717198][T10435] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 245.744248][T10438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1125'. [ 245.784943][T10433] lo speed is unknown, defaulting to 1000 [ 245.791788][T10440] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1126'. [ 245.829234][T10440] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1126'. [ 245.876019][T10438] tipc: Resetting bearer [ 245.912312][T10444] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1124'. [ 246.106061][T10446] lo speed is unknown, defaulting to 1000 [ 246.209035][T10429] tipc: Resetting bearer [ 246.257775][T10429] tipc: Disabling bearer [ 246.264455][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1131'. [ 246.286809][T10448] lo speed is unknown, defaulting to 1000 [ 246.343097][T10459] vti0: entered promiscuous mode [ 247.063712][T10494] netlink: 'syz.4.1141': attribute type 2 has an invalid length. [ 247.165997][T10500] lo speed is unknown, defaulting to 1000 [ 247.562434][T10512] __nla_validate_parse: 3 callbacks suppressed [ 247.562455][T10512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1145'. [ 248.081887][T10535] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1151'. [ 248.356890][T10553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1152'. [ 248.460462][T10500] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1142'. [ 248.642645][T10559] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1157'. [ 248.739337][T10563] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1158'. [ 248.776122][T10563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1158'. [ 248.825262][T10563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1158'. [ 249.104719][T10583] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 249.144344][ T5874] block nbd2: Receive control failed (result -107) [ 249.197943][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1163'. [ 249.212807][T10580] nbd2: detected capacity change from 0 to 32 [ 249.226816][T10580] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.1162'. [ 249.251500][ T7792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.275785][ T7792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.296228][T10589] netlink: 'syz.1.1163': attribute type 1 has an invalid length. [ 249.316137][T10589] netlink: 'syz.1.1163': attribute type 1 has an invalid length. [ 249.362609][T10589] netlink: 'syz.1.1163': attribute type 1 has an invalid length. [ 249.383669][T10589] netlink: 'syz.1.1163': attribute type 1 has an invalid length. [ 249.392407][T10589] netlink: 'syz.1.1163': attribute type 1 has an invalid length. [ 249.403610][T10589] netlink: 'syz.1.1163': attribute type 1 has an invalid length. [ 250.195585][T10642] IPVS: length: 187 != 24 [ 250.586754][ T7776] lo speed is unknown, defaulting to 1000 [ 251.344869][ T94] block nbd1: Possible stuck request ffff88802535e000: control (read@0,1024B). Runtime 30 seconds [ 251.360560][ T94] block nbd1: Possible stuck request ffff88802535e1c0: control (read@1024,1024B). Runtime 30 seconds [ 251.372021][ T94] block nbd1: Possible stuck request ffff88802535e380: control (read@2048,1024B). Runtime 30 seconds [ 251.383142][ T94] block nbd1: Possible stuck request ffff88802535e540: control (read@3072,1024B). Runtime 30 seconds [ 252.809462][T10747] ipvlan0: left promiscuous mode [ 253.278468][T10747] geneve2: left promiscuous mode [ 253.378749][T10747] gtp0: left promiscuous mode [ 253.437356][T10747] bridge2: left promiscuous mode [ 253.443969][T10747] bridge3: left promiscuous mode [ 253.470630][T10747] vti0: left promiscuous mode [ 253.548239][ T7792] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.576043][ T7792] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.600068][ T7792] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 253.619202][ T7792] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.646666][ T7792] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.669112][ T7792] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 253.705936][ T7792] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.719506][ T7792] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.730950][ T7792] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 253.748113][T10784] netlink: 'syz.3.1244': attribute type 10 has an invalid length. [ 253.774636][ T7792] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.794200][ T7792] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.817731][ T7792] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 254.143317][T10808] __nla_validate_parse: 7 callbacks suppressed [ 254.143339][T10808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1254'. [ 254.180076][T10814] netlink: 'syz.3.1257': attribute type 25 has an invalid length. [ 254.188909][T10814] netlink: 'syz.3.1257': attribute type 23 has an invalid length. [ 254.199694][T10814] netlink: 'syz.3.1257': attribute type 15 has an invalid length. [ 254.234550][T10814] netlink: 'syz.3.1257': attribute type 29 has an invalid length. [ 254.375369][T10824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1261'. [ 254.417443][T10824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.431261][T10824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.527599][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1265'. [ 255.556227][T10893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1293'. [ 255.929748][T10908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1302'. [ 256.316155][T10928] pim6reg0: tun_chr_ioctl cmd 2147767507 [ 256.533192][T10938] tipc: Enabled bearer , priority 0 [ 256.544494][T10938] syzkaller0: entered promiscuous mode [ 256.550070][T10938] syzkaller0: entered allmulticast mode [ 256.588055][T10938] tipc: Resetting bearer [ 256.600787][T10937] tipc: Resetting bearer [ 256.628399][T10937] tipc: Disabling bearer [ 256.669641][T10942] lo speed is unknown, defaulting to 1000 [ 257.056501][T10957] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.641199][T10957] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.779662][T10957] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.849649][T10986] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1338'. [ 258.945184][T10957] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.989167][T10992] nbd: nbd0 already in use [ 258.994399][T10992] block nbd0: NBD_DISCONNECT [ 258.999238][T10992] block nbd0: Send disconnect failed -32 [ 259.013870][T10992] block nbd0: shutting down sockets [ 259.122698][ T6160] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.138599][T11000] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 259.146186][T11000] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1342'. [ 259.155963][T11000] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 259.184046][ T59] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.205371][ T59] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.233188][ T59] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.625538][T11022] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1352'. [ 260.180633][T11048] syz_tun: entered allmulticast mode [ 260.195190][T11047] syz_tun: left allmulticast mode [ 260.672677][T11072] netlink: 'syz.0.1377': attribute type 1 has an invalid length. [ 260.684760][T11072] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1377'. [ 260.802471][T11078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1380'. [ 260.946971][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.992593][T11083] [ 260.994979][T11083] ====================================================== [ 261.002024][T11083] WARNING: possible circular locking dependency detected [ 261.009067][T11083] syzkaller #0 Not tainted [ 261.013489][T11083] ------------------------------------------------------ [ 261.020534][T11083] syz.1.1382/11083 is trying to acquire lock: [ 261.026596][T11083] ffff888025259988 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x19b/0x450 [ 261.036024][T11083] [ 261.036024][T11083] but task is already holding lock: [ 261.043389][T11083] ffff888025259448 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: elevator_change+0x180/0x450 [ 261.053587][T11083] [ 261.053587][T11083] which lock already depends on the new lock. [ 261.053587][T11083] [ 261.063991][T11083] [ 261.063991][T11083] the existing dependency chain (in reverse order) is: [ 261.073025][T11083] [ 261.073025][T11083] -> #6 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 261.081680][T11083] lock_acquire+0x120/0x360 [ 261.086725][T11083] blk_alloc_queue+0x538/0x620 [ 261.092043][T11083] __blk_mq_alloc_disk+0x15c/0x340 [ 261.097678][T11083] nbd_dev_add+0x46c/0xae0 [ 261.102622][T11083] nbd_init+0x168/0x1f0 [ 261.107312][T11083] do_one_initcall+0x233/0x820 [ 261.112607][T11083] do_initcall_level+0x104/0x190 [ 261.118077][T11083] do_initcalls+0x59/0xa0 [ 261.122939][T11083] kernel_init_freeable+0x334/0x4b0 [ 261.128664][T11083] kernel_init+0x1d/0x1d0 [ 261.133532][T11083] ret_from_fork+0x436/0x7d0 [ 261.138652][T11083] ret_from_fork_asm+0x1a/0x30 [ 261.143951][T11083] [ 261.143951][T11083] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 261.151176][T11083] lock_acquire+0x120/0x360 [ 261.156216][T11083] fs_reclaim_acquire+0x72/0x100 [ 261.161679][T11083] __kmalloc_cache_noprof+0x41/0x3d0 [ 261.167501][T11083] virtio_transport_do_socket_init+0x57/0x2f0 [ 261.174106][T11083] vsock_assign_transport+0x5ae/0x770 [ 261.180009][T11083] vsock_connect+0x5ab/0xe20 [ 261.185136][T11083] __sys_connect+0x313/0x440 [ 261.190268][T11083] __x64_sys_connect+0x7a/0x90 [ 261.195558][T11083] do_syscall_64+0xfa/0x3b0 [ 261.200599][T11083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.207027][T11083] [ 261.207027][T11083] -> #4 (sk_lock-AF_VSOCK){+.+.}-{0:0}: [ 261.214772][T11083] lock_acquire+0x120/0x360 [ 261.219820][T11083] lock_sock_nested+0x48/0x100 [ 261.225115][T11083] vsock_shutdown+0x67/0x2a0 [ 261.230239][T11083] nbd_mark_nsock_dead+0x2e9/0x560 [ 261.235874][T11083] recv_work+0x2138/0x24f0 [ 261.240840][T11083] process_scheduled_works+0xae1/0x17b0 [ 261.246912][T11083] worker_thread+0x8a0/0xda0 [ 261.252029][T11083] kthread+0x70e/0x8a0 [ 261.256635][T11083] ret_from_fork+0x436/0x7d0 [ 261.261755][T11083] ret_from_fork_asm+0x1a/0x30 [ 261.267053][T11083] [ 261.267053][T11083] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 261.274710][T11083] lock_acquire+0x120/0x360 [ 261.279751][T11083] __mutex_lock+0x187/0x1350 [ 261.284870][T11083] nbd_queue_rq+0x257/0xf10 [ 261.289900][T11083] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 261.295969][T11083] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 261.302825][T11083] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 261.309336][T11083] blk_mq_run_hw_queue+0x348/0x4f0 [ 261.314992][T11083] blk_mq_dispatch_list+0xd0c/0xe00 [ 261.320741][T11083] blk_mq_flush_plug_list+0x469/0x550 [ 261.326642][T11083] __blk_flush_plug+0x3d3/0x4b0 [ 261.332019][T11083] __submit_bio+0x2d3/0x5a0 [ 261.337047][T11083] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 261.343200][T11083] block_read_full_folio+0x599/0x830 [ 261.349017][T11083] filemap_read_folio+0x114/0x380 [ 261.354569][T11083] do_read_cache_folio+0x350/0x590 [ 261.360211][T11083] read_part_sector+0xb6/0x2b0 [ 261.365509][T11083] adfspart_check_ICS+0xa4/0xa50 [ 261.370974][T11083] bdev_disk_changed+0x75f/0x14b0 [ 261.376541][T11083] blkdev_get_whole+0x380/0x510 [ 261.381913][T11083] bdev_open+0x31e/0xd30 [ 261.386675][T11083] blkdev_open+0x457/0x600 [ 261.391614][T11083] do_dentry_open+0x950/0x13f0 [ 261.396901][T11083] vfs_open+0x3b/0x340 [ 261.401494][T11083] path_openat+0x2ee5/0x3830 [ 261.406611][T11083] do_filp_open+0x1fa/0x410 [ 261.411646][T11083] do_sys_openat2+0x121/0x1c0 [ 261.416853][T11083] __x64_sys_openat+0x138/0x170 [ 261.422312][T11083] do_syscall_64+0xfa/0x3b0 [ 261.427407][T11083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.433827][T11083] [ 261.433827][T11083] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 261.441051][T11083] lock_acquire+0x120/0x360 [ 261.446099][T11083] __mutex_lock+0x187/0x1350 [ 261.451244][T11083] nbd_queue_rq+0xc8/0xf10 [ 261.456193][T11083] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 261.462266][T11083] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 261.469125][T11083] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 261.475632][T11083] blk_mq_run_hw_queue+0x348/0x4f0 [ 261.481284][T11083] blk_mq_dispatch_list+0xd0c/0xe00 [ 261.487004][T11083] blk_mq_flush_plug_list+0x469/0x550 [ 261.492901][T11083] __blk_flush_plug+0x3d3/0x4b0 [ 261.498282][T11083] __submit_bio+0x2d3/0x5a0 [ 261.503311][T11083] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 261.509473][T11083] block_read_full_folio+0x599/0x830 [ 261.515300][T11083] filemap_read_folio+0x114/0x380 [ 261.520863][T11083] do_read_cache_folio+0x350/0x590 [ 261.526499][T11083] read_part_sector+0xb6/0x2b0 [ 261.531795][T11083] adfspart_check_ICS+0xa4/0xa50 [ 261.537259][T11083] bdev_disk_changed+0x75f/0x14b0 [ 261.542815][T11083] blkdev_get_whole+0x380/0x510 [ 261.548190][T11083] bdev_open+0x31e/0xd30 [ 261.552965][T11083] blkdev_open+0x457/0x600 [ 261.557908][T11083] do_dentry_open+0x950/0x13f0 [ 261.563196][T11083] vfs_open+0x3b/0x340 [ 261.567784][T11083] path_openat+0x2ee5/0x3830 [ 261.572896][T11083] do_filp_open+0x1fa/0x410 [ 261.577920][T11083] do_sys_openat2+0x121/0x1c0 [ 261.583136][T11083] __x64_sys_openat+0x138/0x170 [ 261.588515][T11083] do_syscall_64+0xfa/0x3b0 [ 261.593550][T11083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.599988][T11083] [ 261.599988][T11083] -> #1 (set->srcu){.+.+}-{0:0}: [ 261.607154][T11083] lock_sync+0xba/0x160 [ 261.611845][T11083] __synchronize_srcu+0x96/0x3a0 [ 261.617321][T11083] elevator_switch+0x12b/0x640 [ 261.622607][T11083] elevator_change+0x2d4/0x450 [ 261.627892][T11083] elevator_set_default+0x186/0x260 [ 261.633617][T11083] blk_register_queue+0x34e/0x3f0 [ 261.639184][T11083] __add_disk+0x677/0xd50 [ 261.644051][T11083] add_disk_fwnode+0xfc/0x480 [ 261.649260][T11083] nbd_dev_add+0x717/0xae0 [ 261.654197][T11083] nbd_init+0x168/0x1f0 [ 261.658878][T11083] do_one_initcall+0x233/0x820 [ 261.664174][T11083] do_initcall_level+0x104/0x190 [ 261.669645][T11083] do_initcalls+0x59/0xa0 [ 261.674502][T11083] kernel_init_freeable+0x334/0x4b0 [ 261.680231][T11083] kernel_init+0x1d/0x1d0 [ 261.685094][T11083] ret_from_fork+0x436/0x7d0 [ 261.690218][T11083] ret_from_fork_asm+0x1a/0x30 [ 261.695517][T11083] [ 261.695517][T11083] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 261.703345][T11083] validate_chain+0xb9b/0x2140 [ 261.708637][T11083] __lock_acquire+0xab9/0xd20 [ 261.713866][T11083] lock_acquire+0x120/0x360 [ 261.718901][T11083] __mutex_lock+0x187/0x1350 [ 261.724027][T11083] elevator_change+0x19b/0x450 [ 261.729314][T11083] elevator_set_none+0x42/0xb0 [ 261.734599][T11083] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 261.740933][T11083] nbd_start_device+0x17f/0xb10 [ 261.746335][T11083] nbd_genl_connect+0x135b/0x18f0 [ 261.751905][T11083] genl_family_rcv_msg_doit+0x212/0x300 [ 261.758010][T11083] genl_rcv_msg+0x60e/0x790 [ 261.763073][T11083] netlink_rcv_skb+0x208/0x470 [ 261.768373][T11083] genl_rcv+0x28/0x40 [ 261.772911][T11083] netlink_unicast+0x82c/0x9e0 [ 261.778242][T11083] netlink_sendmsg+0x805/0xb30 [ 261.783555][T11083] __sock_sendmsg+0x219/0x270 [ 261.788799][T11083] ____sys_sendmsg+0x505/0x830 [ 261.794106][T11083] ___sys_sendmsg+0x21f/0x2a0 [ 261.799324][T11083] __x64_sys_sendmsg+0x19b/0x260 [ 261.804818][T11083] do_syscall_64+0xfa/0x3b0 [ 261.809952][T11083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.816375][T11083] [ 261.816375][T11083] other info that might help us debug this: [ 261.816375][T11083] [ 261.826603][T11083] Chain exists of: [ 261.826603][T11083] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#49 [ 261.826603][T11083] [ 261.840358][T11083] Possible unsafe locking scenario: [ 261.840358][T11083] [ 261.847808][T11083] CPU0 CPU1 [ 261.853173][T11083] ---- ---- [ 261.858538][T11083] lock(&q->q_usage_counter(io)#49); [ 261.863924][T11083] lock(fs_reclaim); [ 261.870431][T11083] lock(&q->q_usage_counter(io)#49); [ 261.878449][T11083] lock(&q->elevator_lock); [ 261.883173][T11083] [ 261.883173][T11083] *** DEADLOCK *** [ 261.883173][T11083] [ 261.891327][T11083] 6 locks held by syz.1.1382/11083: [ 261.896548][T11083] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 261.904936][T11083] #1: ffffffff8f59f7e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 261.913942][T11083] #2: ffff888025254988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0 [ 261.925369][T11083] #3: ffff8880252548d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0 [ 261.936503][T11083] #4: ffff888025259448 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: elevator_change+0x180/0x450 [ 261.947207][T11083] #5: ffff888025259480 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: elevator_change+0x180/0x450 [ 261.958210][T11083] [ 261.958210][T11083] stack backtrace: [ 261.964109][T11083] CPU: 1 UID: 0 PID: 11083 Comm: syz.1.1382 Not tainted syzkaller #0 PREEMPT(full) [ 261.964132][T11083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 261.964144][T11083] Call Trace: [ 261.964154][T11083] [ 261.964163][T11083] dump_stack_lvl+0x189/0x250 [ 261.964189][T11083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.964210][T11083] ? __pfx__printk+0x10/0x10 [ 261.964248][T11083] ? print_lock_name+0xde/0x100 [ 261.964273][T11083] print_circular_bug+0x2ee/0x310 [ 261.964295][T11083] check_noncircular+0x134/0x160 [ 261.964323][T11083] validate_chain+0xb9b/0x2140 [ 261.964357][T11083] __lock_acquire+0xab9/0xd20 [ 261.964386][T11083] ? elevator_change+0x19b/0x450 [ 261.964401][T11083] lock_acquire+0x120/0x360 [ 261.964426][T11083] ? elevator_change+0x19b/0x450 [ 261.964447][T11083] __mutex_lock+0x187/0x1350 [ 261.964469][T11083] ? elevator_change+0x19b/0x450 [ 261.964486][T11083] ? xa_find_after+0xae/0x430 [ 261.964512][T11083] ? xa_find_after+0x402/0x430 [ 261.964535][T11083] ? elevator_change+0x19b/0x450 [ 261.964549][T11083] ? xa_find_after+0xae/0x430 [ 261.964573][T11083] ? __pfx___mutex_lock+0x10/0x10 [ 261.964597][T11083] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 261.964620][T11083] elevator_change+0x19b/0x450 [ 261.964635][T11083] ? elevator_set_none+0x37/0xb0 [ 261.964653][T11083] elevator_set_none+0x42/0xb0 [ 261.964670][T11083] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 261.964699][T11083] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 261.964728][T11083] ? sysfs_add_file_mode_ns+0x259/0x300 [ 261.964760][T11083] nbd_start_device+0x17f/0xb10 [ 261.964781][T11083] ? device_create_file+0xf4/0x1c0 [ 261.964802][T11083] nbd_genl_connect+0x135b/0x18f0 [ 261.964824][T11083] ? __pfx_nbd_genl_connect+0x10/0x10 [ 261.964846][T11083] ? __nla_parse+0x40/0x60 [ 261.964865][T11083] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 261.964897][T11083] genl_family_rcv_msg_doit+0x212/0x300 [ 261.964927][T11083] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 261.964960][T11083] ? stack_trace_save+0x9c/0xe0 [ 261.964983][T11083] genl_rcv_msg+0x60e/0x790 [ 261.965011][T11083] ? __pfx_genl_rcv_msg+0x10/0x10 [ 261.965036][T11083] ? __pfx_nbd_genl_connect+0x10/0x10 [ 261.965059][T11083] netlink_rcv_skb+0x208/0x470 [ 261.965080][T11083] ? __lock_acquire+0xab9/0xd20 [ 261.965105][T11083] ? __pfx_genl_rcv_msg+0x10/0x10 [ 261.965149][T11083] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 261.965177][T11083] ? down_read+0x1ad/0x2e0 [ 261.965201][T11083] genl_rcv+0x28/0x40 [ 261.965225][T11083] netlink_unicast+0x82c/0x9e0 [ 261.965247][T11083] ? __pfx_netlink_unicast+0x10/0x10 [ 261.965265][T11083] ? netlink_sendmsg+0x642/0xb30 [ 261.965286][T11083] ? skb_put+0x11b/0x210 [ 261.965315][T11083] netlink_sendmsg+0x805/0xb30 [ 261.965341][T11083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.965365][T11083] ? aa_sock_msg_perm+0xf1/0x1d0 [ 261.965383][T11083] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 261.965403][T11083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.965425][T11083] __sock_sendmsg+0x219/0x270 [ 261.965443][T11083] ____sys_sendmsg+0x505/0x830 [ 261.965470][T11083] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.965498][T11083] ? import_iovec+0x74/0xa0 [ 261.965523][T11083] ___sys_sendmsg+0x21f/0x2a0 [ 261.965548][T11083] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.965588][T11083] ? __fget_files+0x2a/0x420 [ 261.965603][T11083] ? __fget_files+0x3a0/0x420 [ 261.965622][T11083] __x64_sys_sendmsg+0x19b/0x260 [ 261.965648][T11083] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 261.965677][T11083] ? rcu_is_watching+0x15/0xb0 [ 261.965696][T11083] ? do_syscall_64+0xbe/0x3b0 [ 261.965720][T11083] do_syscall_64+0xfa/0x3b0 [ 261.965741][T11083] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.965760][T11083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.965778][T11083] ? clear_bhb_loop+0x60/0xb0 [ 261.965797][T11083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.965815][T11083] RIP: 0033:0x7f8408f8eba9 [ 261.965831][T11083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.965848][T11083] RSP: 002b:00007f8409ee2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.965866][T11083] RAX: ffffffffffffffda RBX: 00007f84091d5fa0 RCX: 00007f8408f8eba9 [ 261.965879][T11083] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000005 [ 261.965891][T11083] RBP: 00007f8409011e19 R08: 0000000000000000 R09: 0000000000000000 [ 261.965902][T11083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.965912][T11083] R13: 00007f84091d6038 R14: 00007f84091d5fa0 R15: 00007fff4651d928 [ 261.965933][T11083] [ 262.486507][ T5874] block nbd0: Receive control failed (result -107) [ 262.486513][ T51] block nbd0: Receive control failed (result -107) [ 262.520427][T11083] nbd0: detected capacity change from 0 to 32