last executing test programs: 2.579453733s ago: executing program 3 (id=4857): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r3 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x8919, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="660a0000000000006111bc00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000200)=r7, 0x4) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x1}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x48080) 2.483502198s ago: executing program 2 (id=4858): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="7800000010000305000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="01b8040000000000480012800b0001006772657461700000380002800400120008001400fbffffff05000a0001"], 0x78}}, 0x0) 2.248542163s ago: executing program 2 (id=4859): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x5, 0x0, &(0x7f0000000280)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000fc0)={{0x14, 0x3f9, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x6008044}, 0x40840) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x6, 0x0, 0x3, 0x2, 0x7, 0x8}, 0x20) 2.141365082s ago: executing program 2 (id=4860): syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="bd606a2a7f2c24475466a8f086dd60902d0300380000fe880000000000000000000000000001fe8000000000000000000000000000aa6c060000000000000728000004000805040006000000000000000300000000000000010000000000cb0001000000000b0022c20400008001f143b623f9ab5aae1b050d4e272f2c348ac894a52a6750e74db7"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001900)={0x1c, 0x43, 0x107, 0xffffdffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x145}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf25000100000000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x200048c0}, 0x20008000) (async) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0x773, 0x4) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000711201000000000095000000000000000d693e507098df1be268e645a0708ce8838dd1c486536acf43d6de6350c537e647d3253ad91f554613dfe8f9a79f6daec37a8e58610ef3e5c39f0ab4f633a22754f3f3b8ca6239331909f476076c68141f7c92e8493770915d2572c0d74a8221753f8b8e369fb3225cb3a5bdc636044f034c04553bfefd6c0f29f9c017c5ea70de7d879d0017a8c9c97ba2f7341a0495ba0270a0b31a62ed243d14422288e84a3f4fea8a7a506b8b59cef4571cd898784df5b37c359fbb182d0f9d2108ae65fa54a585410f79959fea963db9b68a8bd141080d4d3fca"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (rerun: 64) 1.946518054s ago: executing program 2 (id=4861): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000980)={0x9, 0x47, 0xfffffffc, 0x40000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005200010000010000040000000a00000008000100feffffff"], 0x1c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x90000009}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9df}, 0x1c) socket$netlink(0x10, 0x3, 0x0) socket(0x1d, 0x80802, 0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) sendmsg$nl_route(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 1.937376181s ago: executing program 4 (id=4862): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000000000000000000000f3ff020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r5, &(0x7f0000000140)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000040)='Z', 0x1}], 0x1, &(0x7f0000000200)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x800, 0x2, 0x6, 0x7e15, 0x2a2b, 0xfff, 0x8dc3}}], 0x48, 0x4855}, 0x24000052) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xcbcce8134d10c9c2) 1.872511371s ago: executing program 1 (id=4863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x19fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) close(0x3) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r3, 0x80) accept$netrom(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x82, &(0x7f0000000740)={0x0, 0x1006}, 0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000280)={r9, 0x5}, 0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r9, 0x0, 0x2}, 0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000002f80)={0x6, 0xcea1, 0x0, 0x1, 0x2493, 0x5, 0x80, 0x7, 0x0}, &(0x7f0000002fc0)=0x20) sendmmsg$inet_sctp(r4, &(0x7f0000003800)=[{&(0x7f0000000040)=@in={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000180)="6c0d231822f8c6283e53551c95b65ca8ad662347a803f75f9eacf555798eb16aa8b5e06d3ca865a32950d14fa0aa89d4a812128cec8429e9c8842caaad9d8377d99ccc53a065a0a90bea898d10", 0x4d}, {&(0x7f0000000280)="a59e0dbc0ff7bfd7fcec5dbeee5e322476a826ecfa70abd9751726764c2ed68a5eb19d92ce881875f5ee27ab60d0afbe26d0a59596d8e34cfb2b95b4be0f92a00b9dc6da36b858efddadc2", 0x4b}, {&(0x7f0000000440)="f8ee89b3a9", 0x5}, {&(0x7f0000000540)="66940628807ac01e1d261efdd5d602b073577ab26340ca3c4cd3ac05a29935430597ac16436fc33ce22ff81302a2e85f41cf6688f11256325294be86201f250f2ccd1964a7e961deb72ad0fcc152c451a6a82402665b232b3a1077f6d7d41ee9c5abbf45fccd2a3fcede", 0x6a}, {&(0x7f00000005c0)="98c28ac6f40f75a126be5ea0b6f95869ee04c9308c9b31b1633cfcb63e2fffc007d72f14ad199dd316fa292f527e6cdcab7edf51d898e98b829a77ef5cebf111eee670560efe3211ec0f37238967229a2822c457540164cf0e1b159218e34df2e936bbd271ec662280a5dbf6f994aa7d23f3e11de67c714ff1f31b40682eea80b5fc7f3a33d0a5b1ef1df6dee649e2601af7ed4c82d0251df6e9f539005bcbfa53f895fc0e35502fef872269ecc0498951ce52f03990550aa8643e0cecb1d55d9a5c3dc71dad1e93dd270f3b40f452e365a77c1a2124c27c965909de7e142279342917b9f566969c59812f79cf8989", 0xef}, {&(0x7f00000006c0)="3cfa56c417e94fefb63287fa0637181988785f3e3e7dd488d8f1", 0x1a}, {&(0x7f0000000700)="29597e7f8cc058cb37f2a984950faae81f1fd3656bb3dcb31d3b4e7a30ed246bf4427d5033b30e3a2c4c3f6d4a9080ffd98b1af3c4f4f0302d69a547c55c690e0a33e6ad989462544fa7a36cdfd0ef8b69422b1a24f601f6b9489ccc7f3acdc4ba2e929c5efbc1beb5c22b2eb09f0ca6376aa71dcae56ba91cfc8f76921905fb3e201a9c28461e59", 0x88}, {&(0x7f00000007c0)="96428484579e7012b7c4496e2ee30b551b19b0a882b7f4c4a36e72255bc67c1d5eacc79d5edc57dae7c8e528b8016b7913fd32bc566af4733f8ac34842d2", 0x3e}], 0x8, &(0x7f0000000880)=[@init={0x18, 0x84, 0x0, {0x2, 0x9, 0x4, 0x39}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}], 0x58, 0x4000}, {&(0x7f0000000900)=@in={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000940)="1e1f257682ae40106a07ea38592a12b8bf4ff3484ade8e24fc185496ca07442e00328517849c7f1a06a401e9e5bdb89323f958b6759550777a7ec28657d4f774df9f8339ecfe57a87326113059a6cdbdada1a80a037b0d054322d829", 0x5c}, {&(0x7f00000009c0)="0c5ca7c027b35af545520aaf3a8ecb915da74a779995d4b0ec5a812e0be951b64af9f563cff62cb7747fd37d0b16e9249071ab26792f4642f86120a9a71e7fc134690bc6ad3e3cff20e834fdfd9a6ceeb096145ad847dc6b57145740721b81d038f7cd455777aaf586b97c2b1d3d", 0x6e}, {&(0x7f0000000a40)="ae735a68fa31f048cb9ff9293ed625076a823c1dedddb120d55254332c11ce7f9b9ee10f4dd7997fe18b16e256b12e2126c724cb12cfbcf298273ab4ea38fcab233bcd430960d54f4cabfc3d1bbed28ed2e174b5c5e03898037a2d7710fe305ce7f6991cb4de1dae94d52e8bb56bd8f58e7abd", 0x73}, {&(0x7f0000000ac0)="8406aa0178c8be70ed80ed3fdec2b7c1863099977d9a59b2244d4a6dfa7441f624919b53ccc048794dd3780f837345efa970763f2f1a2fd149e2915b59b2c6e1141d37ea012de4746ca90fede694fd5fd1ff39dc3d8c1549d0d129060d7ac8d7e9aed8320f351061abdc595f0dbd6786d9cba02302c2b8c9fe8b0e92d6188e0a079a08b364e6aa8629ed03dd39ee7474396b18d381265b5d27049bf491b39bbb70878a502450c8aee8dccbb3f16a00f832cd3a86fad6eb20d571ed0dc33dd5c9f5f72ba8", 0xc4}, {&(0x7f0000000bc0)="ad8b15e90befdccc7d48d0efcbe4911edeab3c35e68410165b4d8f009389b86a35dcd3f9cab15b7ef07c89906baceb4df99dc008a614802e1156bc032ca28deb83a066880383e4c6544fc08f898e15682ccc0ba013b56070f7d2f13883d0d7c56b6be49c3db64552d01b21aaefe997c88da74e06fe270810c409af14782815d8e7656ddbe911ce4816598f9cfa715901dce94c499327d392550844254b0c9632e2077d73d21011f6d6dc2cd0b05b69ae7f6e07831987c0175dcc2bd64f5d91", 0xbf}, {&(0x7f0000000c80)="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", 0x1000}], 0x6, &(0x7f0000001d00)=[@sndinfo={0x20, 0x84, 0x2, {0x401, 0x2, 0x7, 0x21, r9}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}}], 0x40, 0x2}, {&(0x7f0000001d40)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f0000002f00)=[{&(0x7f0000001d80)="46adde3b7b340ed407e46fb65018a4861063af9e625e1c18b5cfcb8dac44dc7838a0645cf8be00a2a5170b494860cfbbc27842847885ec6c0c76a3ace19717185d2dc319ce6d87e59e1f4f7b20d575b7a4cd14b4ac760ebf5428623f26c488e02f68d59f8c639d331032da63db4775a8e527020943", 0x75}, {&(0x7f0000001e00)="265ace3f45b399c54cf649433ebe02ca3e4f5483d5f4a30f643cf3342422e3d5", 0x20}, {&(0x7f0000001e40)="f1ced2d85c4e0bcab41e382e39983b291990a87b738910e910d255d917e2b1327a8cea4520c0396f8dfa1e86b90fae9de07851e7f793efe8a1f6f454bbfceb3fef89cd0d192dcf5aa22ec530f736f8ad1f405f12f137bc38358970fc677b08dbe95a343cb24cf4ef6125083d62b30ea024", 0x71}, {&(0x7f0000001ec0)="bf742df45099d85b6f1c39676f29d6108a93b2545ee481763655617bd7340a2c064e99c1c89036e8f585d3191bac881ca6ed3ab703374a2023227159", 0x3c}, {&(0x7f0000001f00)="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", 0x1000}], 0x5, &(0x7f0000003000)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @sndinfo={0x20, 0x84, 0x2, {0xfff3, 0x8203, 0x4, 0x6, r10}}], 0x38, 0x4080080}, {&(0x7f0000003040)=@in6={0xa, 0x4e23, 0x8e5f, @mcast1, 0x200}, 0x1c, &(0x7f0000003440)=[{&(0x7f0000003080)="cd86b9e1dc92e34f3ac05dde72b7ead017768f1364dbe62e66a7d395d916b4019af7b520fd6ac614f56e6645ba052517823d4dd31275e3ff15b588961bc7fa5a84f244a7a43bc4b650bde20d60d22886f60ecd066d28ab31d0a72ff899f396d542a8d7ddc58cda56c1ea2cf10cf972f9c5c8e359530905e63f08a97b7bf4d1e55894563ead71b4824e6cef23e23f3eeb3f60283a69945eb456f363b82c9aaf43bb709d2d99d209db0323cae2dce57d64609c0a2a6c4f5a02ce7c242955428023d7f04a4de27d563222c8b0ba60", 0xcd}, {&(0x7f0000003180)}, {&(0x7f0000003240)="05581ebf6a8c1ae5aec3b5e69789f94422afdfdef8179a28622bbc7f360beff37b5e98da799c5c76a0a5bb50781ecc9b75b94b6ebb5abc535d74e9c0eea799e5b199ed224682c9ee58377cbd1d477f1b0a03285a8faeb4fbf694888f2c30daa5212e7cf0f032e7e353531e8e9fc8ef0767ce5deed9f37bc04670ac2c74bdee0df5364fcde64125cb8fc1af17746bedbf123a8a18f52c84bc2c5ac3c738cfc826fd06db88526073a438b15e9b8c", 0xad}, {&(0x7f0000003300)="93bd57dcb37b3a45985e39f1c253184810ead9fbaf46ae4d854fcffc24c10a459f43a907559cc571cee6340260513755d094b4ceee90931dd67542459aca14a43550cff71c0622fb61ec11f27f0b6a9ded31ee40a1d660825fd992620f19821f2f42a6f2d2df6f1afa644b4c015e8354c915f4878333db5078200ecae0083375ea892c9f48a1488e4748d4b4e96bb5a2dd1e9029344734131547a0dbcce71a93aa797c47754f87b02e61e0f83911", 0xae}, {&(0x7f00000033c0)="9e596707016236496383ac716c6ec6e48257b65985919c3947b6d7ba3a7732c3d76c8a88abfd56c4693a8f095a3b526e9141793a369c279a0ce5d86cb7eb11960285d7fb7383b6def40b7e28efcd747583af6637a00021", 0x57}], 0x5, 0x0, 0x0, 0x40}, {&(0x7f00000034c0)=@in6={0xa, 0x4e23, 0x7, @private0, 0x7}, 0x1c, &(0x7f0000003780)=[{&(0x7f0000003500)="93ddb2fd910c935cbbf66686a79a9dd5124f24ada7f69b171de299984f4d312c7b16848197693cf5e28961924fb627f13751cf9035df4821f4b3260db5ce4157db159b8ccca4eec96a85bfefdbfdc1fdc3a2b19f3f319cb538d4951fecc939e7d390343673e347788233563b14547d527ea129c56206e3b9b7", 0x79}, {&(0x7f0000003580)="247d5cd053b6fc3241f5972ef687d5ecec0e4627e444fe5acbae2a2936a240eceb5bb387fb0425f55e17c9021febd3f614be5d1486af6e7a4a678337af0294efa3f1749f991f835374ac485b2f3b007a7ff6301ebff65cdfb7e26f3f3fe846132104c11c513e5a04f08ea169584c100951a7cf9e13f13b384f41817cbd1a6043526982547a0a2e3e3ad9f5ee4aadb0e4652017fff5ce234b5bcbfd56b0d43f767181964c1cc19ca9fc77f3c0d9272839dbf95587c841885267cb6b9d471adf312704851582ca6fa5067725e3eb08585c5e84c65d5dfe11fc79de976dd4d522ad21ca3e63d323251179d2", 0xea}, {&(0x7f0000003680)="baf4c56292bb0bc642aa2f9abe3049d706871f5008db00855af1a2e571d0c3c1ebd74a73511ca5719b45437b16a9819aab29b30a7c377b6f195813a16c89f7115135eb6668a228d683b454563f0f0314385047946e266415e9e6b8ddcd13f5a31ec87971faa8ce252abbbd9a2a840395a66ec351eb81b9cabd4d2049f271799a7a3ab4a5627efc53ed66f410d5660d20445ea60cd67fca1197a71a2d5abfa96b8b8fd5c702d0baf57a2bbcf8f54041e65d5d4926abec929a8e16598e274df78fcebef569a790afda90f07b33f164", 0xce}], 0x3, &(0x7f00000037c0)=[@init={0x18, 0x84, 0x0, {0x8, 0x0, 0x0, 0x3}}], 0x18, 0x20000010}], 0x5, 0x24048000) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) read(r2, &(0x7f00000003c0)=""/123, 0x7b) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4850}, 0x0) accept(r2, 0x0, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x2c, r11, 0x1, 0x70bd28, 0x25dfdbfc, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) 1.827440666s ago: executing program 3 (id=4864): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff00000000010000000c0005006c010004000008000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r2], 0x6c}}, 0x4004800) 1.481591211s ago: executing program 4 (id=4865): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYBLOB="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", @ANYBLOB='\x00'/20, @ANYRESDEC=r0, @ANYBLOB="00000000000000000000000000000000000000800000000000"], 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket(0x10, 0xa, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000f5b12abd7041eb00fddbdf250000000066", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(r2, &(0x7f00000001c0)='io.stat\x00', 0x275a, 0x0) splice(r4, &(0x7f0000000040)=0x7ffffffffffffffe, r3, 0x0, 0xd, 0x8) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001040)}, 0x100) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x7}, &(0x7f0000000380)=0x8) socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x5e, &(0x7f00000001c0)=ANY=[], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0xfffd, 0x0, 0x42804}, 0x0) socket(0x400000000010, 0x0, 0xfffffffd) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000002060102000000000000000a0000000005000400000000000900020073797a30000000000500010007000000050005000a00000014000780080011400000000108001240000117ff0c0003006861"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.290179675s ago: executing program 3 (id=4868): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000040000000200000000000008000000000000610022f0192477e33d7ce4"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257313b453b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) 1.14898378s ago: executing program 0 (id=4869): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000040000000200000000000008000000000000610022f0"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257313b453b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) 1.089901899s ago: executing program 3 (id=4870): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c8c4}, 0x80) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r8, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x4, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r7, 0x3) sendmsg$inet6(r6, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x905, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) sendfile(r0, r5, 0x0, 0x20000000002) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910900000000000630aacff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00000700000061117b000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 976.63705ms ago: executing program 0 (id=4871): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x4b, 0x0, &(0x7f0000000440)=0x3c) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r5, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xc4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x6c, 0x24, 0x20, 0x2000000, 0x10, {0x0, 0x0, 0x0, r3, {0x9}, {0xffff, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_RATE={0x14, 0x6, {0x7ff, 0x6, 0x0, 0x2}}]}}}]}, 0x6c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) getsockopt$sock_buf(r4, 0x1, 0x4b, 0x0, &(0x7f0000000440)=0x3c) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r5, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xc4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x6c, 0x24, 0x20, 0x2000000, 0x10, {0x0, 0x0, 0x0, r3, {0x9}, {0xffff, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_RATE={0x14, 0x6, {0x7ff, 0x6, 0x0, 0x2}}]}}}]}, 0x6c}}, 0x0) (async) 904.883996ms ago: executing program 4 (id=4872): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000001200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800000000119078000000000000000000004e20001040784200000000"], 0x0) 857.352046ms ago: executing program 4 (id=4873): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffa, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x11}], {0x95, 0x0, 0x0, 0x2000}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 835.743038ms ago: executing program 1 (id=4874): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet6(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d058050639", 0x99}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2e75edf622add4302f913d9", 0xb2}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000004c00)="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", 0x1000}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d32", 0xe}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e2", 0x3f}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2", 0x2e}], 0x2, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7", 0x11}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa46461", 0xe}], 0x1}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="180000001000000000000000ba9a6a1f58f005fca6aacf7ba40000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000240)=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000640)="06", &(0x7f0000000440)=@tcp=r7, 0x2}, 0x20) 732.70889ms ago: executing program 0 (id=4875): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000280)) (async) r6 = gettid() (async, rerun: 32) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x908a00}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r8, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x80}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x67}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7c}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x71}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc095}, 0x4080) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[{0x7b, 0x6, 0xc, 0x9}]}, 0x5fc00983c5d6e801) r9 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdc02, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc890}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f0000001ff0)={0x1d, r11}, 0x10) sendmmsg$inet6(r5, &(0x7f0000002000), 0x0, 0x4000001) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xefff, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 667.206055ms ago: executing program 1 (id=4876): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001800dd8d0310000003000000020000000000000600000020"], 0x38}}, 0x84) 653.656053ms ago: executing program 4 (id=4877): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0x5f456000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2040000}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 516.786006ms ago: executing program 0 (id=4878): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x4084) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="880545f7d1cbcfcbb5b742eab1e6f4890ab46c2dc26888dd0b36c9e87769f75842191f94df27dbb8455b08b5ec0c1e330b3c402b7e8712282a2271a730c6727bd57ba368bf45eb6950fef78f9fa434d1b0c8f460c259746d87edf5d43c0f2e0650de03692bbce4619d940d2b662fa481aced13d0d4", 0x75}, {&(0x7f00000003c0)="0d820c27c585410cb6c4927a91079c9bfed4cb9083a8e9253cb8dbeb140ff0866ead37a02c113467edf41a7b7b1f09a2510f701451babc739211806ad77d87d34edb012ec45cfafbca825045dd2245b387700ee2530acfd3850958e33150f9927fe117a7c6d42473558aafba906839798828b92f8e4b9826afdb54c3d276e7a764be84943f236d9899be6926aae0f4b0b67d3e7161a83a30a93fa3077725b5cb2036c1e8cc6ffd0fd4c9fe9f5f1e4b3fdf298b0786c8fc1dc7dddf0ee4ac29e3b14d", 0xc2}, {&(0x7f0000000680)="4b397e4aee28aa9b0d1cf8b1501e65eb34bed908ec9ddeb7d77152dfe606ec413b5b2fe734f4a81ece03e0b9ca853d3be9dcd1fbdc7dc51ebced1204ad629c5b1f5d29262a9f8e7ed50b299ac976b4dab0197f3033c488d217bca172f0ba08e1a04ab50b616b5ac0050bb42f097e61aa4c7a29ccc8b0b74b7905e01d8c8b9d10f26c98e200ee5ac0ab134fec7cc9babc4a5b8c6571562bcd9bd7e7f7e09ecbb82d5a9ccb9e5322d027232a81338d0a21bb844635406a9f932f5299674653e47c0992818267a1869ff88ef43e7cc239887d41173bd334760c1ee4b9bda17ec11c15e05b06"}, {&(0x7f0000000780)="d5a97bb9217af1f4728654cb9167fa6f14509fce8b4f9c465f835b52d7d0b0d436b0bac97db77f417bda20758e78f479889e7747b596b1bbf9f85f2508ac6e4acbcaa846137ca8146f4d6321b52840ab6cb14995e855668411077a6079e401b97ef9a70121f433d04a92c08a3a5a928c8399508748a36cc8c34bc46a3aeca657995382931efac308e3e2cf0e12055d35dd114ae9d775bd05d2b82fcd339b9b36c1a35d3730161f0b7e2799326c067443e46f65a4b726f552e3767aead8fe980506225faa"}], 0x2, &(0x7f00000005c0)=[@iv={0x30, 0x117, 0x2, 0x18, "5be4a24de8ea96f00e06226f09f5178eea5bc89b77882fc4"}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x5639}, @assoc={0x18, 0x117, 0x4, 0x7ff}, @op={0x18, 0x117, 0x3, 0x39d636acd90835fc}, @assoc={0xffffffffffffff1f, 0x117, 0x4, 0x28}], 0xa8, 0x24044844}], 0x1, 0x0) 498.603766ms ago: executing program 4 (id=4879): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x451, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440), 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000800)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @empty}}]}, 0x110) sendmsg$inet(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x20, 0x3, @private1, 0x9}]}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/274, 0x112}], 0x1}, 0x10182) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="38010000160001"], 0x138}}, 0x844) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000040)={r5, @in6={{0xa, 0x4e20, 0x6ba5, @empty, 0x43}}, 0x5}, 0x90) sendmsg$sock(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x3d, 0x303}}], 0x18}, 0x4000081) 479.853471ms ago: executing program 1 (id=4880): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000040000000200000000000008000000000000610022f0192477e33d7ce4"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257313b453b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) 371.716174ms ago: executing program 1 (id=4881): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x13, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0xcd83, 0x0, 0x0, 0x0, 0xfffdfffd}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}, {0x85, 0x0, 0x0, 0x70}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4000000}, 0x50) 236.99105ms ago: executing program 0 (id=4882): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) pselect6(0x40, &(0x7f0000000a80)={0xa, 0xf, 0x5, 0x7fffffffffffffff, 0x3, 0xfffffffffffffff9, 0x5, 0x8}, 0x0, 0x0, &(0x7f0000000b40), 0x0) (async) pselect6(0x40, &(0x7f0000000a80)={0xa, 0xf, 0x5, 0x7fffffffffffffff, 0x3, 0xfffffffffffffff9, 0x5, 0x8}, 0x0, 0x0, &(0x7f0000000b40), 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x34, r3, 0x21, 0x70bd23, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4088001}, 0x4048806) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x400) getpid() (async) r6 = getpid() ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000140)=r6) (async) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000140)=r6) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x400c941) (async) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x400c941) clock_gettime(0x3, &(0x7f0000000180)) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000100)=0x9, 0x4) socket$netlink(0x10, 0x3, 0x7) 236.590995ms ago: executing program 1 (id=4883): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000036c0)={0x0, 0x0, &(0x7f0000003680)={&(0x7f0000003640)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd2a, 0x25dfdbfb}, 0x10}, 0x1, 0x28}, 0x40084) 236.175069ms ago: executing program 2 (id=4884): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000900008000f0fffeffa809000000fff5dd0000001000010005081000418e00000004fcff", 0x58}], 0x1) 96.809084ms ago: executing program 3 (id=4885): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@empty, @in, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x20}, {0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x1000, 0x200000000000000}, 0x800, 0x6e6bb0}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, 0x7, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0xff80}, 0x10) 95.51355ms ago: executing program 0 (id=4886): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x3c, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x3f00, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x3c}}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r2, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x50}, 0x1, 0x0, 0x0, 0x2400008c}, 0x40000) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) write$nci(r8, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r9, @ANYRES8=r11], 0x14) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r6, 0xa10, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xffffffc0}, @NFC_ATTR_VENDOR_ID={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x10000}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@dellink={0x28, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xda23, 0x40000}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0) 66.190908ms ago: executing program 2 (id=4887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfff5, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000240000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000500010000000900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f7879000014000280080001400000000008000340000000160900010073797a30"], 0xc4}}, 0x0) 0s ago: executing program 3 (id=4888): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000500)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b953800000000030006000000000002000000000000000a09000000000000020001000000000000000a16ff000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) kernel console output (not intermixed with test programs): efc15fa0 R15: 00007ffd9ffa1f78 [ 469.363958][T17718] [ 469.364141][T17718] syz.0.3530: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 469.365462][T15940] ldm_validate_partition_table(): Disk read failed. [ 469.374551][T17718] ,cpuset= [ 469.416429][T15940] Dev nbd8: unable to read RDB block 0 [ 469.457899][T17718] / [ 469.469128][T15940] nbd8: unable to read partition table [ 469.503519][T17718] ,mems_allowed=0-1 [ 469.688393][T17718] CPU: 0 UID: 0 PID: 17718 Comm: syz.0.3530 Not tainted syzkaller #0 PREEMPT(full) [ 469.688420][T17718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 469.688431][T17718] Call Trace: [ 469.688439][T17718] [ 469.688447][T17718] dump_stack_lvl+0xe8/0x150 [ 469.688480][T17718] warn_alloc+0x249/0x340 [ 469.688512][T17718] ? __pfx_warn_alloc+0x10/0x10 [ 469.688545][T17718] ? __get_vm_area_node+0x13f/0x300 [ 469.688569][T17718] ? __get_vm_area_node+0x2b5/0x300 [ 469.688586][T17718] ? unwind_next_frame+0xa5/0x23c0 [ 469.688621][T17718] __vmalloc_node_range_noprof+0x397/0x1730 [ 469.688658][T17718] ? __lock_acquire+0x6b5/0x2cf0 [ 469.688695][T17718] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 469.688715][T17718] ? aa_file_perm+0x192/0x15e0 [ 469.688745][T17718] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 469.688759][T17718] __vmalloc_noprof+0xd2/0x120 [ 469.688775][T17718] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 469.688792][T17718] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 469.688810][T17718] bpf_prog_alloc+0x3c/0x1a0 [ 469.688827][T17718] bpf_prog_load+0x7ba/0x1ae0 [ 469.688854][T17718] ? __pfx_bpf_prog_load+0x10/0x10 [ 469.688887][T17718] ? bpf_lsm_bpf+0x9/0x20 [ 469.688905][T17718] ? security_bpf+0x7e/0x2d0 [ 469.688927][T17718] __sys_bpf+0x618/0x950 [ 469.688943][T17718] ? __pfx___sys_bpf+0x10/0x10 [ 469.688970][T17718] ? ksys_write+0x242/0x270 [ 469.688989][T17718] ? __pfx_ksys_write+0x10/0x10 [ 469.689012][T17718] __x64_sys_bpf+0x7c/0x90 [ 469.689033][T17718] do_syscall_64+0x14d/0xf80 [ 469.689052][T17718] ? trace_irq_disable+0x3b/0x150 [ 469.689064][T17718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.689078][T17718] ? clear_bhb_loop+0x40/0x90 [ 469.689096][T17718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.689110][T17718] RIP: 0033:0x7f2cef99c819 [ 469.689126][T17718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.689138][T17718] RSP: 002b:00007f2cf07db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 469.689155][T17718] RAX: ffffffffffffffda RBX: 00007f2cefc15fa0 RCX: 00007f2cef99c819 [ 469.689166][T17718] RDX: 0000000000000080 RSI: 0000200000000340 RDI: 0000000000000005 [ 469.689176][T17718] RBP: 00007f2cf07db090 R08: 0000000000000000 R09: 0000000000000000 [ 469.689185][T17718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.689194][T17718] R13: 00007f2cefc16038 R14: 00007f2cefc15fa0 R15: 00007ffd9ffa1f78 [ 469.689219][T17718] [ 469.689241][T17718] Mem-Info: [ 469.963722][T17718] active_anon:9277 inactive_anon:0 isolated_anon:0 [ 469.963722][T17718] active_file:3608 inactive_file:40101 isolated_file:0 [ 469.963722][T17718] unevictable:768 dirty:252 writeback:0 [ 469.963722][T17718] slab_reclaimable:13043 slab_unreclaimable:145389 [ 469.963722][T17718] mapped:31999 shmem:3388 pagetables:1471 [ 469.963722][T17718] sec_pagetables:0 bounce:0 [ 469.963722][T17718] kernel_misc_reclaimable:0 [ 469.963722][T17718] free:1246014 free_pcp:26603 free_cma:0 [ 470.013811][T17718] Node 0 active_anon:37108kB inactive_anon:0kB active_file:14432kB inactive_file:160208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127996kB dirty:1008kB writeback:0kB shmem:12016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14584kB pagetables:5716kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 470.059472][T17718] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 470.150691][T17718] Node 0 DMA free:12372kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:136kB local_pcp:32kB free_cma:0kB [ 470.211837][T17718] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 470.218647][T17737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3534'. [ 470.229079][T17718] Node 0 DMA32 free:1125972kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30688kB inactive_anon:0kB active_file:14432kB inactive_file:160216kB unevictable:1536kB writepending:1040kB zspages:0kB present:3129332kB managed:2552320kB mlocked:0kB bounce:0kB free_pcp:48492kB local_pcp:18876kB free_cma:0kB [ 470.260617][T17736] syzkaller0: entered promiscuous mode [ 470.294778][T17736] syzkaller0: entered allmulticast mode [ 470.304516][T17718] lowmem_reserve[]: 0 0 0 0 0 [ 470.314669][T17718] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 470.383760][T17718] lowmem_reserve[]: 0 0 0 0 0 [ 470.393897][T17718] Node 1 Normal free:3864320kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:60840kB local_pcp:30012kB free_cma:0kB [ 470.458941][T17718] lowmem_reserve[]: 0 0 0 0 0 [ 470.475182][T17718] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (M) = 15316kB [ 470.514527][T17742] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3538'. [ 470.530729][T17718] Node 0 DMA32: 4265*4kB (UM) 4292*8kB (UME) 2666*16kB (UME) 547*32kB (UME) 1017*64kB (UME) 560*128kB (UME) 616*256kB (UM) 467*512kB (UME) 302*1024kB (UME) 85*2048kB (UM) 0*4096kB = 1128452kB [ 470.591941][T17718] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 470.617148][T17718] Node 1 Normal: 2*4kB (U) 7*8kB (UM) 11*16kB (UM) 9*32kB (UM) 9*64kB (UM) 4*128kB (UM) 4*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 5*2048kB (U) 943*4096kB (UM) = 3880528kB [ 470.635917][T17718] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 470.667194][T17718] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 470.710503][T17718] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 470.738950][T17718] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 470.746896][T17751] syzkaller0: entered promiscuous mode [ 470.756613][T17752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3539'. [ 470.768208][T17718] 45086 total pagecache pages [ 470.779777][T17751] syzkaller0: entered allmulticast mode [ 470.780498][T17718] 0 pages in swap cache [ 470.820922][T17718] Free swap = 124996kB [ 470.825371][T17718] Total swap = 124996kB [ 470.836769][T17718] 2097051 pages RAM [ 470.853144][T17751] tipc: Enabled bearer , priority 0 [ 470.855994][T17718] 0 pages HighMem/MovableOnly [ 470.873735][T17749] tipc: Resetting bearer [ 470.876777][T17718] 427137 pages reserved [ 470.885893][T17718] 0 pages cma reserved [ 470.916583][T17749] tipc: Disabling bearer [ 470.965911][T17760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3544'. [ 471.933391][T17810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3560'. [ 472.191863][T17815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3563'. [ 472.203522][T17815] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 472.636120][T17843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3571'. [ 472.659373][T17843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3571'. [ 472.863585][T17853] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3574'. [ 472.955733][T17858] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 473.001140][ T11] block nbd3: Possible stuck request ffff8880267e0000: control (read@0,1024B). Runtime 60 seconds [ 473.012430][ T11] block nbd3: Possible stuck request ffff8880267e0200: control (read@1024,1024B). Runtime 60 seconds [ 473.026360][ T11] block nbd3: Possible stuck request ffff8880267e0400: control (read@2048,1024B). Runtime 60 seconds [ 473.038393][ T11] block nbd3: Possible stuck request ffff8880267e0600: control (read@3072,1024B). Runtime 60 seconds [ 473.079263][T17857] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 473.407661][T17883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3581'. [ 473.792356][T17896] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3586'. [ 473.860720][T17897] smc: net device wlan0 applied user defined pnetid SYZ0 [ 474.256883][T17907] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 474.520212][T17924] syzkaller0: entered promiscuous mode [ 474.553825][T17924] syzkaller0: entered allmulticast mode [ 474.630737][T17924] tipc: Enabled bearer , priority 0 [ 474.649526][T17922] tipc: Resetting bearer [ 474.678978][T17922] tipc: Disabling bearer [ 475.729103][T17965] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 476.201430][ T11] block nbd6: Connection timed out, retrying (0/2 alive) [ 476.210531][ T11] block nbd6: Connection timed out, retrying (0/2 alive) [ 476.217985][ T11] block nbd6: Connection timed out, retrying (0/2 alive) [ 476.227415][T17609] block nbd6: Dead connection, failed to find a fallback [ 476.234964][T17609] block nbd6: shutting down sockets [ 476.240469][ T11] block nbd6: Connection timed out, retrying (0/2 alive) [ 476.247800][T17609] blk_print_req_error: 286 callbacks suppressed [ 476.247820][T17609] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 476.265599][T17609] buffer_io_error: 286 callbacks suppressed [ 476.265619][T17609] Buffer I/O error on dev nbd6, logical block 1, async page read [ 476.280585][T17609] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 476.290996][T17609] Buffer I/O error on dev nbd6, logical block 0, async page read [ 476.299733][T17609] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 476.309670][T17609] Buffer I/O error on dev nbd6, logical block 3, async page read [ 476.319010][T17609] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 476.328722][T17609] Buffer I/O error on dev nbd6, logical block 2, async page read [ 476.336952][T15990] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 476.347372][T15990] Buffer I/O error on dev nbd6, logical block 0, async page read [ 476.356167][T15990] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 476.367825][T15990] Buffer I/O error on dev nbd6, logical block 1, async page read [ 476.375929][T15990] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 476.385754][T15990] Buffer I/O error on dev nbd6, logical block 2, async page read [ 476.393745][T15990] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 476.408740][T15990] Buffer I/O error on dev nbd6, logical block 3, async page read [ 476.416879][T15990] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 476.426550][T15990] Buffer I/O error on dev nbd6, logical block 0, async page read [ 476.434728][T15990] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 476.444850][T15990] Buffer I/O error on dev nbd6, logical block 1, async page read [ 476.453577][T15990] ldm_validate_partition_table(): Disk read failed. [ 476.460883][T15990] Dev nbd6: unable to read RDB block 0 [ 476.468346][T15990] nbd6: unable to read partition table [ 476.489010][T15990] ldm_validate_partition_table(): Disk read failed. [ 476.496772][T15990] Dev nbd6: unable to read RDB block 0 [ 476.504788][T15990] nbd6: unable to read partition table [ 476.699453][T18004] __nla_validate_parse: 2 callbacks suppressed [ 476.699476][T18004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3619'. [ 476.812476][T18002] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 476.870964][T18011] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 476.874883][T18009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3620'. [ 476.899526][T18009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3620'. [ 477.135309][T18017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3622'. [ 477.322656][T18017] bond1: option downdelay: invalid value (18446744073709547007) [ 477.331541][T18017] bond1: option downdelay: allowed values 0 - 2147483647 [ 477.359438][T18017] bond1 (unregistering): Released all slaves [ 477.707999][T18039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3630'. [ 477.776522][T18044] netlink: 'syz.3.3632': attribute type 3 has an invalid length. [ 477.803968][T18044] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3632'. [ 477.975316][T18046] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 478.058702][T18053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3634'. [ 478.089876][T18053] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3634'. [ 478.134675][T18055] syzkaller0: entered promiscuous mode [ 478.148326][T18055] syzkaller0: entered allmulticast mode [ 478.430935][T18061] nbd9: detected capacity change from 0 to 63 [ 478.462204][ T5824] block nbd9: Receive control failed (result -32) [ 478.462204][ T5144] block nbd9: Receive control failed (result -104) [ 478.705580][T18080] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3643'. [ 479.067326][T18094] batadv_slave_1: entered promiscuous mode [ 479.218832][T18091] batadv_slave_1: left promiscuous mode [ 479.520832][T18106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3651'. [ 479.801939][T18115] ieee802154 phy1 wpan1: encryption failed: -22 [ 479.930142][T18117] ieee802154 phy1 wpan1: encryption failed: -22 [ 480.676452][T18149] xt_SECMARK: invalid mode: 4 [ 481.020983][T18141] nbd10: detected capacity change from 0 to 63 [ 481.033834][ T5144] block nbd10: Receive control failed (result -32) [ 481.040528][ T5824] block nbd10: Receive control failed (result -32) [ 481.073657][T15990] block nbd10: Dead connection, failed to find a fallback [ 481.120724][T15990] block nbd10: shutting down sockets [ 481.127472][T15990] ldm_validate_partition_table(): Disk read failed. [ 481.138057][T15990] Dev nbd10: unable to read RDB block 0 [ 481.146759][T15990] nbd10: unable to read partition table [ 481.203986][T15990] ldm_validate_partition_table(): Disk read failed. [ 481.229092][T15990] Dev nbd10: unable to read RDB block 0 [ 481.259700][T15990] blk_print_req_error: 250 callbacks suppressed [ 481.259723][T15990] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.299977][T15990] buffer_io_error: 250 callbacks suppressed [ 481.299998][T15990] Buffer I/O error on dev nbd10, logical block 0, async page read [ 481.341762][T15990] I/O error, dev nbd10, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.351444][T18169] netlink: 'syz.0.3674': attribute type 2 has an invalid length. [ 481.372858][T18169] netlink: 'syz.0.3674': attribute type 9 has an invalid length. [ 481.380545][T15990] Buffer I/O error on dev nbd10, logical block 1, async page read [ 481.388750][T15990] I/O error, dev nbd10, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.406395][T15990] Buffer I/O error on dev nbd10, logical block 2, async page read [ 481.416317][T15990] I/O error, dev nbd10, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.442750][T15990] Buffer I/O error on dev nbd10, logical block 3, async page read [ 481.453593][T15990] I/O error, dev nbd10, sector 24 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.505132][T15990] Buffer I/O error on dev nbd10, logical block 12, async page read [ 481.528680][T15990] I/O error, dev nbd10, sector 26 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.581279][T15990] Buffer I/O error on dev nbd10, logical block 13, async page read [ 481.591701][T15990] I/O error, dev nbd10, sector 28 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.614777][T15990] Buffer I/O error on dev nbd10, logical block 14, async page read [ 481.627016][T15990] I/O error, dev nbd10, sector 30 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.696813][T15990] Buffer I/O error on dev nbd10, logical block 15, async page read [ 481.726602][T15990] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.763271][T15990] Buffer I/O error on dev nbd10, logical block 0, async page read [ 481.786990][T15990] I/O error, dev nbd10, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.799941][T18186] __nla_validate_parse: 4 callbacks suppressed [ 481.799961][T18186] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3679'. [ 481.825638][T15990] Buffer I/O error on dev nbd10, logical block 1, async page read [ 481.845284][T15990] nbd10: unable to read partition table [ 483.067333][T18228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3691'. [ 483.138688][T18228] vlan3: entered allmulticast mode [ 483.145035][T18228] bridge1: entered allmulticast mode [ 483.216270][T18228] bridge1: port 1(erspan0) entered blocking state [ 483.218243][T18233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3693'. [ 483.236389][T18228] bridge1: port 1(erspan0) entered disabled state [ 483.300767][T18228] erspan0: entered allmulticast mode [ 483.328729][T18228] erspan0: entered promiscuous mode [ 483.344904][T18228] bridge1: port 1(erspan0) entered blocking state [ 483.351839][T18228] bridge1: port 1(erspan0) entered forwarding state [ 483.582911][T18241] netlink: 'syz.0.3696': attribute type 1 has an invalid length. [ 483.668585][T18241] 8021q: adding VLAN 0 to HW filter on device bond1 [ 483.712056][T18244] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 483.739832][T18244] bond1: (slave batadv1): making interface the new active one [ 483.751044][T18244] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 484.136110][T18255] xt_SECMARK: invalid mode: 4 [ 484.517564][T18271] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 484.636947][T18276] FAULT_INJECTION: forcing a failure. [ 484.636947][T18276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.664195][T18270] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 484.670451][T18276] CPU: 0 UID: 0 PID: 18276 Comm: syz.4.3708 Not tainted syzkaller #0 PREEMPT(full) [ 484.670478][T18276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 484.670489][T18276] Call Trace: [ 484.670496][T18276] [ 484.670513][T18276] dump_stack_lvl+0xe8/0x150 [ 484.670544][T18276] should_fail_ex+0x412/0x560 [ 484.670575][T18276] _copy_from_user+0x2d/0xb0 [ 484.670605][T18276] __sys_bpf+0x229/0x950 [ 484.670626][T18276] ? __pfx___sys_bpf+0x10/0x10 [ 484.670658][T18276] ? ksys_write+0x242/0x270 [ 484.670681][T18276] ? __pfx_ksys_write+0x10/0x10 [ 484.670708][T18276] __x64_sys_bpf+0x7c/0x90 [ 484.670732][T18276] do_syscall_64+0x14d/0xf80 [ 484.670754][T18276] ? trace_irq_disable+0x3b/0x150 [ 484.670770][T18276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.670787][T18276] ? clear_bhb_loop+0x40/0x90 [ 484.670808][T18276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.670825][T18276] RIP: 0033:0x7f7126d9c819 [ 484.670842][T18276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.670856][T18276] RSP: 002b:00007f7124fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 484.670876][T18276] RAX: ffffffffffffffda RBX: 00007f7127015fa0 RCX: 00007f7126d9c819 [ 484.670888][T18276] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 484.670900][T18276] RBP: 00007f7124fee090 R08: 0000000000000000 R09: 0000000000000000 [ 484.670910][T18276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.670920][T18276] R13: 00007f7127016038 R14: 00007f7127015fa0 R15: 00007ffd0aad07e8 [ 484.670949][T18276] [ 485.233208][T18289] syzkaller0: entered promiscuous mode [ 485.238836][T18289] syzkaller0: entered allmulticast mode [ 485.325513][T18295] syzkaller0: entered promiscuous mode [ 485.333205][T18295] syzkaller0: entered allmulticast mode [ 485.732324][T18109] Set syz1 is full, maxelem 65536 reached [ 485.819346][T18302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3718'. [ 486.032492][T18314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3717'. [ 486.302241][T18326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3723'. [ 486.330004][T18328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3725'. [ 486.374408][T18328] bond1: option downdelay: invalid value (18446744073709547007) [ 486.384606][T18328] bond1: option downdelay: allowed values 0 - 2147483647 [ 486.399065][T18328] bond1 (unregistering): Released all slaves [ 486.488270][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 486.894835][T18342] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 486.922642][T18339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3727'. [ 487.113896][T18346] syzkaller0: entered promiscuous mode [ 487.118479][T18348] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3730'. [ 487.144204][T18346] syzkaller0: entered allmulticast mode [ 487.177672][T18346] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 487.220870][T18348] syzkaller0: entered promiscuous mode [ 487.226798][T18348] syzkaller0: entered allmulticast mode [ 487.241124][T18346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3729'. [ 487.984498][T18365] syzkaller0: entered promiscuous mode [ 488.000435][T18365] syzkaller0: entered allmulticast mode [ 488.015648][T18367] xt_SECMARK: invalid mode: 4 [ 488.056858][T18365] tipc: Started in network mode [ 488.070641][T18365] tipc: Node identity 3e3486efdc14, cluster identity 4711 [ 488.088752][T18365] tipc: Enabled bearer , priority 0 [ 488.107466][T18369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3737'. [ 488.134630][T18364] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 488.174563][T18363] tipc: Resetting bearer [ 488.239414][T18363] tipc: Disabling bearer [ 488.256719][T18369] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3737'. [ 488.290379][T18390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3743'. [ 488.367038][T18390] bond1: option downdelay: invalid value (18446744073709547007) [ 488.376585][T18390] bond1: option downdelay: allowed values 0 - 2147483647 [ 488.399757][T18390] bond1 (unregistering): Released all slaves [ 488.870945][T18412] syzkaller0: entered promiscuous mode [ 488.876546][T18412] syzkaller0: entered allmulticast mode [ 489.790112][T18454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3760'. [ 489.988379][T18460] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3761'. [ 490.174332][T18465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3765'. [ 490.272492][T18469] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.293920][T17609] block nbd7: Connection timed out, retrying (0/2 alive) [ 490.301299][T17609] block nbd7: Connection timed out, retrying (0/2 alive) [ 490.308564][T17609] block nbd7: Connection timed out, retrying (0/2 alive) [ 490.316602][T17990] block nbd7: Dead connection, failed to find a fallback [ 490.325707][T17990] block nbd7: shutting down sockets [ 490.331236][T17609] block nbd7: Connection timed out, retrying (0/2 alive) [ 490.338614][T17990] blk_print_req_error: 26 callbacks suppressed [ 490.338633][T17990] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 490.355548][T17990] buffer_io_error: 26 callbacks suppressed [ 490.355569][T17990] Buffer I/O error on dev nbd7, logical block 1, async page read [ 490.370348][T17990] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 490.381099][T17990] Buffer I/O error on dev nbd7, logical block 0, async page read [ 490.388996][T17990] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 490.399563][T17990] Buffer I/O error on dev nbd7, logical block 3, async page read [ 490.408208][T17990] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 490.418404][T17990] Buffer I/O error on dev nbd7, logical block 2, async page read [ 490.428907][T15996] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 490.438743][T15996] Buffer I/O error on dev nbd7, logical block 0, async page read [ 490.446969][T15996] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 490.456904][T15996] Buffer I/O error on dev nbd7, logical block 1, async page read [ 490.465264][T15996] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 490.475180][T15996] Buffer I/O error on dev nbd7, logical block 2, async page read [ 490.484670][T18479] netlink: 'syz.1.3764': attribute type 3 has an invalid length. [ 490.485193][T15996] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 490.504747][T15996] Buffer I/O error on dev nbd7, logical block 3, async page read [ 490.513294][T15996] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 490.523521][T15996] Buffer I/O error on dev nbd7, logical block 0, async page read [ 490.531722][T15996] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 490.543172][T15996] Buffer I/O error on dev nbd7, logical block 1, async page read [ 490.552245][T15996] ldm_validate_partition_table(): Disk read failed. [ 490.553622][T18479] netlink: 'syz.1.3764': attribute type 2 has an invalid length. [ 490.559698][T15996] Dev nbd7: unable to read RDB block 0 [ 490.573557][T15996] nbd7: unable to read partition table [ 490.603097][T15996] ldm_validate_partition_table(): Disk read failed. [ 490.609790][T18469] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.622084][T15996] Dev nbd7: unable to read RDB block 0 [ 490.628915][T15996] nbd7: unable to read partition table [ 490.757924][T18469] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.895858][T18469] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.939480][T18500] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3775'. [ 491.225086][ T6863] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.347097][T18498] netlink: 'syz.3.3772': attribute type 2 has an invalid length. [ 491.364329][T16818] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.403403][T16818] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.443146][T16818] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.543276][T18521] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 491.703587][T18524] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 491.726745][T18524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.771200][T18527] syzkaller0: entered promiscuous mode [ 491.787135][T18527] syzkaller0: entered allmulticast mode [ 491.849503][T18527] tipc: Started in network mode [ 491.856833][T18527] tipc: Node identity 423a32fa154c, cluster identity 4711 [ 491.866405][T18527] tipc: Enabled bearer , priority 0 [ 491.877034][T18526] tipc: Resetting bearer [ 491.934893][T18526] tipc: Disabling bearer [ 492.146643][T18542] syzkaller0: entered promiscuous mode [ 492.159825][T18542] syzkaller0: entered allmulticast mode [ 492.193175][T18543] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 492.580130][T18564] __nla_validate_parse: 3 callbacks suppressed [ 492.580165][T18564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3794'. [ 492.617680][T18566] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3795'. [ 492.740905][T18571] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3798'. [ 492.883198][T18570] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3798'. [ 492.935034][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3799'. [ 493.045922][T18581] Cannot find set identified by id 2 to match [ 493.577330][T18598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3807'. [ 493.763375][T18601] vlan2: entered allmulticast mode [ 493.792831][T18601] bridge1: entered allmulticast mode [ 493.806162][T18605] bridge1: port 1(erspan0) entered blocking state [ 493.827928][T18605] bridge1: port 1(erspan0) entered disabled state [ 493.851827][T18607] IPVS: stopping backup sync thread 17712 ... [ 493.856307][T18605] erspan0: entered allmulticast mode [ 493.903696][T18605] erspan0: entered promiscuous mode [ 493.933527][T18605] bridge1: port 1(erspan0) entered blocking state [ 493.940217][T18605] bridge1: port 1(erspan0) entered forwarding state [ 494.179679][T18628] FAULT_INJECTION: forcing a failure. [ 494.179679][T18628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.246373][T18628] CPU: 1 UID: 0 PID: 18628 Comm: syz.4.3813 Not tainted syzkaller #0 PREEMPT(full) [ 494.246401][T18628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 494.246414][T18628] Call Trace: [ 494.246422][T18628] [ 494.246431][T18628] dump_stack_lvl+0xe8/0x150 [ 494.246464][T18628] should_fail_ex+0x412/0x560 [ 494.246499][T18628] _copy_to_user+0x31/0xb0 [ 494.246526][T18628] bpf_test_finish+0x1db/0x6b0 [ 494.246557][T18628] ? __pfx_bpf_test_finish+0x10/0x10 [ 494.246585][T18628] ? _copy_from_user+0x94/0xb0 [ 494.246608][T18628] ? bpf_test_init+0x113/0x150 [ 494.246630][T18628] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 494.246670][T18628] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 494.246697][T18628] ? __fget_files+0x2a/0x420 [ 494.246721][T18628] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 494.246744][T18628] bpf_prog_test_run+0x2c7/0x340 [ 494.246769][T18628] __sys_bpf+0x643/0x950 [ 494.246791][T18628] ? __pfx___sys_bpf+0x10/0x10 [ 494.246827][T18628] ? ksys_write+0x242/0x270 [ 494.246850][T18628] ? __pfx_ksys_write+0x10/0x10 [ 494.246879][T18628] __x64_sys_bpf+0x7c/0x90 [ 494.246909][T18628] do_syscall_64+0x14d/0xf80 [ 494.246934][T18628] ? trace_irq_disable+0x3b/0x150 [ 494.246951][T18628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.246972][T18628] ? clear_bhb_loop+0x40/0x90 [ 494.246996][T18628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.247015][T18628] RIP: 0033:0x7f7126d9c819 [ 494.247035][T18628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.247052][T18628] RSP: 002b:00007f7124fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 494.247075][T18628] RAX: ffffffffffffffda RBX: 00007f7127015fa0 RCX: 00007f7126d9c819 [ 494.247089][T18628] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 494.247102][T18628] RBP: 00007f7124fee090 R08: 0000000000000000 R09: 0000000000000000 [ 494.247114][T18628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.247126][T18628] R13: 00007f7127016038 R14: 00007f7127015fa0 R15: 00007ffd0aad07e8 [ 494.247170][T18628] [ 494.590806][T18636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3817'. [ 494.783499][T18636] bond1: option downdelay: invalid value (18446744073709547007) [ 494.806694][T18636] bond1: option downdelay: allowed values 0 - 2147483647 [ 494.821024][T18636] bond1 (unregistering): Released all slaves [ 494.910729][T18656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3820'. [ 495.571129][T18686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3827'. [ 495.639982][T18686] bond1: option downdelay: invalid value (18446744073709547007) [ 495.648272][T18686] bond1: option downdelay: allowed values 0 - 2147483647 [ 495.658312][T18686] bond1 (unregistering): Released all slaves [ 496.121572][T18708] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3832'. [ 496.697448][T18701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.700484][T18719] nbd11: detected capacity change from 0 to 63 [ 496.725134][ T5824] block nbd11: Receive control failed (result -104) [ 496.732723][ T5144] block nbd11: Receive control failed (result -32) [ 496.986062][ T6873] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.005534][T18733] netdevsim netdevsim3 ªªªªª»: renamed from netdevsim0 (while UP) [ 497.311230][T18737] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 497.408002][T18737] bond2 (unregistering): Released all slaves [ 497.469130][ T6873] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.486056][ T6873] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.505709][ T6873] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.758645][T18772] nbd: must specify a size in bytes for the device [ 497.859878][T18776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3850'. [ 497.913658][T18776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3850'. [ 497.915219][T18780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3852'. [ 497.964095][T18776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3850'. [ 498.014592][T18784] FAULT_INJECTION: forcing a failure. [ 498.014592][T18784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.027759][T18786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3854'. [ 498.058689][T18784] CPU: 0 UID: 0 PID: 18784 Comm: syz.1.3853 Not tainted syzkaller #0 PREEMPT(full) [ 498.058716][T18784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 498.058728][T18784] Call Trace: [ 498.058735][T18784] [ 498.058744][T18784] dump_stack_lvl+0xe8/0x150 [ 498.058778][T18784] should_fail_ex+0x412/0x560 [ 498.058813][T18784] _copy_to_user+0x31/0xb0 [ 498.058840][T18784] bpf_test_finish+0x22c/0x6b0 [ 498.058874][T18784] ? __pfx_bpf_test_finish+0x10/0x10 [ 498.058904][T18784] ? _copy_from_user+0x94/0xb0 [ 498.058929][T18784] ? bpf_test_init+0x113/0x150 [ 498.058952][T18784] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 498.059045][T18784] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 498.059074][T18784] ? __fget_files+0x2a/0x420 [ 498.059100][T18784] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 498.059124][T18784] bpf_prog_test_run+0x2c7/0x340 [ 498.059149][T18784] __sys_bpf+0x643/0x950 [ 498.059171][T18784] ? __pfx___sys_bpf+0x10/0x10 [ 498.059207][T18784] ? ksys_write+0x242/0x270 [ 498.059233][T18784] ? __pfx_ksys_write+0x10/0x10 [ 498.059274][T18784] __x64_sys_bpf+0x7c/0x90 [ 498.059303][T18784] do_syscall_64+0x14d/0xf80 [ 498.059328][T18784] ? trace_irq_disable+0x3b/0x150 [ 498.059346][T18784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.059365][T18784] ? clear_bhb_loop+0x40/0x90 [ 498.059387][T18784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.059407][T18784] RIP: 0033:0x7f1fe1d9c819 [ 498.059424][T18784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.059439][T18784] RSP: 002b:00007f1fe2c13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 498.059461][T18784] RAX: ffffffffffffffda RBX: 00007f1fe2015fa0 RCX: 00007f1fe1d9c819 [ 498.059475][T18784] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 498.059488][T18784] RBP: 00007f1fe2c13090 R08: 0000000000000000 R09: 0000000000000000 [ 498.059501][T18784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.059513][T18784] R13: 00007f1fe2016038 R14: 00007f1fe2015fa0 R15: 00007ffce118cb78 [ 498.059547][T18784] [ 498.419099][T18794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3858'. [ 498.565669][T18803] sock: sock_timestamping_bind_phc: sock not bind to device [ 499.081767][T18826] syzkaller0: entered promiscuous mode [ 499.097803][T18826] syzkaller0: entered allmulticast mode [ 499.245624][ T2434] block nbd1: Possible stuck request ffff888026750000: control (read@0,1024B). Runtime 210 seconds [ 499.256751][ T2434] block nbd1: Possible stuck request ffff888026750200: control (read@1024,1024B). Runtime 210 seconds [ 499.269295][ T2434] block nbd1: Possible stuck request ffff888026750400: control (read@2048,1024B). Runtime 210 seconds [ 499.281327][ T2434] block nbd1: Possible stuck request ffff888026750600: control (read@3072,1024B). Runtime 210 seconds [ 499.315682][T18836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3873'. [ 499.396922][T18839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3875'. [ 499.630727][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807b30b800: rx timeout, send abort [ 499.640361][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88807b30b800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 499.749406][T18855] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3877'. [ 499.749851][T18856] netlink: 'syz.1.3879': attribute type 10 has an invalid length. [ 499.805934][T18857] xt_hashlimit: size too large, truncated to 1048576 [ 499.812963][T18857] xt_hashlimit: max too large, truncated to 1048576 [ 499.833450][T18856] team0: Port device dummy0 added [ 499.833835][T18858] netlink: 'syz.1.3879': attribute type 10 has an invalid length. [ 499.866430][T18858] team0: Port device dummy0 removed [ 499.878086][T18858] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 499.971727][T18862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3880'. [ 500.535889][T18884] lec:lec_atm_send: lec0: Unknown message type -129671631 [ 500.612542][T18859] lec:lec_atm_close: lec0: Shut down! [ 500.924306][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888058045000: rx timeout, send abort [ 500.934546][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888058045000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 501.818296][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.828246][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 502.963194][T18972] syzkaller1: entered promiscuous mode [ 502.979465][T18972] syzkaller1: entered allmulticast mode [ 503.084945][T17990] block nbd3: Possible stuck request ffff8880267e0000: control (read@0,1024B). Runtime 90 seconds [ 503.096268][T17990] block nbd3: Possible stuck request ffff8880267e0200: control (read@1024,1024B). Runtime 90 seconds [ 503.108018][T17990] block nbd3: Possible stuck request ffff8880267e0400: control (read@2048,1024B). Runtime 90 seconds [ 503.119940][T17990] block nbd3: Possible stuck request ffff8880267e0600: control (read@3072,1024B). Runtime 90 seconds [ 503.832691][T19016] __nla_validate_parse: 5 callbacks suppressed [ 503.832745][T19016] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3921'. [ 503.881742][T19018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3922'. [ 503.918722][T19018] : entered promiscuous mode [ 504.282385][T19036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3929'. [ 504.313617][T19036] block nbd0: NBD_DISCONNECT [ 504.318301][T19036] block nbd0: Send disconnect failed -32 [ 504.324340][T19036] block nbd0: Send disconnect failed -32 [ 504.744137][T19050] ipvlan2: entered promiscuous mode [ 505.088043][T19067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3935'. [ 505.107860][T19067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3935'. [ 505.287673][T19073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3937'. [ 505.324874][T19073] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 505.716490][T19096] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3941'. [ 506.411711][T19128] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3949'. [ 506.639044][T19140] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3947'. [ 506.946147][ T5897] IPVS: starting estimator thread 0... [ 507.083894][T19151] IPVS: using max 25 ests per chain, 60000 per kthread [ 507.127164][T19158] netlink: 'syz.4.3955': attribute type 1 has an invalid length. [ 507.377938][T19170] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 507.560273][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms [ 507.569421][ C0] lec:lec_tx_timeout: lec0 [ 507.585466][T19173] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 507.816928][ T5488] lec:lec_start_xmit: lec0:No lecd attached [ 507.950522][T19193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3967'. [ 508.076516][T19193] 8021q: adding VLAN 0 to HW filter on device bond1 [ 508.116669][T19200] vlan2: entered allmulticast mode [ 508.122742][T19200] bridge0: entered allmulticast mode [ 508.774870][T19218] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 508.847058][T19225] __nla_validate_parse: 4 callbacks suppressed [ 508.847082][T19225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3978'. [ 508.868903][ T2434] block nbd9: Connection timed out, retrying (0/2 alive) [ 508.878995][ T2434] block nbd9: Connection timed out, retrying (0/2 alive) [ 508.882854][T19225] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3978'. [ 508.886510][T15663] block nbd9: Dead connection, failed to find a fallback [ 508.904331][T15663] block nbd9: shutting down sockets [ 508.910540][ T2434] block nbd9: Connection timed out, retrying (0/2 alive) [ 508.917979][ T2434] block nbd9: Connection timed out, retrying (0/2 alive) [ 508.925688][T15663] blk_print_req_error: 138 callbacks suppressed [ 508.925707][T15663] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 508.942517][T15663] buffer_io_error: 138 callbacks suppressed [ 508.942534][T15663] Buffer I/O error on dev nbd9, logical block 0, async page read [ 508.949762][T19225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3978'. [ 508.956808][T15663] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 508.977386][T15663] Buffer I/O error on dev nbd9, logical block 3, async page read [ 508.985454][T15663] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 508.995654][T15663] Buffer I/O error on dev nbd9, logical block 2, async page read [ 509.006135][T15663] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 509.016515][T15663] Buffer I/O error on dev nbd9, logical block 1, async page read [ 509.017697][ T5824] Bluetooth: hci5: command 0x0406 tx timeout [ 509.024750][T15940] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 509.040799][T15940] Buffer I/O error on dev nbd9, logical block 0, async page read [ 509.049085][T15940] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 509.059264][T15940] Buffer I/O error on dev nbd9, logical block 1, async page read [ 509.067538][T15940] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 509.072067][T19225] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3978'. [ 509.078024][T15940] Buffer I/O error on dev nbd9, logical block 2, async page read [ 509.095507][T15940] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 509.105500][T15940] Buffer I/O error on dev nbd9, logical block 3, async page read [ 509.114049][T15940] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 509.124930][T15940] Buffer I/O error on dev nbd9, logical block 0, async page read [ 509.133792][T15940] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 509.143704][T15940] Buffer I/O error on dev nbd9, logical block 1, async page read [ 509.152703][T15940] ldm_validate_partition_table(): Disk read failed. [ 509.159842][T15940] Dev nbd9: unable to read RDB block 0 [ 509.181435][T15940] nbd9: unable to read partition table [ 509.224431][T19236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3982'. [ 509.242950][T15940] ldm_validate_partition_table(): Disk read failed. [ 509.270662][T15940] Dev nbd9: unable to read RDB block 0 [ 509.284593][T15940] nbd9: unable to read partition table [ 509.328707][T19236] bond2: option downdelay: invalid value (18446744073709547007) [ 509.350808][T19236] bond2: option downdelay: allowed values 0 - 2147483647 [ 509.412491][T19236] bond2 (unregistering): Released all slaves [ 509.723803][T19252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3987'. [ 509.734565][T19252] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 509.784066][T19232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3980'. [ 509.878039][T19259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3990'. [ 510.234943][T19274] netlink: 'syz.4.3994': attribute type 1 has an invalid length. [ 510.359026][T19274] 8021q: adding VLAN 0 to HW filter on device bond2 [ 510.435030][T19281] bond2: (slave geneve2): making interface the new active one [ 510.448177][T19281] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 510.507335][T19282] veth1_macvtap: renamed from veth0_vlan [ 510.559005][T19281] syz.4.3994 (19281) used greatest stack depth: 17224 bytes left [ 510.924448][T19296] nbd0: detected capacity change from 0 to 63 [ 510.933451][ T5824] block nbd0: Receive control failed (result -104) [ 510.940486][ T5144] block nbd0: Receive control failed (result -32) [ 510.947526][T15940] block nbd0: Send control failed (result -32) [ 510.966505][T15940] block nbd0: Request send failed, requeueing [ 510.981884][T17990] block nbd0: Dead connection, failed to find a fallback [ 510.989176][T17990] block nbd0: shutting down sockets [ 511.296242][T19320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4005'. [ 511.330719][T19320] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4005'. [ 511.386638][T19317] bond2: option downdelay: invalid value (18446744073709547007) [ 511.413742][T19317] bond2: option downdelay: allowed values 0 - 2147483647 [ 511.428866][T19317] bond2 (unregistering): Released all slaves [ 511.672415][T19328] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 511.769770][ T5488] veth1_macvtap: left promiscuous mode [ 511.834928][ T5488] veth1_macvtap: entered promiscuous mode [ 512.853976][T19395] netlink: 'syz.3.4013': attribute type 16 has an invalid length. [ 513.121704][T19396] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 513.320371][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms [ 513.328651][ C0] lec:lec_tx_timeout: lec0 [ 513.333585][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 514.138425][T19463] __nla_validate_parse: 4 callbacks suppressed [ 514.138447][T19463] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4033'. [ 514.176892][T19465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4034'. [ 514.186222][T19449] bridge3: port 1(erspan0) entered disabled state [ 514.340567][T19455] nbd12: detected capacity change from 0 to 63 [ 514.349492][ T5144] block nbd12: Receive control failed (result -104) [ 514.357769][ T5824] block nbd12: Receive control failed (result -32) [ 514.453201][T19449] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.461065][T19449] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.797147][T19449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.831751][T19449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.178099][T19449] vlan2: left allmulticast mode [ 515.190357][T19449] bridge2: left allmulticast mode [ 515.203799][T19449] vlan3: left allmulticast mode [ 515.208949][T19449] bridge3: left allmulticast mode [ 515.319342][T19451] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.327182][T19451] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.412954][T19451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.428985][T19451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.441661][T19486] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4039'. [ 515.520013][T19451] geneve2: left allmulticast mode [ 515.525681][T19451] hsr1: left promiscuous mode [ 515.615813][T19466] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 515.663201][T19492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4040'. [ 515.679853][ T6886] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.699603][ T6886] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.763200][ T6886] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.780611][ T6886] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.821769][T19495] vlan2: entered allmulticast mode [ 515.827333][T19495] bridge3: entered allmulticast mode [ 515.843316][ T6886] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.862915][ T6886] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.888955][T19492] bridge3: port 1(erspan0) entered blocking state [ 515.898783][T19492] bridge3: port 1(erspan0) entered disabled state [ 515.926097][T19492] erspan0: entered allmulticast mode [ 515.936066][T19503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4046'. [ 515.939658][T19492] erspan0: entered promiscuous mode [ 515.950925][T19503] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4046'. [ 515.956252][ T6886] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.990952][ T6886] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.356218][T19519] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4050'. [ 516.401327][T19522] vlan2: left allmulticast mode [ 516.406541][T19522] bridge3: left allmulticast mode [ 516.418659][T19522] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4049'. [ 516.619862][T19535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4053'. [ 516.761721][T19539] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4055'. [ 516.989912][T19557] netdevsim netdevsim1 ªªªªª»: renamed from netdevsim0 [ 517.207585][T19557] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 517.335391][T19557] bond1 (unregistering): Released all slaves [ 517.567854][T19576] sctp: [Deprecated]: syz.3.4065 (pid 19576) Use of int in maxseg socket option. [ 517.567854][T19576] Use struct sctp_assoc_value instead [ 517.804241][T19565] bridge1: port 1(erspan0) entered disabled state [ 518.089309][T19588] xt_hashlimit: size too large, truncated to 1048576 [ 518.350335][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 518.358702][ C0] lec:lec_tx_timeout: lec0 [ 518.364016][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 518.697839][ T5193] udevd[5193]: worker [9359] /devices/virtual/block/nbd1 timeout; kill it [ 518.707570][ T5193] udevd[5193]: seq 16978 '/devices/virtual/block/nbd1' killed [ 518.717564][ T5193] udevd[5193]: worker [10306] /devices/virtual/block/nbd3 is taking a long time [ 518.955133][T19565] vlan3: left allmulticast mode [ 518.960543][T19565] bridge1: left allmulticast mode [ 519.029377][T19595] syzkaller0: entered promiscuous mode [ 519.055525][T19595] syzkaller0: entered allmulticast mode [ 519.102487][T19607] tipc: Enabled bearer , priority 0 [ 519.114121][T16818] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.145144][T16818] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.162915][T19609] __nla_validate_parse: 4 callbacks suppressed [ 519.162936][T19609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4072'. [ 519.166764][T19612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4071'. [ 519.188702][T19591] tipc: Resetting bearer [ 519.214156][T19591] tipc: Disabling bearer [ 519.225895][T16818] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.240562][ T5824] Bluetooth: hci4: command 0x0406 tx timeout [ 519.268979][T19612] bond2: option downdelay: invalid value (18446744073709547007) [ 519.286139][T19612] bond2: option downdelay: allowed values 0 - 2147483647 [ 519.325059][T19612] bond2 (unregistering): Released all slaves [ 519.473346][T16818] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.508647][T19627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4079'. [ 519.518437][T19627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4079'. [ 519.528923][T19627] netlink: 31 bytes leftover after parsing attributes in process `syz.1.4079'. [ 519.539299][T19627] netlink: 'syz.1.4079': attribute type 3 has an invalid length. [ 519.547505][T19627] netlink: 'syz.1.4079': attribute type 2 has an invalid length. [ 519.555579][T19627] netlink: 31 bytes leftover after parsing attributes in process `syz.1.4079'. [ 519.596510][T19627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4079'. [ 519.672903][T19633] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4080'. [ 519.731398][T19633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4080'. [ 519.857288][T19640] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4080'. [ 520.580754][T19680] FAULT_INJECTION: forcing a failure. [ 520.580754][T19680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.623068][T19680] CPU: 0 UID: 0 PID: 19680 Comm: syz.0.4092 Not tainted syzkaller #0 PREEMPT(full) [ 520.623098][T19680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 520.623110][T19680] Call Trace: [ 520.623119][T19680] [ 520.623129][T19680] dump_stack_lvl+0xe8/0x150 [ 520.623163][T19680] should_fail_ex+0x412/0x560 [ 520.623198][T19680] _copy_from_iter+0x1d3/0x1670 [ 520.623232][T19680] ? __pfx__copy_from_iter+0x10/0x10 [ 520.623250][T19680] ? sock_alloc_send_pskb+0x896/0x990 [ 520.623283][T19680] ? __pfx__copy_from_iter+0x10/0x10 [ 520.623306][T19680] ? page_copy_sane+0x16a/0x270 [ 520.623327][T19680] copy_page_from_iter+0xdd/0x170 [ 520.623355][T19680] skb_copy_datagram_from_iter+0x306/0x710 [ 520.623395][T19680] tun_get_user+0xc38/0x3ed0 [ 520.623433][T19680] ? aa_file_perm+0x50e/0x15e0 [ 520.623449][T19680] ? __pfx_tun_get_user+0x10/0x10 [ 520.623465][T19680] ? aa_file_perm+0x192/0x15e0 [ 520.623485][T19680] ? __lock_acquire+0x6b5/0x2cf0 [ 520.623515][T19680] ? ref_tracker_alloc+0x35c/0x4c0 [ 520.623532][T19680] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 520.623553][T19680] ? tun_get+0x1c/0x2f0 [ 520.623575][T19680] ? tun_get+0x1c/0x2f0 [ 520.623591][T19680] ? tun_get+0x1c/0x2f0 [ 520.623612][T19680] tun_chr_write_iter+0x113/0x200 [ 520.623633][T19680] vfs_write+0x61d/0xb90 [ 520.623658][T19680] ? __pfx_vfs_write+0x10/0x10 [ 520.623684][T19680] ? __fget_files+0x2a/0x420 [ 520.623705][T19680] ksys_write+0x150/0x270 [ 520.623724][T19680] ? __pfx_ksys_write+0x10/0x10 [ 520.623751][T19680] do_syscall_64+0x14d/0xf80 [ 520.623770][T19680] ? trace_irq_disable+0x3b/0x150 [ 520.623784][T19680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.623808][T19680] ? clear_bhb_loop+0x40/0x90 [ 520.623827][T19680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.623842][T19680] RIP: 0033:0x7f2cef99c819 [ 520.623857][T19680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.623871][T19680] RSP: 002b:00007f2cf07db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 520.623889][T19680] RAX: ffffffffffffffda RBX: 00007f2cefc15fa0 RCX: 00007f2cef99c819 [ 520.623900][T19680] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000004 [ 520.623910][T19680] RBP: 00007f2cf07db090 R08: 0000000000000000 R09: 0000000000000000 [ 520.623919][T19680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.623929][T19680] R13: 00007f2cefc16038 R14: 00007f2cefc15fa0 R15: 00007ffd9ffa1f78 [ 520.623954][T19680] [ 520.641287][T19688] xt_SECMARK: invalid mode: 4 [ 521.066009][T19702] xt_hashlimit: size too large, truncated to 1048576 [ 521.104346][T19702] xt_hashlimit: max too large, truncated to 1048576 [ 521.210804][T19712] netlink: 'syz.4.4102': attribute type 1 has an invalid length. [ 521.378100][T19712] bond3: entered promiscuous mode [ 521.438796][T19712] 8021q: adding VLAN 0 to HW filter on device bond3 [ 521.568449][T19719] 8021q: adding VLAN 0 to HW filter on device bond4 [ 521.609691][T19719] bond3: (slave bond4): making interface the new active one [ 521.633504][T19719] bond4: entered promiscuous mode [ 521.647843][T19719] bond3: (slave bond4): Enslaving as an active interface with an up link [ 522.119890][T19753] netlink: 'syz.0.4112': attribute type 1 has an invalid length. [ 522.262796][T19753] bond2: entered promiscuous mode [ 522.269012][T19753] 8021q: adding VLAN 0 to HW filter on device bond2 [ 522.471423][T19753] 8021q: adding VLAN 0 to HW filter on device bond2 [ 522.539341][T19753] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 522.602167][T19753] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 522.660610][T19753] bond2: (slave wireguard0): making interface the new active one [ 522.680454][T19753] wireguard0: entered promiscuous mode [ 522.721560][T19753] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 523.370293][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 523.378565][ C0] lec:lec_tx_timeout: lec0 [ 523.383440][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 524.132327][T19842] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 524.183408][T19842] bond3 (unregistering): Released all slaves [ 524.312093][T19858] __nla_validate_parse: 9 callbacks suppressed [ 524.312115][T19858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4139'. [ 524.433591][T19858] vlan3: entered allmulticast mode [ 524.440751][T19851] nbd13: detected capacity change from 0 to 63 [ 524.462279][T19858] bridge3: entered allmulticast mode [ 524.464257][ T5824] block nbd13: Receive control failed (result -32) [ 524.467774][ T5144] block nbd13: Receive control failed (result -32) [ 524.483863][ T9330] block nbd13: Dead connection, failed to find a fallback [ 524.511977][ T9330] block nbd13: shutting down sockets [ 524.522974][ T9330] blk_print_req_error: 139 callbacks suppressed [ 524.522992][ T9330] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 524.535340][T19866] erspan0: left allmulticast mode [ 524.552696][ T9330] buffer_io_error: 139 callbacks suppressed [ 524.552717][ T9330] Buffer I/O error on dev nbd13, logical block 0, async page read [ 524.575904][ T9330] I/O error, dev nbd13, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 524.580638][T19866] erspan0: left promiscuous mode [ 524.601032][ T9330] Buffer I/O error on dev nbd13, logical block 1, async page read [ 524.619348][ T9330] I/O error, dev nbd13, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 524.629376][T19866] bridge1: port 1(erspan0) entered disabled state [ 524.646174][T19866] bridge3: port 1(erspan0) entered blocking state [ 524.657894][T19866] bridge3: port 1(erspan0) entered disabled state [ 524.677883][T19866] erspan0: entered allmulticast mode [ 524.681585][ T9330] Buffer I/O error on dev nbd13, logical block 2, async page read [ 524.702662][T19866] erspan0: entered promiscuous mode [ 524.714187][ T9330] I/O error, dev nbd13, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 524.722954][T19875] FAULT_INJECTION: forcing a failure. [ 524.722954][T19875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.735882][ T9330] Buffer I/O error on dev nbd13, logical block 3, async page read [ 524.741461][T19866] bridge3: port 1(erspan0) entered blocking state [ 524.753919][T19866] bridge3: port 1(erspan0) entered forwarding state [ 524.762080][T19875] CPU: 0 UID: 0 PID: 19875 Comm: syz.4.4144 Not tainted syzkaller #0 PREEMPT(full) [ 524.762107][T19875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 524.762118][T19875] Call Trace: [ 524.762127][T19875] [ 524.762136][T19875] dump_stack_lvl+0xe8/0x150 [ 524.762169][T19875] should_fail_ex+0x412/0x560 [ 524.762204][T19875] _copy_from_user+0x2d/0xb0 [ 524.762231][T19875] kstrtouint_from_user+0xd6/0x180 [ 524.762266][T19875] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 524.762318][T19875] proc_fail_nth_write+0x8e/0x210 [ 524.762349][T19875] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 524.762386][T19875] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 524.762418][T19875] vfs_write+0x29a/0xb90 [ 524.762453][T19875] ? __pfx_vfs_write+0x10/0x10 [ 524.762479][T19875] ? __fget_files+0x2a/0x420 [ 524.762504][T19875] ? __fget_files+0x3a0/0x420 [ 524.762523][T19875] ? __fget_files+0x2a/0x420 [ 524.762553][T19875] ksys_write+0x150/0x270 [ 524.762580][T19875] ? __pfx_ksys_write+0x10/0x10 [ 524.762599][T19875] ? __pfx_sock_ioctl+0x10/0x10 [ 524.762632][T19875] do_syscall_64+0x14d/0xf80 [ 524.762658][T19875] ? trace_irq_disable+0x3b/0x150 [ 524.762676][T19875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.762698][T19875] ? clear_bhb_loop+0x40/0x90 [ 524.762723][T19875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.762744][T19875] RIP: 0033:0x7f7126d5d04e [ 524.762764][T19875] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 524.762788][T19875] RSP: 002b:00007f7124fedfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 524.762811][T19875] RAX: ffffffffffffffda RBX: 00007f7124fee6c0 RCX: 00007f7126d5d04e [ 524.762827][T19875] RDX: 0000000000000001 RSI: 00007f7124fee0a0 RDI: 0000000000000003 [ 524.762840][T19875] RBP: 00007f7124fee090 R08: 0000000000000000 R09: 0000000000000000 [ 524.762854][T19875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.762866][T19875] R13: 00007f7127016038 R14: 00007f7127015fa0 R15: 00007ffd0aad07e8 [ 524.762903][T19875] [ 524.981262][ T9330] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 524.992594][ T9330] Buffer I/O error on dev nbd13, logical block 0, async page read [ 525.001283][ T9330] I/O error, dev nbd13, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 525.011151][ T9330] Buffer I/O error on dev nbd13, logical block 1, async page read [ 525.019413][ T9330] I/O error, dev nbd13, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 525.029568][ T9330] Buffer I/O error on dev nbd13, logical block 2, async page read [ 525.037740][ T9330] I/O error, dev nbd13, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 525.047581][ T9330] Buffer I/O error on dev nbd13, logical block 3, async page read [ 525.055753][ T9330] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 525.065833][ T9330] Buffer I/O error on dev nbd13, logical block 0, async page read [ 525.074106][ T9330] I/O error, dev nbd13, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 525.087347][ T9330] Buffer I/O error on dev nbd13, logical block 1, async page read [ 525.096150][ T9330] ldm_validate_partition_table(): Disk read failed. [ 525.103828][ T9330] Dev nbd13: unable to read RDB block 0 [ 525.110419][ T9330] nbd13: unable to read partition table [ 525.120626][ T9330] ldm_validate_partition_table(): Disk read failed. [ 525.128043][ T9330] Dev nbd13: unable to read RDB block 0 [ 525.134519][ T9330] nbd13: unable to read partition table [ 525.534354][T19903] netlink: 'syz.1.4149': attribute type 1 has an invalid length. [ 525.542850][T19903] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4149'. [ 525.552270][T19903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4149'. [ 526.164957][T19930] syzkaller1: entered promiscuous mode [ 526.189010][T19930] syzkaller1: entered allmulticast mode [ 526.195608][T19934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4160'. [ 526.289030][T19934] vlan3: entered allmulticast mode [ 526.294745][T19934] bridge4: entered allmulticast mode [ 526.317153][T19941] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 526.480091][T19947] geneve2: entered promiscuous mode [ 526.487106][T19947] geneve2: entered allmulticast mode [ 526.558682][T19957] vlan0: entered promiscuous mode [ 526.661567][T19964] bond3: left promiscuous mode [ 526.673379][T19964] bond4: left promiscuous mode [ 526.750750][T19967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4171'. [ 526.758757][T19972] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4173'. [ 526.770509][T17990] block nbd11: Connection timed out, retrying (0/2 alive) [ 526.777742][T17990] block nbd11: Connection timed out, retrying (0/2 alive) [ 526.785633][ T1654] block nbd11: Dead connection, failed to find a fallback [ 526.794028][ T1654] block nbd11: shutting down sockets [ 526.794227][T19972] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4173'. [ 526.799638][T17990] block nbd11: Connection timed out, retrying (0/2 alive) [ 526.810821][T19967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4171'. [ 526.816697][T17990] block nbd11: Connection timed out, retrying (0/2 alive) [ 526.837483][T15990] ldm_validate_partition_table(): Disk read failed. [ 526.845780][T15990] Dev nbd11: unable to read RDB block 0 [ 526.853265][T15990] nbd11: unable to read partition table [ 526.872100][T15990] ldm_validate_partition_table(): Disk read failed. [ 526.879584][T15990] Dev nbd11: unable to read RDB block 0 [ 526.886234][T15990] nbd11: unable to read partition table [ 526.908377][T19977] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4172'. [ 527.500896][T19999] syzkaller0: entered promiscuous mode [ 527.507379][T19999] syzkaller0: entered allmulticast mode [ 527.687501][T20011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4183'. [ 528.390297][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 528.398610][ C0] lec:lec_tx_timeout: lec0 [ 528.403386][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 528.463146][T20032] bond1: option tlb_dynamic_lb: invalid value (5) [ 528.514147][T20032] bond1 (unregistering): Released all slaves [ 528.640719][T20039] vlan0: left promiscuous mode [ 528.680008][T20039] bond2: left promiscuous mode [ 528.693699][T20039] wireguard0: left promiscuous mode [ 528.895624][T20060] vlan4: entered allmulticast mode [ 528.913334][T20060] bridge5: entered allmulticast mode [ 528.953743][T20060] erspan0: left allmulticast mode [ 528.959050][T20060] erspan0: left promiscuous mode [ 528.965395][T20060] bridge3: port 1(erspan0) entered disabled state [ 529.013576][T20060] bridge5: port 1(erspan0) entered blocking state [ 529.020454][T20060] bridge5: port 1(erspan0) entered disabled state [ 529.027438][T20060] erspan0: entered allmulticast mode [ 529.037927][T20060] erspan0: entered promiscuous mode [ 529.245640][T20083] FAULT_INJECTION: forcing a failure. [ 529.245640][T20083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.329105][T15663] block nbd1: Possible stuck request ffff888026750000: control (read@0,1024B). Runtime 240 seconds [ 529.336582][T20083] CPU: 0 UID: 0 PID: 20083 Comm: syz.2.4207 Not tainted syzkaller #0 PREEMPT(full) [ 529.336609][T20083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 529.336619][T20083] Call Trace: [ 529.336627][T20083] [ 529.336635][T20083] dump_stack_lvl+0xe8/0x150 [ 529.336666][T20083] should_fail_ex+0x412/0x560 [ 529.336698][T20083] _copy_to_user+0x31/0xb0 [ 529.336723][T20083] simple_read_from_buffer+0xe1/0x170 [ 529.336760][T20083] proc_fail_nth_read+0x1bb/0x230 [ 529.336789][T20083] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 529.336817][T20083] ? rw_verify_area+0x2a6/0x4d0 [ 529.336837][T20083] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 529.336863][T20083] vfs_read+0x20c/0xa70 [ 529.336881][T20083] ? fdget_pos+0x246/0x320 [ 529.336903][T20083] ? __pfx___mutex_lock+0x10/0x10 [ 529.336927][T20083] ? __pfx_vfs_read+0x10/0x10 [ 529.336950][T20083] ? __fget_files+0x2a/0x420 [ 529.336970][T20083] ? __fget_files+0x3a0/0x420 [ 529.336995][T20083] ? __fget_files+0x2a/0x420 [ 529.337020][T20083] ksys_read+0x150/0x270 [ 529.337042][T20083] ? __pfx_ksys_read+0x10/0x10 [ 529.337075][T20083] do_syscall_64+0x14d/0xf80 [ 529.337097][T20083] ? trace_irq_disable+0x3b/0x150 [ 529.337113][T20083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.337130][T20083] ? clear_bhb_loop+0x40/0x90 [ 529.337153][T20083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.337170][T20083] RIP: 0033:0x7fea86d5d04e [ 529.337188][T20083] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 529.337203][T20083] RSP: 002b:00007fea87c8dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 529.337224][T20083] RAX: ffffffffffffffda RBX: 00007fea87c8e6c0 RCX: 00007fea86d5d04e [ 529.337237][T20083] RDX: 000000000000000f RSI: 00007fea87c8e0a0 RDI: 0000000000000005 [ 529.337248][T20083] RBP: 00007fea87c8e090 R08: 0000000000000000 R09: 0000000000000000 [ 529.337259][T20083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.337270][T20083] R13: 00007fea87016038 R14: 00007fea87015fa0 R15: 00007ffcf487cfb8 [ 529.337301][T20083] [ 529.490408][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 529.495597][T15663] block nbd1: Possible stuck request ffff888026750200: control (read@1024,1024B). Runtime 240 seconds [ 529.587237][T15663] block nbd1: Possible stuck request ffff888026750400: control (read@2048,1024B). Runtime 240 seconds [ 529.601113][T15663] block nbd1: Possible stuck request ffff888026750600: control (read@3072,1024B). Runtime 240 seconds [ 529.627917][T20089] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 529.652187][T20089] bond1 (unregistering): Released all slaves [ 529.739293][T20095] Cannot find set identified by id 2 to match [ 529.847471][T20097] __nla_validate_parse: 3 callbacks suppressed [ 529.847496][T20097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4210'. [ 530.004303][T20097] bond2: option downdelay: invalid value (18446744073709547007) [ 530.050366][T20097] bond2: option downdelay: allowed values 0 - 2147483647 [ 530.085869][T20097] bond2 (unregistering): Released all slaves [ 530.611251][T20122] netlink: 804 bytes leftover after parsing attributes in process `syz.4.4214'. [ 530.686476][T20125] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4214'. [ 530.753770][T20130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4215'. [ 530.911793][T20125] IPVS: persistence engine module ip_vs_pe_ not found [ 531.576534][T20127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4217'. [ 532.063267][T20181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4225'. [ 532.230022][T20181] bond2: option downdelay: invalid value (18446744073709547007) [ 532.274775][T20181] bond2: option downdelay: allowed values 0 - 2147483647 [ 532.316702][T20181] bond2 (unregistering): Released all slaves [ 532.321974][T20184] xt_SECMARK: invalid mode: 4 [ 532.658974][T20199] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 532.782938][T20203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4233'. [ 533.160881][T17990] block nbd3: Possible stuck request ffff8880267e0000: control (read@0,1024B). Runtime 120 seconds [ 533.172041][T17990] block nbd3: Possible stuck request ffff8880267e0200: control (read@1024,1024B). Runtime 120 seconds [ 533.183515][T17990] block nbd3: Possible stuck request ffff8880267e0400: control (read@2048,1024B). Runtime 120 seconds [ 533.195702][T17990] block nbd3: Possible stuck request ffff8880267e0600: control (read@3072,1024B). Runtime 120 seconds [ 533.264302][T20231] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4241'. [ 533.766126][T20237] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4243'. [ 533.790168][T20248] FAULT_INJECTION: forcing a failure. [ 533.790168][T20248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.834154][T20248] CPU: 1 UID: 0 PID: 20248 Comm: syz.1.4247 Not tainted syzkaller #0 PREEMPT(full) [ 533.834184][T20248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 533.834196][T20248] Call Trace: [ 533.834204][T20248] [ 533.834213][T20248] dump_stack_lvl+0xe8/0x150 [ 533.834245][T20248] should_fail_ex+0x412/0x560 [ 533.834280][T20248] _copy_from_user+0x2d/0xb0 [ 533.834305][T20248] copy_bpf_fprog_from_user+0x17c/0x2d0 [ 533.834338][T20248] ? __pfx_copy_bpf_fprog_from_user+0x10/0x10 [ 533.834364][T20248] ? sk_setsockopt+0xe62/0x2e80 [ 533.834399][T20248] sk_setsockopt+0x1b24/0x2e80 [ 533.834434][T20248] ? __pfx_sk_setsockopt+0x10/0x10 [ 533.834459][T20248] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 533.834506][T20248] ? __fget_files+0x2a/0x420 [ 533.834522][T20248] ? aa_sock_opt_perm+0xd4/0x1a0 [ 533.834545][T20248] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 533.834574][T20248] do_sock_setsockopt+0x11b/0x1b0 [ 533.834604][T20248] __x64_sys_setsockopt+0x13d/0x1b0 [ 533.834636][T20248] do_syscall_64+0x14d/0xf80 [ 533.834660][T20248] ? trace_irq_disable+0x3b/0x150 [ 533.834677][T20248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.834698][T20248] ? clear_bhb_loop+0x40/0x90 [ 533.834723][T20248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.834742][T20248] RIP: 0033:0x7f1fe1d9c819 [ 533.834927][T20248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.834948][T20248] RSP: 002b:00007f1fe2c13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 533.834972][T20248] RAX: ffffffffffffffda RBX: 00007f1fe2015fa0 RCX: 00007f1fe1d9c819 [ 533.834987][T20248] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 533.835056][T20248] RBP: 00007f1fe2c13090 R08: 0000000000000010 R09: 0000000000000000 [ 533.835069][T20248] R10: 0000200000ab9ff0 R11: 0000000000000246 R12: 0000000000000001 [ 533.835083][T20248] R13: 00007f1fe2016038 R14: 00007f1fe2015fa0 R15: 00007ffce118cb78 [ 533.835119][T20248] [ 534.165334][T20250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4248'. [ 534.176152][T20250] netlink: 'syz.0.4248': attribute type 12 has an invalid length. [ 534.200335][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 534.210071][ C0] lec:lec_tx_timeout: lec0 [ 534.215644][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 534.285006][T20250] netlink: 'syz.0.4248': attribute type 12 has an invalid length. [ 534.285380][ T6869] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.303822][ T6869] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.313650][ T6869] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.335936][ T6869] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.542056][T20264] bridge3: port 1(erspan0) entered disabled state [ 534.583471][T20264] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.591521][T20264] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.696316][T20264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.715082][T20264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.848238][T20267] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 534.894526][ T6869] netdevsim netdevsim3 ªªªªª»: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.920399][ T6869] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.972480][ T6869] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.019585][T20277] pim6reg: entered allmulticast mode [ 535.062720][ T6869] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.129444][T20276] pim6reg: left allmulticast mode [ 535.837742][T20319] __nla_validate_parse: 6 callbacks suppressed [ 535.837765][T20319] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4268'. [ 536.348408][T20342] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4272'. [ 536.421804][T20342] 8021q: VLANs not supported on ip6tnl0 [ 536.485405][T20349] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4275'. [ 536.781900][T20362] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4279'. [ 536.926551][T20366] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4281'. [ 536.949595][T20366] FAULT_INJECTION: forcing a failure. [ 536.949595][T20366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.965690][T20366] CPU: 0 UID: 0 PID: 20366 Comm: syz.4.4281 Not tainted syzkaller #0 PREEMPT(full) [ 536.965719][T20366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 536.965731][T20366] Call Trace: [ 536.965739][T20366] [ 536.965747][T20366] dump_stack_lvl+0xe8/0x150 [ 536.965781][T20366] should_fail_ex+0x412/0x560 [ 536.965814][T20366] _copy_from_iter+0x1d3/0x1670 [ 536.965849][T20366] ? __pfx__copy_from_iter+0x10/0x10 [ 536.965866][T20366] ? sock_alloc_send_pskb+0x896/0x990 [ 536.965902][T20366] ? __pfx__copy_from_iter+0x10/0x10 [ 536.965925][T20366] ? page_copy_sane+0x16a/0x270 [ 536.965948][T20366] copy_page_from_iter+0xdd/0x170 [ 536.965975][T20366] skb_copy_datagram_from_iter+0x306/0x710 [ 536.966018][T20366] tun_get_user+0xc38/0x3ed0 [ 536.966063][T20366] ? aa_file_perm+0x50e/0x15e0 [ 536.966084][T20366] ? __pfx_tun_get_user+0x10/0x10 [ 536.966106][T20366] ? aa_file_perm+0x192/0x15e0 [ 536.966133][T20366] ? __lock_acquire+0x6b5/0x2cf0 [ 536.966172][T20366] ? ref_tracker_alloc+0x35c/0x4c0 [ 536.966194][T20366] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 536.966221][T20366] ? tun_get+0x1c/0x2f0 [ 536.966248][T20366] ? tun_get+0x1c/0x2f0 [ 536.966270][T20366] ? tun_get+0x1c/0x2f0 [ 536.966297][T20366] tun_chr_write_iter+0x113/0x200 [ 536.966324][T20366] vfs_write+0x61d/0xb90 [ 536.966356][T20366] ? __pfx_vfs_write+0x10/0x10 [ 536.966390][T20366] ? __fget_files+0x2a/0x420 [ 536.966419][T20366] ksys_write+0x150/0x270 [ 536.966444][T20366] ? __pfx_ksys_write+0x10/0x10 [ 536.966480][T20366] do_syscall_64+0x14d/0xf80 [ 536.966505][T20366] ? trace_irq_disable+0x3b/0x150 [ 536.966523][T20366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.966543][T20366] ? clear_bhb_loop+0x40/0x90 [ 536.966569][T20366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.966589][T20366] RIP: 0033:0x7f7126d9c819 [ 536.966610][T20366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.966626][T20366] RSP: 002b:00007f7124fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 536.966654][T20366] RAX: ffffffffffffffda RBX: 00007f7127015fa0 RCX: 00007f7126d9c819 [ 536.966679][T20366] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000004 [ 536.966692][T20366] RBP: 00007f7124fee090 R08: 0000000000000000 R09: 0000000000000000 [ 536.966704][T20366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 536.966716][T20366] R13: 00007f7127016038 R14: 00007f7127015fa0 R15: 00007ffd0aad07e8 [ 536.966750][T20366] [ 537.371988][T20372] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4284'. [ 537.603307][T20387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4289'. [ 537.722253][T20394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4293'. [ 537.801814][T20395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4293'. [ 537.822554][T20400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4293'. [ 538.064577][T20416] netlink: 'syz.0.4302': attribute type 9 has an invalid length. [ 538.940642][T20446] nbd14: detected capacity change from 0 to 63 [ 538.951865][ T5144] block nbd14: Receive control failed (result -32) [ 538.959848][ T51] block nbd14: Receive control failed (result -32) [ 538.970884][T15990] block nbd14: Dead connection, failed to find a fallback [ 538.978238][T15990] block nbd14: shutting down sockets [ 538.989306][T15990] blk_print_req_error: 286 callbacks suppressed [ 538.989324][T15990] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 539.026103][T15990] buffer_io_error: 286 callbacks suppressed [ 539.026126][T15990] Buffer I/O error on dev nbd14, logical block 0, async page read [ 539.041522][T15990] I/O error, dev nbd14, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 539.052279][T15990] Buffer I/O error on dev nbd14, logical block 1, async page read [ 539.062313][T15990] I/O error, dev nbd14, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 539.078796][T15990] Buffer I/O error on dev nbd14, logical block 2, async page read [ 539.088648][T15990] I/O error, dev nbd14, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 539.099058][T15990] Buffer I/O error on dev nbd14, logical block 3, async page read [ 539.107553][T15990] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 539.117883][T15990] Buffer I/O error on dev nbd14, logical block 0, async page read [ 539.132019][T15990] I/O error, dev nbd14, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 539.146595][T15990] Buffer I/O error on dev nbd14, logical block 1, async page read [ 539.155744][T15990] I/O error, dev nbd14, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 539.165840][T15990] Buffer I/O error on dev nbd14, logical block 2, async page read [ 539.176665][T15990] I/O error, dev nbd14, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 539.200572][T15990] Buffer I/O error on dev nbd14, logical block 3, async page read [ 539.209070][T15990] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 539.220737][T15990] Buffer I/O error on dev nbd14, logical block 0, async page read [ 539.229167][T15990] I/O error, dev nbd14, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 539.242861][T15990] Buffer I/O error on dev nbd14, logical block 1, async page read [ 539.251309][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 539.251385][ C0] lec:lec_tx_timeout: lec0 [ 539.259842][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 539.278152][T15990] ldm_validate_partition_table(): Disk read failed. [ 539.287847][T15990] Dev nbd14: unable to read RDB block 0 [ 539.306798][T15990] nbd14: unable to read partition table [ 539.339630][T15990] ldm_validate_partition_table(): Disk read failed. [ 539.351079][T15990] Dev nbd14: unable to read RDB block 0 [ 539.359784][T15990] nbd14: unable to read partition table [ 539.481565][T20474] syzkaller0: entered promiscuous mode [ 539.503243][T20474] syzkaller0: entered allmulticast mode [ 539.740400][T20479] netlink: 'syz.3.4323': attribute type 13 has an invalid length. [ 539.829345][T20488] FAULT_INJECTION: forcing a failure. [ 539.829345][T20488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.868368][T20479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.878061][T20488] CPU: 0 UID: 0 PID: 20488 Comm: syz.2.4327 Not tainted syzkaller #0 PREEMPT(full) [ 539.878093][T20488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 539.878106][T20488] Call Trace: [ 539.878115][T20488] [ 539.878124][T20488] dump_stack_lvl+0xe8/0x150 [ 539.878158][T20488] should_fail_ex+0x412/0x560 [ 539.878194][T20488] _copy_from_iter+0x1d3/0x1670 [ 539.878230][T20488] ? __pfx__copy_from_iter+0x10/0x10 [ 539.878249][T20488] ? sock_alloc_send_pskb+0x896/0x990 [ 539.878285][T20488] ? __pfx__copy_from_iter+0x10/0x10 [ 539.878309][T20488] ? page_copy_sane+0x16a/0x270 [ 539.878332][T20488] copy_page_from_iter+0xdd/0x170 [ 539.878358][T20488] skb_copy_datagram_from_iter+0x306/0x710 [ 539.878398][T20488] tun_get_user+0xc38/0x3ed0 [ 539.878443][T20488] ? aa_file_perm+0x50e/0x15e0 [ 539.878462][T20488] ? __pfx_tun_get_user+0x10/0x10 [ 539.878482][T20488] ? aa_file_perm+0x192/0x15e0 [ 539.878509][T20488] ? __lock_acquire+0x6b5/0x2cf0 [ 539.878546][T20488] ? ref_tracker_alloc+0x35c/0x4c0 [ 539.878570][T20488] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 539.878618][T20488] ? tun_get+0x1c/0x2f0 [ 539.878656][T20488] ? tun_get+0x1c/0x2f0 [ 539.878678][T20488] ? tun_get+0x1c/0x2f0 [ 539.878705][T20488] tun_chr_write_iter+0x113/0x200 [ 539.878732][T20488] vfs_write+0x61d/0xb90 [ 539.878763][T20488] ? __pfx_vfs_write+0x10/0x10 [ 539.878796][T20488] ? __fget_files+0x2a/0x420 [ 539.878823][T20488] ksys_write+0x150/0x270 [ 539.878849][T20488] ? __pfx_ksys_write+0x10/0x10 [ 539.878880][T20488] do_syscall_64+0x14d/0xf80 [ 539.878903][T20488] ? trace_irq_disable+0x3b/0x150 [ 539.878920][T20488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.878939][T20488] ? clear_bhb_loop+0x40/0x90 [ 539.878961][T20488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.878980][T20488] RIP: 0033:0x7fea86d9c819 [ 539.879001][T20488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.879018][T20488] RSP: 002b:00007fea87c8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 539.879040][T20488] RAX: ffffffffffffffda RBX: 00007fea87015fa0 RCX: 00007fea86d9c819 [ 539.879062][T20488] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000004 [ 539.879074][T20488] RBP: 00007fea87c8e090 R08: 0000000000000000 R09: 0000000000000000 [ 539.879086][T20488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 539.879097][T20488] R13: 00007fea87016038 R14: 00007fea87015fa0 R15: 00007ffcf487cfb8 [ 539.879129][T20488] [ 540.174219][T20479] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.208852][T20479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 540.333597][ T6859] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 540.355337][ T6859] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 540.381600][ T6859] bond0: now running without any active interface! [ 540.583204][T20505] xt_l2tp: invalid flags combination: 0 [ 540.610918][T20505] netlink: 'syz.4.4329': attribute type 1 has an invalid length. [ 540.683485][T20505] 8021q: adding VLAN 0 to HW filter on device bond5 [ 540.727331][T20505] bond5 (unregistering): Released all slaves [ 540.950401][T20524] __nla_validate_parse: 9 callbacks suppressed [ 540.950425][T20524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4332'. [ 540.990048][T20524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4332'. [ 541.002400][T20524] netlink: 'syz.1.4332': attribute type 14 has an invalid length. [ 541.053565][T20511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4332'. [ 541.157998][T20529] tipc: Started in network mode [ 541.164304][T20529] tipc: Node identity 1ea977005eb6, cluster identity 4711 [ 541.175938][T20529] tipc: Enabled bearer , priority 0 [ 541.327138][T20530] syzkaller0: entered promiscuous mode [ 541.333913][T20530] syzkaller0: entered allmulticast mode [ 541.340622][T20530] tipc: Resetting bearer [ 541.412076][T20529] tipc: Resetting bearer [ 541.489117][T17990] block nbd0: Connection timed out, retrying (0/2 alive) [ 541.496813][T17990] block nbd0: Connection timed out, retrying (0/2 alive) [ 541.504635][T17990] block nbd0: Connection timed out, retrying (0/2 alive) [ 541.514973][T15940] ldm_validate_partition_table(): Disk read failed. [ 541.522591][T15940] Dev nbd0: unable to read RDB block 0 [ 541.529023][T15940] nbd0: unable to read partition table [ 541.551623][T15940] ldm_validate_partition_table(): Disk read failed. [ 541.569111][T15940] Dev nbd0: unable to read RDB block 0 [ 541.583808][T15940] nbd0: unable to read partition table [ 543.440600][T20529] tipc: Disabling bearer [ 543.505035][T20548] netlink: 'syz.2.4340': attribute type 13 has an invalid length. [ 543.521482][T20548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4340'. [ 543.533237][T19479] tipc: Node number set to 1075803904 [ 543.685381][T20557] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4344'. [ 543.695172][T20557] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4344'. [ 543.727691][T20558] syzkaller0: entered promiscuous mode [ 543.739685][T20558] syzkaller0: entered allmulticast mode [ 543.806877][T20558] tipc: Enabled bearer , priority 0 [ 543.816277][T20556] tipc: Resetting bearer [ 543.854929][T20556] tipc: Disabling bearer [ 543.907999][T20570] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4348'. [ 544.213282][T20583] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4346'. [ 544.260276][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 544.268487][ C0] lec:lec_tx_timeout: lec0 [ 544.274847][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 544.576566][T20591] netlink: 'syz.2.4353': attribute type 3 has an invalid length. [ 544.588465][T20592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4353'. [ 544.598457][T20591] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4353'. [ 544.681674][ T1654] block nbd12: Connection timed out, retrying (0/2 alive) [ 544.689359][ T1654] block nbd12: Connection timed out, retrying (0/2 alive) [ 544.696921][ T1654] block nbd12: Connection timed out, retrying (0/2 alive) [ 544.704509][T17990] block nbd12: Dead connection, failed to find a fallback [ 544.712047][T17990] block nbd12: shutting down sockets [ 544.718501][ T1654] block nbd12: Connection timed out, retrying (0/2 alive) [ 544.726918][T17990] blk_print_req_error: 285 callbacks suppressed [ 544.726936][T17990] I/O error, dev nbd12, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.743428][T17990] buffer_io_error: 285 callbacks suppressed [ 544.743450][T17990] Buffer I/O error on dev nbd12, logical block 1, async page read [ 544.757600][T17990] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.768440][T17990] Buffer I/O error on dev nbd12, logical block 0, async page read [ 544.776748][T17990] I/O error, dev nbd12, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.787525][T17990] Buffer I/O error on dev nbd12, logical block 3, async page read [ 544.796105][T17990] I/O error, dev nbd12, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.807189][T17990] Buffer I/O error on dev nbd12, logical block 2, async page read [ 544.818411][T15996] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.829478][T15996] Buffer I/O error on dev nbd12, logical block 0, async page read [ 544.838256][T15996] I/O error, dev nbd12, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.860817][T15996] Buffer I/O error on dev nbd12, logical block 1, async page read [ 544.869465][T15996] I/O error, dev nbd12, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.880135][T15996] Buffer I/O error on dev nbd12, logical block 2, async page read [ 544.889221][T15996] I/O error, dev nbd12, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.900516][T15996] Buffer I/O error on dev nbd12, logical block 3, async page read [ 544.908982][T15996] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.919279][T15996] Buffer I/O error on dev nbd12, logical block 0, async page read [ 544.929140][T15996] I/O error, dev nbd12, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.939242][T15996] Buffer I/O error on dev nbd12, logical block 1, async page read [ 544.948168][T15996] ldm_validate_partition_table(): Disk read failed. [ 544.956193][T15996] Dev nbd12: unable to read RDB block 0 [ 544.962579][T15996] nbd12: unable to read partition table [ 544.973236][T15996] ldm_validate_partition_table(): Disk read failed. [ 544.981079][T15996] Dev nbd12: unable to read RDB block 0 [ 544.987479][T15996] nbd12: unable to read partition table [ 545.144634][T20612] xt_hashlimit: size too large, truncated to 1048576 [ 545.304445][T20620] xt_policy: too many policy elements [ 545.312411][T20621] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 545.508637][T20627] Bluetooth: MGMT ver 1.23 [ 546.209611][T20661] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 546.748155][T20684] __nla_validate_parse: 2 callbacks suppressed [ 546.748177][T20684] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4386'. [ 547.180790][T20701] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4389'. [ 547.208989][T20693] bond2: Removing last arp target with arp_interval on [ 547.434619][T20711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4392'. [ 547.543638][T20712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4392'. [ 547.711606][T20712] ieee80211 phy107: Failed to add default virtual iface [ 548.168836][T20738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4403'. [ 548.667521][T20749] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4408'. [ 549.025559][T20752] bond5: entered promiscuous mode [ 549.031139][T20752] bond5: entered allmulticast mode [ 549.038532][T20752] 8021q: adding VLAN 0 to HW filter on device bond5 [ 549.160906][T20757] nbd15: detected capacity change from 0 to 63 [ 549.176345][ T51] block nbd15: Receive control failed (result -104) [ 549.186010][ T5144] block nbd15: Receive control failed (result -32) [ 549.291344][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 549.299706][ C0] lec:lec_tx_timeout: lec0 [ 549.304520][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 549.393492][T20767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4413'. [ 549.403169][T20767] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4413'. [ 549.676052][T20747] Cannot find set identified by id 2 to match [ 549.691460][T20779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4417'. [ 550.012588][T20798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4425'. [ 550.060769][T20798] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 550.118093][T20802] netlink: 'syz.1.4427': attribute type 12 has an invalid length. [ 550.151285][T20802] netlink: 'syz.1.4427': attribute type 12 has an invalid length. [ 550.152412][T20798] netlink: 'syz.4.4425': attribute type 11 has an invalid length. [ 550.559782][T20830] xt_SECMARK: invalid mode: 4 [ 550.942866][T20852] bond1: option downdelay: invalid value (18446744073709547007) [ 550.951037][T20852] bond1: option downdelay: allowed values 0 - 2147483647 [ 550.959760][T20852] bond1 (unregistering): Released all slaves [ 551.102342][T20861] ipt_ECN: cannot use operation on non-tcp rule [ 554.309630][T20898] __nla_validate_parse: 58 callbacks suppressed [ 554.309662][T20898] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4456'. [ 554.325514][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 554.325551][ C0] lec:lec_tx_timeout: lec0 [ 554.334578][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 554.348579][T20898] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4456'. [ 554.401179][T20896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.548522][T20912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4459'. [ 554.721271][T20919] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.729471][T20919] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 554.757801][T20918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4463'. [ 554.864988][T20918] netlink: 'syz.1.4463': attribute type 21 has an invalid length. [ 554.873399][T20918] netlink: 'syz.1.4463': attribute type 6 has an invalid length. [ 554.886903][T20918] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4463'. [ 554.999317][T20930] netlink: 272 bytes leftover after parsing attributes in process `syz.3.4466'. [ 555.019540][T20930] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4466'. [ 555.184924][T20931] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4466'. [ 555.352806][T20942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4471'. [ 555.464513][T20942] netlink: 'syz.0.4471': attribute type 2 has an invalid length. [ 555.482292][T20942] úÁàél24): entered promiscuous mode [ 555.524849][T20942] bridge3: entered promiscuous mode [ 555.978445][T20968] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4478'. [ 556.044592][T20968] xt_hashlimit: size too large, truncated to 1048576 [ 556.077628][T20968] xt_hashlimit: max too large, truncated to 1048576 [ 556.104617][T20976] veth0_virt_wifi: entered allmulticast mode [ 556.367579][T20981] vlan4: entered allmulticast mode [ 556.373776][T20981] bridge4: entered allmulticast mode [ 556.394455][T20981] erspan0: left allmulticast mode [ 556.400068][T20981] erspan0: left promiscuous mode [ 556.405795][T20981] bridge3: port 1(erspan0) entered disabled state [ 556.425174][T20981] bridge4: port 1(erspan0) entered blocking state [ 556.444597][T20981] bridge4: port 1(erspan0) entered disabled state [ 556.464892][T20981] erspan0: entered allmulticast mode [ 556.500785][T20981] erspan0: entered promiscuous mode [ 556.514305][T20981] bridge4: port 1(erspan0) entered blocking state [ 556.521058][T20981] bridge4: port 1(erspan0) entered forwarding state [ 556.825448][T21007] netlink: 'syz.3.4490': attribute type 4 has an invalid length. [ 557.138108][T21016] syzkaller0: entered promiscuous mode [ 557.157487][T21016] syzkaller0: entered allmulticast mode [ 557.289195][T21019] set match dimension is over the limit! [ 557.589247][T21026] tipc: Started in network mode [ 557.594893][T21026] tipc: Node identity 429751f498d1, cluster identity 4711 [ 557.616644][T21026] tipc: Enabled bearer , priority 0 [ 557.680686][T21015] tipc: Resetting bearer [ 557.755875][T21015] tipc: Disabling bearer [ 557.852853][T21029] 8021q: adding VLAN 0 to HW filter on device bond2 [ 557.889951][T21032] bond2: (slave batadv1): Opening slave failed [ 557.908289][T21030] syzkaller1: entered promiscuous mode [ 557.927681][T21030] syzkaller1: entered allmulticast mode [ 559.340276][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 559.348608][ C0] lec:lec_tx_timeout: lec0 [ 559.360376][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 559.517915][T21100] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 559.968839][T21128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.043749][T15663] block nbd1: Possible stuck request ffff888026750000: control (read@0,1024B). Runtime 270 seconds [ 560.056262][T15663] block nbd1: Possible stuck request ffff888026750200: control (read@1024,1024B). Runtime 270 seconds [ 560.057585][T21134] __nla_validate_parse: 13 callbacks suppressed [ 560.057602][T21134] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4533'. [ 560.067646][T15663] block nbd1: Possible stuck request ffff888026750400: control (read@2048,1024B). Runtime 270 seconds [ 560.067685][T15663] block nbd1: Possible stuck request ffff888026750600: control (read@3072,1024B). Runtime 270 seconds [ 560.156936][T21135] netlink: 'syz.4.4532': attribute type 13 has an invalid length. [ 560.277304][T21146] netlink: 'syz.1.4536': attribute type 1 has an invalid length. [ 560.292708][T21142] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 560.417574][T21146] bond1: entered promiscuous mode [ 560.444642][T21146] 8021q: adding VLAN 0 to HW filter on device bond1 [ 560.545666][T21148] bond1: (slave veth5): making interface the new active one [ 560.557491][T21148] veth5: entered promiscuous mode [ 560.571070][T21148] bond1: (slave veth5): Enslaving as an active interface with an up link [ 560.870011][T21177] vlan3: left allmulticast mode [ 560.895584][T21177] bridge4: left allmulticast mode [ 560.960086][T21177] vlan4: left allmulticast mode [ 561.013157][T21177] bridge5: left allmulticast mode [ 561.115404][T21196] netlink: 'syz.4.4551': attribute type 1 has an invalid length. [ 561.177449][T21196] bond6: entered promiscuous mode [ 561.184412][T21196] 8021q: adding VLAN 0 to HW filter on device bond6 [ 561.194370][T21187] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 561.397349][T21205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4554'. [ 561.404097][T21211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4556'. [ 561.417129][T21206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4554'. [ 561.440361][T21211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4556'. [ 561.736236][T21231] batadv_slave_1: entered promiscuous mode [ 561.763844][T21231] ipt_REJECT: TCP_RESET invalid for non-tcp [ 561.771408][T21226] batadv_slave_1: left promiscuous mode [ 561.792786][T21230] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 561.943512][T21242] Cannot find set identified by id 2 to match [ 562.014335][T21221] nbd16: detected capacity change from 0 to 63 [ 562.028750][ T51] block nbd16: Receive control failed (result -104) [ 562.028765][ T5144] block nbd16: Receive control failed (result -32) [ 562.264614][T21252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4572'. [ 562.271320][T21253] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4574'. [ 562.287569][T21255] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4573'. [ 562.300553][T21253] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4574'. [ 562.319966][T21253] netlink: 'syz.2.4574': attribute type 6 has an invalid length. [ 562.337428][T21252] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4572'. [ 562.340450][T21253] netlink: 'syz.2.4574': attribute type 5 has an invalid length. [ 562.395569][T21253] netlink: 'syz.2.4574': attribute type 3 has an invalid length. [ 562.813402][T21271] bond3: option downdelay: invalid value (18446744073709547007) [ 562.822692][T21271] bond3: option downdelay: allowed values 0 - 2147483647 [ 562.832593][T21271] bond3 (unregistering): Released all slaves [ 562.883388][T21283] netlink: 'syz.4.4584': attribute type 1 has an invalid length. [ 563.248786][T17990] block nbd3: Possible stuck request ffff8880267e0000: control (read@0,1024B). Runtime 150 seconds [ 563.259661][T17990] block nbd3: Possible stuck request ffff8880267e0200: control (read@1024,1024B). Runtime 150 seconds [ 563.272591][T17990] block nbd3: Possible stuck request ffff8880267e0400: control (read@2048,1024B). Runtime 150 seconds [ 563.288712][T17990] block nbd3: Possible stuck request ffff8880267e0600: control (read@3072,1024B). Runtime 150 seconds [ 563.300964][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.420847][T21305] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 563.761244][T21325] bond3: option downdelay: invalid value (18446744073709547007) [ 563.784978][T21325] bond3: option downdelay: allowed values 0 - 2147483647 [ 563.818970][T21325] bond3 (unregistering): Released all slaves [ 564.140564][T21350] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 564.370284][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 564.378437][ C0] lec:lec_tx_timeout: lec0 [ 564.384113][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 564.413823][T21364] x_tables: ip_tables: TPROXY.0 target: invalid size 16 (kernel) != (user) 0 [ 565.259071][T21409] Cannot find set identified by id 2 to match [ 565.319074][T21412] bond5: left promiscuous mode [ 565.324455][T21412] bond5: left allmulticast mode [ 565.333457][T21412] bond6: left promiscuous mode [ 565.587627][T21417] syzkaller0: entered promiscuous mode [ 565.596516][T21417] syzkaller0: entered allmulticast mode [ 565.643137][T21417] __nla_validate_parse: 20 callbacks suppressed [ 565.643158][T21417] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4634'. [ 565.660934][T21417] tunl0: Caught tx_queue_len zero misconfig [ 565.869038][T21425] netlink: 'syz.4.4636': attribute type 1 has an invalid length. [ 565.922578][T21429] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4636'. [ 565.924223][T21425] 8021q: adding VLAN 0 to HW filter on device bond7 [ 566.255208][T21441] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4642'. [ 566.310558][T21441] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4642'. [ 566.581267][T21453] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4647'. [ 566.602710][T21453] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4647'. [ 566.654332][T21458] syzkaller0: entered promiscuous mode [ 566.669883][T21458] syzkaller0: entered allmulticast mode [ 566.828379][T21460] bridge4: port 1(erspan0) entered disabled state [ 567.032432][T21460] wg0: left allmulticast mode [ 567.042950][T21460] veth0_virt_wifi: left allmulticast mode [ 567.061584][T21460] vlan2: left allmulticast mode [ 567.066870][T21460] bridge1: left allmulticast mode [ 567.073054][T21460] vlan3: left allmulticast mode [ 567.078260][T21460] bridge3: left allmulticast mode [ 567.099756][T21460] vlan4: left allmulticast mode [ 567.107765][T21460] bridge4: left allmulticast mode [ 567.307917][T21484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4654'. [ 567.320038][T21484] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4654'. [ 567.785895][T21509] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4662'. [ 567.826854][T21509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4662'. [ 567.866452][T21511] vlan5: entered promiscuous mode [ 567.874201][T21511] veth1: entered promiscuous mode [ 568.176905][T21525] xt_hashlimit: size too large, truncated to 1048576 [ 568.521432][T21541] vlan5: entered allmulticast mode [ 568.526732][T21541] bridge6: entered allmulticast mode [ 568.592939][T21535] erspan0: left allmulticast mode [ 568.608327][T21535] erspan0: left promiscuous mode [ 568.634354][T21535] bridge5: port 1(erspan0) entered disabled state [ 568.690140][T21535] bridge6: port 1(erspan0) entered blocking state [ 568.704799][T21535] bridge6: port 1(erspan0) entered disabled state [ 568.713443][T21535] erspan0: entered allmulticast mode [ 568.721964][T21535] erspan0: entered promiscuous mode [ 568.732684][T21542] tipc: Enabling of bearer rejected, failed to enable media [ 569.082057][T21550] syzkaller0: entered promiscuous mode [ 569.087772][T21550] syzkaller0: entered allmulticast mode [ 569.390319][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 569.398684][ C0] lec:lec_tx_timeout: lec0 [ 569.403606][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 569.495494][T21571] bond8: option downdelay: invalid value (18446744073709547007) [ 569.504684][T21571] bond8: option downdelay: allowed values 0 - 2147483647 [ 569.519846][T21571] bond8 (unregistering): Released all slaves [ 570.005662][T21587] delete_channel: no stack [ 570.673118][T21628] __nla_validate_parse: 6 callbacks suppressed [ 570.673142][T21628] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4702'. [ 570.713569][T21626] netlink: 'syz.3.4701': attribute type 1 has an invalid length. [ 570.935943][T21637] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4706'. [ 571.267894][T21652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4712'. [ 571.293932][T21652] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 571.595399][T21670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4715'. [ 571.715647][T21673] xt_hashlimit: size too large, truncated to 1048576 [ 572.196920][T21690] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 572.251866][T21699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4726'. [ 572.578540][T21710] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.4731'. [ 572.603337][T21710] openvswitch: netlink: EtherType 0 is less than min 600 [ 572.681249][T21715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4733'. [ 572.757502][T21715] bond3: option downdelay: invalid value (18446744073709547007) [ 572.769779][T21715] bond3: option downdelay: allowed values 0 - 2147483647 [ 572.779798][T21715] bond3 (unregistering): Released all slaves [ 573.049320][T21719] netlink: 'syz.4.4732': attribute type 2 has an invalid length. [ 573.074547][T21734] xt_hashlimit: size too large, truncated to 1048576 [ 573.635777][T21750] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 574.044571][T21765] netlink: 'syz.3.4746': attribute type 1 has an invalid length. [ 574.167564][T21765] 8021q: adding VLAN 0 to HW filter on device bond3 [ 574.209019][T21775] xt_hashlimit: size too large, truncated to 1048576 [ 574.420269][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 574.428516][ C0] lec:lec_tx_timeout: lec0 [ 574.434057][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 574.671003][T21788] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 574.737283][T21793] ip6tnl0: Caught tx_queue_len zero misconfig [ 574.825655][T21795] bond4: entered promiscuous mode [ 574.865301][T21795] bond4: entered allmulticast mode [ 574.902199][T21795] 8021q: adding VLAN 0 to HW filter on device bond4 [ 575.048971][T21812] xt_hashlimit: size too large, truncated to 1048576 [ 575.670461][T21829] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4769'. [ 575.687351][T21829] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4769'. [ 575.704439][T21829] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4769'. [ 575.745480][T21837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4771'. [ 575.781742][T21837] bond8: option downdelay: invalid value (18446744073709547007) [ 575.789769][T21837] bond8: option downdelay: allowed values 0 - 2147483647 [ 575.800042][T21837] bond8 (unregistering): Released all slaves [ 575.832712][T21833] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 575.981137][T21847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4775'. [ 576.071461][T21847] vlan4: entered allmulticast mode [ 576.092234][T21847] bridge4: entered allmulticast mode [ 576.136477][T21851] erspan0: left allmulticast mode [ 576.152694][T21851] erspan0: left promiscuous mode [ 576.163720][T21854] xt_hashlimit: size too large, truncated to 1048576 [ 576.168493][T21851] bridge1: port 1(erspan0) entered disabled state [ 576.194763][T21851] bridge4: port 1(erspan0) entered blocking state [ 576.206218][T21851] bridge4: port 1(erspan0) entered disabled state [ 576.213974][T21851] erspan0: entered allmulticast mode [ 576.230029][T21851] erspan0: entered promiscuous mode [ 576.434719][T21864] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4780'. [ 576.718474][T21878] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4785'. [ 576.753253][T21878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4785'. [ 576.753352][T21875] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 576.779674][T21878] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4785'. [ 576.789846][T21878] netlink: 'syz.0.4785': attribute type 3 has an invalid length. [ 576.819817][T21878] netlink: 'syz.0.4785': attribute type 2 has an invalid length. [ 576.850636][T21878] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4785'. [ 576.890167][T21878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4785'. [ 577.050418][T21896] xt_hashlimit: size too large, truncated to 1048576 [ 577.607729][T21922] tipc: Enabling of bearer rejected, failed to enable media [ 577.652708][T21922] syzkaller0: entered promiscuous mode [ 577.660299][T21922] syzkaller0: entered allmulticast mode [ 577.909886][T21937] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 578.025844][T21956] FAULT_INJECTION: forcing a failure. [ 578.025844][T21956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.058014][T21956] CPU: 1 UID: 0 PID: 21956 Comm: syz.3.4810 Not tainted syzkaller #0 PREEMPT(full) [ 578.058043][T21956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 578.058055][T21956] Call Trace: [ 578.058063][T21956] [ 578.058073][T21956] dump_stack_lvl+0xe8/0x150 [ 578.058104][T21956] should_fail_ex+0x412/0x560 [ 578.058136][T21956] _copy_to_user+0x31/0xb0 [ 578.058162][T21956] simple_read_from_buffer+0xe1/0x170 [ 578.058211][T21956] proc_fail_nth_read+0x1bb/0x230 [ 578.058268][T21956] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 578.058299][T21956] ? rw_verify_area+0x2a6/0x4d0 [ 578.058331][T21956] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 578.058362][T21956] vfs_read+0x20c/0xa70 [ 578.058382][T21956] ? fdget_pos+0x246/0x320 [ 578.058406][T21956] ? __pfx___mutex_lock+0x10/0x10 [ 578.058431][T21956] ? __pfx_vfs_read+0x10/0x10 [ 578.058455][T21956] ? __fget_files+0x2a/0x420 [ 578.058477][T21956] ? __fget_files+0x3a0/0x420 [ 578.058493][T21956] ? __fget_files+0x2a/0x420 [ 578.058518][T21956] ksys_read+0x150/0x270 [ 578.058541][T21956] ? __pfx_ksys_read+0x10/0x10 [ 578.058574][T21956] do_syscall_64+0x14d/0xf80 [ 578.058605][T21956] ? trace_irq_disable+0x3b/0x150 [ 578.058622][T21956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.058642][T21956] ? clear_bhb_loop+0x40/0x90 [ 578.058668][T21956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.058688][T21956] RIP: 0033:0x7f892655d04e [ 578.058708][T21956] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 578.058725][T21956] RSP: 002b:00007f89273f1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 578.058747][T21956] RAX: ffffffffffffffda RBX: 00007f89273f26c0 RCX: 00007f892655d04e [ 578.058762][T21956] RDX: 000000000000000f RSI: 00007f89273f20a0 RDI: 0000000000000004 [ 578.058774][T21956] RBP: 00007f89273f2090 R08: 0000000000000000 R09: 0000000000000000 [ 578.058786][T21956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.058798][T21956] R13: 00007f8926816038 R14: 00007f8926815fa0 R15: 00007ffcef066d48 [ 578.058834][T21956] [ 578.088897][T21960] xt_hashlimit: size too large, truncated to 1048576 [ 578.700857][T21987] netlink: 'syz.1.4819': attribute type 12 has an invalid length. [ 579.157759][T22014] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 579.254973][T15663] block nbd15: Connection timed out, retrying (0/2 alive) [ 579.262860][T15663] block nbd15: Connection timed out, retrying (0/2 alive) [ 579.270756][T19226] block nbd15: Dead connection, failed to find a fallback [ 579.278441][T19226] block nbd15: shutting down sockets [ 579.284182][T19226] blk_print_req_error: 138 callbacks suppressed [ 579.284204][T19226] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 579.304332][T22018] netlink: 'syz.3.4827': attribute type 1 has an invalid length. [ 579.304785][T15663] block nbd15: Connection timed out, retrying (0/2 alive) [ 579.320148][T19226] buffer_io_error: 138 callbacks suppressed [ 579.320169][T19226] Buffer I/O error on dev nbd15, logical block 0, async page read [ 579.336045][T15663] block nbd15: Connection timed out, retrying (0/2 alive) [ 579.343935][T19226] I/O error, dev nbd15, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 579.354016][T19226] Buffer I/O error on dev nbd15, logical block 3, async page read [ 579.362395][T19226] I/O error, dev nbd15, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 579.372350][T19226] Buffer I/O error on dev nbd15, logical block 2, async page read [ 579.381237][T19226] I/O error, dev nbd15, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 579.391200][T19226] Buffer I/O error on dev nbd15, logical block 1, async page read [ 579.402026][T15940] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 579.414413][T15940] Buffer I/O error on dev nbd15, logical block 0, async page read [ 579.447568][T15940] I/O error, dev nbd15, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 579.457859][T15940] Buffer I/O error on dev nbd15, logical block 1, async page read [ 579.466475][T15940] I/O error, dev nbd15, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 579.482944][T22022] xt_hashlimit: size too large, truncated to 1048576 [ 579.490688][T15940] Buffer I/O error on dev nbd15, logical block 2, async page read [ 579.498926][T15940] I/O error, dev nbd15, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 579.530535][T15940] Buffer I/O error on dev nbd15, logical block 3, async page read [ 579.538503][T15940] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 579.555707][T15940] Buffer I/O error on dev nbd15, logical block 0, async page read [ 579.564776][T15940] I/O error, dev nbd15, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 579.590564][T15940] Buffer I/O error on dev nbd15, logical block 1, async page read [ 579.599248][T15940] ldm_validate_partition_table(): Disk read failed. [ 579.621179][T15940] Dev nbd15: unable to read RDB block 0 [ 579.627594][T15940] nbd15: unable to read partition table [ 579.675234][T15940] ldm_validate_partition_table(): Disk read failed. [ 579.712549][T15940] Dev nbd15: unable to read RDB block 0 [ 579.719455][T15940] nbd15: unable to read partition table [ 580.530239][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6100 ms [ 580.538714][ C0] lec:lec_tx_timeout: lec0 [ 580.543777][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 580.568956][T22068] syzkaller0: entered promiscuous mode [ 580.574690][T22068] syzkaller0: entered allmulticast mode [ 580.748453][T22084] __nla_validate_parse: 14 callbacks suppressed [ 580.748475][T22084] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4845'. [ 580.749041][T22086] erspan0: left allmulticast mode [ 580.787797][T22086] erspan0: left promiscuous mode [ 580.794112][T22086] bridge4: port 1(erspan0) entered disabled state [ 580.859367][T22086] bridge5: port 1(erspan0) entered blocking state [ 580.881826][T22086] bridge5: port 1(erspan0) entered disabled state [ 580.895665][T22086] erspan0: entered allmulticast mode [ 580.919358][T22086] erspan0: entered promiscuous mode [ 580.981771][T22080] vlan5: entered allmulticast mode [ 580.987394][T22080] bridge5: entered allmulticast mode [ 580.996765][T22081] tipc: Enabled bearer , priority 0 [ 581.072867][T22065] tipc: Resetting bearer [ 581.107837][T22065] tipc: Disabling bearer [ 581.220595][T22101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4848'. [ 581.814866][T22122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 581.947744][T22125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4855'. [ 581.978385][T22125] netlink: 'syz.1.4855': attribute type 21 has an invalid length. [ 582.000414][T22125] IPv6: NLM_F_CREATE should be specified when creating new route [ 582.010726][T22125] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 582.018778][T22125] IPv6: NLM_F_CREATE should be set when creating new route [ 582.026890][T22125] IPv6: NLM_F_CREATE should be set when creating new route [ 582.034982][T22125] IPv6: NLM_F_CREATE should be set when creating new route [ 582.138880][T22129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4857'. [ 582.177487][T22131] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4858'. [ 582.192421][T22131] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4858'. [ 582.409349][T22132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4857'. [ 582.669645][T22139] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4862'. [ 583.130766][T22147] nbd17: detected capacity change from 0 to 63 [ 583.176588][ T5144] block nbd17: Receive control failed (result -32) [ 583.176588][ T51] block nbd17: Receive control failed (result -104) [ 583.242631][T22155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4865'. [ 583.288635][T22160] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4867'. [ 583.739058][ T5144] block nbd18: Receive control failed (result -1) [ 584.105469][T22194] netlink: 'syz.0.4878': attribute type 1 has an invalid length. [ 584.230552][T22194] bond3: (slave veth3): Enslaving as an active interface with a down link [ 584.578551][T22217] [ 584.580944][T22217] ====================================================== [ 584.589202][T22217] WARNING: possible circular locking dependency detected [ 584.598960][T22217] syzkaller #0 Not tainted [ 584.603504][T22217] ------------------------------------------------------ [ 584.610650][T22217] syz.0.4886/22217 is trying to acquire lock: [ 584.616744][T22217] ffff888091b1c818 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x300 [ 584.626671][T22217] [ 584.626671][T22217] but task is already holding lock: [ 584.634222][T22217] ffff888029dfd1e0 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 584.643725][T22217] [ 584.643725][T22217] which lock already depends on the new lock. [ 584.643725][T22217] [ 584.654397][T22217] [ 584.654397][T22217] the existing dependency chain (in reverse order) is: [ 584.663863][T22217] [ 584.663863][T22217] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 584.671998][T22217] __mutex_lock+0x19f/0x1300 [ 584.677476][T22217] elevator_change+0x1b3/0x450 [ 584.682800][T22217] elevator_set_none+0xb5/0x140 [ 584.688358][T22217] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 584.694706][T22217] nbd_start_device+0x17f/0xb10 [ 584.700702][T22217] nbd_genl_connect+0x165b/0x1cf0 [ 584.706571][T22217] genl_family_rcv_msg_doit+0x22a/0x330 [ 584.713012][T22217] genl_rcv_msg+0x61c/0x7a0 [ 584.718143][T22217] netlink_rcv_skb+0x232/0x4b0 [ 584.723613][T22217] genl_rcv+0x28/0x40 [ 584.728128][T22217] netlink_unicast+0x80f/0x9b0 [ 584.733513][T22217] netlink_sendmsg+0x813/0xb40 [ 584.738907][T22217] ____sys_sendmsg+0x972/0x9f0 [ 584.744546][T22217] ___sys_sendmsg+0x2a5/0x360 [ 584.749832][T22217] __x64_sys_sendmsg+0x1bd/0x2a0 [ 584.755404][T22217] do_syscall_64+0x14d/0xf80 [ 584.760711][T22217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.767909][T22217] [ 584.767909][T22217] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 584.777575][T22217] blk_alloc_queue+0x546/0x680 [ 584.783413][T22217] __blk_mq_alloc_disk+0x197/0x390 [ 584.789417][T22217] nbd_dev_add+0x499/0xb50 [ 584.794910][T22217] nbd_init+0x168/0x1f0 [ 584.799959][T22217] do_one_initcall+0x250/0x8d0 [ 584.805360][T22217] do_initcall_level+0x104/0x190 [ 584.811309][T22217] do_initcalls+0x59/0xa0 [ 584.816384][T22217] kernel_init_freeable+0x2a6/0x3e0 [ 584.822754][T22217] kernel_init+0x1d/0x1d0 [ 584.827775][T22217] ret_from_fork+0x51e/0xb90 [ 584.833099][T22217] ret_from_fork_asm+0x1a/0x30 [ 584.838530][T22217] [ 584.838530][T22217] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 584.846506][T22217] fs_reclaim_acquire+0x71/0x100 [ 584.852414][T22217] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 584.858831][T22217] __alloc_skb+0x1d0/0x7d0 [ 584.863863][T22217] __ip6_append_data+0x2d6d/0x3f70 [ 584.869583][T22217] ip6_append_data+0x10f/0x280 [ 584.875042][T22217] rawv6_sendmsg+0x12d3/0x18e0 [ 584.880508][T22217] ____sys_sendmsg+0x80a/0x9f0 [ 584.886089][T22217] ___sys_sendmsg+0x2a5/0x360 [ 584.891916][T22217] __x64_sys_sendmsg+0x1bd/0x2a0 [ 584.897587][T22217] do_syscall_64+0x14d/0xf80 [ 584.902723][T22217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.910154][T22217] [ 584.910154][T22217] -> #3 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 584.918325][T22217] lock_sock_nested+0x41/0x100 [ 584.923801][T22217] inet_shutdown+0x6a/0x390 [ 584.929007][T22217] nbd_mark_nsock_dead+0x2e9/0x560 [ 584.934644][T22217] recv_work+0x1c7f/0x1d90 [ 584.939588][T22217] process_scheduled_works+0xb6e/0x18c0 [ 584.945860][T22217] worker_thread+0xa53/0xfc0 [ 584.951098][T22217] kthread+0x388/0x470 [ 584.955869][T22217] ret_from_fork+0x51e/0xb90 [ 584.960998][T22217] ret_from_fork_asm+0x1a/0x30 [ 584.966583][T22217] [ 584.966583][T22217] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 584.975393][T22217] __mutex_lock+0x19f/0x1300 [ 584.981686][T22217] nbd_queue_rq+0x37b/0x1100 [ 584.986926][T22217] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 584.993089][T22217] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 585.000119][T22217] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 585.006826][T22217] blk_mq_run_hw_queue+0x348/0x4f0 [ 585.012835][T22217] blk_mq_dispatch_list+0xd16/0xe10 [ 585.018926][T22217] blk_mq_flush_plug_list+0x48d/0x570 [ 585.025349][T22217] __blk_flush_plug+0x3ed/0x4d0 [ 585.031179][T22217] __submit_bio+0x28d/0x580 [ 585.036320][T22217] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 585.042757][T22217] block_read_full_folio+0x599/0x830 [ 585.048946][T22217] filemap_read_folio+0x137/0x3b0 [ 585.054783][T22217] do_read_cache_folio+0x358/0x590 [ 585.060447][T22217] read_part_sector+0xb6/0x2b0 [ 585.065933][T22217] adfspart_check_ICS+0xa5/0xa40 [ 585.071497][T22217] bdev_disk_changed+0x7ba/0x1550 [ 585.077153][T22217] blkdev_get_whole+0x380/0x510 [ 585.083230][T22217] bdev_open+0x31e/0xd30 [ 585.088093][T22217] blkdev_open+0x470/0x610 [ 585.093697][T22217] do_dentry_open+0x785/0x14e0 [ 585.099117][T22217] vfs_open+0x3b/0x340 [ 585.103826][T22217] path_openat+0x2e08/0x3860 [ 585.109118][T22217] do_file_open+0x23e/0x4a0 [ 585.114158][T22217] do_sys_openat2+0x113/0x200 [ 585.119497][T22217] __x64_sys_openat+0x138/0x170 [ 585.124889][T22217] do_syscall_64+0x14d/0xf80 [ 585.130190][T22217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.136702][T22217] [ 585.136702][T22217] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 585.144272][T22217] __mutex_lock+0x19f/0x1300 [ 585.149927][T22217] nbd_queue_rq+0xc6/0x1100 [ 585.154972][T22217] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 585.161214][T22217] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 585.168675][T22217] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 585.175805][T22217] blk_mq_run_hw_queue+0x348/0x4f0 [ 585.181465][T22217] blk_mq_dispatch_list+0xd16/0xe10 [ 585.187213][T22217] blk_mq_flush_plug_list+0x48d/0x570 [ 585.193134][T22217] __blk_flush_plug+0x3ed/0x4d0 [ 585.198520][T22217] __submit_bio+0x28d/0x580 [ 585.203741][T22217] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 585.210046][T22217] block_read_full_folio+0x599/0x830 [ 585.215857][T22217] filemap_read_folio+0x137/0x3b0 [ 585.221493][T22217] do_read_cache_folio+0x358/0x590 [ 585.227217][T22217] read_part_sector+0xb6/0x2b0 [ 585.232865][T22217] adfspart_check_ICS+0xa5/0xa40 [ 585.238340][T22217] bdev_disk_changed+0x7ba/0x1550 [ 585.244002][T22217] blkdev_get_whole+0x380/0x510 [ 585.249575][T22217] bdev_open+0x31e/0xd30 [ 585.254521][T22217] blkdev_open+0x470/0x610 [ 585.259723][T22217] do_dentry_open+0x785/0x14e0 [ 585.265802][T22217] vfs_open+0x3b/0x340 [ 585.270577][T22217] path_openat+0x2e08/0x3860 [ 585.275710][T22217] do_file_open+0x23e/0x4a0 [ 585.281087][T22217] do_sys_openat2+0x113/0x200 [ 585.286481][T22217] __x64_sys_openat+0x138/0x170 [ 585.292042][T22217] do_syscall_64+0x14d/0xf80 [ 585.297351][T22217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.303946][T22217] [ 585.303946][T22217] -> #0 (set->srcu){.+.+}-{0:0}: [ 585.311422][T22217] __lock_acquire+0x15a5/0x2cf0 [ 585.317001][T22217] lock_sync+0x9d/0x120 [ 585.321856][T22217] __synchronize_srcu+0xca/0x300 [ 585.327596][T22217] elevator_switch+0x1e8/0x7a0 [ 585.333253][T22217] elevator_change+0x2cc/0x450 [ 585.338818][T22217] elevator_set_default+0x36c/0x430 [ 585.344634][T22217] blk_register_queue+0x366/0x430 [ 585.350369][T22217] __add_disk+0x677/0xd50 [ 585.355886][T22217] add_disk_fwnode+0xfb/0x480 [ 585.361803][T22217] nbd_dev_add+0x72c/0xb50 [ 585.367428][T22217] nbd_genl_connect+0x962/0x1cf0 [ 585.373286][T22217] genl_family_rcv_msg_doit+0x22a/0x330 [ 585.379754][T22217] genl_rcv_msg+0x61c/0x7a0 [ 585.384901][T22217] netlink_rcv_skb+0x232/0x4b0 [ 585.390217][T22217] genl_rcv+0x28/0x40 [ 585.394749][T22217] netlink_unicast+0x80f/0x9b0 [ 585.400129][T22217] netlink_sendmsg+0x813/0xb40 [ 585.405518][T22217] ____sys_sendmsg+0x972/0x9f0 [ 585.410835][T22217] ___sys_sendmsg+0x2a5/0x360 [ 585.416398][T22217] __x64_sys_sendmsg+0x1bd/0x2a0 [ 585.422125][T22217] do_syscall_64+0x14d/0xf80 [ 585.427337][T22217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.434347][T22217] [ 585.434347][T22217] other info that might help us debug this: [ 585.434347][T22217] [ 585.444874][T22217] Chain exists of: [ 585.444874][T22217] set->srcu --> &q->q_usage_counter(io)#49 --> &q->elevator_lock [ 585.444874][T22217] [ 585.458889][T22217] Possible unsafe locking scenario: [ 585.458889][T22217] [ 585.466614][T22217] CPU0 CPU1 [ 585.472086][T22217] ---- ---- [ 585.477472][T22217] lock(&q->elevator_lock); [ 585.482073][T22217] lock(&q->q_usage_counter(io)#49); [ 585.490329][T22217] lock(&q->elevator_lock); [ 585.497528][T22217] sync(set->srcu); [ 585.501437][T22217] [ 585.501437][T22217] *** DEADLOCK *** [ 585.501437][T22217] [ 585.509756][T22217] 6 locks held by syz.0.4886/22217: [ 585.514953][T22217] #0: ffffffff8fc38910 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 585.523497][T22217] #1: ffffffff8fc38748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 585.532473][T22217] #2: ffff888054af11d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x480 [ 585.543112][T22217] #3: ffff888029dfd270 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x115/0x430 [ 585.553140][T22217] #4: ffff888029dfccd8 (&q->q_usage_counter(queue)#55){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 585.564555][T22217] #5: ffff888029dfd1e0 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 585.574409][T22217] [ 585.574409][T22217] stack backtrace: [ 585.580388][T22217] CPU: 1 UID: 0 PID: 22217 Comm: syz.0.4886 Not tainted syzkaller #0 PREEMPT(full) [ 585.580407][T22217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 585.580418][T22217] Call Trace: [ 585.580432][T22217] [ 585.580441][T22217] dump_stack_lvl+0xe8/0x150 [ 585.580464][T22217] print_circular_bug+0x2e1/0x300 [ 585.580489][T22217] check_noncircular+0x12e/0x150 [ 585.580512][T22217] __lock_acquire+0x15a5/0x2cf0 [ 585.580533][T22217] ? check_path+0x21/0x40 [ 585.580556][T22217] ? lockdep_unlock+0x5d/0xd0 [ 585.580572][T22217] ? __lock_acquire+0x146e/0x2cf0 [ 585.580592][T22217] ? __synchronize_srcu+0xb6/0x300 [ 585.580609][T22217] lock_sync+0x9d/0x120 [ 585.580627][T22217] ? __synchronize_srcu+0xb6/0x300 [ 585.580646][T22217] __synchronize_srcu+0xca/0x300 [ 585.580664][T22217] ? do_raw_spin_lock+0x12b/0x2f0 [ 585.580679][T22217] ? __pfx___synchronize_srcu+0x10/0x10 [ 585.580701][T22217] ? read_tsc+0x9/0x20 [ 585.580717][T22217] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 585.580733][T22217] ? synchronize_srcu+0x20d/0x270 [ 585.580751][T22217] elevator_switch+0x1e8/0x7a0 [ 585.580769][T22217] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 585.580790][T22217] elevator_change+0x2cc/0x450 [ 585.580808][T22217] ? do_raw_spin_unlock+0xf5/0x210 [ 585.580824][T22217] elevator_set_default+0x36c/0x430 [ 585.580843][T22217] ? __pfx_elevator_set_default+0x10/0x10 [ 585.580864][T22217] ? disk_register_independent_access_ranges+0x2db/0x380 [ 585.580882][T22217] ? blk_crypto_sysfs_register+0x11c/0x170 [ 585.580900][T22217] blk_register_queue+0x366/0x430 [ 585.580924][T22217] __add_disk+0x677/0xd50 [ 585.580947][T22217] ? down_read+0x272/0x2e0 [ 585.580968][T22217] add_disk_fwnode+0xfb/0x480 [ 585.580991][T22217] nbd_dev_add+0x72c/0xb50 [ 585.581012][T22217] ? __pfx_nbd_dev_add+0x10/0x10 [ 585.581035][T22217] ? bpf_lsm_capable+0x9/0x20 [ 585.581056][T22217] ? security_capable+0x7e/0x2c0 [ 585.581079][T22217] nbd_genl_connect+0x962/0x1cf0 [ 585.581096][T22217] ? __pfx___nla_validate_parse+0x10/0x10 [ 585.581117][T22217] ? __pfx_nbd_genl_connect+0x10/0x10 [ 585.581135][T22217] ? rcu_is_watching+0x15/0xb0 [ 585.581155][T22217] ? trace_kmalloc+0x2a/0x110 [ 585.581172][T22217] ? __nla_parse+0x40/0x60 [ 585.581190][T22217] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 585.581212][T22217] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 585.581235][T22217] genl_family_rcv_msg_doit+0x22a/0x330 [ 585.581258][T22217] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 585.581283][T22217] ? __lock_acquire+0x6b5/0x2cf0 [ 585.581303][T22217] genl_rcv_msg+0x61c/0x7a0 [ 585.581325][T22217] ? __pfx_genl_rcv_msg+0x10/0x10 [ 585.581343][T22217] ? __pfx_nbd_genl_connect+0x10/0x10 [ 585.581359][T22217] ? __lock_acquire+0x6b5/0x2cf0 [ 585.581381][T22217] netlink_rcv_skb+0x232/0x4b0 [ 585.581398][T22217] ? __pfx_genl_rcv_msg+0x10/0x10 [ 585.581417][T22217] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 585.581445][T22217] ? down_read+0x272/0x2e0 [ 585.581464][T22217] ? genl_rcv+0xd/0x40 [ 585.581482][T22217] genl_rcv+0x28/0x40 [ 585.581501][T22217] netlink_unicast+0x80f/0x9b0 [ 585.581518][T22217] ? __pfx_netlink_unicast+0x10/0x10 [ 585.581532][T22217] ? netlink_sendmsg+0x650/0xb40 [ 585.581548][T22217] ? skb_put+0x11b/0x210 [ 585.581567][T22217] netlink_sendmsg+0x813/0xb40 [ 585.581586][T22217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.581603][T22217] ? aa_sock_msg_perm+0xf1/0x1b0 [ 585.581626][T22217] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 585.581643][T22217] ____sys_sendmsg+0x972/0x9f0 [ 585.581666][T22217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 585.581688][T22217] ? import_iovec+0x73/0xa0 [ 585.581706][T22217] ___sys_sendmsg+0x2a5/0x360 [ 585.581728][T22217] ? __pfx____sys_sendmsg+0x10/0x10 [ 585.581749][T22217] ? futex_wake+0x4ac/0x580 [ 585.581779][T22217] ? __fget_files+0x2a/0x420 [ 585.581792][T22217] ? __fget_files+0x3a0/0x420 [ 585.581809][T22217] __x64_sys_sendmsg+0x1bd/0x2a0 [ 585.581829][T22217] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 585.581852][T22217] ? rcu_is_watching+0x15/0xb0 [ 585.581875][T22217] do_syscall_64+0x14d/0xf80 [ 585.581894][T22217] ? trace_irq_disable+0x3b/0x150 [ 585.581908][T22217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.581923][T22217] ? clear_bhb_loop+0x40/0x90 [ 585.581939][T22217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.581954][T22217] RIP: 0033:0x7f2cef99c819 [ 585.581970][T22217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.581984][T22217] RSP: 002b:00007f2cf07db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 585.582000][T22217] RAX: ffffffffffffffda RBX: 00007f2cefc15fa0 RCX: 00007f2cef99c819 [ 585.582012][T22217] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000005 [ 585.582023][T22217] RBP: 00007f2cefa32c91 R08: 0000000000000000 R09: 0000000000000000 [ 585.582032][T22217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.582042][T22217] R13: 00007f2cefc16038 R14: 00007f2cefc15fa0 R15: 00007ffd9ffa1f78 [ 585.582059][T22217] [ 586.126569][T22224] bond3: option downdelay: invalid value (18446744073709547007) [ 586.135433][T22224] bond3: option downdelay: allowed values 0 - 2147483647 [ 586.231436][T22217] nbd19: detected capacity change from 0 to 63 [ 586.263892][T22224] bond3 (unregistering): Released all slaves [ 586.280232][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 586.288848][ C0] lec:lec_tx_timeout: lec0 [ 586.294165][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 586.400463][ T5144] block nbd19: Receive control failed (result -104) [ 590.120922][T19226] block nbd1: Possible stuck request ffff888026750000: control (read@0,1024B). Runtime 300 seconds [ 590.132543][T19226] block nbd1: Possible stuck request ffff888026750200: control (read@1024,1024B). Runtime 300 seconds [ 590.144578][T19226] block nbd1: Possible stuck request ffff888026750400: control (read@2048,1024B). Runtime 300 seconds [ 590.156073][T19226] block nbd1: Possible stuck request ffff888026750600: control (read@3072,1024B). Runtime 300 seconds [ 591.310321][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 591.319117][ C0] lec:lec_tx_timeout: lec0 [ 591.324097][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 592.060661][T19226] block nbd16: Connection timed out, retrying (0/2 alive) [ 592.067947][T19226] block nbd16: Connection timed out, retrying (0/2 alive) [ 592.075207][ T2434] block nbd16: Dead connection, failed to find a fallback [ 592.082926][ T2434] block nbd16: shutting down sockets [ 592.088317][ T2434] blk_print_req_error: 138 callbacks suppressed [ 592.088331][ T2434] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 592.105001][T19226] block nbd16: Connection timed out, retrying (0/2 alive) [ 592.112529][T19226] block nbd16: Connection timed out, retrying (0/2 alive) [ 592.119866][ T2434] buffer_io_error: 138 callbacks suppressed [ 592.119879][ T2434] Buffer I/O error on dev nbd16, logical block 0, async page read [ 592.134466][ T2434] I/O error, dev nbd16, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 592.144863][ T2434] Buffer I/O error on dev nbd16, logical block 3, async page read [ 592.153654][ T2434] I/O error, dev nbd16, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 592.163990][ T2434] Buffer I/O error on dev nbd16, logical block 2, async page read [ 592.172993][ T2434] I/O error, dev nbd16, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 592.183801][ T2434] Buffer I/O error on dev nbd16, logical block 1, async page read [ 592.192003][T15990] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 592.202263][T15990] Buffer I/O error on dev nbd16, logical block 0, async page read [ 592.210911][T15990] I/O error, dev nbd16, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 592.220862][T15990] Buffer I/O error on dev nbd16, logical block 1, async page read [ 592.228841][T15990] I/O error, dev nbd16, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 592.238899][T15990] Buffer I/O error on dev nbd16, logical block 2, async page read [ 592.247375][T15990] I/O error, dev nbd16, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 592.257637][T15990] Buffer I/O error on dev nbd16, logical block 3, async page read [ 592.265689][T15990] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 592.275977][T15990] Buffer I/O error on dev nbd16, logical block 0, async page read [ 592.284281][T15990] I/O error, dev nbd16, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 592.294245][T15990] Buffer I/O error on dev nbd16, logical block 1, async page read [ 592.302962][T15990] ldm_validate_partition_table(): Disk read failed. [ 592.310172][T15990] Dev nbd16: unable to read RDB block 0 [ 592.316310][T15990] nbd16: unable to read partition table [ 592.324884][T15990] ldm_validate_partition_table(): Disk read failed. [ 592.332102][T15990] Dev nbd16: unable to read RDB block 0 [ 592.338014][T15990] nbd16: unable to read partition table [ 593.320710][T17990] block nbd3: Possible stuck request ffff8880267e0000: control (read@0,1024B). Runtime 180 seconds [ 593.331611][T17990] block nbd3: Possible stuck request ffff8880267e0200: control (read@1024,1024B). Runtime 180 seconds [ 593.342825][T17990] block nbd3: Possible stuck request ffff8880267e0400: control (read@2048,1024B). Runtime 180 seconds [ 593.355487][T17990] block nbd3: Possible stuck request ffff8880267e0600: control (read@3072,1024B). Runtime 180 seconds