last executing test programs: 3.313458846s ago: executing program 0 (id=32): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000280), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x0) 3.270974186s ago: executing program 0 (id=34): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18010000400100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40005}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) 3.205102617s ago: executing program 0 (id=36): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x18) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 3.180710685s ago: executing program 0 (id=37): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 3.152394652s ago: executing program 0 (id=38): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0xc, 0x0) io_uring_setup(0x5b54, &(0x7f0000000040)={0x0, 0x2df0, 0x0, 0x0, 0x2b2}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) close_range(r0, 0xffffffffffffffff, 0x0) 2.989461049s ago: executing program 0 (id=40): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x827) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) preadv2(r0, 0x0, 0x0, 0x353, 0x8, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) semop(0x0, &(0x7f0000002480), 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 2.345282535s ago: executing program 2 (id=58): sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) syz_usb_connect(0x2, 0x3d, &(0x7f0000000100)=ANY=[], 0x0) 1.709442068s ago: executing program 2 (id=67): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000280), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x0) 1.688422247s ago: executing program 2 (id=68): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @random="8e39743fe8b2"}, 0x10) close_range(r0, r0, 0x0) 1.654254654s ago: executing program 2 (id=69): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/20, 0x14}], 0x1, &(0x7f00000004c0)=""/33, 0x21}, 0xffff}], 0x1, 0x2100, 0x0) 1.365516881s ago: executing program 3 (id=70): syz_emit_ethernet(0x42, &(0x7f0000000380)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "008000", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0x4e23, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x20004080) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") 1.365295983s ago: executing program 3 (id=71): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4af, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r0}, 0x38) 1.322131547s ago: executing program 3 (id=72): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x48, 0x2c, 0xf31, 0x600, 0x25dfcbfb, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xffe0}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 1.297355726s ago: executing program 3 (id=73): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_io_uring_setup(0x254c, &(0x7f0000000000)={0x0, 0x7c87, 0x800, 0x0, 0x39}, &(0x7f0000000080), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, 0x0, 0x1) 973.069543ms ago: executing program 4 (id=76): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x9}, 0x8) 972.972214ms ago: executing program 4 (id=77): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) 941.913849ms ago: executing program 4 (id=78): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000280), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x0) 892.003508ms ago: executing program 4 (id=79): prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010300000100f1dbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, 0x0, 0x20040840) 761.453552ms ago: executing program 2 (id=80): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x800, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x8) 761.235429ms ago: executing program 2 (id=81): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109040, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) 432.482765ms ago: executing program 3 (id=82): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r1, r0, 0x0) write$UHID_INPUT(r2, &(0x7f00000001c0)={0xa, {"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", 0xe00}}, 0xffffff5c) 309.371635ms ago: executing program 3 (id=84): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$netlink(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000100)="b8", 0x1, 0x2000c841, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000003c0)={0x0, 0x6}, &(0x7f0000000400)=0x8) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0x5) read$FUSE(r2, &(0x7f0000003b80)={0x2020}, 0x2020) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000ffb000/0x1000)=nil) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r7) 252.637287ms ago: executing program 1 (id=87): sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)={0x134, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x72, 0x2a, [@chsw_timing={0x68, 0x4, {0x2, 0x5}}, @random_vendor={0xdd, 0x5e, "8a18de03b84fbbea9d9aabcaf1ff4062be18b6f206dd59c85f7c76c8c0d046288ceafa1ffd2ce6f6898a82ef08e814780d14c0b86901d3dac99031aced0d6d536c02c3d4edd183d39297b0a32b3b9c9f181d68751c5694f96ffdd36cd1e2"}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x2a, 0x2a, [@random_vendor={0xdd, 0x6, "4fc431f3db54"}, @ibss={0x6, 0x2, 0x3}, @mic={0x8c, 0x18, {0x956, "5079c53d6fed", @long="ae050c8e51fbb1adde8f60df14eac037"}}]}, @NL80211_ATTR_IE={0x66, 0x2a, [@ht={0x2d, 0x1a, {0x10, 0x3, 0x3, 0x0, {0x6, 0xf, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x59, 0x30}}, @ibss={0x6, 0x2, 0x5}, @mesh_id={0x72, 0x6}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0xa0, 0x40}}, @chsw_timing={0x68, 0x4, {0x7, 0xfffb}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x6, 0x3, @broadcast, 0x4, @value, 0x6, 0x5, @broadcast, 0x9}}, @ibss={0x6, 0x2, 0xd86}]}, @NL80211_ATTR_SSID={0x11, 0x34, @random="71919b6d1062a06c042c1ce881"}]}, 0x134}, 0x1, 0x0, 0x0, 0x48001}, 0x800) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b", 0x74}], 0x1, &(0x7f0000000380)}], 0x1, 0x850) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB], 0x6f4}}, 0x0) 189.431946ms ago: executing program 1 (id=88): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 189.237661ms ago: executing program 1 (id=89): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000280), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x0) 173.957853ms ago: executing program 1 (id=90): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x5452, &(0x7f0000000a00)={'vlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}) recvmsg$unix(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r2) 106.303378ms ago: executing program 1 (id=91): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 49.325466ms ago: executing program 1 (id=92): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_io_uring_setup(0x254c, &(0x7f0000000000)={0x0, 0x7c87, 0x800, 0x0, 0x39}, &(0x7f0000000080), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, 0x0, 0x1) 40.625159ms ago: executing program 4 (id=93): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x0, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x542) 0s ago: executing program 4 (id=94): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.123' (ED25519) to the list of known hosts. [ 29.341519][ T6531] cgroup: Unknown subsys name 'net' [ 29.454608][ T6531] cgroup: Unknown subsys name 'cpuset' [ 29.456487][ T6531] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.613492][ T6531] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.738580][ T6555] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.740657][ T6555] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.742903][ T6558] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.743518][ T6553] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.743867][ T6553] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.744263][ T6553] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.744485][ T6553] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.744887][ T6553] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.745104][ T6553] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.745529][ T6553] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.746059][ T6553] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.746880][ T6553] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.747492][ T6553] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.747660][ T6553] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.747845][ T6553] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.748216][ T6553] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.748404][ T6553] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.748876][ T6553] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.756194][ T6553] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.756400][ T6553] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.757425][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.759694][ T6553] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.761201][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.762269][ T6553] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.763428][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.869936][ T6545] chnl_net:caif_netlink_parms(): no params data found [ 30.925141][ T6545] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.926808][ T6545] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.928180][ T6545] bridge_slave_0: entered allmulticast mode [ 30.929732][ T6545] bridge_slave_0: entered promiscuous mode [ 30.932196][ T6545] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.932245][ T6545] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.932303][ T6545] bridge_slave_1: entered allmulticast mode [ 30.932750][ T6545] bridge_slave_1: entered promiscuous mode [ 30.956690][ T6545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.968857][ T6545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.982819][ T6545] team0: Port device team_slave_0 added [ 30.991448][ T6545] team0: Port device team_slave_1 added [ 30.997728][ T6544] chnl_net:caif_netlink_parms(): no params data found [ 31.011644][ T6542] chnl_net:caif_netlink_parms(): no params data found [ 31.020958][ T6545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.022171][ T6545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.023391][ T6545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.024461][ T6545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.024469][ T6545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.024492][ T6545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.058240][ T6545] hsr_slave_0: entered promiscuous mode [ 31.058586][ T6545] hsr_slave_1: entered promiscuous mode [ 31.060243][ T6543] chnl_net:caif_netlink_parms(): no params data found [ 31.099342][ T6544] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.100791][ T6544] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.102226][ T6544] bridge_slave_0: entered allmulticast mode [ 31.104295][ T6544] bridge_slave_0: entered promiscuous mode [ 31.112983][ T6541] chnl_net:caif_netlink_parms(): no params data found [ 31.118355][ T6544] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.118637][ T6544] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.118706][ T6544] bridge_slave_1: entered allmulticast mode [ 31.119150][ T6544] bridge_slave_1: entered promiscuous mode [ 31.142196][ T6544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.144576][ T6544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.146367][ T6542] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.147687][ T6542] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.149034][ T6542] bridge_slave_0: entered allmulticast mode [ 31.150436][ T6542] bridge_slave_0: entered promiscuous mode [ 31.162129][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.163225][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.163293][ T6542] bridge_slave_1: entered allmulticast mode [ 31.163759][ T6542] bridge_slave_1: entered promiscuous mode [ 31.188693][ T6543] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.190124][ T6543] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.191465][ T6543] bridge_slave_0: entered allmulticast mode [ 31.192925][ T6543] bridge_slave_0: entered promiscuous mode [ 31.195365][ T6544] team0: Port device team_slave_0 added [ 31.196411][ T6544] team0: Port device team_slave_1 added [ 31.198301][ T6542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.211395][ T6543] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.211472][ T6543] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.211864][ T6543] bridge_slave_1: entered allmulticast mode [ 31.212318][ T6543] bridge_slave_1: entered promiscuous mode [ 31.222786][ T6542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.229341][ T6541] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.229400][ T6541] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.229484][ T6541] bridge_slave_0: entered allmulticast mode [ 31.229914][ T6541] bridge_slave_0: entered promiscuous mode [ 31.230579][ T6541] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.230604][ T6541] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.230663][ T6541] bridge_slave_1: entered allmulticast mode [ 31.231077][ T6541] bridge_slave_1: entered promiscuous mode [ 31.253473][ T6542] team0: Port device team_slave_0 added [ 31.263672][ T6543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.265938][ T6544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.265961][ T6544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.265977][ T6544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.266519][ T6544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.266525][ T6544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.266538][ T6544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.276895][ T6542] team0: Port device team_slave_1 added [ 31.286720][ T6541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.287694][ T6541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.294865][ T6543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.306687][ T6542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.306709][ T6542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.306724][ T6542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.307557][ T6542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.307564][ T6542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.307577][ T6542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.329702][ T6544] hsr_slave_0: entered promiscuous mode [ 31.330005][ T6544] hsr_slave_1: entered promiscuous mode [ 31.330193][ T6544] debugfs: 'hsr0' already exists in 'hsr' [ 31.330238][ T6544] Cannot create hsr debugfs directory [ 31.342013][ T6541] team0: Port device team_slave_0 added [ 31.342882][ T6541] team0: Port device team_slave_1 added [ 31.343793][ T6543] team0: Port device team_slave_0 added [ 31.349219][ T6542] hsr_slave_0: entered promiscuous mode [ 31.349520][ T6542] hsr_slave_1: entered promiscuous mode [ 31.349705][ T6542] debugfs: 'hsr0' already exists in 'hsr' [ 31.349714][ T6542] Cannot create hsr debugfs directory [ 31.354313][ T6543] team0: Port device team_slave_1 added [ 31.377443][ T6545] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.380324][ T6545] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.382340][ T6541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.382368][ T6541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.382393][ T6541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.383121][ T6541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.383130][ T6541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.383143][ T6541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.385837][ T6543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.385847][ T6543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.385857][ T6543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.406856][ T6545] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.409477][ T6543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.409506][ T6543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.409525][ T6543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.411548][ T6545] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.457357][ T6543] hsr_slave_0: entered promiscuous mode [ 31.457667][ T6543] hsr_slave_1: entered promiscuous mode [ 31.457830][ T6543] debugfs: 'hsr0' already exists in 'hsr' [ 31.457840][ T6543] Cannot create hsr debugfs directory [ 31.468546][ T6541] hsr_slave_0: entered promiscuous mode [ 31.469938][ T6541] hsr_slave_1: entered promiscuous mode [ 31.471126][ T6541] debugfs: 'hsr0' already exists in 'hsr' [ 31.472080][ T6541] Cannot create hsr debugfs directory [ 31.477636][ T6545] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.477679][ T6545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.477836][ T6545] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.477860][ T6545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.508042][ T6544] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.510462][ T6544] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.513046][ T6544] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.516732][ T6544] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.551053][ T6544] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.551093][ T6544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.551153][ T6544] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.551177][ T6544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.580962][ T6542] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.588770][ T6542] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.591586][ T6542] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.592892][ T6542] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.610526][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.610578][ T6542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.610656][ T6542] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.610683][ T6542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.631752][ T6544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.636080][ T6543] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.640811][ T6544] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.642865][ T6543] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.647763][ T6543] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.650135][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.651516][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.656808][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.658388][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.660020][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.661987][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.672578][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.672625][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.680038][ T6545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.680645][ T6543] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.690849][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.690891][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.700639][ T6542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.717430][ T6545] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.719710][ T6541] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.722367][ T6541] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.730381][ T6542] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.732067][ T6541] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.739242][ T1784] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.739281][ T1784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.746070][ T6541] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.751954][ T1784] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.752003][ T1784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.756988][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.757026][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.778140][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.778176][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.828533][ T6541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.837677][ T6542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.840896][ T6543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.850815][ T6541] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.871764][ T6543] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.878597][ T789] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.878647][ T789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.882372][ T789] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.882423][ T789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.890859][ T789] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.890902][ T789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.892730][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.892748][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.901273][ T6544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.908240][ T6543] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.909078][ T6543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.916011][ T6542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.925628][ T6545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.939327][ T6541] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.939373][ T6541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.977801][ T6545] veth0_vlan: entered promiscuous mode [ 31.982776][ T6542] veth0_vlan: entered promiscuous mode [ 31.990466][ T6544] veth0_vlan: entered promiscuous mode [ 31.994095][ T6544] veth1_vlan: entered promiscuous mode [ 31.999280][ T6545] veth1_vlan: entered promiscuous mode [ 32.006891][ T6542] veth1_vlan: entered promiscuous mode [ 32.013931][ T6544] veth0_macvtap: entered promiscuous mode [ 32.016094][ T6544] veth1_macvtap: entered promiscuous mode [ 32.020849][ T6544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.028347][ T6543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.035008][ T6544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.038052][ T789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.038159][ T789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.038180][ T789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.038193][ T789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.056276][ T6541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.058751][ T6542] veth0_macvtap: entered promiscuous mode [ 32.059750][ T6542] veth1_macvtap: entered promiscuous mode [ 32.062824][ T6542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.069600][ T6542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.092008][ T6545] veth0_macvtap: entered promiscuous mode [ 32.096681][ T5127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.096714][ T5127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.109747][ T15] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.110431][ T15] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.110456][ T15] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.110474][ T15] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.110798][ T6545] veth1_macvtap: entered promiscuous mode [ 32.122644][ T6543] veth0_vlan: entered promiscuous mode [ 32.125612][ T6545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.133713][ T1784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.133738][ T1784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.145813][ T6545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.151675][ T6543] veth1_vlan: entered promiscuous mode [ 32.156238][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.156293][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.156326][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.156344][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.197485][ T5127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.197516][ T5127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.207826][ T6544] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.238931][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.238964][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.252680][ T6543] veth0_macvtap: entered promiscuous mode [ 32.268013][ T6541] veth0_vlan: entered promiscuous mode [ 32.272869][ T1784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.272902][ T1784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.277911][ T6543] veth1_macvtap: entered promiscuous mode [ 32.290387][ T6541] veth1_vlan: entered promiscuous mode [ 32.299823][ T6658] xt_l2tp: wrong L2TP version: 1 [ 32.308505][ T789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.308536][ T789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.312174][ T6660] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 32.316311][ T6660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.318747][ T6660] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 32.325828][ T6541] veth0_macvtap: entered promiscuous mode [ 32.330233][ T6541] veth1_macvtap: entered promiscuous mode [ 32.334646][ T6541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.336975][ T6541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.339863][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.339917][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.339950][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.339974][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.351867][ T31] audit: type=1326 audit(32.320:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6659 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5b3a8 code=0x7ffc0000 [ 32.355919][ T31] audit: type=1326 audit(32.320:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6659 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5b3a8 code=0x7ffc0000 [ 32.358943][ T6543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.359853][ T6543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.361798][ T31] audit: type=1326 audit(32.330:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6659 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8eb5b3a8 code=0x7ffc0000 [ 32.365434][ T31] audit: type=1326 audit(32.340:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6659 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5b3a8 code=0x7ffc0000 [ 32.368820][ T31] audit: type=1326 audit(32.340:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6659 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5b3a8 code=0x7ffc0000 [ 32.379422][ T31] audit: type=1326 audit(32.350:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6659 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8eb5b3a8 code=0x7ffc0000 [ 32.379462][ T31] audit: type=1326 audit(32.350:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6659 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5b3a8 code=0x7ffc0000 [ 32.379496][ T31] audit: type=1326 audit(32.350:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6659 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5b3a8 code=0x7ffc0000 [ 32.379514][ T31] audit: type=1326 audit(32.350:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6659 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8eb5b3a8 code=0x7ffc0000 [ 32.379530][ T31] audit: type=1326 audit(32.350:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6659 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5b3a8 code=0x7ffc0000 [ 32.386732][ T1784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.386769][ T1784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.386786][ T1784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.386800][ T1784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.399951][ T6660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.399978][ T6660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.400945][ T6660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.400956][ T6660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 32.408435][ T6660] bond0: (slave batadv0): Releasing backup interface [ 32.414745][ T6661] netlink: 'syz.3.6': attribute type 13 has an invalid length. [ 32.478259][ T6661] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.478688][ T6661] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.506384][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 32.705182][ T6661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.708577][ T6661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.823508][ T6555] Bluetooth: hci0: command tx timeout [ 32.833628][ T6555] Bluetooth: hci2: command tx timeout [ 32.833645][ T6553] Bluetooth: hci4: command tx timeout [ 32.833895][ T6547] Bluetooth: hci1: command tx timeout [ 32.833905][ T6553] Bluetooth: hci3: command tx timeout [ 33.021348][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.030388][ T6666] bridge_slave_0 (unregistering): left allmulticast mode [ 33.030415][ T6666] bridge_slave_0 (unregistering): left promiscuous mode [ 33.030464][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.040466][ T15] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.049718][ T15] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.049956][ T15] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.050312][ T15] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.080751][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.080780][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.124704][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.124735][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.124950][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.124970][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.164436][ T258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.164469][ T258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.209750][ T6672] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8'. [ 33.210454][ T6672] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8'. [ 33.317714][ T6676] tipc: Started in network mode [ 33.318669][ T6676] tipc: Node identity ea1b62548c5, cluster identity 4711 [ 33.320180][ T6676] tipc: Enabled bearer , priority 0 [ 33.325519][ T6674] tipc: Resetting bearer [ 33.522439][ T6683] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11'. [ 33.701418][ T6674] tipc: Disabling bearer [ 33.742045][ T6683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 33.775325][ T6683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 33.799290][ T6683] bond0 (unregistering): Released all slaves [ 33.822336][ T6689] netlink: 'syz.2.13': attribute type 3 has an invalid length. [ 34.081708][ T6678] Set syz1 is full, maxelem 65536 reached [ 34.132796][ T6702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.135341][ T6702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.328928][ T6707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20'. [ 34.352003][ T6707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20'. [ 34.386152][ T6707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20'. [ 34.695090][ T6728] netlink: '+}[@': attribute type 13 has an invalid length. [ 34.746763][ T6738] netlink: 'syz.3.31': attribute type 10 has an invalid length. [ 34.791780][ T6728] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.791918][ T6728] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.903300][ T6547] Bluetooth: hci3: command tx timeout [ 34.903574][ T52] Bluetooth: hci4: command tx timeout [ 34.905290][ T6555] Bluetooth: hci2: command tx timeout [ 34.913202][ T6547] Bluetooth: hci0: command tx timeout [ 34.914919][ T6555] Bluetooth: hci1: command tx timeout [ 34.932334][ T6742] netlink: 14 bytes leftover after parsing attributes in process `syz.2.33'. [ 34.975901][ T6756] loop4: detected capacity change from 0 to 512 [ 34.977762][ T6756] ======================================================= [ 34.977762][ T6756] WARNING: The mand mount option has been deprecated and [ 34.977762][ T6756] and is ignored by this kernel. Remove the mand [ 34.977762][ T6756] option from the mount to silence this warning. [ 34.977762][ T6756] ======================================================= [ 34.984983][ T6756] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 34.995870][ T6756] Zero length message leads to an empty skb [ 35.031838][ T6728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.038834][ T6728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.142441][ T6767] loop4: detected capacity change from 0 to 512 [ 35.164637][ T6767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.181990][ T6541] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.305965][ T6738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.307889][ T6738] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 35.312819][ T6740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.313307][ T6554] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.323030][ T6740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.336455][ T6740] bond0: (slave batadv0): Releasing backup interface [ 35.381997][ T6742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.395109][ T6742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.414573][ T6742] bond0 (unregistering): Released all slaves [ 35.420901][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.426151][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.427833][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.443426][ T6554] usb 1-1: device descriptor read/64, error -71 [ 35.470714][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.588947][ T6794] loop2: detected capacity change from 0 to 1024 [ 35.608918][ T6794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.629603][ T6545] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.683225][ T6554] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 35.798092][ T6806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.798269][ T6806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.808897][ T6814] netlink: 80 bytes leftover after parsing attributes in process `syz.3.61'. [ 35.813273][ T6554] usb 1-1: device descriptor read/64, error -71 [ 35.923424][ T6554] usb usb1-port1: attempt power cycle [ 36.163947][ T6820] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.63'. [ 36.243999][ T6826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.253824][ T6826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.265186][ T6554] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 36.284821][ T6554] usb 1-1: device descriptor read/8, error -71 [ 36.417175][ T6833] veth0: entered promiscuous mode [ 36.417676][ T6833] veth0: left promiscuous mode [ 36.533227][ T6554] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 36.553703][ T6554] usb 1-1: device descriptor read/8, error -71 [ 36.673186][ T6554] usb usb1-port1: unable to enumerate USB device [ 36.699501][ T6837] loop3: detected capacity change from 0 to 512 [ 36.705952][ T6837] EXT4-fs warning (device loop3): ext4_xattr_inode_get:556: inode #11: comm syz.3.70: EA inode hash validation failed [ 36.708527][ T6837] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.711555][ T6837] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.70: corrupted inode contents [ 36.713283][ T6837] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #15: comm syz.3.70: mark_inode_dirty error [ 36.713581][ T6837] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.70: corrupted inode contents [ 36.714054][ T6837] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #15: comm syz.3.70: mark_inode_dirty error [ 36.714203][ T6837] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #15: comm syz.3.70: mark inode dirty (error -117) [ 36.714481][ T6837] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 36.714645][ T6837] EXT4-fs (loop3): 1 orphan inode deleted [ 36.715084][ T6837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.730718][ T6544] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.983418][ T6547] Bluetooth: hci0: command tx timeout [ 36.983458][ T6547] Bluetooth: hci4: command tx timeout [ 36.983490][ T6547] Bluetooth: hci2: command tx timeout [ 36.983511][ T6547] Bluetooth: hci3: command tx timeout [ 36.987298][ T6555] Bluetooth: hci1: command tx timeout [ 37.127583][ T6554] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 37.129711][ T6554] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 37.129765][ T6554] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 37.135497][ T6554] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 37.170852][ T6856] fido_id[6856]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 37.334183][ T15] Bluetooth: hci5: Frame reassembly failed (-84) [ 37.751203][ T6873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.753252][ T6873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.791886][ T6875] loop1: detected capacity change from 0 to 512 [ 37.805861][ T6875] EXT4-fs (loop1): failed to initialize system zone (-117) [ 37.807423][ T6875] EXT4-fs (loop1): mount failed [ 37.851067][ T6880] __nla_validate_parse: 1 callbacks suppressed [ 37.852375][ T6880] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.87'. [ 37.872082][ T6882] netlink: 'syz.1.88': attribute type 4 has an invalid length. [ 37.874976][ T6882] netlink: 'syz.1.88': attribute type 4 has an invalid length. [ 38.074803][ T6893] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 38.103709][ T6896] loop4: detected capacity change from 0 to 512 [ 38.117190][ T6896] [ 38.117584][ T6896] ====================================================== [ 38.118588][ T6896] WARNING: possible circular locking dependency detected [ 38.119579][ T6896] syzkaller #0 Not tainted [ 38.120209][ T6896] ------------------------------------------------------ [ 38.121321][ T6896] syz.4.94/6896 is trying to acquire lock: [ 38.122312][ T6896] ffff0000c2d70b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x150/0x2a0 [ 38.123984][ T6896] [ 38.123984][ T6896] but task is already holding lock: [ 38.125151][ T6896] ffff0000f803d6d8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x358/0x6fc [ 38.126652][ T6896] [ 38.126652][ T6896] which lock already depends on the new lock. [ 38.126652][ T6896] [ 38.128390][ T6896] [ 38.128390][ T6896] the existing dependency chain (in reverse order) is: [ 38.129924][ T6896] [ 38.129924][ T6896] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 38.131177][ T6896] down_write+0x50/0xc0 [ 38.131989][ T6896] ext4_xattr_set_handle+0x11c/0x1260 [ 38.132857][ T6896] ext4_initxattrs+0xa4/0x11c [ 38.133690][ T6896] security_inode_init_security+0x6dc/0x7f4 [ 38.134680][ T6896] ext4_init_security+0x44/0x58 [ 38.135527][ T6896] __ext4_new_inode+0x27f4/0x3190 [ 38.136381][ T6896] ext4_create+0x1f8/0x3fc [ 38.137137][ T6896] path_openat+0x12d8/0x2c40 [ 38.137977][ T6896] do_filp_open+0x18c/0x36c [ 38.138843][ T6896] do_sys_openat2+0x11c/0x1b4 [ 38.139585][ T6896] __arm64_sys_openat+0x120/0x158 [ 38.140371][ T6896] invoke_syscall+0x98/0x254 [ 38.141101][ T6896] el0_svc_common+0x130/0x23c [ 38.141806][ T6896] do_el0_svc+0x48/0x58 [ 38.142475][ T6896] el0_svc+0x5c/0x254 [ 38.143158][ T6896] el0t_64_sync_handler+0x84/0x12c [ 38.143963][ T6896] el0t_64_sync+0x198/0x19c [ 38.144646][ T6896] [ 38.144646][ T6896] -> #1 (jbd2_handle){++++}-{0:0}: [ 38.145701][ T6896] start_this_handle+0xe74/0x10dc [ 38.146485][ T6896] jbd2__journal_start+0x288/0x51c [ 38.147309][ T6896] __ext4_journal_start_sb+0x378/0x88c [ 38.148144][ T6896] ext4_do_writepages+0xb94/0x39b4 [ 38.148953][ T6896] ext4_writepages+0x178/0x2a0 [ 38.149721][ T6896] do_writepages+0x270/0x468 [ 38.150583][ T6896] file_write_and_wait_range+0x1d0/0x2c4 [ 38.151589][ T6896] ext4_sync_file+0x274/0xb44 [ 38.152445][ T6896] __arm64_sys_fsync+0x170/0x1d4 [ 38.153307][ T6896] invoke_syscall+0x98/0x254 [ 38.154061][ T6896] el0_svc_common+0x130/0x23c [ 38.154833][ T6896] do_el0_svc+0x48/0x58 [ 38.155599][ T6896] el0_svc+0x5c/0x254 [ 38.156320][ T6896] el0t_64_sync_handler+0x84/0x12c [ 38.157193][ T6896] el0t_64_sync+0x198/0x19c [ 38.158039][ T6896] [ 38.158039][ T6896] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 38.159373][ T6896] __lock_acquire+0x1774/0x30a4 [ 38.160189][ T6896] lock_acquire+0x14c/0x2e0 [ 38.161003][ T6896] percpu_down_read_internal+0x5c/0x298 [ 38.162014][ T6896] ext4_writepages+0x150/0x2a0 [ 38.162783][ T6896] do_writepages+0x270/0x468 [ 38.163513][ T6896] __writeback_single_inode+0x15c/0x13e8 [ 38.164444][ T6896] writeback_single_inode+0x18c/0x54c [ 38.165333][ T6896] write_inode_now+0x13c/0x1a4 [ 38.166180][ T6896] iput+0x570/0x83c [ 38.166904][ T6896] ext4_xattr_block_set+0x13dc/0x24bc [ 38.167876][ T6896] ext4_expand_extra_isize_ea+0xeb4/0x182c [ 38.168867][ T6896] __ext4_expand_extra_isize+0x2a0/0x37c [ 38.169819][ T6896] __ext4_mark_inode_dirty+0x3c0/0x6fc [ 38.170747][ T6896] ext4_evict_inode+0x930/0x1084 [ 38.171624][ T6896] evict+0x414/0x928 [ 38.172283][ T6896] iput+0x6e4/0x83c [ 38.172987][ T6896] ext4_process_orphan+0x240/0x2b4 [ 38.173871][ T6896] ext4_orphan_cleanup+0x930/0x107c [ 38.174749][ T6896] ext4_fill_super+0x4724/0x4ea4 [ 38.175589][ T6896] get_tree_bdev_flags+0x360/0x414 [ 38.176467][ T6896] get_tree_bdev+0x2c/0x3c [ 38.177284][ T6896] ext4_get_tree+0x28/0x38 [ 38.178061][ T6896] vfs_get_tree+0x90/0x28c [ 38.178841][ T6896] do_new_mount+0x278/0x7f4 [ 38.179705][ T6896] path_mount+0x5b4/0xde0 [ 38.180542][ T6896] __arm64_sys_mount+0x3e8/0x468 [ 38.181500][ T6896] invoke_syscall+0x98/0x254 [ 38.182349][ T6896] el0_svc_common+0x130/0x23c [ 38.183258][ T6896] do_el0_svc+0x48/0x58 [ 38.183994][ T6896] el0_svc+0x5c/0x254 [ 38.184760][ T6896] el0t_64_sync_handler+0x84/0x12c [ 38.185655][ T6896] el0t_64_sync+0x198/0x19c [ 38.186450][ T6896] [ 38.186450][ T6896] other info that might help us debug this: [ 38.186450][ T6896] [ 38.188070][ T6896] Chain exists of: [ 38.188070][ T6896] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 38.188070][ T6896] [ 38.190222][ T6896] Possible unsafe locking scenario: [ 38.190222][ T6896] [ 38.191452][ T6896] CPU0 CPU1 [ 38.192356][ T6896] ---- ---- [ 38.193236][ T6896] lock(&ei->xattr_sem); [ 38.193890][ T6896] lock(jbd2_handle); [ 38.194864][ T6896] lock(&ei->xattr_sem); [ 38.195952][ T6896] rlock(&sbi->s_writepages_rwsem); [ 38.196802][ T6896] [ 38.196802][ T6896] *** DEADLOCK *** [ 38.196802][ T6896] [ 38.198075][ T6896] 3 locks held by syz.4.94/6896: [ 38.198892][ T6896] #0: ffff0000c2d720e0 (&type->s_umount_key#26/1){+.+.}-{4:4}, at: alloc_super+0x1a0/0x80c [ 38.200435][ T6896] #1: ffff0000c2d72618 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b0/0x1084 [ 38.202007][ T6896] #2: ffff0000f803d6d8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x358/0x6fc [ 38.203637][ T6896] [ 38.203637][ T6896] stack backtrace: [ 38.204599][ T6896] CPU: 0 UID: 0 PID: 6896 Comm: syz.4.94 Not tainted syzkaller #0 PREEMPT [ 38.205943][ T6896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 38.207459][ T6896] Call trace: [ 38.207996][ T6896] show_stack+0x2c/0x3c (C) [ 38.208734][ T6896] __dump_stack+0x30/0x40 [ 38.209453][ T6896] dump_stack_lvl+0xd8/0x12c [ 38.210233][ T6896] dump_stack+0x1c/0x28 [ 38.210929][ T6896] print_circular_bug+0x324/0x32c [ 38.211749][ T6896] check_noncircular+0x154/0x174 [ 38.212582][ T6896] __lock_acquire+0x1774/0x30a4 [ 38.213382][ T6896] lock_acquire+0x14c/0x2e0 [ 38.214107][ T6896] percpu_down_read_internal+0x5c/0x298 [ 38.214932][ T6896] ext4_writepages+0x150/0x2a0 [ 38.215647][ T6896] do_writepages+0x270/0x468 [ 38.216292][ T6896] __writeback_single_inode+0x15c/0x13e8 [ 38.217212][ T6896] writeback_single_inode+0x18c/0x54c [ 38.218010][ T6896] write_inode_now+0x13c/0x1a4 [ 38.218752][ T6896] iput+0x570/0x83c [ 38.219362][ T6896] ext4_xattr_block_set+0x13dc/0x24bc [ 38.220273][ T6896] ext4_expand_extra_isize_ea+0xeb4/0x182c [ 38.221224][ T6896] __ext4_expand_extra_isize+0x2a0/0x37c [ 38.222096][ T6896] __ext4_mark_inode_dirty+0x3c0/0x6fc [ 38.223039][ T6896] ext4_evict_inode+0x930/0x1084 [ 38.223874][ T6896] evict+0x414/0x928 [ 38.224522][ T6896] iput+0x6e4/0x83c [ 38.225116][ T6896] ext4_process_orphan+0x240/0x2b4 [ 38.225886][ T6896] ext4_orphan_cleanup+0x930/0x107c [ 38.226711][ T6896] ext4_fill_super+0x4724/0x4ea4 [ 38.227537][ T6896] get_tree_bdev_flags+0x360/0x414 [ 38.228382][ T6896] get_tree_bdev+0x2c/0x3c [ 38.229120][ T6896] ext4_get_tree+0x28/0x38 [ 38.229866][ T6896] vfs_get_tree+0x90/0x28c [ 38.230564][ T6896] do_new_mount+0x278/0x7f4 [ 38.231323][ T6896] path_mount+0x5b4/0xde0 [ 38.232027][ T6896] __arm64_sys_mount+0x3e8/0x468 [ 38.232836][ T6896] invoke_syscall+0x98/0x254 [ 38.233620][ T6896] el0_svc_common+0x130/0x23c [ 38.234361][ T6896] do_el0_svc+0x48/0x58 [ 38.235010][ T6896] el0_svc+0x5c/0x254 [ 38.235661][ T6896] el0t_64_sync_handler+0x84/0x12c [ 38.236426][ T6896] el0t_64_sync+0x198/0x19c [ 38.244697][ T6896] ------------[ cut here ]------------ [ 38.244719][ T6896] EA inode 11 i_nlink=2 [ 38.244812][ T6896] WARNING: CPU: 1 PID: 6896 at fs/ext4/xattr.c:1053 ext4_xattr_inode_update_ref+0x444/0x488 [ 38.247967][ T6896] Modules linked in: [ 38.248577][ T6896] CPU: 1 UID: 0 PID: 6896 Comm: syz.4.94 Not tainted syzkaller #0 PREEMPT [ 38.249930][ T6896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 38.251436][ T6896] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 38.252661][ T6896] pc : ext4_xattr_inode_update_ref+0x444/0x488 [ 38.253562][ T6896] lr : ext4_xattr_inode_update_ref+0x444/0x488 [ 38.254475][ T6896] sp : ffff8000a40e6dc0 [ 38.255117][ T6896] x29: ffff8000a40e6e50 x28: 0000000000000000 x27: 1fffe0001ecd01c3 [ 38.256417][ T6896] x26: dfff800000000000 x25: ffff8000a40e6dc0 x24: ffff70001481cdb8 [ 38.257793][ T6896] x23: ffff800092ef2000 x22: ffff0000f6680c68 x21: 0000000000000002 [ 38.259126][ T6896] x20: 0000000000000001 x19: ffff0000f6680c28 x18: 1fffe00033776488 [ 38.260427][ T6896] x17: ffff80008f85e000 x16: ffff80008b065bd0 x15: 0000000000000001 [ 38.261740][ T6896] x14: 1ffff0001481cd28 x13: 0000000000000000 x12: 0000000000000000 [ 38.263020][ T6896] x11: 0000000000080000 x10: 000000000005cac8 x9 : f221557ca6831000 [ 38.264288][ T6896] x8 : f221557ca6831000 x7 : 0000000000000000 x6 : ffff80008056636c [ 38.265578][ T6896] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000807d446c [ 38.266958][ T6896] x2 : 0000000000000002 x1 : 0000000100000000 x0 : 0000000000000000 [ 38.268308][ T6896] Call trace: [ 38.268837][ T6896] ext4_xattr_inode_update_ref+0x444/0x488 (P) [ 38.269762][ T6896] ext4_xattr_set_entry+0x928/0x15c0 [ 38.270638][ T6896] ext4_xattr_ibody_set+0x204/0x5fc [ 38.271478][ T6896] ext4_expand_extra_isize_ea+0xefc/0x182c [ 38.272423][ T6896] __ext4_expand_extra_isize+0x2a0/0x37c [ 38.273348][ T6896] __ext4_mark_inode_dirty+0x3c0/0x6fc [ 38.274215][ T6896] ext4_evict_inode+0x930/0x1084 [ 38.275033][ T6896] evict+0x414/0x928 [ 38.275656][ T6896] iput+0x6e4/0x83c [ 38.276280][ T6896] ext4_process_orphan+0x240/0x2b4 [ 38.277077][ T6896] ext4_orphan_cleanup+0x930/0x107c [ 38.277911][ T6896] ext4_fill_super+0x4724/0x4ea4 [ 38.278717][ T6896] get_tree_bdev_flags+0x360/0x414 [ 38.279510][ T6896] get_tree_bdev+0x2c/0x3c [ 38.280197][ T6896] ext4_get_tree+0x28/0x38 [ 38.280858][ T6896] vfs_get_tree+0x90/0x28c [ 38.281496][ T6896] do_new_mount+0x278/0x7f4 [ 38.282214][ T6896] path_mount+0x5b4/0xde0 [ 38.282967][ T6896] __arm64_sys_mount+0x3e8/0x468 [ 38.283879][ T6896] invoke_syscall+0x98/0x254 [ 38.284650][ T6896] el0_svc_common+0x130/0x23c [ 38.285388][ T6896] do_el0_svc+0x48/0x58 [ 38.286054][ T6896] el0_svc+0x5c/0x254 [ 38.286722][ T6896] el0t_64_sync_handler+0x84/0x12c [ 38.287587][ T6896] el0t_64_sync+0x198/0x19c [ 38.288275][ T6896] irq event stamp: 2435 [ 38.288911][ T6896] hardirqs last enabled at (2435): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 38.290542][ T6896] hardirqs last disabled at (2434): [] _raw_spin_lock_irqsave+0x2c/0x7c [ 38.292052][ T6896] softirqs last enabled at (1734): [] local_bh_enable+0x10/0x34 [ 38.293489][ T6896] softirqs last disabled at (1732): [] local_bh_disable+0x10/0x34 [ 38.295020][ T6896] ---[ end trace 0000000000000000 ]--- [ 38.297986][ T6896] EXT4-fs (loop4): 1 orphan inode deleted [ 38.298168][ T6896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.306930][ T6541] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.073361][ T6547] Bluetooth: hci3: command tx timeout [ 39.073370][ T6553] Bluetooth: hci2: command tx timeout [ 39.073392][ T6547] Bluetooth: hci4: command tx timeout [ 39.073404][ T6547] Bluetooth: hci0: command tx timeout [ 39.073425][ T52] Bluetooth: hci1: command tx timeout [ 39.383136][ T6553] Bluetooth: hci5: command 0x1003 tx timeout [ 39.383190][ T6555] Bluetooth: hci5: Opcode 0x1003 failed: -110