last executing test programs: 9m32.108352323s ago: executing program 3 (id=10646): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0xfffffd65) shutdown(0xffffffffffffffff, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x2e, 0x301, 0x70bd26, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001000010825bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000726706938a7ecc850aa69cf266a204d77c37e7a49f8287b83612be63850489601df39d680065d6c553a1ab4d1a31abfbb10de0a454113f5df7aa88f265344e1c77"], 0x30}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x39c, 0x3d, 0x200, 0x70bd2b, 0x25dfdbfe, {0x12}, [@nested={0x186, 0x30, 0x0, 0x1, [@generic="71be223d7d41b77b295d85289e92e33ab627b8cca224b8a829706dd36bd752a6a6572772123bc70cb6a290a6ac7d7b14c2a33fb86fd190f0850bb3104b35f2a5c1025e9e01eea1e52d482e826ae23548494a1f2428829e37162a71218dfa238d204312ad122042356a0ae9056eaa63d3301a37bd601c6a1110b1f6982211a1e991a829c620a9cc2945df16827be53f942c35762d6a84ff857cd949c83da0e6f339a5b9de519abd7edf262fc413e724d5f85927e0a8459faa6b54b7f4b7357f75d22fa632a5b76b21b5b3dcc2b69c30bad4", @nested={0x4, 0x1b}, @generic="cf645819cee4735969fe3308e118fbd92a8e5aa14b52b8f965431c19bb732ea5c5639ab052132aabf4d9ad1fb8eed4a0f1ca62e222f257be015af1c2fd6298a2338d8f2d6f69b8d0772abcc155d12f4fa35a4dce89eb73f0835f874a2a3733c36736547e51312535fe847760795b416b736a965f7aa3bc00a7780666de5417fcb65e2f90ab5e0b8e06440429c4637c4d10e871eb7d1211f89e48dd5fec93d47a42ea7f3555a64fea23", @nested={0x4, 0x157}]}, @generic="636c0af78cf03028f8d26a44caf3aa3cb46218521a9883ee1aa039cfc67e516dfd45352314a024ac7281459c909f4192652f210ce0767b656b39c209fe1617638a818aae36775f1ff3a14da9de7a11b91653c3472b8b5d61642745e8bdac87004c26942e49ae10a5e6f205bf7096d760531cb5e897e0947c02b5fca97c379f87ddfcd800bb5a7695744e389c0f9e9605f7bf5bffc2959561a26aecd5738ac991dddf4feb49e47a4636e5da9f9be906058a43fb84dd8835d5199dc2bdac6521b6af1344c4fa3ce528b99df7e5737bd0d68b8f7ce6fa366d86e75c4e82c33630b572fc2f3acff4b640985d", @generic="0554ea6d0599114f8f048ebeedc478dfdba90fb8fc4a13965866d1cb7d81fef1137aa718e5d6ed2dd53a7b481dfbece3020ad5aed6f01275a7b8c601c8b35a11fbe85b5602b4e087e8d03ee32fe26107a1b0f388fe5132adca08238f32596bd6275bf77a0cfd6fedcaa49596200bd2a864f6ea02de91632e1fc5031a4278dfa63c8bad30103a7b521fa669ccc69b4b5f1a022c1748d4ea680cb2c323345ab4149ded52649fb37430762f7afd74490d155ec9e4502dcb04cf27eeaf2f86dd453e72bdd173f5da2916d73f1b91889ed305de061fc0fd72", @generic="2dc76db18613416e9ee8e5b5c59fc74aacf4b5e6ce6d93d3ee281f1a88c69bf650141ef9eef3f10a", @typed={0xa, 0x112, 0x0, 0x0, @str='\xbb\xbb\xbb\xbb\xbb\xbb'}, @nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x4, 0xd0}, @nested={0x4, 0x135}]}]}, 0x39c}, 0x1, 0x0, 0x0, 0x4054}, 0x40080) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000002c0)={r2, &(0x7f0000000180)='\x00', 0x200040, &(0x7f00000001c0)={@align=0x8000, {0x6, 0x3, 0xd7cf, 0x9}}, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x8}) r5 = socket$caif_seqpacket(0x25, 0x5, 0x5) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8982, 0x0) socket$netlink(0x10, 0x3, 0x8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) 9m29.73868912s ago: executing program 1 (id=10651): r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x420008}]}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 9m29.710186708s ago: executing program 1 (id=10653): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r4) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 9m29.670804564s ago: executing program 3 (id=10654): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r2, 0x25, 0x2, @val=@netkit={@void, @value=r1}}, 0x1c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r3, r4}, 0x5) 9m29.453518728s ago: executing program 0 (id=10657): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="580219d96a5b9032306d39d9912675837d493d24fbe1dee8523450d484f84b32ee59", 0x22}, {0x0}], 0x2}}, {{&(0x7f00000009c0)=@in6={0xa, 0x4e24, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xcaa4}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000b40)="b9d1ab01f3241c722eae441197ffc98889b6bc0b55decf5ba8c811d3a9bca5740c73a7", 0x23}], 0x1, &(0x7f00000011c0), 0x11}}], 0x2, 0x80) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) 9m29.322518576s ago: executing program 0 (id=10659): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 9m28.501338603s ago: executing program 2 (id=10660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r3, 0x25, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c) syz_emit_ethernet(0xfcf0, &(0x7f0000000340)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x8, 0x1, @empty}}}}}}, 0x0) 9m27.89870163s ago: executing program 1 (id=10661): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 9m27.898489792s ago: executing program 3 (id=10662): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='scalable', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000000)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) shutdown(r0, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0x10, 0x3, 0x0) 9m27.892764407s ago: executing program 2 (id=10663): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x8, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x20000005, 0x8, 0x2, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="40c33b69ebc9e05e9bde800088a8", 0xe, 0x171346df250871c7, &(0x7f0000000440)={0x11, 0x3, r3, 0x1, 0x2, 0x6, @broadcast}, 0x14) 9m27.82375797s ago: executing program 1 (id=10664): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 9m27.823107219s ago: executing program 4 (id=10665): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 9m27.779446867s ago: executing program 3 (id=10666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xff, 0x1, 0x10, 0x3ff, 0x4, 0x6}, {0xf, 0x1, 0x2, 0x1, 0x5}, 0x4, 0x100, 0x1b8f}}, @TCA_TBF_RATE64={0xc, 0x4, 0x2fd9e5fb6e622145}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x4094) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2) 9m27.779248983s ago: executing program 0 (id=10667): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x44, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60e}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4004) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e0"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 9m27.704962811s ago: executing program 2 (id=10668): r0 = socket(0x10, 0x803, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x8c}], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0xeaddb0ce1851e778, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x344}]}, 0x34}}, 0x0) 9m27.636798928s ago: executing program 0 (id=10669): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x8044080}, 0x4008054) write$nci(r0, &(0x7f0000000500)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x0, 0x3, 0x8, 0x5, {0x0, 0x2}}, 0x1a) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 9m27.60706203s ago: executing program 2 (id=10670): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="71030601020095b2"], 0xc) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) 9m27.470945325s ago: executing program 3 (id=10671): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000740)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xb4, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@rr={0x7, 0x3, 0x36}]}}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "e30ac6514566654b6c02b136e7eeee718efe3e5e0014e23349c9c75646378efa", "ad3e390a8f74c3bea15b9009da63b66ba34c4bc39325b4f9549f49704c037d37f2d044228e425138426ecc2592b83574", "5141f135e566efa01a129f2457c0f6f23af1aa54e3dff9734ce7954f", {"e54789b0397010b583bc65dea2893d25", "f34827d3dbb54df1e457ec00d207ce0d"}}}}}, 0xc2) 9m27.427558608s ago: executing program 0 (id=10672): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) socket$kcm(0x21, 0x2, 0xa) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000b00), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) close(0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r2) 9m27.388222067s ago: executing program 1 (id=10673): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) r0 = socket(0x14, 0x2, 0x4) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x42020054, 0x0, &(0x7f0000000100)) 9m27.380805325s ago: executing program 4 (id=10674): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 9m27.333401759s ago: executing program 2 (id=10675): socket$inet_tcp(0x2, 0x1, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048010) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000000)=0xd938, 0x4) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 9m27.277597966s ago: executing program 4 (id=10676): socket$inet6(0xa, 0x3, 0x2f) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000f7d, &(0x7f0000000000)={0x2, 0x24e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000540)='~', 0x1, 0x4c801, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) 9m26.994659137s ago: executing program 4 (id=10677): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000000)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000740)={@local, @random="a6e286036e89", @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x1, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x9a5f}}}}}}, 0x0) 9m26.545777532s ago: executing program 4 (id=10678): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0xfe}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$can_j1939(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)="17bcff05ece5ecbd5b", 0x9}, 0x1, 0x0, 0x0, 0x4040005}, 0x4800) 9m26.517756524s ago: executing program 0 (id=10679): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x44, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60e}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4004) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e0"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 9m26.515951207s ago: executing program 3 (id=10680): write(0xffffffffffffffff, &(0x7f0000000340)="1ebb5f4df0c54957fcf372c0dd1ab1ad187b94777ec3496382856e93313d9ca10ddccde23559329615466fdf3fd255f571f135bc9d78af228dd2359654424d69b370e4764c20abf5b83528fd7662ddaf8eed684f2cd944a5", 0x58) r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 9m23.765851971s ago: executing program 1 (id=10681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xff, 0x1, 0x10, 0x3ff, 0x4, 0x6}, {0xf, 0x1, 0x2, 0x1, 0x5}, 0x4, 0x100, 0x1b8f}}, @TCA_TBF_RATE64={0xc, 0x4, 0x2fd9e5fb6e622145}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x4094) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r3) 9m18.127072475s ago: executing program 4 (id=10682): socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000600)) socket$inet6(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 9m11.799059039s ago: executing program 2 (id=10683): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0x400000, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4040140) 9m5.04454365s ago: executing program 32 (id=10679): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x44, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60e}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4004) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e0"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 8m59.92008048s ago: executing program 33 (id=10680): write(0xffffffffffffffff, &(0x7f0000000340)="1ebb5f4df0c54957fcf372c0dd1ab1ad187b94777ec3496382856e93313d9ca10ddccde23559329615466fdf3fd255f571f135bc9d78af228dd2359654424d69b370e4764c20abf5b83528fd7662ddaf8eed684f2cd944a5", 0x58) r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 8m53.866575039s ago: executing program 34 (id=10681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xff, 0x1, 0x10, 0x3ff, 0x4, 0x6}, {0xf, 0x1, 0x2, 0x1, 0x5}, 0x4, 0x100, 0x1b8f}}, @TCA_TBF_RATE64={0xc, 0x4, 0x2fd9e5fb6e622145}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x4094) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r3) 8m36.065740763s ago: executing program 35 (id=10682): socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000600)) socket$inet6(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 8m29.80663503s ago: executing program 36 (id=10683): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0x400000, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4040140) 8m10.812872839s ago: executing program 6 (id=10685): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) writev(r0, &(0x7f0000000140)=[{&(0x7f00000026c0)="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", 0x14f}, {&(0x7f00000006c0)="5578352f1a192c35f014d2b5f16fa1e2fe5805a62473b5fe2c81c302a7d5f83bd73cc084aade8d893b0ec78eea64654b059bec10c24ac2e3bd83b4582cc865f27780d618efa0161208b7e8d860b3891732cab6b03f7870ec688805c9029129e5a73ea3835d40892d240afbe8d889f7e827a50f4adf01f1376c6f7f8c876cd4f2e768425312071a2772988bda0bc653fd55f8cd9494c2f45f6f0b060ba0fc514babf025e32c724ae35cfea4e9051d14dab7d8dce65a3d62092ccf2a75100b08ba7190fd482aa4f6d717d514ed4120dd2af1cc41bd8de244395c79f0525abea64cb6625c1d6153114965d87b024bb20566433ebfb22edc72c213d62538b678ff544e8254d99cc0b06c1fac66d762cdcce6c672a5e33f98e7fc85ea0056d496e383c18af7b4cae8d7985c5ea9427887cb17117a0a9cfb214607a47c6d68d90d36a735486134d925a88a3446009b9bbb5b3af2d7d568fe08f7096b851387c5e08c452d310eface68d212c2a878d26fb16443dd6452eeea83f5f21af67618109ad985064460a686460fe8110ee90ae44b100d766c379e91cf131d67aec68d9dca7944d8fa24640c1c6920e7a8e3e7a97be3dca7a0f753fe93ecd0594de09d5e42edc1a232268b52e65fbfa2205b57959e075e59c42c0bd1fded8b4fcea4bb6fa588047f9b5174670f377731b4c291f5d2de3e6a5b475a29bd54ae6df34a95f512eca3e9c394ac20bd61c40b6d4220c29dd873c2ad6778b7578d0e16d507fd7bc2b6ac85f1eab734960b27751058db897fd6414d663c2c50700b69c15a8f50a78a0414d7a2e281dde5a94410ffbee9cfd66250119031c4912624150a413fc24d907fb1b22707f0812b3de71d3d3a05f666c38b9e33d7326e8366ff9485ab1fa768ed3c7f9ee8fccc770d3000e284607c75e6de20f35422f0482acd6bc56716d24a3e888e4d84263ea8e11cd45086274126e2ab0e8eab64dd7d08d2a8ec71e678d2608b1b4a24549387c011db5536b826552b1567b27c068d441ecc2e22ade2c36991eec69b173e13ec256023daa8b081c2a3defc4d30e6365c6fa68338bf628d471e892f8f3e73cd73a1b0ad12dd4fb309eca47cc6aaeeea83c78e9335e2532ccb584a04bff5911dad2fa4e42ac3491d59eda778c7af779978cf68a06563b3992fcc8da4aa849e7f61ba71423c5ddb03adf148539754105e50a7bd1a36387561cf2ab1d2656ace84429344c27019a29019764624580a46896927c2d21d930f9bdaea841596e8a21b451cc35e3dc823a6737ffeb68a3ae31e137eb1ac6e4a5e6db21c1b2781272e4899d35f136b6102d22e84305f64b6832f35b14ca1e8d74b07cd6c10dc1d8979ccaf8fca7a21bfe097dd153eef6d390ed8887adb07516d4652ffdb3159c758024d9d2c2fda182d912ed477085afe39a90d26098c0eea67457afa067bd921b23c039f7c564e661f68dd7124c52926e33d07b944fbfe8daf3c92a1cb8fd6a251fdd449426aaeef8d78f23329b10f30cbc78f0b387e7288e632efa65d6d43ca3b1687d0f0011d62f65986776e36e8eb05ad5cd41028648cd252edef50da0ce84475cebf14b32a5d56fa123a43ed5e3ade21261251a919ca6e946446c6fc370e0f3fdd95909dd22af81d8e721b37ea52c2391226afdd1eed8e70aeab8857a1990c18c8c7578fb16b571a34cf032dab5946b9556daedda1532eaf9351e03758665537ae6d1dce8adbeeceb2ca580b43b44ff8fd32ae235025406749841a95ddd76a0685e5b97abd8cb1eabb39defb24aeea484b776b97f5412fffdb6d5c0656de257851ef42dedd9511a96c5ca6140a84858fb90b722542c04d983b3efc3f104e7b76c4c7cb1f503445d591bdb6334152a9df41f315718c5bd251e28421f04d276edeb3b56b5c591b3867f493855aba73b17173f6777339dcc584a0a4019dc6275fd221fd84bd3a42dc865bda94cca0b7d62ef8964da8e90db182c56b8447ac54ccfbcf55b635d4dc138ced51ee3fc3e685a8b7adfd310336de924c5bffc0e26ef0429bcd97f21a7bc9911d9ff4dceff6aa6b686f8571c5e9e0b9e95f80d6931527cbfce9b1714dbaf5bec90998048f62addea0d62fefec1eea89a89c4e6da12b566b3d19f60d611949e7dac983d02017ba8819039766e808ea1e9cd754057d4cdd32e11ed77f025744012e609dbc6b0c6254ae023ce4c7b4e11876d96c823294fd513f48d6ec4602a1e476507decad495c53ff3ea3d270be7a98d56def10fb9955f67c6d23f08abaec01265a8d7bef87d07c04bc427a46c161b362fb0f5e7c6cafb411f04dc5da5845a3f6c5692bc4a964668b65f9834be97e6e27276a6a6ff2b4ab783b00fc987686a3b6ef1c9377771b5c0607d429beba0e02324bbe320afefd0c79a7ae1a94fa8f6409bb91e8aca37e25e71c4d17abf5fc7fedcdb7816e7a00c4336b782b7c23b0cf1ce3f3f32c4cde1171374edd4d93ca3bbb4f5a048f05cf129ea28b733173021ae43b79fbc4d339bf64656992edf714fbf08af793632025692d2f8250719249d140231feea005005ec405339f90fc79d23006d7530e98f523c04310c1cbd1c7bfb58393e3cfe4b037828cfb84ee6c27128769ea6990e55ac3174fe139b9b9615e22a836d1b36814bfe5e2a06ee7041931b9bac86e8260e35a1400226c479b1f10576acd10081019e202fb68c08315908627f081e2f3047a794020292e568549b790be102cde5babbc18d2f69e8eac8d576bc86828d7e06abae656ce1172642e44f7220396b8a679a5bc6f7103f11ae7f7597e2f080b5958100bb93d4b9b692f3f5b732991153b1ab89a61630e78250cbd809fa95e7774f933dd6d06a3948367a74f473dacf3cfc9b6984759387162", 0x7fa}, {&(0x7f00000016c0)="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", 0x6a8}], 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) 8m7.083876674s ago: executing program 5 (id=10684): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x57) epoll_create1(0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 6m50.735620226s ago: executing program 5 (id=10684): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x57) epoll_create1(0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 6m29.098265075s ago: executing program 7 (id=10686): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0xc, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x29df}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 5m53.060997008s ago: executing program 9 (id=10688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0x0, 0x0, 0x2}]}, 0x94) close(0x3) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x19f83}}, 0x0) 1m36.969601449s ago: executing program 7 (id=10686): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0xc, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x29df}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 0s ago: executing program 8 (id=10687): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): ink: Unknown conntrack attr (type=2304, max=9) [ 428.221284][T24919] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8907'. [ 428.589147][T24941] ip6gre2: entered promiscuous mode [ 428.815349][T24954] veth0: entered promiscuous mode [ 428.823435][T24953] veth0: left promiscuous mode [ 429.031645][ T146] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 429.416163][T24986] netlink: 'syz.1.8937': attribute type 9 has an invalid length. [ 429.424196][T24986] netlink: 'syz.1.8937': attribute type 11 has an invalid length. [ 429.433742][T24986] netlink: 'syz.1.8937': attribute type 12 has an invalid length. [ 429.708645][T24910] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.758095][T24910] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.785805][T24910] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 40345 - 0 [ 429.872975][T24910] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.915426][T24910] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.956495][T25016] netlink: Unknown conntrack attr (0) [ 429.965656][T24910] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 40345 - 0 [ 430.096089][T24910] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.121313][T24910] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.132984][T24910] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 40345 - 0 [ 430.843088][ T86] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.852264][ T86] netdevsim netdevsim1 netdevsim0: unset [0, 1] type 1 family 0 port 256 - 0 [ 430.866434][ T86] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.880141][ T86] netdevsim netdevsim1 netdevsim1: unset [0, 1] type 1 family 0 port 256 - 0 [ 430.889482][ T86] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.904920][ T86] netdevsim netdevsim1 netdevsim2: unset [0, 1] type 1 family 0 port 256 - 0 [ 430.956027][ T86] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.975256][ T86] netdevsim netdevsim1 netdevsim3: unset [0, 1] type 1 family 0 port 256 - 0 [ 431.048322][ T86] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.067121][ T86] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 40345 - 0 [ 431.081710][ T86] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 431.168728][ T86] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.187995][ T86] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 40345 - 0 [ 431.202886][ T86] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 431.224211][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.264690][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 40345 - 0 [ 431.297908][ T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 431.389593][ T146] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.410169][ T146] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 40345 - 0 [ 431.445603][ T146] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 431.651206][T25065] syzkaller1: entered promiscuous mode [ 431.670380][T25065] syzkaller1: entered allmulticast mode [ 431.857037][T25080] netlink: 'syz.3.8965': attribute type 21 has an invalid length. [ 431.874775][T25080] netlink: 'syz.3.8965': attribute type 22 has an invalid length. [ 431.882820][T25080] netlink: 'syz.3.8965': attribute type 23 has an invalid length. [ 431.907131][T25080] netlink: 'syz.3.8965': attribute type 25 has an invalid length. [ 431.944384][T25080] netlink: 'syz.3.8965': attribute type 26 has an invalid length. [ 431.975859][T25080] __nla_validate_parse: 7 callbacks suppressed [ 431.975882][T25080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8965'. [ 432.239657][T25099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8972'. [ 432.775774][T25123] syzkaller0: entered allmulticast mode [ 433.050654][T25123] syzkaller0 (unregistering): left allmulticast mode [ 433.192505][ T30] audit: type=1800 audit(1772769412.273:8): pid=25134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8985" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=9288 res=0 errno=0 [ 433.406445][T25142] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 433.584265][T25148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8993'. [ 433.631405][T25150] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 433.794111][T25156] netlink: 'syz.2.8996': attribute type 11 has an invalid length. [ 433.847631][T25162] netlink: 'syz.0.8998': attribute type 9 has an invalid length. [ 433.857463][T25162] netlink: 'syz.0.8998': attribute type 11 has an invalid length. [ 433.867591][T25162] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.8998'. [ 433.877490][T25162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8998'. [ 434.177706][T25182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9007'. [ 434.240631][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.249109][ T146] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.250629][T25182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9007'. [ 434.282365][T25187] netlink: 512 bytes leftover after parsing attributes in process `syz.0.9008'. [ 434.304720][ T146] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.337333][ T146] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.545660][T25201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.887607][T25225] validate_nla: 4 callbacks suppressed [ 434.887627][T25225] netlink: 'syz.4.9024': attribute type 13 has an invalid length. [ 434.913901][T25225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9024'. [ 434.931847][T25225] netlink: 'syz.4.9024': attribute type 13 has an invalid length. [ 434.940138][T25225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9024'. [ 435.023055][T25226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.033729][T25226] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 435.127512][T25232] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 435.133554][T25232] syzkaller1: linktype set to 823 [ 435.174398][T25241] netlink: 'syz.0.9029': attribute type 22 has an invalid length. [ 435.186557][T25241] netlink: 'syz.0.9029': attribute type 22 has an invalid length. [ 435.380512][T25247] netlink: 'syz.3.9033': attribute type 1 has an invalid length. [ 435.507564][T25247] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.563418][T25297] netlink: 'syz.2.9054': attribute type 15 has an invalid length. [ 436.631043][T25302] netlink: 'syz.3.9056': attribute type 4 has an invalid length. [ 437.127658][T25331] trusted_key: syz.4.9070 sent an empty control message without MSG_MORE. [ 437.491668][T25353] bridge0: left allmulticast mode [ 437.948845][T25371] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 437.966994][T25371] bond2 (unregistering): Released all slaves [ 437.989783][T25374] netlink: 'syz.0.9089': attribute type 1 has an invalid length. [ 438.051740][T25374] 8021q: adding VLAN 0 to HW filter on device bond5 [ 438.091850][T25378] bond5: (slave ip6erspan0): making interface the new active one [ 438.102638][T25378] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 438.234245][T25385] __nla_validate_parse: 6 callbacks suppressed [ 438.234266][T25385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9091'. [ 438.263249][T25385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9091'. [ 438.461132][T25390] netlink: 'syz.4.9096': attribute type 2 has an invalid length. [ 438.576700][ T86] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.597941][ T86] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.628794][ T86] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.659545][ T86] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.751736][ T86] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.799504][T25408] netlink: 'syz.1.9103': attribute type 1 has an invalid length. [ 438.953031][T25408] bond4: (slave gretap2): making interface the new active one [ 438.962082][T25408] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 439.107356][T25424] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.9109'. [ 439.141790][T25424] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 440.028020][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.034649][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.112057][T25439] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 440.120394][T25439] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 440.141898][T25475] netlink: 'syz.4.9123': attribute type 1 has an invalid length. [ 440.171838][T25475] netlink: 'syz.4.9123': attribute type 4 has an invalid length. [ 440.195882][T25475] netlink: 9491 bytes leftover after parsing attributes in process `syz.4.9123'. [ 440.324759][T25478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9125'. [ 440.379156][T25484] lo speed is unknown, defaulting to 1000 [ 440.403279][T25484] vxcan1 speed is unknown, defaulting to 1000 [ 441.203798][T25526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9145'. [ 441.260970][T25526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9145'. [ 441.986530][T25562] netlink: 'syz.0.9160': attribute type 1 has an invalid length. [ 442.108214][T25562] bond6: entered promiscuous mode [ 442.113849][T25562] 8021q: adding VLAN 0 to HW filter on device bond6 [ 442.228151][T25568] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9161'. [ 442.258614][T25562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9160'. [ 442.387910][T25562] 8021q: adding VLAN 0 to HW filter on device bond6 [ 442.416139][T25562] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 442.438157][T25562] bond6: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 442.469673][T25562] bond6: (slave vcan1): making interface the new active one [ 442.478501][T25562] vcan1: entered promiscuous mode [ 442.486719][T25562] bond6: (slave vcan1): Enslaving as an active interface with an up link [ 442.661194][T25574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9163'. [ 442.880581][T25574] erspan0: entered promiscuous mode [ 442.887991][T25574] macvtap1: entered promiscuous mode [ 442.910215][T25574] macvtap1: entered allmulticast mode [ 442.928823][T25574] erspan0: entered allmulticast mode [ 443.641331][T25624] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 443.841893][T25631] veth1_to_bond: entered allmulticast mode [ 443.852294][T25631] veth1_to_bond: left allmulticast mode [ 443.883272][T25630] sock: sock_set_timeout: `syz.3.9181' (pid 25630) tries to set negative timeout [ 444.505428][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 445.269564][T25692] lo speed is unknown, defaulting to 1000 [ 445.277480][T25692] vxcan1 speed is unknown, defaulting to 1000 [ 446.030277][T25717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9210'. [ 446.101977][T25717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9210'. [ 446.218652][T25736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9215'. [ 446.228716][T25736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9215'. [ 446.416541][T25739] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9218'. [ 446.457750][T25744] syzkaller1: entered promiscuous mode [ 446.479152][T25746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9219'. [ 446.516538][T25744] syzkaller1: entered allmulticast mode [ 447.680695][T25797] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 448.083208][T25777] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 448.113188][T25808] IPv6: sit1: Disabled Multicast RS [ 448.194451][T25810] netlink: 'syz.4.9241': attribute type 1 has an invalid length. [ 448.301295][T25810] bond3: (slave gretap1): making interface the new active one [ 448.310532][T25810] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 448.386473][T25819] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9243'. [ 448.456831][T25819] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9243'. [ 448.488628][T25824] netlink: 'syz.4.9245': attribute type 11 has an invalid length. [ 448.525232][T25824] netlink: 'syz.4.9245': attribute type 4 has an invalid length. [ 448.553431][T25824] netlink: 'syz.4.9245': attribute type 5 has an invalid length. [ 448.572086][T25824] netlink: 'syz.4.9245': attribute type 6 has an invalid length. [ 448.582788][T25824] netlink: 199748 bytes leftover after parsing attributes in process `syz.4.9245'. [ 448.654500][T25828] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.9248'. [ 448.828299][T25837] syzkaller1: entered promiscuous mode [ 448.834046][T25837] syzkaller1: entered allmulticast mode [ 449.983902][T25851] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 450.646291][T25921] dvmrp0: left allmulticast mode [ 450.732638][T25923] netlink: 'syz.1.9287': attribute type 1 has an invalid length. [ 450.818827][T25923] bond5: (slave bridge3): making interface the new active one [ 450.827955][T25923] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 451.061501][T25945] netlink: 'syz.3.9296': attribute type 1 has an invalid length. [ 451.126370][T25945] 8021q: adding VLAN 0 to HW filter on device bond2 [ 451.246739][T25948] bond2: (slave gretap1): making interface the new active one [ 451.311173][T25948] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 451.748114][T25932] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 451.802935][T25986] xt_hashlimit: size too large, truncated to 1048576 [ 452.082168][T25997] __nla_validate_parse: 2 callbacks suppressed [ 452.082189][T25997] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.9316'. [ 452.168555][T26000] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.175816][T26000] bridge0: port 1(bridge_slave_0) entered listening state [ 452.521056][T26025] syzkaller1: entered promiscuous mode [ 452.530182][T26025] syzkaller1: entered allmulticast mode [ 453.143239][T26012] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 453.256778][T26049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9335'. [ 453.291428][T26050] netlink: 'syz.0.9337': attribute type 1 has an invalid length. [ 453.341070][ T3537] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.345039][T26049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9335'. [ 453.421077][ T3537] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.431200][ T3537] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.440139][ T3537] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.469036][T26055] bond7: (slave ip6gretap1): making interface the new active one [ 453.484289][T26055] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 453.494441][T26055] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 453.502526][T26055] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 453.585171][T26058] netlink: 'syz.4.9339': attribute type 1 has an invalid length. [ 453.594280][T26058] netlink: 'syz.4.9339': attribute type 1 has an invalid length. [ 453.925148][T26081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9347'. [ 453.956035][T26085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9348'. [ 453.982482][T26085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9348'. [ 454.045571][T26090] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9350'. [ 454.433309][T26110] netlink: 'syz.2.9356': attribute type 12 has an invalid length. [ 454.463572][T26110] netlink: 'syz.2.9356': attribute type 29 has an invalid length. [ 454.481974][T26110] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9356'. [ 454.868026][T26131] xt_hashlimit: size too large, truncated to 1048576 [ 455.361998][T26157] bridge4: entered promiscuous mode [ 455.373929][T26159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9373'. [ 455.409223][T26157] bridge4: entered allmulticast mode [ 455.442159][T26157] team0: Port device bridge4 added [ 455.452739][T26162] netlink: 'syz.3.9374': attribute type 1 has an invalid length. [ 455.490854][T26159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9373'. [ 455.496407][T26162] netlink: 'syz.3.9374': attribute type 4 has an invalid length. [ 456.043469][T26148] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 456.352704][T26206] netlink: 'syz.2.9390': attribute type 29 has an invalid length. [ 456.364169][T26206] netlink: 'syz.2.9390': attribute type 29 has an invalid length. [ 456.374825][T26206] netlink: 'syz.2.9390': attribute type 32 has an invalid length. [ 456.589153][T26217] erspan0: left promiscuous mode [ 456.597481][T26217] erspan0: left allmulticast mode [ 456.601934][T26222] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 457.231806][T26249] __nla_validate_parse: 5 callbacks suppressed [ 457.231827][T26249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9409'. [ 457.248891][T26246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9407'. [ 457.253038][T26249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9409'. [ 457.451389][T26253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9411'. [ 457.469298][T26253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9411'. [ 457.489721][T26258] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.9413'. [ 458.201136][T26287] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9425'. [ 458.628367][T26306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9434'. [ 458.822554][T26315] gretap0: left allmulticast mode [ 458.849261][T26315] gretap0: left promiscuous mode [ 458.864908][T26315] bridge0: port 3(gretap0) entered disabled state [ 458.886168][T26319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9440'. [ 458.906906][T26315] : (slave bridge0): Releasing backup interface [ 458.921020][T26315] dummy0: left allmulticast mode [ 458.927153][T26315] dummy0: left promiscuous mode [ 458.932925][T26315] bridge0: port 4(dummy0) entered disabled state [ 458.954870][T26315] bridge_slave_0: left allmulticast mode [ 458.960695][T26315] bridge_slave_0: left promiscuous mode [ 458.966728][T26315] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.995599][T26315] : (slave bridge_slave_1): Releasing backup interface [ 459.037457][T26315] : (slave bond_slave_0): Releasing backup interface [ 459.069757][T26315] : (slave bond_slave_1): Releasing backup interface [ 459.106595][T26315] team0: Port device team_slave_0 removed [ 459.143816][T26315] team0: Port device team_slave_1 removed [ 459.171571][T26315] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 459.351205][T26337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9446'. [ 459.505331][T26344] syzkaller1: entered promiscuous mode [ 459.535229][T26344] syzkaller1: entered allmulticast mode [ 461.918097][T26419] mpoa:mpoad_close: () going down [ 462.010987][T26438] syzkaller1: entered promiscuous mode [ 462.017161][T26438] syzkaller1: entered allmulticast mode [ 462.400783][T26456] __nla_validate_parse: 9 callbacks suppressed [ 462.400807][T26456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9490'. [ 462.567691][T26464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9494'. [ 462.579937][T26464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9494'. [ 463.588503][T26393] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 463.732202][T26483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9502'. [ 463.801124][T26486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.838230][T26486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.033700][T26496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9508'. [ 464.168884][T26502] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9510'. [ 464.352124][T26508] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.9513'. [ 464.577251][T26511] netlink: 'syz.3.9514': attribute type 13 has an invalid length. [ 464.992847][T26511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.012948][T26511] eql: remember to turn off Van-Jacobson compression on your slave devices [ 465.064312][T26511] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 465.629571][T26542] syzkaller1: entered promiscuous mode [ 465.641985][T26542] syzkaller1: entered allmulticast mode [ 465.679687][T26548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9524'. [ 466.077842][T26558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9527'. [ 466.548958][T26584] netlink: 'syz.2.9536': attribute type 4 has an invalid length. [ 466.589672][T26584] netlink: 'syz.2.9536': attribute type 4 has an invalid length. [ 466.672004][T26593] gre0: left promiscuous mode [ 466.679468][T26593] gre0: left allmulticast mode [ 466.742927][T26593] bridge0: port 3(veth0_to_bridge) entered disabled state [ 466.750390][T26593] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.757705][T26593] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.851832][T26593] team_slave_0: left promiscuous mode [ 466.858277][T26593] team_slave_0: left allmulticast mode [ 466.878586][T26593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.914219][T26593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.975944][T26593] ip6tnl1: left allmulticast mode [ 466.982211][T26593] bond1: left promiscuous mode [ 466.988631][T26593] bond1: left allmulticast mode [ 466.998292][T26593] geneve2: left promiscuous mode [ 467.003326][T26593] geneve2: left allmulticast mode [ 467.030819][ T5894] lo speed is unknown, defaulting to 1000 [ 467.031154][ T10] lo speed is unknown, defaulting to 1000 [ 467.062540][ T146] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.085433][ T146] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.105676][ T146] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.135430][ T146] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.185579][ T146] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.194314][ T146] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.203640][ T146] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.242065][ T146] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.323182][T26609] sctp: [Deprecated]: syz.3.9542 (pid 26609) Use of int in maxseg socket option. [ 467.323182][T26609] Use struct sctp_assoc_value instead [ 467.562190][T26617] syzkaller0: entered promiscuous mode [ 467.569767][T26617] syzkaller0: entered allmulticast mode [ 469.479939][T26578] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 469.778899][T26658] netlink: 'syz.4.9557': attribute type 25 has an invalid length. [ 469.824886][T26658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9557'. [ 469.846745][T26658] netlink: 'syz.4.9557': attribute type 25 has an invalid length. [ 469.939389][T26658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9557'. [ 470.318221][T26670] netlink: 'syz.1.9562': attribute type 1 has an invalid length. [ 470.391165][T26670] 8021q: adding VLAN 0 to HW filter on device bond6 [ 470.498313][T26670] bond6: (slave batadv1): Opening slave failed [ 470.614105][T26673] bond6: (slave veth11): Enslaving as an active interface with a down link [ 471.106719][T26697] tipc: Failed to remove unknown binding: 66,1,1/2886997007:939414119/939414121 [ 471.657419][T26712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9580'. [ 471.681385][T26712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9580'. [ 471.889872][T26718] tipc: Enabled bearer , priority 0 [ 472.028823][T26718] syzkaller0: entered promiscuous mode [ 472.034452][T26718] syzkaller0: entered allmulticast mode [ 472.049034][T26718] tipc: Resetting bearer [ 472.121130][T26717] tipc: Resetting bearer [ 473.649775][T26717] tipc: Disabling bearer [ 473.729214][T26739] : entered promiscuous mode [ 473.780581][T26751] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9594'. [ 473.920595][T26753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9595'. [ 475.459236][T26797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 475.934995][T26793] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 476.156078][T26815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9614'. [ 476.406921][T26826] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 476.445650][T26828] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9620'. [ 476.498993][T26833] syzkaller1: entered promiscuous mode [ 476.504533][T26833] syzkaller1: entered allmulticast mode [ 477.273415][T26870] netlink: 'syz.3.9631': attribute type 5 has an invalid length. [ 477.569395][T26889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9637'. [ 477.808463][T26901] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 478.193634][T26930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9649'. [ 478.836396][T26956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9658'. [ 478.846094][T26956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9658'. [ 479.065101][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 479.211624][T26965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9661'. [ 479.276697][T26967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9662'. [ 479.286537][T26967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9662'. [ 479.342452][T26969] netlink: 'syz.1.9663': attribute type 33 has an invalid length. [ 479.354458][T26969] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9663'. [ 479.438789][T26973] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 479.448742][T26973] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 480.768528][T26900] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 481.243826][T27022] netlink: 'syz.2.9685': attribute type 26 has an invalid length. [ 481.257786][T27016] bond0: left allmulticast mode [ 481.262790][T27022] __nla_validate_parse: 3 callbacks suppressed [ 481.262810][T27022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9685'. [ 481.278191][T27016] bond_slave_0: left allmulticast mode [ 481.292036][T27016] bond_slave_1: left allmulticast mode [ 481.397353][T27016] veth0_to_bond: left allmulticast mode [ 481.421092][T27016] geneve2: left promiscuous mode [ 481.445832][T27016] geneve2: left allmulticast mode [ 481.452240][T27016] vlan2: left promiscuous mode [ 481.482994][T27016] bridge0: left promiscuous mode [ 481.489065][T27016] vlan2: left allmulticast mode [ 481.493974][T27016] bridge0: left allmulticast mode [ 481.500941][T27016] gtp0: left promiscuous mode [ 481.506705][T27016] gtp0: left allmulticast mode [ 481.514328][T27016] ip6gre2: left promiscuous mode [ 481.556786][T27016] erspan0: left allmulticast mode [ 481.570723][T27016] macvtap1: left promiscuous mode [ 481.576905][T27016] macvtap1: left allmulticast mode [ 481.610256][T27022] netlink: 'syz.2.9685': attribute type 26 has an invalid length. [ 481.618660][T27022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9685'. [ 482.266250][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 482.685888][T27045] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 482.725089][T27056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.970454][T27084] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 482.978502][T27084] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 482.986511][T27084] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 482.994476][T27084] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 483.002496][T27084] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 483.010521][T27084] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 483.018530][T27084] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 483.026523][T27084] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 483.034511][T27084] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 483.042523][T27084] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 483.068848][T27091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9706'. [ 483.104084][T27094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9707'. [ 483.140000][T27096] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9708'. [ 483.414951][T27100] syzkaller0: entered promiscuous mode [ 483.421422][T27100] syzkaller0: entered allmulticast mode [ 483.551039][T27113] netlink: 'syz.1.9714': attribute type 1 has an invalid length. [ 483.632559][T27113] 8021q: adding VLAN 0 to HW filter on device bond7 [ 484.169423][ T3537] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.192735][ T3537] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.213418][ T3537] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.233624][ T3537] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.246221][ T3537] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.271522][ T3537] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.360375][ T3537] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.386025][ T3537] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.415887][T27158] lec:lec_atm_send: lec0: Unknown message type 808464432 [ 484.457049][T27154] tipc: Enabled bearer , priority 0 [ 484.532395][T27133] lec:lec_atm_close: lec0: Shut down! [ 484.582482][T27154] syzkaller0: entered promiscuous mode [ 484.588684][T27154] syzkaller0: entered allmulticast mode [ 484.594985][T27154] tipc: Resetting bearer [ 484.831507][T27153] tipc: Resetting bearer [ 486.402078][T27220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9744'. [ 487.081633][T27153] tipc: Disabling bearer [ 487.195865][T27222] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9744'. [ 487.257767][T27224] netlink: 'syz.0.9745': attribute type 4 has an invalid length. [ 487.340012][T27228] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9747'. [ 487.355137][T27227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9746'. [ 487.469991][T27236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9749'. [ 487.486889][ T5943] lec:lec_start_xmit: lec0:No lecd attached [ 487.944182][T27257] netlink: 'syz.4.9754': attribute type 1 has an invalid length. [ 488.163701][T27266] netlink: 'syz.4.9756': attribute type 1 has an invalid length. [ 488.342259][T27266] 8021q: adding VLAN 0 to HW filter on device bond4 [ 488.460058][T27269] bond4: (slave bridge6): making interface the new active one [ 488.522949][T27269] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 488.917693][T27294] netlink: 'syz.1.9765': attribute type 1 has an invalid length. [ 489.150989][T27304] lo speed is unknown, defaulting to 1000 [ 489.162831][T27304] vxcan1 speed is unknown, defaulting to 1000 [ 489.460136][T27318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9771'. [ 489.679747][T27323] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9773'. [ 489.745941][T27327] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9773'. [ 489.790201][T27327] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9773'. [ 489.986355][T27331] syzkaller0: entered promiscuous mode [ 489.991910][T27331] syzkaller0: entered allmulticast mode [ 490.019295][T27336] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9777'. [ 491.051940][T27380] sch_tbf: burst 12 is lower than device bridge4 mtu (1514) ! [ 491.221693][T27391] 8021q: adding VLAN 0 to HW filter on device bond8 [ 491.251645][T27391] macvlan3: entered promiscuous mode [ 491.257252][T27391] macvlan3: entered allmulticast mode [ 491.263230][T27391] bond8: entered allmulticast mode [ 491.268601][T27391] bond8: entered promiscuous mode [ 491.276213][T27391] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 491.287464][T27391] team0: Port device macvlan3 added [ 491.358268][T27397] syzkaller0: entered promiscuous mode [ 491.372557][T27397] syzkaller0: entered allmulticast mode [ 491.499849][T27401] __nla_validate_parse: 5 callbacks suppressed [ 491.499872][T27401] netlink: 576 bytes leftover after parsing attributes in process `syz.1.9797'. [ 491.697684][T27409] syzkaller0: entered promiscuous mode [ 491.711185][T27409] syzkaller0: entered allmulticast mode [ 492.012398][T27421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9805'. [ 492.240134][T27430] syzkaller0: entered promiscuous mode [ 492.246037][T27430] syzkaller0: entered allmulticast mode [ 492.456580][T27436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9812'. [ 492.474520][T27436] veth0_to_bridge: left allmulticast mode [ 492.480493][T27436] veth0_to_bridge: left promiscuous mode [ 492.497237][T27436] bridge0: port 3(veth0_to_bridge) entered disabled state [ 492.529928][T27436] bridge_slave_1: left allmulticast mode [ 492.539678][T27436] bridge_slave_1: left promiscuous mode [ 492.553262][T27436] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.576630][T27436] bridge_slave_0: left allmulticast mode [ 492.582345][T27436] bridge_slave_0: left promiscuous mode [ 492.607138][T27436] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.969508][T27461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9816'. [ 493.144663][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 493.153143][ C1] lec:lec_tx_timeout: lec0 [ 493.158611][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 493.838314][T27466] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 493.958380][T27503] tipc: Failed to remove unknown binding: 66,0,0/2886997057:442865921/442865922 [ 493.976811][T27503] tipc: Failed to remove unknown binding: 66,0,0/2886997057:442865921/442865922 [ 494.255236][T27521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.262725][T27521] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 494.274182][T27521] bond0: (slave gre0): Error -95 calling set_mac_address [ 494.397213][T27529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9838'. [ 494.733814][T27546] tipc: Enabled bearer , priority 0 [ 494.767395][T27548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9846'. [ 494.811540][T27546] syzkaller0: entered promiscuous mode [ 494.818052][T27546] syzkaller0: entered allmulticast mode [ 494.824195][T27546] tipc: Resetting bearer [ 494.897661][T10597] tipc: Resetting bearer [ 494.912253][T27545] tipc: Resetting bearer [ 495.421619][T27570] netlink: 'syz.2.9850': attribute type 1 has an invalid length. [ 496.331063][T27545] tipc: Disabling bearer [ 496.363342][T27570] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 496.776673][T27596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9858'. [ 497.731005][T27614] syzkaller0: entered promiscuous mode [ 497.736819][T27614] syzkaller0: entered allmulticast mode [ 497.812014][T27625] syzkaller0: entered promiscuous mode [ 497.823090][T27625] syzkaller0: entered allmulticast mode [ 498.125527][T27633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9869'. [ 498.775389][T27639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9871'. [ 498.908792][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 498.917014][ C1] lec:lec_tx_timeout: lec0 [ 498.922430][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 498.927845][T27642] block nbd0: Unsupported socket: should be TCP or UNIX. [ 499.387783][T27622] syzkaller0: entered allmulticast mode [ 499.517390][T27647] syzkaller0: entered promiscuous mode [ 499.529597][T27647] syzkaller0: entered allmulticast mode [ 499.559395][T27647] tipc: Enabled bearer , priority 0 [ 499.595713][T27646] tipc: Resetting bearer [ 499.609676][T27650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9875'. [ 499.679844][T27646] tipc: Disabling bearer [ 499.883344][T27670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9879'. [ 500.190858][T27685] netlink: 'syz.0.9882': attribute type 1 has an invalid length. [ 500.238283][T27693] syzkaller0: entered promiscuous mode [ 500.243951][T27693] syzkaller0: entered allmulticast mode [ 501.083456][T27726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9891'. [ 501.291302][T27738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9894'. [ 501.435580][T27743] syzkaller0: entered promiscuous mode [ 501.441139][T27743] syzkaller0: entered allmulticast mode [ 501.468610][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.475370][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.512146][T27738] bond3: (slave vcan1): refused to change device type [ 501.811428][T27764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9898'. [ 501.860888][T27764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9898'. [ 502.563796][T27783] syzkaller0: entered promiscuous mode [ 502.569539][T27783] syzkaller0: entered allmulticast mode [ 502.810304][T27785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9904'. [ 503.033803][T27795] lo speed is unknown, defaulting to 1000 [ 503.046099][T27795] vxcan1 speed is unknown, defaulting to 1000 [ 503.326349][T27800] syzkaller0: entered promiscuous mode [ 503.331949][T27800] syzkaller0: entered allmulticast mode [ 503.598779][T27804] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9909'. [ 503.609714][T27804] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9909'. [ 503.626702][T27804] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9909'. [ 503.935154][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 503.943261][ C1] lec:lec_tx_timeout: lec0 [ 503.947962][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 504.438861][T27750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 504.599604][T27815] syzkaller0: entered promiscuous mode [ 504.606768][T27815] syzkaller0: entered allmulticast mode [ 504.620720][T27812] syzkaller0: entered promiscuous mode [ 504.630314][T27812] syzkaller0: entered allmulticast mode [ 505.256237][T27838] syzkaller0: entered promiscuous mode [ 505.267224][T27838] syzkaller0: entered allmulticast mode [ 505.666447][T27850] syzkaller0: entered promiscuous mode [ 505.675305][T27832] lec:lec_atm_close: lec0: Shut down! [ 505.685399][T27850] syzkaller0: entered allmulticast mode [ 505.734046][T27855] syzkaller0: entered promiscuous mode [ 505.744655][T27855] syzkaller0: entered allmulticast mode [ 505.972533][T27862] netlink: 'syz.4.9925': attribute type 1 has an invalid length. [ 506.056802][T27860] syzkaller0: entered promiscuous mode [ 506.062346][T27860] syzkaller0: entered allmulticast mode [ 506.099282][T27866] bond5: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 506.116065][T27866] bond5: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 506.127734][T27866] bond5: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 506.166486][T27862] bond5: (slave vcan2): The slave device specified does not support setting the MAC address [ 506.190706][T27862] bond5: (slave vcan2): making interface the new active one [ 506.199702][T27862] bond5: (slave vcan2): Enslaving as an active interface with an up link [ 506.637541][T27890] netlink: 'syz.4.9937': attribute type 1 has an invalid length. [ 506.675866][T27896] netlink: 'syz.0.9940': attribute type 1 has an invalid length. [ 506.721981][T27900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9939'. [ 506.817267][T27903] bond8: entered promiscuous mode [ 506.822380][T27903] bond8: entered allmulticast mode [ 506.849011][T27903] 8021q: adding VLAN 0 to HW filter on device bond8 [ 506.927776][T27911] netlink: 'syz.1.9943': attribute type 1 has an invalid length. [ 507.017169][T27913] gretap4: entered promiscuous mode [ 507.082421][T27913] bond9: (slave gretap4): making interface the new active one [ 507.107078][T27920] netlink: 'syz.0.9946': attribute type 1 has an invalid length. [ 507.133008][T27913] bond9: (slave gretap4): Enslaving as an active interface with an up link [ 507.224175][T27911] macvlan4: entered promiscuous mode [ 507.230860][T27911] macvlan4: entered allmulticast mode [ 507.237786][T27911] bond9: entered promiscuous mode [ 507.244069][T27911] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 507.252481][T27911] bond9: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 507.269992][T27911] bond9: left promiscuous mode [ 507.359384][T27937] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9946'. [ 507.379598][T27927] 8021q: adding VLAN 0 to HW filter on device bond10 [ 507.397033][T27927] bond9: (slave bond10): making interface the new active one [ 507.417343][T27927] bond9: (slave bond10): Enslaving as an active interface with an up link [ 507.465546][T27920] bond9: (slave gretap4): Enslaving as a backup interface with an up link [ 507.474775][T27922] syzkaller0: entered promiscuous mode [ 507.483942][T27922] syzkaller0: entered allmulticast mode [ 507.508591][T27937] 8021q: adding VLAN 0 to HW filter on device bond9 [ 507.563445][T27938] syzkaller0: entered promiscuous mode [ 507.570177][T27938] syzkaller0: entered allmulticast mode [ 507.621191][T27947] netlink: 'syz.0.9951': attribute type 1 has an invalid length. [ 509.309783][T27947] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 509.400582][T27967] tipc: Enabling of bearer rejected, failed to enable media [ 509.443487][T27987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9955'. [ 509.453633][T27987] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 509.511863][T27987] team1: entered promiscuous mode [ 509.520627][T27987] team1: entered allmulticast mode [ 509.795516][T28002] syzkaller0: entered promiscuous mode [ 509.801544][T28002] syzkaller0: entered allmulticast mode [ 510.253533][T28020] netlink: 'syz.2.9970': attribute type 1 has an invalid length. [ 510.303267][T28020] 8021q: adding VLAN 0 to HW filter on device bond2 [ 510.333906][T28022] syzkaller0: entered promiscuous mode [ 510.346601][T28022] syzkaller0: entered allmulticast mode [ 510.365297][T28020] vlan0: entered promiscuous mode [ 510.370464][T28020] bond2: entered promiscuous mode [ 510.377659][T28020] vlan0: entered allmulticast mode [ 510.382911][T28020] bond2: entered allmulticast mode [ 510.413784][T28020] bond2: (slave bridge0): making interface the new active one [ 510.422007][T28020] bridge0: entered promiscuous mode [ 510.429749][T28020] bridge0: entered allmulticast mode [ 510.437850][T28020] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 510.616090][T28036] syzkaller0: entered promiscuous mode [ 510.622712][T28036] syzkaller0: entered allmulticast mode [ 510.825002][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5150 ms [ 510.833070][ C1] lec:lec_tx_timeout: lec0 [ 510.838943][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 511.081595][T28048] syzkaller0: entered promiscuous mode [ 511.089331][T28048] syzkaller0: entered allmulticast mode [ 511.608683][T28060] syzkaller0: entered promiscuous mode [ 511.614229][T28060] syzkaller0: entered allmulticast mode [ 511.802707][T28065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9985'. [ 512.110028][T28075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9988'. [ 512.221979][T28077] netlink: 'syz.3.9989': attribute type 1 has an invalid length. [ 512.249825][T28077] 8021q: adding VLAN 0 to HW filter on device bond4 [ 512.278973][T28077] 8021q: adding VLAN 0 to HW filter on device bond4 [ 512.286293][T28077] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 512.297932][T28077] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 512.337974][T28079] veth9: entered promiscuous mode [ 512.344722][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.352065][ C1] bridge0: topology change detected, propagating [ 512.376661][T28079] bond4: (slave veth9): Enslaving as an active interface with a down link [ 512.422487][T28077] vlan3: entered allmulticast mode [ 512.428786][T28077] bond4: entered allmulticast mode [ 512.488193][T28083] syzkaller0: entered promiscuous mode [ 512.493742][T28083] syzkaller0: entered allmulticast mode [ 513.322771][T28025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 513.520961][T28095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9996'. [ 513.579476][T28095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9996'. [ 513.584829][T28091] syzkaller0: entered promiscuous mode [ 513.596739][T28091] syzkaller0: entered allmulticast mode [ 513.690811][T28100] syzkaller0: entered promiscuous mode [ 513.697078][T28100] syzkaller0: entered allmulticast mode [ 513.703899][T28101] syzkaller0: entered promiscuous mode [ 513.710667][T28101] syzkaller0: entered allmulticast mode [ 514.187904][T28117] syzkaller0: entered promiscuous mode [ 514.210067][T28117] syzkaller0: entered allmulticast mode [ 514.631603][T28107] mpoa:mpoad_close: () going down [ 515.866618][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 515.874781][ C1] lec:lec_tx_timeout: lec0 [ 515.880262][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 516.439479][T28145] syzkaller0: entered promiscuous mode [ 516.445212][T28145] syzkaller0: entered allmulticast mode [ 516.650269][T28168] syzkaller0: entered promiscuous mode [ 516.658394][T28168] syzkaller0: entered allmulticast mode [ 516.670392][T28165] syzkaller0: entered promiscuous mode [ 516.672424][T28168] net_ratelimit: 44 callbacks suppressed [ 516.672550][T28168] 0: reclassify loop, rule prio 0, protocol 800 [ 516.676087][T28165] syzkaller0: entered allmulticast mode [ 516.698119][T28169] syzkaller0: entered promiscuous mode [ 516.703648][T28169] syzkaller0: entered allmulticast mode [ 516.712834][T28165] 0: reclassify loop, rule prio 0, protocol 800 [ 517.051037][T28173] syzkaller0: entered promiscuous mode [ 517.075475][T28173] syzkaller0: entered allmulticast mode [ 517.212713][T28188] netlink: 'syz.1.10019': attribute type 39 has an invalid length. [ 518.809115][T28188] syz_tun (unregistering): left allmulticast mode [ 518.816688][T28188] syz_tun (unregistering): left promiscuous mode [ 518.823185][T28188] bridge0: port 1(syz_tun) entered disabled state [ 518.837614][T28184] syzkaller0: entered promiscuous mode [ 518.843203][T28184] syzkaller0: entered allmulticast mode [ 518.971150][T28214] syzkaller0: entered promiscuous mode [ 518.978042][T28214] syzkaller0: entered allmulticast mode [ 519.119451][T28218] syzkaller0: entered promiscuous mode [ 519.125389][T28218] syzkaller0: entered allmulticast mode [ 519.187437][T28220] syzkaller0: entered promiscuous mode [ 519.198522][T28220] syzkaller0: entered allmulticast mode [ 519.293532][T28229] netlink: 'syz.3.10030': attribute type 1 has an invalid length. [ 519.379038][T28231] syzkaller0: entered promiscuous mode [ 519.387429][T28231] syzkaller0: entered allmulticast mode [ 519.773142][T28253] syzkaller0: entered promiscuous mode [ 519.793186][T28253] syzkaller0: entered allmulticast mode [ 519.946967][T28254] lo speed is unknown, defaulting to 1000 [ 519.971089][T28254] vxcan1 speed is unknown, defaulting to 1000 [ 520.141372][T28263] syzkaller0: entered promiscuous mode [ 520.164145][T28263] syzkaller0: entered allmulticast mode [ 520.180807][T28264] syzkaller0: entered promiscuous mode [ 520.189459][T28264] syzkaller0: entered allmulticast mode [ 520.672086][T28279] syzkaller0: entered promiscuous mode [ 520.684000][T28279] syzkaller0: entered allmulticast mode [ 520.894618][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 520.902978][ C1] lec:lec_tx_timeout: lec0 [ 520.907957][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 521.083312][T28284] syzkaller0: entered promiscuous mode [ 521.127057][T28284] syzkaller0: entered allmulticast mode [ 523.813663][T28376] syzkaller0: entered promiscuous mode [ 523.822818][T28376] syzkaller0: entered allmulticast mode [ 523.963803][T28382] netlink: 'syz.1.10059': attribute type 1 has an invalid length. [ 524.291602][T28405] syz.0.10065: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 524.307042][T28405] CPU: 0 UID: 0 PID: 28405 Comm: syz.0.10065 Not tainted syzkaller #0 PREEMPT(full) [ 524.307073][T28405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 524.307089][T28405] Call Trace: [ 524.307099][T28405] [ 524.307117][T28405] dump_stack_lvl+0xe8/0x150 [ 524.307159][T28405] warn_alloc+0x249/0x340 [ 524.307190][T28405] ? stack_trace_save+0xa9/0x100 [ 524.307219][T28405] ? __pfx_warn_alloc+0x10/0x10 [ 524.307254][T28405] ? kasan_save_track+0x4f/0x80 [ 524.307277][T28405] ? kasan_save_track+0x3e/0x80 [ 524.307299][T28405] ? __kasan_kmalloc+0x93/0xb0 [ 524.307323][T28405] ? __kmalloc_cache_noprof+0x31c/0x660 [ 524.307346][T28405] ? xskq_create+0x56/0x170 [ 524.307380][T28405] ? xsk_setsockopt+0x54c/0x990 [ 524.307406][T28405] ? do_sock_setsockopt+0x17c/0x1b0 [ 524.307440][T28405] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 524.307472][T28405] ? do_syscall_64+0x14d/0xf80 [ 524.307512][T28405] __vmalloc_node_range_noprof+0x132/0x1730 [ 524.307574][T28405] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 524.307606][T28405] ? __kasan_kmalloc+0x93/0xb0 [ 524.307639][T28405] vmalloc_user_noprof+0xad/0xe0 [ 524.307664][T28405] ? xskq_create+0xbf/0x170 [ 524.307695][T28405] xskq_create+0xbf/0x170 [ 524.307728][T28405] xsk_init_queue+0x8a/0xe0 [ 524.307761][T28405] xsk_setsockopt+0x54c/0x990 [ 524.307794][T28405] ? __pfx_xsk_setsockopt+0x10/0x10 [ 524.307824][T28405] ? __pfx_aa_sk_perm+0x10/0x10 [ 524.307860][T28405] ? aa_sock_opt_perm+0xff/0x1a0 [ 524.307894][T28405] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 524.307920][T28405] ? __pfx_xsk_setsockopt+0x10/0x10 [ 524.307952][T28405] do_sock_setsockopt+0x17c/0x1b0 [ 524.307992][T28405] __x64_sys_setsockopt+0x13d/0x1b0 [ 524.308034][T28405] do_syscall_64+0x14d/0xf80 [ 524.308066][T28405] ? trace_irq_disable+0x3b/0x150 [ 524.308100][T28405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.308132][T28405] ? clear_bhb_loop+0x40/0x90 [ 524.308161][T28405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.308184][T28405] RIP: 0033:0x7fcb1f39c799 [ 524.308207][T28405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.308226][T28405] RSP: 002b:00007fcb202f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 524.308251][T28405] RAX: ffffffffffffffda RBX: 00007fcb1f615fa0 RCX: 00007fcb1f39c799 [ 524.308267][T28405] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 524.308281][T28405] RBP: 00007fcb1f432bd9 R08: 0000000000000004 R09: 0000000000000000 [ 524.308295][T28405] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.308309][T28405] R13: 00007fcb1f616038 R14: 00007fcb1f615fa0 R15: 00007ffddd9568e8 [ 524.308347][T28405] [ 524.603468][T28405] Mem-Info: [ 524.607785][T28405] active_anon:6131 inactive_anon:0 isolated_anon:0 [ 524.607785][T28405] active_file:3205 inactive_file:40107 isolated_file:0 [ 524.607785][T28405] unevictable:768 dirty:136 writeback:0 [ 524.607785][T28405] slab_reclaimable:12138 slab_unreclaimable:107129 [ 524.607785][T28405] mapped:29188 shmem:1367 pagetables:1366 [ 524.607785][T28405] sec_pagetables:0 bounce:0 [ 524.607785][T28405] kernel_misc_reclaimable:0 [ 524.607785][T28405] free:1322682 free_pcp:8028 free_cma:0 [ 524.768276][T28405] Node 0 active_anon:24924kB inactive_anon:0kB active_file:12820kB inactive_file:160224kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117252kB dirty:544kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13604kB pagetables:5512kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 524.858724][T28405] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 524.899360][T28410] syzkaller0: entered promiscuous mode [ 524.913149][T28410] syzkaller0: entered allmulticast mode [ 524.923867][T28408] syzkaller0: entered promiscuous mode [ 524.930046][T28408] syzkaller0: entered allmulticast mode [ 524.937088][T28405] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 525.017816][T28405] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 525.040177][T28405] Node 0 DMA32 free:1339280kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25004kB inactive_anon:0kB active_file:12820kB inactive_file:160224kB unevictable:1536kB writepending:572kB zspages:0kB present:3129332kB managed:2552788kB mlocked:0kB bounce:0kB free_pcp:31064kB local_pcp:20312kB free_cma:0kB [ 525.079416][T28405] lowmem_reserve[]: 0 0 0 0 0 [ 525.088354][T28405] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 525.119088][T28405] lowmem_reserve[]: 0 0 0 0 0 [ 525.123892][T28405] Node 1 Normal free:3935832kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 525.174211][T28405] lowmem_reserve[]: 0 0 0 0 0 [ 525.181839][T28405] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 525.195832][T28405] Node 0 DMA32: 6342*4kB (UME) 4293*8kB (UME) 2393*16kB (UM) 334*32kB (UM) 287*64kB (UME) 304*128kB (UME) 395*256kB (UME) 256*512kB (U) 187*1024kB (UM) 70*2048kB (UM) 148*4096kB (UM) = 1339216kB [ 525.215851][T28405] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 525.229247][T28405] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 12*16kB (UME) 12*32kB (UME) 8*64kB (UME) 6*128kB (UM) 5*256kB (UME) 3*512kB (ME) 1*1024kB (M) 3*2048kB (UE) 958*4096kB (M) = 3935832kB [ 525.251653][T28405] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 525.286961][T28413] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 525.302740][T28405] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 525.352008][T28405] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 525.401445][T28405] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 525.438959][T28405] 44675 total pagecache pages [ 525.457416][T28405] 0 pages in swap cache [ 525.462650][T28421] syzkaller0: entered promiscuous mode [ 525.470091][T28405] Free swap = 124996kB [ 525.475694][T28421] syzkaller0: entered allmulticast mode [ 525.486549][T28439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10070'. [ 525.524789][T28405] Total swap = 124996kB [ 525.529020][T28405] 2097051 pages RAM [ 525.532892][T28405] 0 pages HighMem/MovableOnly [ 525.546082][T28405] 427018 pages reserved [ 525.550315][T28405] 0 pages cma reserved [ 525.628232][T28442] tipc: Enabled bearer , priority 0 [ 525.655739][T28442] syzkaller0: entered promiscuous mode [ 525.661292][T28442] syzkaller0: entered allmulticast mode [ 525.918564][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 525.926686][ C1] lec:lec_tx_timeout: lec0 [ 525.931641][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 527.481918][T28457] tipc: Resetting bearer [ 527.500557][T28441] tipc: Resetting bearer [ 527.516291][T28441] tipc: Disabling bearer [ 527.576113][ T5894] tipc: Node number set to 4269801492 [ 527.945485][T28491] syzkaller0: entered promiscuous mode [ 527.951109][T28491] syzkaller0: entered allmulticast mode [ 530.954725][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 530.962856][ C1] lec:lec_tx_timeout: lec0 [ 530.968383][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 532.118192][T28589] netlink: 401 bytes leftover after parsing attributes in process `syz.4.10094'. [ 532.150424][T28586] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 532.179958][T28586] tipc: Enabled bearer , priority 0 [ 532.190317][T28593] netlink: get zone limit has 8 unknown bytes [ 532.215974][T28586] syzkaller0: entered promiscuous mode [ 532.244835][T28586] syzkaller0: entered allmulticast mode [ 532.282485][T28597] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10093'. [ 532.368846][T28586] tipc: Resetting bearer [ 532.414990][T28585] tipc: Resetting bearer [ 532.543683][T28585] tipc: Disabling bearer [ 532.854039][T28628] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 533.259301][T28651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10113'. [ 533.282826][T28650] lo: entered allmulticast mode [ 533.292529][T28650] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 533.334064][T28652] syzkaller0: entered promiscuous mode [ 533.359679][T28652] syzkaller0: entered allmulticast mode [ 533.370082][T28602] lec:lec_atm_close: lec0: Shut down! [ 533.913789][T28662] syzkaller0: entered promiscuous mode [ 533.925141][T28662] syzkaller0: entered allmulticast mode [ 533.937741][T28678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10118'. [ 534.283476][T28680] syzkaller0: entered promiscuous mode [ 534.290381][T28680] syzkaller0: entered allmulticast mode [ 534.431325][T28690] syzkaller0: entered promiscuous mode [ 534.447718][T28690] syzkaller0: entered allmulticast mode [ 536.143147][T28729] netlink: 27 bytes leftover after parsing attributes in process `syz.1.10135'. [ 537.465241][T28734] IPv6: NLM_F_CREATE should be specified when creating new route [ 537.494778][T28734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10136'. [ 538.041490][T28776] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10155'. [ 538.110097][T28778] bond0: entered promiscuous mode [ 538.115466][T28778] bond_slave_0: entered promiscuous mode [ 538.121465][T28778] bond_slave_1: entered promiscuous mode [ 538.129050][T28778] bridge_slave_1: entered promiscuous mode [ 538.159539][T28778] batadv0: entered promiscuous mode [ 538.167933][T28778] hsr1: entered promiscuous mode [ 538.173071][T28778] hsr1: entered allmulticast mode [ 538.179638][T28778] bond0: entered allmulticast mode [ 538.185388][T28778] bond_slave_0: entered allmulticast mode [ 538.191371][T28778] bond_slave_1: entered allmulticast mode [ 538.200885][T28778] bridge_slave_1: entered allmulticast mode [ 538.207422][T28778] batadv0: entered allmulticast mode [ 538.213400][T28778] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 538.237256][T28778] bond0: left promiscuous mode [ 538.242404][T28778] bond_slave_0: left promiscuous mode [ 538.248558][T28778] bond_slave_1: left promiscuous mode [ 538.254496][T28778] bridge_slave_1: left promiscuous mode [ 538.266868][T28778] batadv0: left promiscuous mode [ 538.794680][T28810] netlink: 'syz.3.10170': attribute type 11 has an invalid length. [ 538.824717][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5460 ms [ 538.832823][ C1] lec:lec_tx_timeout: lec0 [ 538.838016][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 538.844886][T28817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10173'. [ 539.111408][T28831] block nbd3: not configured, cannot reconfigure [ 539.178589][T28833] syzkaller0: entered promiscuous mode [ 539.184309][T28833] syzkaller0: entered allmulticast mode [ 539.605732][T28859] syzkaller0: entered promiscuous mode [ 539.611483][T28859] syzkaller0: entered allmulticast mode [ 539.875905][T28874] netlink: 'syz.2.10200': attribute type 29 has an invalid length. [ 539.910822][T28874] netlink: 'syz.2.10200': attribute type 29 has an invalid length. [ 539.944522][T28874] netlink: 500 bytes leftover after parsing attributes in process `syz.2.10200'. [ 540.688087][T28920] syzkaller0: entered promiscuous mode [ 540.693759][T28920] syzkaller0: entered allmulticast mode [ 540.810807][T28924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10221'. [ 540.978062][T28930] netlink: 'syz.3.10223': attribute type 11 has an invalid length. [ 541.178961][T28941] xt_hashlimit: size too large, truncated to 1048576 [ 541.241278][T28944] syzkaller0: entered promiscuous mode [ 541.253974][T28944] syzkaller0: entered allmulticast mode [ 541.275620][T28947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10230'. [ 541.393495][T28953] team0: No ports can be present during mode change [ 541.742797][T28969] netlink: 'syz.3.10239': attribute type 3 has an invalid length. [ 542.071413][T28989] syzkaller0: entered promiscuous mode [ 542.088349][T28989] syzkaller0: entered allmulticast mode [ 542.702088][T29019] syzkaller0: entered promiscuous mode [ 542.707797][T29019] syzkaller0: entered allmulticast mode [ 542.871042][T29028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10265'. [ 543.001825][T29033] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10267'. [ 543.159831][T29038] syzkaller1: entered promiscuous mode [ 543.170177][T29038] syzkaller1: entered allmulticast mode [ 543.189427][T29039] syzkaller1: entered promiscuous mode [ 543.205743][T29039] syzkaller1: entered allmulticast mode [ 543.255768][T29042] IPv6: NLM_F_CREATE should be specified when creating new route [ 543.425004][T29049] syzkaller0: entered promiscuous mode [ 543.445332][T29049] syzkaller0: entered allmulticast mode [ 543.600155][T29053] syzkaller1: entered promiscuous mode [ 543.614250][T29053] syzkaller1: entered allmulticast mode [ 543.864685][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 543.872904][ C1] lec:lec_tx_timeout: lec0 [ 543.878258][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 543.980850][T29078] syzkaller1: entered promiscuous mode [ 543.988247][T29078] syzkaller1: entered allmulticast mode [ 544.023923][T29080] netlink: 'syz.3.10289': attribute type 1 has an invalid length. [ 544.035827][T29080] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10289'. [ 544.791410][T29102] syzkaller0: entered promiscuous mode [ 544.815238][T29102] syzkaller0: entered allmulticast mode [ 545.033961][T29110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10301'. [ 545.592059][T29136] syzkaller1: entered promiscuous mode [ 545.604734][T29136] syzkaller1: entered allmulticast mode [ 546.107966][T29158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10321'. [ 546.134015][ T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.143602][T29158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10321'. [ 546.154862][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.181363][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.201495][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.729275][T29182] lo speed is unknown, defaulting to 1000 [ 546.737115][T29182] vxcan1 speed is unknown, defaulting to 1000 [ 546.856485][T29194] syzkaller0: entered promiscuous mode [ 546.862296][T29194] syzkaller0: entered allmulticast mode [ 547.096034][T29200] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 4294967272. macoff=96 [ 547.585530][T29218] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10340'. [ 547.818153][T29225] syzkaller0: entered promiscuous mode [ 547.835650][T29225] syzkaller0: entered allmulticast mode [ 547.958860][T29229] lo speed is unknown, defaulting to 1000 [ 547.995537][T29229] vxcan1 speed is unknown, defaulting to 1000 [ 548.884586][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 548.892740][ C1] lec:lec_tx_timeout: lec0 [ 548.897678][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 549.702206][T29311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10367'. [ 551.427829][T29383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10387'. [ 551.480266][T29385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10388'. [ 551.665180][T29377] lo speed is unknown, defaulting to 1000 [ 551.673642][T29377] vxcan1 speed is unknown, defaulting to 1000 [ 551.885474][T29395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10390'. [ 552.665291][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 552.891066][T29411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10397'. [ 552.901743][T29411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10397'. [ 553.261496][T29426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10402'. [ 553.325954][ T12] smc: removing ib device syz2 [ 553.622437][T29436] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10405'. [ 553.915219][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 553.923344][ C1] lec:lec_tx_timeout: lec0 [ 553.928367][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 554.700373][T29457] siw: device registration error -23 [ 554.889575][T29462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10414'. [ 555.049611][T29468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10416'. [ 555.392973][T29484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10422'. [ 555.402507][T29482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10421'. [ 555.758169][T29503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10429'. [ 556.211556][T29517] syzkaller0: entered promiscuous mode [ 556.217618][T29517] syzkaller0: entered allmulticast mode [ 556.343284][T29523] syzkaller0: entered promiscuous mode [ 556.349337][T29523] syzkaller0: entered allmulticast mode [ 556.425274][T29526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10438'. [ 556.901308][T29538] netlink: 'syz.0.10441': attribute type 1 has an invalid length. [ 557.019096][T29541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10441'. [ 558.042663][T29538] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 558.488981][T29571] syzkaller0: entered promiscuous mode [ 558.522053][T29571] syzkaller0: entered allmulticast mode [ 558.716938][T29575] syzkaller0: entered promiscuous mode [ 558.722548][T29575] syzkaller0: entered allmulticast mode [ 558.736358][T29574] lo speed is unknown, defaulting to 1000 [ 558.934648][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 558.942784][ C1] lec:lec_tx_timeout: lec0 [ 558.948094][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 559.246492][T29577] netlink: 'syz.1.10450': attribute type 16 has an invalid length. [ 559.255508][T29577] netlink: 'syz.1.10450': attribute type 17 has an invalid length. [ 560.576211][T29577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.598116][T29577] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.626214][T29577] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 560.907598][T29622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10460'. [ 560.989806][T29622] bond3: entered promiscuous mode [ 560.999197][T29622] 8021q: adding VLAN 0 to HW filter on device bond3 [ 561.161738][T29622] 8021q: adding VLAN 0 to HW filter on device bond3 [ 561.197251][T29622] bond3: (slave sit3): The slave device specified does not support setting the MAC address [ 561.217265][T29622] bond3: (slave sit3): Error -95 calling set_mac_address [ 561.431148][T29630] syzkaller0: entered promiscuous mode [ 561.454948][T29630] syzkaller0: entered allmulticast mode [ 561.472875][T29638] syzkaller0: entered promiscuous mode [ 561.484678][T29638] syzkaller0: entered allmulticast mode [ 561.559104][T29646] syzkaller0: entered promiscuous mode [ 561.565886][T29646] syzkaller0: entered allmulticast mode [ 561.640346][T29651] netlink: 'syz.0.10468': attribute type 1 has an invalid length. [ 561.651034][T29651] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10468'. [ 563.346851][T29674] netlink: 'syz.3.10472': attribute type 29 has an invalid length. [ 563.362113][T29674] netlink: 'syz.3.10472': attribute type 29 has an invalid length. [ 563.389579][T29679] syzkaller0: entered promiscuous mode [ 563.395292][T29679] syzkaller0: entered allmulticast mode [ 563.409076][T29674] netlink: 'syz.3.10472': attribute type 29 has an invalid length. [ 563.424008][T29679] 0: reclassify loop, rule prio 0, protocol 800 [ 563.441269][T29674] netlink: 'syz.3.10472': attribute type 29 has an invalid length. [ 563.508960][T29674] netlink: 'syz.3.10472': attribute type 29 has an invalid length. [ 563.518406][T29674] netlink: 'syz.3.10472': attribute type 29 has an invalid length. [ 563.528767][T29674] netlink: 'syz.3.10472': attribute type 29 has an invalid length. [ 563.744245][T29688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10477'. [ 563.757354][T29689] syzkaller0: entered promiscuous mode [ 563.762896][T29689] syzkaller0: entered allmulticast mode [ 563.955229][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 563.963296][ C1] lec:lec_tx_timeout: lec0 [ 563.968635][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 564.047227][T29692] netlink: 'syz.3.10479': attribute type 1 has an invalid length. [ 564.064959][T29692] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10479'. [ 564.207454][T29699] syzkaller0: entered promiscuous mode [ 564.213091][T29699] syzkaller0: entered allmulticast mode [ 564.236174][T29700] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 564.336850][T29682] lec:lec_atm_close: lec0: Shut down! [ 564.867171][T29721] syzkaller0: entered promiscuous mode [ 564.876412][T29721] syzkaller0: entered allmulticast mode [ 565.070289][T29727] syzkaller0: entered promiscuous mode [ 565.091224][T29727] syzkaller0: entered allmulticast mode [ 565.114357][T29730] syzkaller0: entered promiscuous mode [ 565.120406][T29730] syzkaller0: entered allmulticast mode [ 565.303493][T29736] syzkaller0: entered promiscuous mode [ 565.317258][T29736] syzkaller0: entered allmulticast mode [ 565.319559][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880378ec000: rx timeout, send abort [ 565.333265][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880378ed800: rx timeout, send abort [ 565.446507][T29735] syzkaller0: entered promiscuous mode [ 565.453270][T29735] syzkaller0: entered allmulticast mode [ 565.832369][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880378ec000: abort rx timeout. Force session deactivation [ 565.846717][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880378ed800: abort rx timeout. Force session deactivation [ 567.191713][T29769] syzkaller0: entered promiscuous mode [ 567.205547][T29769] syzkaller0: entered allmulticast mode [ 567.393355][T29779] syzkaller0: entered promiscuous mode [ 567.404938][T29779] syzkaller0: entered allmulticast mode [ 567.457188][T29784] TC_ACT_REPEAT abuse ? [ 567.529140][T29783] syzkaller0: entered promiscuous mode [ 567.537105][T29783] syzkaller0: entered allmulticast mode [ 567.563613][T29787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.752167][T29793] syzkaller0: entered promiscuous mode [ 567.764633][T29793] syzkaller0: entered allmulticast mode [ 567.777340][T29793] 0: reclassify loop, rule prio 0, protocol 800 [ 567.849919][T29791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10507'. [ 567.882693][T29791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.972897][T29801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10510'. [ 568.151642][T29809] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 568.165137][T29809] syzkaller0: entered promiscuous mode [ 568.170784][T29809] syzkaller0: entered allmulticast mode [ 568.260906][T29818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10518'. [ 568.327830][T27788] block nbd2: Receive control failed (result -107) [ 568.337404][T29785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 568.417757][T29825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10520'. [ 568.432377][T29825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10520'. [ 568.549299][T29829] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10523'. [ 568.791413][T29842] netlink: 'syz.3.10527': attribute type 3 has an invalid length. [ 568.814686][T29842] netlink: 'syz.3.10527': attribute type 3 has an invalid length. [ 568.928506][T29844] syzkaller0: entered promiscuous mode [ 568.934305][T29844] syzkaller0: entered allmulticast mode [ 569.145536][T29855] syzkaller0: entered promiscuous mode [ 569.151160][T29855] syzkaller0: entered allmulticast mode [ 569.601183][T29873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.653888][T29873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.726602][T29877] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 569.864678][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5530 ms [ 569.872788][ C1] lec:lec_tx_timeout: lec0 [ 569.878548][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 569.919527][T29883] syzkaller0: entered promiscuous mode [ 569.938124][T29883] syzkaller0: entered allmulticast mode [ 570.233250][T29893] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10546'. [ 570.448901][T29909] sctp: [Deprecated]: syz.3.10546 (pid 29909) Use of struct sctp_assoc_value in delayed_ack socket option. [ 570.448901][T29909] Use struct sctp_sack_info instead [ 570.479399][T29907] syzkaller0: entered promiscuous mode [ 570.494719][T29907] syzkaller0: entered allmulticast mode [ 570.632973][T29915] netlink: 'syz.4.10552': attribute type 8 has an invalid length. [ 570.878940][T29929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10558'. [ 570.905215][T29929] openvswitch: netlink: nsh attr 255 is out of range max 3 [ 570.944122][T29925] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 570.962936][T29925] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 571.051246][T29939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10560'. [ 571.134257][T29944] netlink: get zone limit has 8 unknown bytes [ 571.302791][T29921] syzkaller0: entered promiscuous mode [ 571.335340][T29921] syzkaller0: entered allmulticast mode [ 571.630674][T29968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10569'. [ 571.688288][T29970] Set syz1 is full, maxelem 0 reached [ 574.895263][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 574.903373][ C1] lec:lec_tx_timeout: lec0 [ 574.908569][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 575.271977][T30046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10585'. [ 575.372559][T30053] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.10590'. [ 575.404368][T30053] bridge_slave_1: default FDB implementation only supports local addresses [ 575.509150][T30057] syzkaller0: entered promiscuous mode [ 575.517700][T30057] syzkaller0: entered allmulticast mode [ 575.538707][T30057] 0: reclassify loop, rule prio 0, protocol 800 [ 575.731703][T30069] syzkaller0: entered promiscuous mode [ 575.745919][T30069] syzkaller0: entered allmulticast mode [ 577.527558][T30105] netlink: 27 bytes leftover after parsing attributes in process `syz.2.10612'. [ 577.719542][T30115] netlink: 'syz.2.10617': attribute type 1 has an invalid length. [ 577.753096][T30115] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10617'. [ 578.149541][T30134] syzkaller0: entered promiscuous mode [ 578.167616][T30134] syzkaller0: entered allmulticast mode [ 579.924723][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 579.932865][ C1] lec:lec_tx_timeout: lec0 [ 579.943773][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 580.134216][T30137] syzkaller0: entered promiscuous mode [ 580.139825][T30137] syzkaller0: entered allmulticast mode [ 580.386892][T30182] netlink: 'syz.4.10632': attribute type 1 has an invalid length. [ 580.419115][T30182] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10632'. [ 580.468044][T30185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10633'. [ 581.740214][T30185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.757066][T30185] team0: Port device batadv0 added [ 582.083489][T30199] syzkaller0: entered promiscuous mode [ 582.099743][T30199] syzkaller0: entered allmulticast mode [ 582.110210][T30211] netlink: 'syz.4.10643': attribute type 3 has an invalid length. [ 582.284359][T30222] netlink: 'syz.3.10644': attribute type 1 has an invalid length. [ 582.305363][T30222] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10644'. [ 584.517832][T30238] syz_tun: entered allmulticast mode [ 584.523519][T30238] syz_tun: left allmulticast mode [ 584.565397][T30225] syzkaller0: entered promiscuous mode [ 584.570927][T30225] syzkaller0: entered allmulticast mode [ 584.580124][T30248] ¾x9ÿ: left allmulticast mode [ 584.594706][T30248] ¾x9ÿ: left promiscuous mode [ 584.599873][T30248] bridge0: port 1(1¾x9ÿ) entered disabled state [ 584.611449][T30248] bridge_slave_1: left allmulticast mode [ 584.620053][T30248] bridge_slave_1: left promiscuous mode [ 584.628596][T30248] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.650317][T30248] bond0: (slave bond_slave_0): Releasing backup interface [ 584.672306][T30248] bond0: (slave bond_slave_1): Releasing backup interface [ 584.683135][T30248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.693538][T30248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.706368][T30248] bond2: (slave gretap1): Releasing active interface [ 584.729140][T30248] bond4: (slave veth9): Releasing active interface [ 584.957986][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 584.966121][ C1] lec:lec_tx_timeout: lec0 [ 584.970897][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 584.990263][T30293] netlink: 'syz.0.10656': attribute type 1 has an invalid length. [ 584.999308][T30293] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10656'. [ 586.754223][T30330] netlink: 'syz.0.10667': attribute type 1 has an invalid length. [ 586.785294][T30330] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10667'. [ 587.117369][T30348] syzkaller1: entered promiscuous mode [ 587.122919][T30348] syzkaller1: entered allmulticast mode [ 587.241351][T30350] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.446042][T30350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.480120][T30350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.718492][T30350] veth0_macvtap: left allmulticast mode [ 587.862898][ T49] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.873963][ T49] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 40345 - 0 [ 587.903039][ T49] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 587.924727][T10592] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.933146][T10592] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 40345 - 0 [ 587.973329][T10592] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 588.009685][T10592] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.044664][T10592] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 40345 - 0 [ 588.053172][T10592] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 588.075766][T10592] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.084262][T10592] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 40345 - 0 [ 588.139447][T10592] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 589.013145][T30378] netlink: 'syz.0.10679': attribute type 1 has an invalid length. [ 589.962316][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88806a4fcc00: connection exists (00 fe). last cmd: 10 [ 589.986157][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 589.994212][ C1] lec:lec_tx_timeout: lec0 [ 590.009625][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 592.008613][T30378] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10679'. [ 595.031466][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 595.039580][ C1] lec:lec_tx_timeout: lec0 [ 595.052671][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 598.042654][ C0] sched: DL replenish lagged too much [ 600.828157][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 600.836341][ C1] lec:lec_tx_timeout: lec0 [ 600.850398][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 605.868025][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 605.876648][ C1] lec:lec_tx_timeout: lec0 [ 605.891043][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 610.912315][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 610.920408][ C1] lec:lec_tx_timeout: lec0 [ 610.934212][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 615.950339][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 615.958524][ C1] lec:lec_tx_timeout: lec0 [ 615.975285][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 620.991131][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 620.999232][ C1] lec:lec_tx_timeout: lec0 [ 621.012178][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 626.024605][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 626.032657][ C1] lec:lec_tx_timeout: lec0 [ 626.052905][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 631.867037][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 631.875133][ C1] lec:lec_tx_timeout: lec0 [ 631.888129][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 636.894840][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 636.902923][ C1] lec:lec_tx_timeout: lec0 [ 636.916251][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 641.924607][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 641.932669][ C1] lec:lec_tx_timeout: lec0 [ 641.948522][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 646.964626][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 646.972687][ C1] lec:lec_tx_timeout: lec0 [ 646.986052][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 651.777496][T27788] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 652.001341][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 652.009441][ C1] lec:lec_tx_timeout: lec0 [ 652.021746][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 653.557782][T30397] Bluetooth: hci5: Opcode 0x0c03 failed: -4 [ 655.266204][T30399] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 657.038702][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 657.046813][ C1] lec:lec_tx_timeout: lec0 [ 657.059075][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 657.591735][T30402] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 657.847722][T30402] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 658.069737][T30402] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 661.157641][T30402] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 662.075663][T30402] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 662.830598][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms [ 662.838689][ C1] lec:lec_tx_timeout: lec0 [ 662.851729][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 667.867498][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 667.875631][ C1] lec:lec_tx_timeout: lec0 [ 667.888190][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 672.904536][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 672.912600][ C1] lec:lec_tx_timeout: lec0 [ 672.934649][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 677.946842][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 677.954927][ C1] lec:lec_tx_timeout: lec0 [ 677.967594][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 682.976599][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 682.984682][ C1] lec:lec_tx_timeout: lec0 [ 682.997049][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 688.006416][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 688.014472][ C1] lec:lec_tx_timeout: lec0 [ 688.027700][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 689.932571][T30399] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 691.252882][T30402] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 691.370079][T30402] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 691.389133][T30402] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 691.440111][T30402] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 691.500620][T30402] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 691.601973][T30402] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 691.635159][T30402] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 691.675959][T30402] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 691.753869][T30402] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 693.041696][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 693.049786][ C1] lec:lec_tx_timeout: lec0 [ 693.065226][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 694.438079][T27788] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 694.496043][T27788] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 694.993187][T27788] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 695.236557][T27788] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 695.286041][T27788] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 696.031684][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 696.658463][T30402] Bluetooth: hci3: command tx timeout [ 698.765857][T27788] Bluetooth: hci3: command tx timeout [ 698.824774][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms [ 698.832834][ C1] lec:lec_tx_timeout: lec0 [ 698.845408][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 699.094038][T27788] Bluetooth: hci5: command tx timeout [ 700.242109][T27788] Bluetooth: hci7: command tx timeout [ 700.898364][T27788] Bluetooth: hci3: command tx timeout [ 701.203535][T27788] Bluetooth: hci5: command tx timeout [ 703.178234][T27788] Bluetooth: hci7: command tx timeout [ 703.183787][T27788] Bluetooth: hci3: command tx timeout [ 703.336469][ T5822] Bluetooth: hci5: command tx timeout [ 703.868782][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 703.876868][ C1] lec:lec_tx_timeout: lec0 [ 703.891086][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 705.327135][T27788] Bluetooth: hci7: command tx timeout [ 706.639739][T27788] Bluetooth: hci5: command tx timeout [ 707.827523][ T5822] Bluetooth: hci7: command tx timeout [ 708.908770][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 708.916859][ C1] lec:lec_tx_timeout: lec0 [ 708.930100][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 711.105250][T27788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 711.243772][T27788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 711.297205][T27788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 711.959663][T27788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 712.088596][T27788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 713.950103][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 713.958293][ C1] lec:lec_tx_timeout: lec0 [ 713.970741][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 717.376918][ T5822] Bluetooth: hci0: command tx timeout [ 718.990737][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 718.998828][ C1] lec:lec_tx_timeout: lec0 [ 719.011112][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 719.773129][ T5822] Bluetooth: hci0: command tx timeout [ 722.739909][ T5822] Bluetooth: hci0: command tx timeout [ 724.026301][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 724.034356][ C1] lec:lec_tx_timeout: lec0 [ 724.048029][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 725.851239][ T5822] Bluetooth: hci0: command tx timeout [ 729.868842][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 729.877023][ C1] lec:lec_tx_timeout: lec0 [ 731.153443][ T5822] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 731.520599][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 734.307103][T30429] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 740.487557][T27788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 740.549030][T27788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 741.223539][T27788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 742.151168][T27788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 742.632917][T27788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 744.876169][ T5822] Bluetooth: hci2: Opcode 0x0c39 failed: -110 [ 746.579062][T27788] Bluetooth: hci2: unexpected event for opcode 0x0c39 [ 746.602474][T27788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 746.969636][T30432] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 749.051007][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 750.931294][T30402] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 751.319720][T30402] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 751.693074][T30402] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 751.838181][T30402] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 751.951841][T30402] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 752.015545][T30402] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 752.156293][T30402] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 752.901913][T30402] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 754.672800][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 754.819390][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 754.826461][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 754.826536][ C1] lec:lec_tx_timeout: lec0 [ 754.848385][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 758.998224][T30402] Bluetooth: hci1: command tx timeout [ 759.674657][T30402] Bluetooth: hci2: command tx timeout [ 759.864705][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 759.872783][ C1] lec:lec_tx_timeout: lec0 [ 761.796111][T30402] Bluetooth: hci1: command tx timeout [ 761.801558][T30402] Bluetooth: hci2: command tx timeout [ 763.875756][T30402] Bluetooth: hci1: command tx timeout [ 764.271185][T30402] Bluetooth: hci2: command tx timeout [ 766.165194][T30402] Bluetooth: hci1: command tx timeout [ 766.379213][T30402] Bluetooth: hci2: command tx timeout [ 777.627521][T27788] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 777.727426][T27788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 778.623571][T27788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 779.022050][T30439] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 779.129606][T30439] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 779.187175][T30439] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 781.247554][T30402] Bluetooth: hci4: Opcode 0x0c23 failed: -110 [ 781.263113][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 781.638858][ T5822] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 781.711071][T30439] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 781.778552][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 782.454114][ T5822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 782.945649][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 783.232650][T30402] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 783.290607][T30402] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 786.875319][ T5822] Bluetooth: hci6: command tx timeout [ 787.913931][ T5822] Bluetooth: hci4: command tx timeout [ 788.328983][T30402] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 788.382495][T30402] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 788.440622][T30402] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 788.526772][T30402] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 788.569305][T30402] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 789.165844][ T5822] Bluetooth: hci6: command tx timeout [ 790.034174][T30402] Bluetooth: hci4: command tx timeout [ 791.283062][T27788] Bluetooth: hci6: command tx timeout [ 792.850482][T27788] Bluetooth: hci4: command tx timeout [ 792.872772][T30402] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 793.199316][T30439] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 793.253642][T30439] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 793.495218][T30439] Bluetooth: hci6: command tx timeout [ 794.419613][T30402] Bluetooth: hci8: command tx timeout [ 795.130802][T30402] Bluetooth: hci4: command tx timeout [ 796.494163][T30459] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 796.761740][T30402] Bluetooth: hci8: command tx timeout [ 799.033022][T30402] Bluetooth: hci8: command tx timeout [ 799.676244][T30439] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 799.782200][T30439] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 799.848594][T30439] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 801.118085][T30439] Bluetooth: hci8: command tx timeout [ 801.389283][T30439] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 801.527278][T30439] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 804.780569][T30380] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.587842][T30380] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.914675][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 815.925552][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 815.933613][ C1] lec:lec_tx_timeout: lec0 [ 816.656645][T27313] lec:lec_start_xmit: lec0:No lecd attached [ 821.866280][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5210 ms [ 821.874333][ C1] lec:lec_tx_timeout: lec0 [ 822.072461][T27788] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 822.366658][T27788] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 822.439151][T27788] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 822.663474][T30402] Bluetooth: hci10: command tx timeout [ 823.159772][T30402] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 823.218670][T30402] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 824.952012][T30402] Bluetooth: hci10: command tx timeout [ 827.420556][T30402] Bluetooth: hci10: command tx timeout [ 829.580711][T30402] Bluetooth: hci10: command tx timeout [ 833.013185][T30402] Bluetooth: hci9: command tx timeout [ 835.194778][T30402] Bluetooth: hci9: command tx timeout [ 837.421957][T30439] Bluetooth: hci9: command tx timeout [ 837.461755][T27788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 837.662387][T27788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 837.759078][T27788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 838.140408][T27788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 838.278714][T27788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 839.531622][T27788] Bluetooth: hci9: command tx timeout [ 841.129063][T27788] Bluetooth: hci0: command tx timeout [ 843.542575][T30402] Bluetooth: hci0: command tx timeout [ 844.131849][T27788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 844.238154][T27788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 844.296167][T27788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 844.666047][T27788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 844.739541][T27788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 845.741671][T27788] Bluetooth: hci0: command tx timeout [ 846.910494][T27788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 847.898948][T27788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 847.949230][T27788] Bluetooth: hci0: command tx timeout [ 847.963370][T27788] Bluetooth: hci1: command tx timeout [ 848.283596][T27788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 849.042519][T27788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 849.186999][T27788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 849.260819][T30380] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 849.360125][T30380] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.155602][T27788] Bluetooth: hci1: command tx timeout [ 851.987229][T27788] Bluetooth: hci2: command tx timeout [ 852.210765][T27788] Bluetooth: hci1: command tx timeout [ 854.089419][T27788] Bluetooth: hci2: command tx timeout [ 854.316679][T27788] Bluetooth: hci1: command tx timeout [ 856.198667][T27788] Bluetooth: hci2: command tx timeout [ 858.310947][T27788] Bluetooth: hci2: command tx timeout [ 863.119683][T30402] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 863.171740][T30402] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 863.239113][T30402] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 863.609522][T30402] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 863.704061][T30402] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 866.200081][T27788] Bluetooth: hci3: command tx timeout [ 868.280501][T27788] Bluetooth: hci3: command tx timeout [ 870.619443][T27788] Bluetooth: hci3: command tx timeout [ 871.515715][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 872.870188][T27788] Bluetooth: hci3: command tx timeout [ 875.222396][T30380] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 875.249135][T30380] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.829192][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5310 ms [ 876.837277][ C1] lec:lec_tx_timeout: lec0 [ 880.852826][T27313] lec:lec_start_xmit: lec0:No lecd attached [ 885.871118][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 885.879199][ C1] lec:lec_tx_timeout: lec0 [ 888.170381][T30402] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 888.653047][T30402] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 888.695477][T30402] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 888.768251][T30402] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 888.850307][T30402] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 891.843140][T27788] Bluetooth: hci5: command tx timeout [ 893.006346][T30380] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 893.112547][T30380] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.934517][T27788] Bluetooth: hci5: command tx timeout [ 895.949011][T27788] Bluetooth: hci5: command tx timeout [ 896.750715][T30451] lo speed is unknown, defaulting to 1000 [ 898.116445][T27788] Bluetooth: hci5: command tx timeout [ 898.835957][T30450] lo speed is unknown, defaulting to 1000 [ 901.932702][T30402] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 902.147372][T30402] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 902.238274][T30402] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 902.768494][T30402] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 902.778293][T30457] lo speed is unknown, defaulting to 1000 [ 902.849037][T30439] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 903.097304][ T5822] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 903.233877][ T5822] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 903.409276][ T5822] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 903.520716][ T5822] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 905.049899][ T5822] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 905.102594][ T5822] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 905.150447][ T5822] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 905.190068][ T5822] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 905.386981][ T5822] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 905.458666][ T5822] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 907.158647][T30399] Bluetooth: hci7: command tx timeout [ 908.720882][T30484] lo speed is unknown, defaulting to 1000 [ 909.078729][T30519] Bluetooth: hci6: command 0x0406 tx timeout [ 909.118265][T30519] Bluetooth: hci4: command 0x0406 tx timeout [ 909.428416][T30439] Bluetooth: hci7: command tx timeout [ 910.154987][T30439] Bluetooth: hci9: command tx timeout [ 910.230428][T30439] Bluetooth: hci10: command tx timeout [ 912.064235][T30439] Bluetooth: hci7: command tx timeout [ 912.286455][T30439] Bluetooth: hci9: command tx timeout [ 912.291921][T30439] Bluetooth: hci10: command tx timeout [ 913.604267][T30491] lo speed is unknown, defaulting to 1000 [ 914.119898][ T5822] Bluetooth: hci7: command tx timeout [ 914.562072][ T5822] Bluetooth: hci10: command tx timeout [ 914.576858][ T5822] Bluetooth: hci9: command tx timeout [ 915.122559][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 915.166362][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 915.208896][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 915.299129][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 915.385525][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 916.855072][T27788] Bluetooth: hci9: command tx timeout [ 916.860528][T27788] Bluetooth: hci10: command tx timeout [ 918.060496][T27788] Bluetooth: hci0: command tx timeout [ 919.200369][T27788] Bluetooth: hci8: command 0x0406 tx timeout [ 920.114736][ T5822] Bluetooth: hci0: command tx timeout [ 922.527175][ T5822] Bluetooth: hci0: command tx timeout [ 925.195456][ T5822] Bluetooth: hci0: command tx timeout [ 933.258760][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 938.828051][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5560 ms [ 938.836130][ C1] lec:lec_tx_timeout: lec0 [ 950.812312][T30499] lo speed is unknown, defaulting to 1000 [ 966.582815][T27788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 969.321492][ T5822] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 969.476670][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 969.483686][ T5822] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 969.532211][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 970.743862][T27788] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 971.422792][T30529] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 971.523186][T27788] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 971.640779][T27788] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 972.278868][T27788] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 972.449421][T27788] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 974.946707][T30439] Bluetooth: hci2: command 0x0406 tx timeout [ 977.626025][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 979.639880][T30439] Bluetooth: hci11: command tx timeout [ 981.836014][T30439] Bluetooth: hci11: command tx timeout [ 984.030256][T30439] Bluetooth: hci11: command tx timeout [ 986.111190][T27788] Bluetooth: hci11: command tx timeout [ 986.517824][T27788] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 986.590920][T27788] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 986.810383][T27788] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 987.048782][ T5822] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 987.550406][ T5822] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 987.567004][ T5822] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 987.671487][ T5822] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 988.648636][T30519] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 988.899749][T30519] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 988.969623][T30519] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 990.973162][T30439] Bluetooth: hci3: command 0x0406 tx timeout [ 992.908976][T30439] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 992.996050][T30439] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 993.537678][T30439] Bluetooth: hci12: command tx timeout [ 993.544082][T30439] Bluetooth: hci13: command tx timeout [ 994.196214][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 995.412562][ T5822] Bluetooth: hci14: Opcode 0x1001 failed: -110 [ 995.428698][T30439] Bluetooth: hci14: command 0x1001 tx timeout [ 995.565388][T30439] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 995.643959][T30519] Bluetooth: hci12: command tx timeout [ 995.815646][T30519] Bluetooth: hci13: command tx timeout [ 995.841967][T30519] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 997.123626][T30519] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 997.182025][T30519] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 997.915513][T30519] Bluetooth: hci12: command tx timeout [ 997.921074][T30519] Bluetooth: hci13: command tx timeout [ 998.620286][ T5822] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 998.706064][ T5822] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 999.869580][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5670 ms [ 999.877666][ C1] lec:lec_tx_timeout: lec0 [ 1000.060038][ T5822] Bluetooth: hci13: command tx timeout [ 1000.074914][ T5822] Bluetooth: hci12: command tx timeout [ 1001.153580][T30519] Bluetooth: hci14: command tx timeout [ 1003.301625][T30519] Bluetooth: hci14: command tx timeout [ 1005.482220][T30519] Bluetooth: hci14: command tx timeout [ 1007.836373][T30519] Bluetooth: hci14: command tx timeout [ 1015.715353][ T5822] Bluetooth: hci5: command 0x0406 tx timeout [ 1031.508864][T27788] Bluetooth: hci10: command 0x0406 tx timeout [ 1031.532044][T27788] Bluetooth: hci7: command 0x0406 tx timeout [ 1035.007401][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1035.069758][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1035.151500][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1037.364150][T30439] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1037.498805][T30439] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1040.446868][T30519] Bluetooth: hci1: command tx timeout [ 1040.857487][ T5822] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1040.919153][ T5822] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1040.978861][ T5822] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1041.190943][T27788] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1041.208561][T30402] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1041.288378][T30402] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1041.336034][T30402] Bluetooth: hci0: command 0x0406 tx timeout [ 1042.661110][T30399] Bluetooth: hci1: command tx timeout [ 1042.992498][T30519] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1043.066349][T30519] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1044.593357][T30519] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1044.880335][T30399] Bluetooth: hci1: command tx timeout [ 1045.072926][T30399] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1045.337287][T30556] Bluetooth: hci15: Opcode 0x0c1a failed: -110 [ 1046.999910][T30399] Bluetooth: hci1: command tx timeout [ 1047.452569][T30519] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1047.554256][T30519] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1047.605259][T30519] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1047.753955][T30519] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1048.744118][T30519] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1050.891689][ T5822] Bluetooth: hci9: command tx timeout [ 1053.036148][T30439] Bluetooth: hci9: command tx timeout [ 1053.327487][T30399] Bluetooth: hci16: command tx timeout [ 1054.159898][T30399] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1054.222098][T30399] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1054.256654][T30399] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1054.419964][T30399] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1055.092155][T30399] Bluetooth: hci9: command tx timeout [ 1055.544868][ T5822] Bluetooth: hci16: command tx timeout [ 1055.619893][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1056.060759][ T5822] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1057.379739][T30439] Bluetooth: hci9: command tx timeout [ 1057.678260][ T5822] Bluetooth: hci16: command tx timeout [ 1059.941040][ T5822] Bluetooth: hci16: command tx timeout [ 1059.956326][ T5822] Bluetooth: hci17: command tx timeout [ 1060.826352][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5200 ms [ 1060.834449][ C1] lec:lec_tx_timeout: lec0 [ 1062.312445][ T5822] Bluetooth: hci17: command tx timeout [ 1064.850450][ T5822] Bluetooth: hci17: command tx timeout [ 1066.938928][ T5822] Bluetooth: hci17: command tx timeout [ 1091.793892][T30439] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1091.924699][T30439] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1092.034259][T30439] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1095.061616][T30399] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1095.523157][T30519] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1095.620972][T30519] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1095.848138][T30519] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1096.691301][T30519] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1096.875593][T30519] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1097.108555][T30519] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1102.410011][T30399] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1102.507334][T30399] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1102.666091][T30399] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1102.899072][T30399] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1103.295205][T30399] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1103.810547][T30399] Bluetooth: hci15: command tx timeout [ 1103.826396][T30399] Bluetooth: hci18: command tx timeout [ 1105.949376][ T5822] Bluetooth: hci15: command tx timeout [ 1106.228931][ T5822] Bluetooth: hci18: command tx timeout [ 1107.531401][ T5822] Bluetooth: hci0: command tx timeout [ 1107.992017][T30519] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1108.028209][T30519] Bluetooth: hci15: command tx timeout [ 1108.459020][T30399] Bluetooth: hci18: command tx timeout [ 1108.531633][T30399] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1108.952553][T30399] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1109.227853][T30399] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1109.298791][T30399] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1109.643407][T30399] Bluetooth: hci0: command tx timeout [ 1110.214038][ T5822] Bluetooth: hci15: command tx timeout [ 1110.666089][T30519] Bluetooth: hci18: command tx timeout [ 1111.741056][ T5822] Bluetooth: hci0: command tx timeout [ 1113.554509][ T5822] Bluetooth: hci11: command tx timeout [ 1113.887147][T30514] lo speed is unknown, defaulting to 1000 [ 1113.922087][ T5822] Bluetooth: hci0: command tx timeout [ 1115.692110][ T5822] Bluetooth: hci11: command tx timeout [ 1117.415793][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1118.237597][ T5822] Bluetooth: hci11: command tx timeout [ 1119.610872][T30519] Bluetooth: hci19: Opcode 0x0c03 failed: -110 [ 1120.678596][T30519] Bluetooth: hci11: command tx timeout [ 1121.198997][T30508] lo speed is unknown, defaulting to 1000 [ 1122.824723][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5410 ms [ 1122.832790][ C1] lec:lec_tx_timeout: lec0 [ 1148.583796][ T5822] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 1148.717134][ T5822] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 1148.780636][ T5822] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 1150.008870][ T5822] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 1151.681985][ T5822] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 1158.647175][T30399] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1159.060964][T30399] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1159.097693][T30399] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1159.651849][T30399] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1159.743144][T30399] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1163.858041][ T5822] Bluetooth: hci20: command tx timeout [ 1164.635298][T30519] Bluetooth: hci12: command tx timeout [ 1164.653314][T30519] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1164.877497][T30519] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1164.962265][T30519] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1165.808216][T30519] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1166.031019][ T5822] Bluetooth: hci20: command tx timeout [ 1166.141496][ T5822] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1166.834849][ T5822] Bluetooth: hci12: command tx timeout [ 1168.131832][T30519] Bluetooth: hci20: command tx timeout [ 1168.950343][T30519] Bluetooth: hci12: command tx timeout [ 1170.245761][T30519] Bluetooth: hci20: command tx timeout [ 1170.277889][T30519] Bluetooth: hci13: command tx timeout [ 1170.743871][T30399] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1170.797427][T30399] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1170.908193][T30399] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1170.994727][T30399] Bluetooth: hci12: command tx timeout [ 1171.000439][T30399] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1171.075388][T30399] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1172.542678][T30519] Bluetooth: hci13: command tx timeout [ 1173.624128][T30519] Bluetooth: hci1: command tx timeout [ 1174.595459][T30519] Bluetooth: hci13: command tx timeout [ 1175.842045][T30519] Bluetooth: hci1: command tx timeout [ 1178.673156][T30519] Bluetooth: hci13: command tx timeout [ 1178.688094][T30519] Bluetooth: hci1: command tx timeout [ 1180.778378][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1181.513136][T30399] Bluetooth: hci1: command tx timeout [ 1185.871196][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5080 ms [ 1185.879288][ C1] lec:lec_tx_timeout: lec0 [ 1190.545843][T30519] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1190.626747][T30519] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1190.668713][T30519] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1190.811308][T30519] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1190.939187][T30519] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1193.908406][T30519] Bluetooth: hci9: command tx timeout [ 1196.340208][T30519] Bluetooth: hci9: command tx timeout [ 1198.869910][T30519] Bluetooth: hci9: command tx timeout [ 1200.930555][T30519] Bluetooth: hci9: command tx timeout [ 1227.080813][T30399] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1227.121537][T30399] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1227.171356][T30399] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1228.516961][T30399] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1228.622337][T30399] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1231.902333][T30399] Bluetooth: hci0: command tx timeout [ 1234.052469][T30519] Bluetooth: hci0: command tx timeout [ 1234.713566][ T5822] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1234.780124][ T5822] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1235.282594][ T5822] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1235.512123][ T5822] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1235.651694][ T5822] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1236.128370][T30399] Bluetooth: hci0: command tx timeout [ 1237.473450][T30399] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1238.174041][T30399] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1238.191438][T30399] Bluetooth: hci6: command tx timeout [ 1238.215986][T30519] Bluetooth: hci0: command tx timeout [ 1238.231488][T30519] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1238.329129][T30519] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1238.380408][T30519] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1240.291134][ T5822] Bluetooth: hci6: command tx timeout [ 1240.504975][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1241.812694][ T5822] Bluetooth: hci11: command tx timeout [ 1242.125242][T30519] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1242.226399][T30519] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1242.290560][T30519] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1242.359778][T30519] Bluetooth: hci6: command tx timeout [ 1242.591271][T30519] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1242.720340][T30519] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1243.880032][T30519] Bluetooth: hci11: command tx timeout [ 1244.448680][T30519] Bluetooth: hci6: command tx timeout [ 1245.227580][T30519] Bluetooth: hci14: command tx timeout [ 1245.872014][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5360 ms [ 1245.880173][ C1] lec:lec_tx_timeout: lec0 [ 1245.952093][T30519] Bluetooth: hci11: command tx timeout [ 1247.590093][T30519] Bluetooth: hci14: command tx timeout [ 1248.028591][T30519] Bluetooth: hci11: command tx timeout [ 1249.851248][T30519] Bluetooth: hci14: command tx timeout [ 1251.921255][ T5822] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1252.009118][T30439] Bluetooth: hci14: command tx timeout [ 1252.262809][T30439] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1252.413297][T30439] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1252.502047][T30439] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1252.569090][T30439] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1255.167919][T30439] Bluetooth: hci15: command tx timeout [ 1257.234543][T30439] Bluetooth: hci15: command tx timeout [ 1259.340063][T30439] Bluetooth: hci15: command tx timeout [ 1261.660800][T30439] Bluetooth: hci15: command tx timeout [ 1286.043900][ T5822] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1286.661186][T27788] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1286.760878][T27788] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1286.833256][T27788] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1286.876123][T30402] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1287.041893][T30648] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1287.134205][T30648] Bluetooth: hci20: command 0x0406 tx timeout [ 1287.167251][T30648] Bluetooth: hci12: command 0x0406 tx timeout [ 1287.309597][T27788] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1287.356348][T27788] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1287.602182][T30648] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1287.739196][T30399] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1291.006916][T30648] Bluetooth: hci16: command tx timeout [ 1293.080805][T30399] Bluetooth: hci16: command tx timeout [ 1293.097044][ T5822] Bluetooth: hci17: command tx timeout [ 1293.103184][ T5822] Bluetooth: hci13: command 0x0406 tx timeout [ 1295.293583][T30439] Bluetooth: hci16: command tx timeout [ 1295.307704][T30439] Bluetooth: hci17: command tx timeout [ 1297.467276][T30399] Bluetooth: hci1: command 0x0406 tx timeout [ 1297.473421][T30399] Bluetooth: hci17: command tx timeout [ 1297.482803][T30648] Bluetooth: hci16: command tx timeout [ 1297.483347][T30439] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1297.583478][T30439] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1298.017014][T30519] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1298.465150][T30519] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1298.598941][T30519] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1299.553698][ T5822] Bluetooth: hci17: command tx timeout [ 1300.915780][ T5822] Bluetooth: hci18: command tx timeout [ 1302.360358][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1304.417024][ T5822] Bluetooth: hci18: command tx timeout [ 1306.433150][ T5822] Bluetooth: hci18: command tx timeout [ 1307.864792][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms [ 1307.872855][ C1] lec:lec_tx_timeout: lec0 [ 1307.936473][T30439] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1307.989729][T30439] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1308.348303][T30439] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1308.415012][T30439] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1308.455456][T30439] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1308.586925][T30519] Bluetooth: hci18: command tx timeout [ 1311.001113][ T5822] Bluetooth: hci19: command tx timeout [ 1312.363539][ T31] INFO: task syz-executor:30591 blocked for more than 143 seconds. [ 1312.549234][ T31] Not tainted syzkaller #0 [ 1312.591814][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1312.821704][ T31] task:syz-executor state:D stack:27304 pid:30591 tgid:30591 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1313.253726][ T5822] Bluetooth: hci19: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1316.049478][ T31] Call Trace: [ 1316.052917][ T31] [ 1316.106124][ T5822] Bluetooth: hci19: command tx timeout [ 1316.141492][ T31] __schedule+0x15dd/0x52d0 [ 1316.265370][ T31] ? rcu_is_watching+0x15/0xb0 [ 1316.270437][ T31] ? __pfx___schedule+0x10/0x10 [ 1316.673863][ T31] ? schedule+0x90/0x360 [ 1316.688771][ T31] schedule+0x164/0x360 [ 1316.693029][ T31] schedule_preempt_disabled+0x13/0x30 [ 1317.439981][ T31] __mutex_lock+0x7fe/0x1300 [ 1317.462661][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1317.679530][ T31] ? inet_rtm_newaddr+0x404/0x1ad0 [ 1317.694482][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1317.699695][ T31] ? __nla_parse+0x40/0x60 [ 1318.312454][T30439] Bluetooth: hci9: command 0x0406 tx timeout [ 1318.327405][T30439] Bluetooth: hci19: command tx timeout [ 1318.332356][ T31] inet_rtm_newaddr+0x404/0x1ad0 [ 1318.381952][ T31] ? __kernel_text_address+0xd/0x30 [ 1318.397041][ T31] ? unwind_get_return_address+0x4d/0x90 [ 1318.402831][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1319.403346][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1319.775366][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1319.780857][ T31] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1321.031229][ T31] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1321.045751][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1321.051301][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1321.400620][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1321.414362][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1321.419913][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10