last executing test programs: 1.763867499s ago: executing program 3 (id=4): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x2000c090) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5dc}], 0x1}, 0x4) 1.407099398s ago: executing program 2 (id=3): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000810) 1.166264636s ago: executing program 1 (id=7): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) write(r0, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000000000000000001080009000d00", 0x22) 1.143224089s ago: executing program 3 (id=8): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1.016389201s ago: executing program 1 (id=9): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebf9", 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x1, 0x0, 0xffd}}}}}}}, 0x0) 829.480039ms ago: executing program 1 (id=10): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) 826.422128ms ago: executing program 2 (id=11): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x2) shutdown(0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = accept(r0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000000)="021f6a", 0x3, 0x4404c06d, 0x0, 0x0) 598.530131ms ago: executing program 1 (id=12): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000400)={0xfffc, 0x0, 0x3, 0xffff}, 0x8) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, 0x0, 0x0) 499.861118ms ago: executing program 0 (id=1): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000000c0)=0x1, 0x4) 278.288633ms ago: executing program 1 (id=13): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) 243.952611ms ago: executing program 4 (id=5): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x4a, &(0x7f0000000500), 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd3f, 0x870bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001740)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) 180.499412ms ago: executing program 0 (id=14): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf25030000000800010000000000400007800c000180", @ANYRES32, @ANYRES32, @ANYBLOB="0c000180080001"], 0x5c}, 0x1, 0x0, 0x0, 0x4050}, 0x100) 45.294037ms ago: executing program 1 (id=15): openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x26b6900d}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xf6ba, 0x2, 0xffffffff, 0x0, 0x3, 0x3}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)='\'', 0x1}], 0x1}, 0x4) 0s ago: executing program 3 (id=16): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x64f2b3277155f64}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x22, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x6, 0xb}, {0x6, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40048a0}, 0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.242' (ED25519) to the list of known hosts. [ 80.338156][ T5827] cgroup: Unknown subsys name 'net' [ 80.444584][ T5827] cgroup: Unknown subsys name 'cpuset' [ 80.453975][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.130731][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.477953][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.486869][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.497688][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.505882][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.507766][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.514147][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.529123][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.529855][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.540088][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.552118][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.553357][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.560727][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.577136][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.586265][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.601810][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.640422][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.650091][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.660313][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.672492][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.680723][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.688737][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.701349][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.709925][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.725368][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.733885][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.414292][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 85.430187][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 85.448336][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 85.521904][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 85.623786][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 85.754539][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.761800][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.769062][ T5840] bridge_slave_0: entered allmulticast mode [ 85.776475][ T5840] bridge_slave_0: entered promiscuous mode [ 85.829107][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.836438][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.843669][ T5840] bridge_slave_1: entered allmulticast mode [ 85.850931][ T5840] bridge_slave_1: entered promiscuous mode [ 85.868438][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.875756][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.883203][ T5848] bridge_slave_0: entered allmulticast mode [ 85.890472][ T5848] bridge_slave_0: entered promiscuous mode [ 85.928731][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.935894][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.943175][ T5839] bridge_slave_0: entered allmulticast mode [ 85.950407][ T5839] bridge_slave_0: entered promiscuous mode [ 85.958169][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.965451][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.973339][ T5848] bridge_slave_1: entered allmulticast mode [ 85.980452][ T5848] bridge_slave_1: entered promiscuous mode [ 85.987592][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.994887][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.002343][ T5854] bridge_slave_0: entered allmulticast mode [ 86.010115][ T5854] bridge_slave_0: entered promiscuous mode [ 86.038772][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.046041][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.053462][ T5839] bridge_slave_1: entered allmulticast mode [ 86.060533][ T5839] bridge_slave_1: entered promiscuous mode [ 86.076534][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.083755][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.091950][ T5854] bridge_slave_1: entered allmulticast mode [ 86.099047][ T5854] bridge_slave_1: entered promiscuous mode [ 86.120024][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.161809][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.169132][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.177134][ T5855] bridge_slave_0: entered allmulticast mode [ 86.184738][ T5855] bridge_slave_0: entered promiscuous mode [ 86.194728][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.217874][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.238459][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.245813][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.253280][ T5855] bridge_slave_1: entered allmulticast mode [ 86.262303][ T5855] bridge_slave_1: entered promiscuous mode [ 86.295501][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.309558][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.322988][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.357217][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.378330][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.390255][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.402346][ T5840] team0: Port device team_slave_0 added [ 86.439980][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.451763][ T5840] team0: Port device team_slave_1 added [ 86.469221][ T5848] team0: Port device team_slave_0 added [ 86.508920][ T5839] team0: Port device team_slave_0 added [ 86.516680][ T5848] team0: Port device team_slave_1 added [ 86.524459][ T5854] team0: Port device team_slave_0 added [ 86.552818][ T5839] team0: Port device team_slave_1 added [ 86.570075][ T5854] team0: Port device team_slave_1 added [ 86.577739][ T5855] team0: Port device team_slave_0 added [ 86.584610][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.591672][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.618168][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.671850][ T5162] Bluetooth: hci2: command tx timeout [ 86.672027][ T51] Bluetooth: hci1: command tx timeout [ 86.678100][ T5845] Bluetooth: hci0: command tx timeout [ 86.701499][ T5855] team0: Port device team_slave_1 added [ 86.707824][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.714831][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.741419][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.753004][ T5845] Bluetooth: hci3: command tx timeout [ 86.807815][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.817438][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.830942][ T5845] Bluetooth: hci4: command tx timeout [ 86.845029][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.862831][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.871647][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.898651][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.935630][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.943099][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.969659][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.982212][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.990478][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.017073][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.030141][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.037512][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.064272][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.112413][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.119499][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.145736][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.167348][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.174807][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.200861][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.247589][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.254720][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.280695][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.299438][ T5840] hsr_slave_0: entered promiscuous mode [ 87.306030][ T5840] hsr_slave_1: entered promiscuous mode [ 87.335017][ T5848] hsr_slave_0: entered promiscuous mode [ 87.341807][ T5848] hsr_slave_1: entered promiscuous mode [ 87.347988][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 87.354541][ T5848] Cannot create hsr debugfs directory [ 87.405939][ T5854] hsr_slave_0: entered promiscuous mode [ 87.412445][ T5854] hsr_slave_1: entered promiscuous mode [ 87.418969][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 87.425057][ T5854] Cannot create hsr debugfs directory [ 87.497044][ T5839] hsr_slave_0: entered promiscuous mode [ 87.503578][ T5839] hsr_slave_1: entered promiscuous mode [ 87.509708][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 87.515534][ T5839] Cannot create hsr debugfs directory [ 87.538674][ T5855] hsr_slave_0: entered promiscuous mode [ 87.545220][ T5855] hsr_slave_1: entered promiscuous mode [ 87.551747][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 87.557550][ T5855] Cannot create hsr debugfs directory [ 88.155737][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.172820][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.184796][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.195356][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.276120][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.288954][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.304327][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.327258][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.413158][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.430230][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.445101][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.455344][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.577384][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.599329][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.624072][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.650343][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.698789][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.751863][ T5845] Bluetooth: hci0: command tx timeout [ 88.751886][ T51] Bluetooth: hci1: command tx timeout [ 88.751916][ T51] Bluetooth: hci2: command tx timeout [ 88.772681][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.784092][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.802841][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.823227][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.833466][ T51] Bluetooth: hci3: command tx timeout [ 88.836212][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.856032][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.890355][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.897909][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.911009][ T51] Bluetooth: hci4: command tx timeout [ 88.934671][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.941845][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.965333][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.996209][ T1351] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.003397][ T1351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.049123][ T1351] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.056283][ T1351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.086243][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.146034][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.168309][ T1022] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.175739][ T1022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.220720][ T1022] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.227883][ T1022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.253506][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.353828][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.407513][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.415016][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.452866][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.487760][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.495008][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.575248][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.644463][ T3573] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.651747][ T3573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.684183][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.691566][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.768009][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.842819][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.027130][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.094970][ T5840] veth0_vlan: entered promiscuous mode [ 90.159587][ T5848] veth0_vlan: entered promiscuous mode [ 90.175687][ T5840] veth1_vlan: entered promiscuous mode [ 90.226765][ T5848] veth1_vlan: entered promiscuous mode [ 90.262329][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.318182][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.360537][ T5854] veth0_vlan: entered promiscuous mode [ 90.379120][ T5840] veth0_macvtap: entered promiscuous mode [ 90.415443][ T5840] veth1_macvtap: entered promiscuous mode [ 90.430484][ T5848] veth0_macvtap: entered promiscuous mode [ 90.449948][ T5854] veth1_vlan: entered promiscuous mode [ 90.484996][ T5848] veth1_macvtap: entered promiscuous mode [ 90.506822][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.559282][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.580581][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.619598][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.629272][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.639336][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.662770][ T1022] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.672020][ T1022] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.706150][ T1022] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.715787][ T1022] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.728663][ T5855] veth0_vlan: entered promiscuous mode [ 90.739290][ T5854] veth0_macvtap: entered promiscuous mode [ 90.746915][ T1022] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.756311][ T1022] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.793465][ T5854] veth1_macvtap: entered promiscuous mode [ 90.803305][ T5855] veth1_vlan: entered promiscuous mode [ 90.832872][ T51] Bluetooth: hci0: command tx timeout [ 90.832918][ T5162] Bluetooth: hci2: command tx timeout [ 90.843844][ T5845] Bluetooth: hci1: command tx timeout [ 90.896622][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.911171][ T5845] Bluetooth: hci3: command tx timeout [ 90.936537][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.983831][ T5839] veth0_vlan: entered promiscuous mode [ 90.992083][ T5845] Bluetooth: hci4: command tx timeout [ 90.998161][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.999841][ T1022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.007018][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.007073][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.018753][ T1022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.056065][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.113583][ T1022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.125003][ T1022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.126551][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.142335][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.158054][ T5855] veth0_macvtap: entered promiscuous mode [ 91.189300][ T5839] veth1_vlan: entered promiscuous mode [ 91.202166][ T5855] veth1_macvtap: entered promiscuous mode [ 91.272364][ T1351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.282352][ T1351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.287509][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.303814][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.355083][ T1351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.366360][ T1351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.375575][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.517013][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.530050][ T5964] block nbd0: not configured, cannot reconfigure [ 91.538488][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.561662][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.576325][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.581294][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.625737][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.653510][ T5839] veth0_macvtap: entered promiscuous mode [ 91.704079][ T5839] veth1_macvtap: entered promiscuous mode [ 91.853237][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.897981][ T1221] cfg80211: failed to load regulatory.db [ 92.050246][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.070641][ T1351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.080724][ T1351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.100347][ T1022] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.133274][ T1022] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.197034][ T1022] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.221356][ T1022] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.372334][ T5979] nbd0: detected capacity change from 0 to 127 [ 92.411016][ T5845] block nbd0: Receive control failed (result -104) [ 92.411726][ T5162] block nbd0: Receive control failed (result -32) [ 92.559312][ T1351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.572381][ T1351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.633217][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.664805][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.745782][ T171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.780478][ T171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.911484][ T5845] Bluetooth: hci1: command tx timeout [ 92.912717][ T5162] Bluetooth: hci2: command tx timeout [ 92.916998][ T51] Bluetooth: hci0: command tx timeout [ 92.991844][ T5162] Bluetooth: hci3: command tx timeout [ 93.074152][ T5162] Bluetooth: hci4: command tx timeout [ 93.163814][ T6000] Zero length message leads to an empty skb [ 93.222533][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'. [ 93.285885][ T6002] block nbd0: reconnected socket [ 93.286883][ T5162] block nbd0: Receive control failed (result -107) [ 93.301026][ T5162] [ 93.303391][ T5162] ====================================================== [ 93.310518][ T5162] WARNING: possible circular locking dependency detected [ 93.317550][ T5162] syzkaller #0 Not tainted [ 93.321986][ T5162] ------------------------------------------------------ [ 93.329005][ T5162] kworker/u9:1/5162 is trying to acquire lock: [ 93.335163][ T5162] ffff8880573d2ae0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 93.344248][ T5162] [ 93.344248][ T5162] but task is already holding lock: [ 93.351612][ T5162] ffff888033f7d668 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1c19/0x1d40 [ 93.360492][ T5162] [ 93.360492][ T5162] which lock already depends on the new lock. [ 93.360492][ T5162] [ 93.370886][ T5162] [ 93.370886][ T5162] the existing dependency chain (in reverse order) is: [ 93.379896][ T5162] [ 93.379896][ T5162] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 93.387538][ T5162] __mutex_lock+0x19e/0x1420 [ 93.392654][ T5162] nbd_queue_rq+0x37b/0x1100 [ 93.397770][ T5162] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 93.403836][ T5162] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 93.410684][ T5162] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 93.417270][ T5162] blk_mq_run_hw_queue+0x348/0x4f0 [ 93.422903][ T5162] blk_mq_dispatch_list+0xd16/0xe10 [ 93.428622][ T5162] blk_mq_flush_plug_list+0x48d/0x570 [ 93.434519][ T5162] __blk_flush_plug+0x3ed/0x4d0 [ 93.439890][ T5162] __submit_bio+0x28d/0x580 [ 93.444915][ T5162] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 93.451157][ T5162] block_read_full_folio+0x599/0x830 [ 93.457226][ T5162] filemap_read_folio+0x137/0x3b0 [ 93.462781][ T5162] do_read_cache_folio+0x358/0x590 [ 93.468429][ T5162] read_part_sector+0xb6/0x2b0 [ 93.473756][ T5162] adfspart_check_ICS+0xb1/0x960 [ 93.479298][ T5162] bdev_disk_changed+0x817/0x1770 [ 93.485273][ T5162] blkdev_get_whole+0x380/0x510 [ 93.490654][ T5162] bdev_open+0x31e/0xd30 [ 93.495415][ T5162] blkdev_open+0x470/0x610 [ 93.500355][ T5162] do_dentry_open+0x785/0x14e0 [ 93.505732][ T5162] vfs_open+0x3b/0x340 [ 93.510325][ T5162] path_openat+0x2e08/0x3860 [ 93.515519][ T5162] do_file_open+0x23e/0x4a0 [ 93.520581][ T5162] do_sys_openat2+0x113/0x200 [ 93.525783][ T5162] __x64_sys_openat+0x138/0x170 [ 93.531246][ T5162] do_syscall_64+0x15f/0xf80 [ 93.536449][ T5162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.542864][ T5162] [ 93.542864][ T5162] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 93.550085][ T5162] __mutex_lock+0x19e/0x1420 [ 93.555199][ T5162] nbd_queue_rq+0xc6/0x1100 [ 93.560226][ T5162] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 93.566480][ T5162] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 93.573336][ T5162] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 93.579839][ T5162] blk_mq_run_hw_queue+0x348/0x4f0 [ 93.585474][ T5162] blk_mq_dispatch_list+0xd16/0xe10 [ 93.591280][ T5162] blk_mq_flush_plug_list+0x48d/0x570 [ 93.597184][ T5162] __blk_flush_plug+0x3ed/0x4d0 [ 93.602556][ T5162] __submit_bio+0x28d/0x580 [ 93.607586][ T5162] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 93.613741][ T5162] block_read_full_folio+0x599/0x830 [ 93.619553][ T5162] filemap_read_folio+0x137/0x3b0 [ 93.625552][ T5162] do_read_cache_folio+0x358/0x590 [ 93.631362][ T5162] read_part_sector+0xb6/0x2b0 [ 93.636762][ T5162] adfspart_check_ICS+0xb1/0x960 [ 93.642309][ T5162] bdev_disk_changed+0x817/0x1770 [ 93.647865][ T5162] blkdev_get_whole+0x380/0x510 [ 93.653351][ T5162] bdev_open+0x31e/0xd30 [ 93.658202][ T5162] blkdev_open+0x470/0x610 [ 93.663145][ T5162] do_dentry_open+0x785/0x14e0 [ 93.668519][ T5162] vfs_open+0x3b/0x340 [ 93.673198][ T5162] path_openat+0x2e08/0x3860 [ 93.678316][ T5162] do_file_open+0x23e/0x4a0 [ 93.683337][ T5162] do_sys_openat2+0x113/0x200 [ 93.688544][ T5162] __x64_sys_openat+0x138/0x170 [ 93.694003][ T5162] do_syscall_64+0x15f/0xf80 [ 93.699124][ T5162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.705710][ T5162] [ 93.705710][ T5162] -> #4 (set->srcu){.+.+}-{0:0}: [ 93.712836][ T5162] __synchronize_srcu+0xca/0x300 [ 93.718386][ T5162] elevator_switch+0x1e8/0x7a0 [ 93.723687][ T5162] elevator_change+0x2cc/0x450 [ 93.729060][ T5162] elevator_set_default+0x36c/0x430 [ 93.734783][ T5162] blk_register_queue+0x3e9/0x4e0 [ 93.740343][ T5162] __add_disk+0x677/0xd50 [ 93.745220][ T5162] add_disk_fwnode+0xfb/0x480 [ 93.750421][ T5162] nbd_dev_add+0x72c/0xb50 [ 93.755358][ T5162] nbd_init+0x168/0x1f0 [ 93.760054][ T5162] do_one_initcall+0x250/0x870 [ 93.765362][ T5162] do_initcall_level+0x104/0x190 [ 93.770846][ T5162] do_initcalls+0x59/0xa0 [ 93.775737][ T5162] kernel_init_freeable+0x2a6/0x3e0 [ 93.781812][ T5162] kernel_init+0x1d/0x1d0 [ 93.786660][ T5162] ret_from_fork+0x514/0xb70 [ 93.791781][ T5162] ret_from_fork_asm+0x1a/0x30 [ 93.797158][ T5162] [ 93.797158][ T5162] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 93.804998][ T5162] __mutex_lock+0x19e/0x1420 [ 93.810132][ T5162] elevator_change+0x1b3/0x450 [ 93.815517][ T5162] elevator_set_none+0xb5/0x140 [ 93.820896][ T5162] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 93.827326][ T5162] nbd_start_device+0x17f/0xb10 [ 93.832733][ T5162] nbd_genl_connect+0x165b/0x1cf0 [ 93.838402][ T5162] genl_family_rcv_msg_doit+0x22a/0x330 [ 93.844492][ T5162] genl_rcv_msg+0x61c/0x7a0 [ 93.849532][ T5162] netlink_rcv_skb+0x232/0x4b0 [ 93.854824][ T5162] genl_rcv+0x28/0x40 [ 93.859344][ T5162] netlink_unicast+0x80f/0x9b0 [ 93.864634][ T5162] netlink_sendmsg+0x813/0xb40 [ 93.869923][ T5162] ____sys_sendmsg+0x972/0x9f0 [ 93.875335][ T5162] ___sys_sendmsg+0x2a5/0x360 [ 93.880753][ T5162] __x64_sys_sendmsg+0x1bd/0x2a0 [ 93.886227][ T5162] do_syscall_64+0x15f/0xf80 [ 93.891341][ T5162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.897768][ T5162] [ 93.897768][ T5162] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 93.906727][ T5162] blk_alloc_queue+0x546/0x680 [ 93.912104][ T5162] __blk_mq_alloc_disk+0x197/0x390 [ 93.917753][ T5162] nbd_dev_add+0x499/0xb50 [ 93.922730][ T5162] nbd_init+0x168/0x1f0 [ 93.927421][ T5162] do_one_initcall+0x250/0x870 [ 93.932701][ T5162] do_initcall_level+0x104/0x190 [ 93.938165][ T5162] do_initcalls+0x59/0xa0 [ 93.943015][ T5162] kernel_init_freeable+0x2a6/0x3e0 [ 93.948829][ T5162] kernel_init+0x1d/0x1d0 [ 93.953677][ T5162] ret_from_fork+0x514/0xb70 [ 93.958892][ T5162] ret_from_fork_asm+0x1a/0x30 [ 93.964267][ T5162] [ 93.964267][ T5162] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 93.971486][ T5162] fs_reclaim_acquire+0x71/0x100 [ 93.976941][ T5162] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 93.983284][ T5162] __alloc_skb+0x1d0/0x7d0 [ 93.988221][ T5162] __ip6_append_data+0x2a44/0x3c50 [ 93.993859][ T5162] ip6_append_data+0x10f/0x280 [ 93.999148][ T5162] rawv6_sendmsg+0x12d3/0x18e0 [ 94.004432][ T5162] ____sys_sendmsg+0x80a/0x9f0 [ 94.009989][ T5162] ___sys_sendmsg+0x2a5/0x360 [ 94.015204][ T5162] __x64_sys_sendmsg+0x1bd/0x2a0 [ 94.020687][ T5162] do_syscall_64+0x15f/0xf80 [ 94.025826][ T5162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.032247][ T5162] [ 94.032247][ T5162] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 94.039985][ T5162] __lock_acquire+0x15a5/0x2cf0 [ 94.045363][ T5162] lock_acquire+0x106/0x350 [ 94.050391][ T5162] lock_sock_nested+0x41/0x100 [ 94.055683][ T5162] inet_shutdown+0x6a/0x390 [ 94.060800][ T5162] nbd_mark_nsock_dead+0x2e9/0x560 [ 94.066488][ T5162] recv_work+0x1c2e/0x1d40 [ 94.071428][ T5162] process_scheduled_works+0xb5d/0x1860 [ 94.077502][ T5162] worker_thread+0xa53/0xfc0 [ 94.082633][ T5162] kthread+0x388/0x470 [ 94.087223][ T5162] ret_from_fork+0x514/0xb70 [ 94.092427][ T5162] ret_from_fork_asm+0x1a/0x30 [ 94.097761][ T5162] [ 94.097761][ T5162] other info that might help us debug this: [ 94.097761][ T5162] [ 94.107986][ T5162] Chain exists of: [ 94.107986][ T5162] sk_lock-AF_INET6 --> &cmd->lock --> &nsock->tx_lock [ 94.107986][ T5162] [ 94.120726][ T5162] Possible unsafe locking scenario: [ 94.120726][ T5162] [ 94.128269][ T5162] CPU0 CPU1 [ 94.133654][ T5162] ---- ---- [ 94.139030][ T5162] lock(&nsock->tx_lock); [ 94.143548][ T5162] lock(&cmd->lock); [ 94.150137][ T5162] lock(&nsock->tx_lock); [ 94.157070][ T5162] lock(sk_lock-AF_INET6); [ 94.161577][ T5162] [ 94.161577][ T5162] *** DEADLOCK *** [ 94.161577][ T5162] [ 94.169839][ T5162] 3 locks held by kworker/u9:1/5162: [ 94.175136][ T5162] #0: ffff888027319940 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 94.186383][ T5162] #1: ffffc90010217c40 ((work_completion)(&args->work)#3){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 94.198341][ T5162] #2: ffff888033f7d668 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1c19/0x1d40 [ 94.207687][ T5162] [ 94.207687][ T5162] stack backtrace: [ 94.213584][ T5162] CPU: 0 UID: 0 PID: 5162 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 94.213604][ T5162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.213615][ T5162] Workqueue: nbd0-recv recv_work [ 94.213640][ T5162] Call Trace: [ 94.213646][ T5162] [ 94.213652][ T5162] dump_stack_lvl+0xe8/0x150 [ 94.213677][ T5162] print_circular_bug+0x2e1/0x300 [ 94.213696][ T5162] check_noncircular+0x12e/0x150 [ 94.213714][ T5162] __lock_acquire+0x15a5/0x2cf0 [ 94.213741][ T5162] ? irqentry_exit+0x61a/0x700 [ 94.213760][ T5162] ? lockdep_hardirqs_on+0x7a/0x110 [ 94.213780][ T5162] ? inet_shutdown+0x6a/0x390 [ 94.213795][ T5162] lock_acquire+0x106/0x350 [ 94.213815][ T5162] ? inet_shutdown+0x6a/0x390 [ 94.213834][ T5162] lock_sock_nested+0x41/0x100 [ 94.213855][ T5162] ? inet_shutdown+0x6a/0x390 [ 94.213870][ T5162] inet_shutdown+0x6a/0x390 [ 94.213886][ T5162] nbd_mark_nsock_dead+0x2e9/0x560 [ 94.213915][ T5162] recv_work+0x1c2e/0x1d40 [ 94.213939][ T5162] ? lockdep_unlock+0x5d/0xd0 [ 94.213962][ T5162] ? __pfx_recv_work+0x10/0x10 [ 94.213983][ T5162] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 94.214001][ T5162] ? process_scheduled_works+0xa70/0x1860 [ 94.214027][ T5162] ? process_scheduled_works+0xa70/0x1860 [ 94.214048][ T5162] ? process_scheduled_works+0xa70/0x1860 [ 94.214070][ T5162] process_scheduled_works+0xb5d/0x1860 [ 94.214100][ T5162] ? __pfx_process_scheduled_works+0x10/0x10 [ 94.214123][ T5162] ? assign_work+0x3d5/0x5e0 [ 94.214145][ T5162] worker_thread+0xa53/0xfc0 [ 94.214175][ T5162] kthread+0x388/0x470 [ 94.214191][ T5162] ? __pfx_worker_thread+0x10/0x10 [ 94.214212][ T5162] ? __pfx_kthread+0x10/0x10 [ 94.214229][ T5162] ret_from_fork+0x514/0xb70 [ 94.214251][ T5162] ? __pfx_ret_from_fork+0x10/0x10 [ 94.214272][ T5162] ? __switch_to+0xc7d/0x1420 [ 94.214291][ T5162] ? __pfx_kthread+0x10/0x10 [ 94.214307][ T5162] ret_from_fork_asm+0x1a/0x30 [ 94.214326][ T5162] [ 94.586543][ T6004] syzkaller0: entered promiscuous mode [ 94.593436][ T6004] syzkaller0: entered allmulticast mode