last executing test programs: 543.125135ms ago: executing program 1 (id=5): setns(0xc9, 0x0) r0 = socket(0x1f, 0x3, 0x1) bind(r0, &(0x7f0000000300)=@generic={0x1f, "ffff0300"}, 0x6) write(r0, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) r1 = socket(0x1f, 0x5, 0x8) setsockopt(r1, 0x112, 0x7, 0x0, 0x0) 542.976654ms ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f0000001240)="d08908650d2277752b4a3739e546738d772937af35eacb91ffb40a9a68517e24fa2c8a3b6aa0b72db5365ee0942eb7f133dc0a395491bb95b339d8e41d21787a8e83c362a07e74198b7a512220bbab4d4388cf2cc9380ef046be806d7e3c7422e43e3b39d94bef57634b702468e60c29029eba5a05a3ad6b744e211435a90dfffe873e1fd4b6e5e93d8abf51f3e70566b3d638e6cf0d61298699dcc0763a9438d05b50604d21eabce341b22b119cef38064f4a93fdd724e25d76f8fe3c0e9419b7db6a3dfaab481e076486349f767b63e9b00e5553e308d0c535734cde604ee4958d84cc5cb07a01ce24db10aa26da756891443d86f89479da5a826460f62144c7866eaadc2a7b7ffb7fd7fd7752d30bccc57075c5a9a484e4eb93c54b1bb07b588adfdccad44691899f3d6970aa668258cc9f16343abc30c862d80bbfac5840e1f505d9dbdd952355f59d4984dad7c3572999a02d6cddde04f2af5114fd110d62d0f655dc9120424db6cba753cad330ad192bb6466492fc148c1ebfe2144e708c405d4c5eeac28ea69ca11ff1d606af8d1cf282098de8260548f19465a292b77c1ec178f7f4160b35b593fb684b5c5872c0debbe3790e62c1c0b2252d51b04f9f5133585dc4f1c1638c23c7376ab619319d4cb7ac37116a943bc7d9a2fe696d7deebc39d454789bcdacb948402b9c6fb1298e34b67d1765caf51f00fe253520d7ce80bc8c04e4067156baf4a679855b2e2489a838eb3320cbf6d82cd1b71812fd4e65cca2f1a31d72209f4d9a42060faca011cc05b605919df055b81fb3f2cf309b44b44250fc1e280ac5025bde97469068c027a4d2e1b4ba1cdd6daec1c7a74d608fa7c2a4e208283c2c9598878b88379a7f2b40a82320f7575033f8d1efce5d38549656fd914732726cb2ed9905814d967ab2de197f75c87f80be4069509532517f93007da774a0566b115011f0d6404b4a8bb105e55ccab6231137dc6d4097aefab807d3d171ae31e41b0b3a7bb2ed59ab38fb0a30660f84a158714469b5a16fbd216d91214ff5548cbbc1a8651d44b6d48b47367efe35a96c3083d5636cca0289db56a139fba77d20319dee5e3c7021627e93b1e7427d6954f7033a923d369961835480093a84522a78a24d1b01c30ba4b9afaac16953e56c7eade9269c9d306d6d7d7fb8d4b67801ffdff9285a6075d8caacd7cad679aa6f25f97c235fcdff129c521f52dd33911a55bf81cd946dbed554506729c6f4bc0178b04803e41317764aff863aacbf34c0c1dd5f53479bfc4f89d1132e5aaa0b7e2b5e46dae77752705590743dd56b65c80498182da8beccf2adffdd5cab674fa77f0f611f53a636a1261dd2483212955d76db0b0d1b59c364401c99cfe5feccf0c62f59aa07f34ba60a23bd99d702b0a4922e77f3f7d293f2c6af55b72697e7e8f25d545fe13c052fcc805d42b4b4c8a5d47bdf2ed52da9bd6d556503fabb59a24e834d3efd8da37abf4385724acfa0318b61b954c3db83500ebb66eb9e764c2bcd770cba99ef7f45780d28468e150c2eada94a58d7c62b6423eb95e583c9d6790025151a0029e13264cf91de3b2d349e169e7fd7528356a84a8786401dd30cbeeb0dd894cbe2d38a7846f4859be693099cbab757af8524e47b000518d79d15ede075d02e84e3dfb092d9cd3156656f0ed90af68d6b50377a15277128f7f249d377c560bf7a094d73b552e2e685e793e440079aea56ed2661e1cf40f23f8a63c85648cad96b54ae59ba3eaee102586b7ede6035dbf89e6dfd8524a2336156826fe4fc7f0c26495226f24456ca577d03f938034e2a9f2d8691e0d166ba0c6bd7daddb1e920c6842761c54126d7b12ca074ad89ff002b5738dc75ca73eb81cf70f9a2d0cb6ff53398a5bd9fddb5e1f20207ec75dc2afe4fc40a8cae8c267c38823db2820db622da5007bbc424908d00ea0716ef83518b218b60c615b6d35ca4812ba25130bc0eebe4dafccb90c0c56ffe84643828d957d6878c3a23085ed8815212b785e054f4dff29262fbb9d9ce509f14cdda9d2b8ffabbaa5d6aa3a4ab01d59408552e555a6b62d4cd35794e5c890c9f93f993f42d38dea2c41c7ba8db41e90b95880b7ffd6d6370616809edb2744b24a6b59c127467a3372bcd6c088b0ed697dd243b1d534a0fc28ef961779ec71f8707fd2928cbf23bff26d0a00231a72583089a22a1d0d6cfadaeb31a98cda1c84eb5e8bf047a89e8687e5f100bd57d1d67a4073306f377fe43ff33634aee3173032719c4c34189265f541357044dc8dbf56540d5be66047f908beaf040db44dd57b891b1e3e4cc98be5c20c81f4be6a2398b642d81de2e9c4ba34b8801a2fcd50d8d5ba6f497923bf29662b62f36119bcbfb6df3c1c8d61cff9962699673e5b0ffbb01deb81b2044157df7e03ca3a4c9a03ae2f59e55702c2079ee48ded1dfa0eb32872d80d9b113ad5b537597226948f8ac6b8d5ed700c357e8b9a1178e6f4b86c64ce0ba042152df716681e08bc7622b9977e421f554183611f8ffc36dfa1dafa2d4b2a76d8bc524e9ff22596ae79a964c67bca4311966f05208b626eac58c658aa384798ef738b17cefa55923316a1f9780c22a5828e3a2a62c40136341fcfbc8dae32ca560758467a266c5a170a05800a726ea0d93af19a4aaddaf8150c214f8b36b75ebec966062f1a4fdabb31eba08a1b277670b2e5dff82f77a4bec5b50c28a6459d9170b1115173709d113f677de59cb9b283037f8927317972139198841d798f2118de1a8ae2689e5cff6226282c8b801936b27ffdaa2876e3d8eace08fbd3380c0e0d0f33630c1a483520b423c63443c6bbe8c0f78ec143a0721eda931d444e5355e8cfd7af0177a98e181020ca7a0d59af6b4b4da2b404f302adc2f0537a2731bb1fe76a0b49caac4428e2504d02a0d12d05f935a634e7fe376872d90df5ceadd10bb2b0dcdb09167d3d021ee952381e7f267991985dc58ce6e5510d434933792fc600e701334cc223ad8da2004f83776b423037dc91a048cc1f7a85529d0f1dd4893d6e945ac0e57a6d3caae1b553c4bbb9a45137c8a729e7402d4a3c7a62c004f73acbc108ecdf868540058f69058d0d85a0b447861253b45161d91a21d0c254e908b0be9776560fd2e7fc91696fef7911d6c929f66642aad4ddbf434ab9ccd2b2a8320a3c1d355e0c73744bc3f12af5c2b743fbe3264a1585f999ee258dccea6b022722f1c4b4ca2ede91724960dbb515d2660e3878b6049e13c04ea60bbf5de0c31abbb67e4f4faca1611fad5f8e448d27864e9926d8a642dc1ad325003bf257dbbe6cffb71e82b6e33991d3e33eaa067a3e4aee53f01b25a976ece5027a339d1d9009a656820319aef88b955898bab3271066fd7a1c73fe97aaed2ab65c23cd90c039f2284ec2757441012ce010a4338e5dea06b96d3e30c5eb90632f9043bc9ac455564bb6e3395e433836c1634b9d6ada30893995565f1ff55e4f21ad8fd24f20ef4641cdb3c2235b9465cc2adaa3d0396dc9d16c5b78d2aa0d4673436e899f9b522112733348c81ea8df1805d379c12174967567da6ab12a8fb892a06171d0dc0b0308ac1a9151929ba6d408b76c8047798d03ef2697e800d069e43968ac73d85652b2ec1af17a89a9cf90c4ce9c9578283ab6405bdebf3271cdee7d33329a572a1da59d4457b95d8b43c09a9268e16c095a76a24f16ebcc14b35f6a7fa0a0292d5d49f08dd027391769ee294fc297e2082b5663e0fa4ea1d57eeac0440ea9692fc609f272b2c713b8a21d326a31a9be45664ee4bd9dfbe3521cf3470521e05fa7355e8246cfcab12c56f45b38f32d26aa405faf491b47cd69b1d869c1111a51cf91968cde89c83fbb6f2622e0cca462ce6cf8420d37399eadc4ad98bc7afcac48e84f34095a96a7233aa5179e2f7f09f88edbf438871d73d85d304fce8a93b87191e0b1d24d3ab621ba8463a94e4157614b189805202e6f183c5b2b9ed9c03498eb661e01075a3cf9d92aa2d0def273ab4e4f44557ad0e39b8098cabb34df304cf5e9f98b059b81e52a0fe8a94077e853ad81f1614572af204297bc8dc8b306f202e454d7cce3d63726ea726c44556a580beebc49feabec4ef9dfec51b8889c702beba509ecb99c92a899a676c25df905d13729afd2310ba0d0386bcb910a400111711219cdc9fe3b3dcb6036bc4073069a7ee0562a0e74b7a6953f498ce3385c43c73c944b958b6a8741d21027931d6b6e9a1212372282e2e27f9d205ae918516617d57cc3835d5c4e94d79ad4b9cf11cd295060e97b3aeab1989f1e479cbd3abe75cf3d96ca45ba99b08bdd2954d431ab373700f232890543680435f86f20ada308cc5a288bb2d4d46735df7f032dfe6a57b196e3a167837d1c893c607a4494cdb1829d1d9989c2a3867c348c6653d6c25dc4643c301b4a77ca616a8a2c72fb6c49ac92c2d81e56045b4f190e002c83f5e21aeccfddb4301b50431ed01cabbd1ae809bdc47855abefce9e88f720a0c7266c4773c91f2b6a8115ccd901197806bb7e8b71593fbc5f617adad4acfd13aa77c3c038f589eea19aa84b10d6e57dc0509afcb08d5325dea5cfe501e17efb53b2b7b836d2fd6b0a554795e0b980c2e375510cc4e95adb350024d9ceda192e8e905ac57378a6e56a5f85aa098b3460f4604f70203baaa791df1cd1824b7e370d9a6dbeea8564340782f3819cf77b1465d83815c0d931fde82b7648d0ea5b3d9d95f515f383c73987727d13a0dc2b5c164dae511c2d9ad4923884baa8ab6a62d370c1fa09aa9161d6f2f354f6c834d7f5b77430119ef251d5cedb73bfabe18dce03f44eccb121f04aa12ffa18e9429907ea13f312470cc79d5ace21220153c7fa0c5f4d748eb813d644aa89d368377da6b12fe74d1f5b04457a79bf1d50f96d3598bcdfc0f408500ee71df89387a3ef169edcab9d1ccbb1059c0d148f66314d79bf0cd4eb6c69a22fbe92219d9a7def174f57c194e07f900393fbbe583eb296a41a9f00def5e4f646e3d0bbbb7d6be06ad91a2a4fffb264833d66e22325bfcc6659fe3afb7340a5aa2ea0524e371e666e7573da8ac4d6f1fa7000debb596503a93014e672fffa5a4ce36c24e067b896a3ca02bc93a57b71e986e113781c5a17e86a9b3d194f9e0f4a876885963ac7a2f24568a521493fff90d3f04bfb978ed08e4bac76832cfe85324417f7a53dd3116c1edc8f20d6c05e77487406c4b1d70f692c1741035f9bbae6c3ae8044a9e3fa919c55e885ab9efc6b0e187ab76cb0df0639bc0e30048584138d3a957c1fdbd43939c3e4c96f354fa2a9025e546a263706a3a437e508a9b96b6ad10bdc65ef2be4ac11fe5861c8caa963b21581ee4d2b18ce4b45157386cb8ab41bea212950d4cf71b6b9421296106a0eb2446d2648309d67ecc4a213cfeb5a1d2c188cdb60c0934bc7ce9b867001230d548f081e1c2047dd60d78d327d0dd4f7db1b23f2ef55cd3a02f85bd40ccf33a7bea13505418760bce8815cee7aeeea906c4b730db663a32ccb9fad68bfce3ae52f0a64b30c59ee707c763f8ef81a74f507f7deff192bc7f960124ebb32bf6e744200231b86a3fbb74c6a2525e", 0xf8a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) 467.459099ms ago: executing program 1 (id=6): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="9b0f2bbd7000ffdbdf2509"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) 428.589937ms ago: executing program 3 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x805) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mount$afs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000200), 0x4080, &(0x7f0000000040)={[{@dyn}]}) 374.632095ms ago: executing program 1 (id=8): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)='{', 0x1}], 0x1, 0x0, 0x0, 0x4048170}], 0x1, 0x24048825) accept(r1, 0x0, 0x0) 374.311311ms ago: executing program 2 (id=3): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x6, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0xd20, 0x3, 0x7ffd, 0x1, 0x3, 0x2, 0x0, 0xec46, 0x9, 0x3, 0x1, 0xffffffdffffffff4, 0x200000004a, 0x400000000005, 0xf9, 0xd, 0xe1, 0x413, 0x1, 0x2a9, 0x8, 0xc39, 0x3, 0x8, 0xfffffffc, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x7e4, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x2, 0x7, 0x0, 0x3, 0x7, 0x8000, 0x8000000000000000, 0x4, 0x0, 0x1000000000014, 0x5ba, 0x1, 0x7ffffffe, 0x3, 0x7ffc, 0xc9, 0x7, 0x6, 0xc, 0xffffffff, 0x7ff, 0xbbc, 0x1fcc, 0x6, 0xfffffffffffffffc, 0xd, 0x1f, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x8, 0x9, 0x100000002, 0x0, 0x4, 0x7, 0x9, 0x200000000007, 0x9, 0x1001, 0x16d, 0x6, 0x68e, 0xffffffffffff43b0, 0x0, 0x50000000000000, 0xe, 0x0, 0x0, 0x3000000003, 0x5, 0x7, 0x6, 0x3, 0x8, 0x2, 0x0, 0x3, 0x40, 0x0, 0x7, 0xe, 0x1000003]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 306.243964ms ago: executing program 1 (id=9): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0, 0x2b}, 0x8, 0x0, 0xb00, 0x24}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 306.080784ms ago: executing program 0 (id=1): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r3, 0x4) 282.746806ms ago: executing program 1 (id=10): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) ioctl$int_in(r1, 0x5452, &(0x7f0000000f80)=0xd) sendmsg$can_j1939(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)="100aab", 0x3}, 0x1, 0x0, 0x0, 0x24008000}, 0x4008080) 279.682293ms ago: executing program 3 (id=11): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310) ioctl(r0, 0xc138fd02, &(0x7f0000000000)="0400000000000000") 227.331718ms ago: executing program 2 (id=12): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) 155.290372ms ago: executing program 3 (id=13): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) 99.396753ms ago: executing program 0 (id=14): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x14b, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x13d, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x129, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb077a5150c08f56aed6ee45acd4439043886b78cc5562b00bc57cf509d90b02a7bc86919f1b882f556e6aac5e9b93ee545b2b68bd014e2a49c332432ef4adeb61ac418aa4e20ee299f1a8b7a72e985223996b11a8913f3b1c23b10f88c3de28660457a37126fd3b6394536da0cd962f532ff22c496e1df4ffe049b193514c02571399d3618383a287068f4f15d51d1781cc0b"}}}}}}, 0x0) 97.461096ms ago: executing program 0 (id=15): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010102, @in=@remote, 0x4e20, 0x0, 0x4e22, 0x10c, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x2e6, 0x0, 0x1ff, 0x0, 0x0, 0x800, 0x0, 0x800000000}, {0x1, 0xfffffffffffffffe, 0x0, 0x1ffffffffe}, 0x20, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x3, 0x0, 0x3, 0xfffffc01, 0x4001, 0x6}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 62.677389ms ago: executing program 1 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) acct(&(0x7f00000005c0)='./file0/file0\x00') write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0xffffffffffffffda, r1, {0x7, 0x29, 0x0, 0x5090880b, 0x0, 0x10, 0xd, 0x40, 0x0, 0x0, 0x2f, 0x1}}, 0x50) 57.369779ms ago: executing program 3 (id=17): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000000000/0x400000)=nil) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x15961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000340)=@IORING_OP_EPOLL_WAIT={0x3b, 0xa, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0xd8000004}], 0x1, 0x0, 0x1, {0x0, r5}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 8.128708ms ago: executing program 0 (id=18): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/75}, {&(0x7f0000000740)=""/20, 0x1200}, {&(0x7f0000000780)=""/202}], 0x12, &(0x7f0000000280)=""/23}, 0x8001}], 0x1, 0x1822b, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 6.772354ms ago: executing program 3 (id=19): io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000300)={0x0, 0x1, 0x0, 0x0, &(0x7f0000000240)}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e"], 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 0s ago: executing program 2 (id=20): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00') preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x2a, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) kernel console output (not intermixed with test programs): [ 38.008885][ T43] audit: type=1400 audit(1790928898.195:115): avc: denied { siginh } for pid=5642 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 40.478888][ T43] audit: type=1400 audit(1790928900.665:116): avc: denied { write } for pid=5647 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.555189][ T43] audit: type=1400 audit(1790928900.745:117): avc: denied { write } for pid=5650 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:15109' (ED25519) to the list of known hosts. [ 40.739192][ T43] audit: type=1400 audit(1790928900.925:118): avc: denied { name_bind } for pid=5655 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.411676][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 41.411691][ T43] audit: type=1400 audit(1790928901.605:126): avc: denied { write } for pid=5674 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.526887][ T43] audit: type=1400 audit(1790928901.715:127): avc: denied { write } for pid=5677 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.601055][ T43] audit: type=1400 audit(1790928901.795:128): avc: denied { write } for pid=5680 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.712617][ T43] audit: type=1400 audit(1790928901.905:129): avc: denied { write } for pid=5683 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.781777][ T43] audit: type=1400 audit(1790928901.975:130): avc: denied { write } for pid=5686 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.881983][ T43] audit: type=1400 audit(1790928902.075:131): avc: denied { write } for pid=5689 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.950064][ T43] audit: type=1400 audit(1790928902.145:132): avc: denied { write } for pid=5692 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.065553][ T43] audit: type=1400 audit(1790928902.255:133): avc: denied { write } for pid=5695 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.133218][ T43] audit: type=1400 audit(1790928902.325:134): avc: denied { write } for pid=5698 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.236163][ T43] audit: type=1400 audit(1790928902.425:135): avc: denied { write } for pid=5701 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.820510][ T5657] cgroup: Unknown subsys name 'net' [ 43.984260][ T5657] cgroup: Unknown subsys name 'cpuset' [ 43.988474][ T5657] cgroup: Unknown subsys name 'rlimit' [ 44.203229][ T5724] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 44.983774][ T5657] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.847412][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 49.847428][ T43] audit: type=1400 audit(1790928910.035:158): avc: denied { execmem } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 50.075995][ T43] audit: type=1400 audit(1790928910.265:159): avc: denied { create } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.076044][ T43] audit: type=1400 audit(1790928910.265:160): avc: denied { create } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.076079][ T43] audit: type=1400 audit(1790928910.265:161): avc: denied { create } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.076517][ T43] audit: type=1400 audit(1790928910.265:162): avc: denied { read write } for pid=5736 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.076555][ T43] audit: type=1400 audit(1790928910.265:163): avc: denied { read write } for pid=5735 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.076591][ T43] audit: type=1400 audit(1790928910.265:164): avc: denied { read write } for pid=5734 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.077124][ T43] audit: type=1400 audit(1790928910.265:166): avc: denied { open } for pid=5736 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.077162][ T43] audit: type=1400 audit(1790928910.265:167): avc: denied { open } for pid=5734 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.077197][ T43] audit: type=1400 audit(1790928910.265:165): avc: denied { open } for pid=5735 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.130768][ T5747] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 50.131214][ T5747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 50.135048][ T5747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 50.139035][ T5747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 50.139878][ T5747] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 50.140156][ T5747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 50.140697][ T5747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 50.141012][ T5747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 50.141575][ T5747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 50.143239][ T5747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 50.143397][ T5747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 50.143488][ T5747] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 50.144846][ T5747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 50.144943][ T5747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 50.144980][ T5750] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 50.145263][ T5747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 50.148537][ T5750] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 50.168442][ T5092] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 50.174058][ T5744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 50.175939][ T5092] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.155162][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.155247][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.155345][ T5737] bridge_slave_0: entered allmulticast mode [ 51.156792][ T5737] bridge_slave_0: entered promiscuous mode [ 51.201546][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.201625][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.201898][ T5734] bridge_slave_0: entered allmulticast mode [ 51.203232][ T5734] bridge_slave_0: entered promiscuous mode [ 51.204723][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.204825][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.204935][ T5737] bridge_slave_1: entered allmulticast mode [ 51.206660][ T5737] bridge_slave_1: entered promiscuous mode [ 51.244985][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.245063][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.245346][ T5734] bridge_slave_1: entered allmulticast mode [ 51.246665][ T5734] bridge_slave_1: entered promiscuous mode [ 51.282547][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.283127][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.283210][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.283316][ T5735] bridge_slave_0: entered allmulticast mode [ 51.285035][ T5735] bridge_slave_0: entered promiscuous mode [ 51.311944][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.312149][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.312218][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.312307][ T5735] bridge_slave_1: entered allmulticast mode [ 51.313649][ T5735] bridge_slave_1: entered promiscuous mode [ 51.327928][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.328145][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.328220][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.328327][ T5736] bridge_slave_0: entered allmulticast mode [ 51.329860][ T5736] bridge_slave_0: entered promiscuous mode [ 51.332030][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.332103][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.332360][ T5736] bridge_slave_1: entered allmulticast mode [ 51.333754][ T5736] bridge_slave_1: entered promiscuous mode [ 51.369854][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.372096][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.395948][ T5737] team0: Port device team_slave_0 added [ 51.398267][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.412500][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.414362][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.426447][ T5737] team0: Port device team_slave_1 added [ 51.450685][ T5736] team0: Port device team_slave_0 added [ 51.474117][ T5734] team0: Port device team_slave_0 added [ 51.487258][ T5736] team0: Port device team_slave_1 added [ 51.488094][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.488108][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.488129][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.500646][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.500661][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.500682][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.503001][ T5734] team0: Port device team_slave_1 added [ 51.515963][ T5735] team0: Port device team_slave_0 added [ 51.533374][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.533388][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.533409][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.544668][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.544683][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.544703][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.546810][ T5735] team0: Port device team_slave_1 added [ 51.578329][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.578341][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.578357][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.586215][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.586230][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.586251][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.604501][ T5737] hsr_slave_0: entered promiscuous mode [ 51.605020][ T5737] hsr_slave_1: entered promiscuous mode [ 51.632360][ T5736] hsr_slave_0: entered promiscuous mode [ 51.633368][ T5736] hsr_slave_1: entered promiscuous mode [ 51.634027][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 51.634113][ T5736] Cannot create hsr debugfs directory [ 51.635508][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.635522][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.635543][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.637208][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.637219][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.637239][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.717138][ T5734] hsr_slave_0: entered promiscuous mode [ 51.718081][ T5734] hsr_slave_1: entered promiscuous mode [ 51.718645][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 51.718662][ T5734] Cannot create hsr debugfs directory [ 51.740297][ T5735] hsr_slave_0: entered promiscuous mode [ 51.741114][ T5735] hsr_slave_1: entered promiscuous mode [ 51.741645][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 51.741662][ T5735] Cannot create hsr debugfs directory [ 52.157588][ T5736] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.165396][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 52.166701][ T5736] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.172032][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 52.172844][ T5736] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.178804][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 52.180276][ T5092] Bluetooth: hci0: command tx timeout [ 52.180417][ T5092] Bluetooth: hci2: command tx timeout [ 52.180507][ T5092] Bluetooth: hci3: command tx timeout [ 52.188995][ T5736] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.193783][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 52.238670][ T5737] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.243013][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 52.243647][ T5737] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.248140][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 52.250748][ T5737] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.256279][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 52.256983][ T5737] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.262701][ T66] Bluetooth: hci1: command tx timeout [ 52.263463][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 52.348227][ T5734] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.357250][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 52.358614][ T5734] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.361499][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 52.362954][ T5734] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.368442][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 52.369210][ T5734] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.376291][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 52.485422][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.486526][ T5735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.492546][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 52.498189][ T5735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.502598][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 52.510235][ T5735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.513534][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 52.526436][ T5735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.531641][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 52.551966][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.567591][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.567705][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.582295][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.582381][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.612734][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.652888][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.673656][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.687785][ T179] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.687896][ T179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.708653][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.714183][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.714276][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.719184][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.719269][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.741736][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.741823][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.811688][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.856948][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.876231][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.876319][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.895913][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.895993][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.092467][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.137647][ T5736] veth0_vlan: entered promiscuous mode [ 53.146217][ T5736] veth1_vlan: entered promiscuous mode [ 53.182938][ T5736] veth0_macvtap: entered promiscuous mode [ 53.185937][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.193239][ T5736] veth1_macvtap: entered promiscuous mode [ 53.227509][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.232242][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.242736][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.243906][ T5734] veth0_vlan: entered promiscuous mode [ 53.261825][ T5734] veth1_vlan: entered promiscuous mode [ 53.306624][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.322911][ T5734] veth0_macvtap: entered promiscuous mode [ 53.355001][ T5737] veth0_vlan: entered promiscuous mode [ 53.364109][ T5734] veth1_macvtap: entered promiscuous mode [ 53.368892][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.368910][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.374085][ T5737] veth1_vlan: entered promiscuous mode [ 53.416751][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.420554][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.420573][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.431921][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.456004][ T5735] veth0_vlan: entered promiscuous mode [ 53.471163][ T5735] veth1_vlan: entered promiscuous mode [ 53.474137][ T5737] veth0_macvtap: entered promiscuous mode [ 53.489162][ T5736] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 53.493329][ T5737] veth1_macvtap: entered promiscuous mode [ 53.537230][ T5735] veth0_macvtap: entered promiscuous mode [ 53.544276][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.566216][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.575054][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.575073][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.575841][ T5735] veth1_macvtap: entered promiscuous mode [ 53.587039][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.619117][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.619137][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.645559][ T5885] FAULT_INJECTION: forcing a failure. [ 53.645559][ T5885] name failslab, interval 1, probability 0, space 0, times 1 [ 53.645582][ T5885] CPU: 1 UID: 0 PID: 5885 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 53.645595][ T5885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.645626][ T5885] Call Trace: [ 53.645632][ T5885] [ 53.645637][ T5885] dump_stack_lvl+0x100/0x190 [ 53.645659][ T5885] should_fail_ex.cold+0x5/0xa [ 53.645677][ T5885] should_failslab+0xc2/0x120 [ 53.645695][ T5885] kmem_cache_alloc_noprof+0x92/0x6a0 [ 53.645711][ T5885] ? alloc_uid+0x13d/0x4c0 [ 53.645728][ T5885] alloc_uid+0x13d/0x4c0 [ 53.645741][ T5885] ? cap_capable+0x107/0x430 [ 53.645753][ T5885] ? __pfx_alloc_uid+0x10/0x10 [ 53.645769][ T5885] ? bpf_lsm_capable+0x9/0x10 [ 53.645779][ T5885] ? security_capable+0x80/0x260 [ 53.645793][ T5885] __sys_setuid+0x1be/0x440 [ 53.645806][ T5885] do_syscall_64+0x123/0x790 [ 53.645820][ T5885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.645833][ T5885] RIP: 0033:0x7f05e239e159 [ 53.645843][ T5885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.645854][ T5885] RSP: 002b:00007f05e3206028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 53.645866][ T5885] RAX: ffffffffffffffda RBX: 00007f05e2625fa0 RCX: 00007f05e239e159 [ 53.645875][ T5885] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 53.645882][ T5885] RBP: 00007f05e243506b R08: 0000000000000000 R09: 0000000000000000 [ 53.645889][ T5885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.645896][ T5885] R13: 00007f05e2626038 R14: 00007f05e2625fa0 R15: 00007ffc16c5cd98 [ 53.645910][ T5885] [ 53.649762][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.649868][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.653499][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.669934][ T5814] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.670846][ T5814] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.671097][ T5814] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.711407][ T5887] Bluetooth: ISO socket layer initialized [ 53.735060][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.735083][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.741090][ T5814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.741260][ T5814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.791445][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.791469][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.806928][ T5891] ======================================================= [ 53.806928][ T5891] WARNING: The mand mount option has been deprecated and [ 53.806928][ T5891] and is ignored by this kernel. Remove the mand [ 53.806928][ T5891] option from the mount to silence this warning. [ 53.806928][ T5891] ======================================================= [ 53.808018][ T5891] jffs2: notice: (5891) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 53.819192][ T5891] jffs2: warning: (5891) jffs2_sum_write_data: Not enough space for summary, padsize = -2 [ 53.844319][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.844342][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.868371][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.868391][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.894362][ T5896] FAULT_INJECTION: forcing a failure. [ 53.894362][ T5896] name failslab, interval 1, probability 0, space 0, times 0 [ 53.894392][ T5896] CPU: 2 UID: 0 PID: 5896 Comm: syz.3.7 Not tainted syzkaller #0 PREEMPT(full) [ 53.894415][ T5896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.894427][ T5896] Call Trace: [ 53.894440][ T5896] [ 53.894448][ T5896] dump_stack_lvl+0x100/0x190 [ 53.894482][ T5896] should_fail_ex.cold+0x5/0xa [ 53.894511][ T5896] should_failslab+0xc2/0x120 [ 53.894539][ T5896] kmem_cache_alloc_noprof+0x92/0x6a0 [ 53.894561][ T5896] ? __asan_memcpy+0x3c/0x60 [ 53.894580][ T5896] ? __kernfs_new_node+0xd2/0xa10 [ 53.894603][ T5896] __kernfs_new_node+0xd2/0xa10 [ 53.894619][ T5896] ? __bfs+0x150/0x2a0 [ 53.894636][ T5896] ? check_prev_add+0x354/0xe60 [ 53.894657][ T5896] ? __pfx___kernfs_new_node+0x10/0x10 [ 53.894678][ T5896] ? lock_acquire+0x1d1/0x380 [ 53.894698][ T5896] ? kernfs_root+0x23/0x2a0 [ 53.894725][ T5896] ? find_held_lock+0x2b/0x80 [ 53.894753][ T5896] ? kernfs_root+0xee/0x2a0 [ 53.894778][ T5896] ? kernfs_root+0xee/0x2a0 [ 53.894811][ T5896] kernfs_create_dir_ns+0xa6/0x2b0 [ 53.894836][ T5896] sysfs_create_dir_ns+0x13a/0x2b0 [ 53.894864][ T5896] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 53.894890][ T5896] ? find_held_lock+0x2b/0x80 [ 53.894916][ T5896] ? kobject_add_internal+0x25f/0x930 [ 53.894941][ T5896] ? kobject_add_internal+0x25f/0x930 [ 53.894969][ T5896] ? class_dir_child_ns_type+0xd/0x60 [ 53.895002][ T5896] kobject_add_internal+0x2c8/0x930 [ 53.895032][ T5896] kobject_add+0x16a/0x1e0 [ 53.895058][ T5896] ? __pfx_kobject_add+0x10/0x10 [ 53.895083][ T5896] ? get_device_parent+0x1b3/0x4c0 [ 53.895109][ T5896] ? kobject_put+0xb9/0x640 [ 53.895138][ T5896] device_add+0x294/0x1970 [ 53.895167][ T5896] ? __pfx_device_add+0x10/0x10 [ 53.895194][ T5896] ? kfree_const+0x5a/0x70 [ 53.895211][ T5896] ? kfree+0x1e5/0x6d0 [ 53.895235][ T5896] device_create_groups_vargs+0x1f8/0x270 [ 53.895265][ T5896] device_create+0xed/0x130 [ 53.895294][ T5896] ? __pfx_device_create+0x10/0x10 [ 53.895326][ T5896] ? __pfx_vsnprintf+0x10/0x10 [ 53.895345][ T5896] ? __pfx___debug_object_init+0x10/0x10 [ 53.895369][ T5896] ? mark_held_locks+0x40/0x70 [ 53.895412][ T5896] bdi_register_va+0x114/0x820 [ 53.895444][ T5896] ? __pfx_bdi_register_va+0x10/0x10 [ 53.895467][ T5896] ? lockdep_init_map_type+0x5c/0x250 [ 53.895491][ T5896] ? bdi_init+0x3f4/0x5b0 [ 53.895515][ T5896] super_setup_bdi_name+0xff/0x250 [ 53.895535][ T5896] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 53.895556][ T5896] ? __kasan_kmalloc+0xaa/0xb0 [ 53.895584][ T5896] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 53.895602][ T5896] ? afs_get_tree+0x380/0x1420 [ 53.895635][ T5896] afs_get_tree+0xbe7/0x1420 [ 53.895668][ T5896] vfs_get_tree+0x92/0x320 [ 53.895685][ T5896] path_mount+0x7d0/0x24c0 [ 53.895707][ T5896] ? __pfx_path_mount+0x10/0x10 [ 53.895724][ T5896] ? lockdep_hardirqs_on+0x7d/0x110 [ 53.895746][ T5896] ? putname+0xb1/0x110 [ 53.895770][ T5896] ? kmem_cache_free+0x127/0x6c0 [ 53.895797][ T5896] ? __x64_sys_mount+0x293/0x310 [ 53.895814][ T5896] __x64_sys_mount+0x293/0x310 [ 53.895833][ T5896] ? __pfx___x64_sys_mount+0x10/0x10 [ 53.895858][ T5896] do_syscall_64+0x123/0x790 [ 53.895880][ T5896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.895899][ T5896] RIP: 0033:0x7f5e1dd9e159 [ 53.895914][ T5896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.895931][ T5896] RSP: 002b:00007f5e1ecad028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 53.895950][ T5896] RAX: ffffffffffffffda RBX: 00007f5e1e025fa0 RCX: 00007f5e1dd9e159 [ 53.895963][ T5896] RDX: 0000200000000200 RSI: 0000200000000000 RDI: 0000000000000000 [ 53.895976][ T5896] RBP: 00007f5e1de3506b R08: 0000200000000040 R09: 0000000000000000 [ 53.895988][ T5896] R10: 0000000000004080 R11: 0000000000000246 R12: 0000000000000000 [ 53.895999][ T5896] R13: 00007f5e1e026038 R14: 00007f5e1e025fa0 R15: 00007fff75618698 [ 53.896025][ T5896] [ 53.896999][ T5896] kobject: kobject_add_internal failed for afs-1 (error: -12 parent: bdi) [ 53.919720][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.919748][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.919767][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.919784][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.919802][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.919822][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.919840][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.919857][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.919876][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.155123][ T5918] ip_tables: iptables: counters copy to user failed while replacing table [ 54.269751][ T66] Bluetooth: hci3: command tx timeout [ 54.269782][ T66] Bluetooth: hci2: command tx timeout [ 54.269801][ T66] Bluetooth: hci0: command tx timeout [ 54.331479][ T5932] [ 54.332699][ T5932] ====================================================== [ 54.335752][ T5932] WARNING: possible circular locking dependency detected [ 54.338660][ T5932] syzkaller #0 Not tainted [ 54.339637][ T5092] Bluetooth: hci1: command tx timeout [ 54.343763][ T5932] ------------------------------------------------------ [ 54.346859][ T5932] syz.2.20/5932 is trying to acquire lock: [ 54.349519][ T5932] ffffffff8efcb1e0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x63/0x6a0 [ 54.353348][ T5932] [ 54.353348][ T5932] but task is already holding lock: [ 54.356369][ T5932] ffff888028d8e100 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xbc/0xf10 [ 54.360187][ T5932] [ 54.360187][ T5932] which lock already depends on the new lock. [ 54.360187][ T5932] [ 54.364447][ T5932] [ 54.364447][ T5932] the existing dependency chain (in reverse order) is: [ 54.368458][ T5932] [ 54.368458][ T5932] -> #2 (&q->blkcg_mutex){+.+.}-{4:4}: [ 54.372234][ T5932] lock_acquire+0x1d1/0x380 [ 54.374510][ T5932] __mutex_lock+0x1a4/0x1bd0 [ 54.376646][ T5932] blkcg_activate_policy+0x34f/0xbf0 [ 54.379076][ T5932] blk_throtl_init+0x39a/0x5b0 [ 54.381284][ T5932] tg_set_conf.isra.0+0x252/0x500 [ 54.383576][ T5932] cgroup_file_write+0x1e6/0x8a0 [ 54.385856][ T5932] kernfs_fop_write_iter+0x3e0/0x5f0 [ 54.388291][ T5932] vfs_write+0x6af/0x1050 [ 54.390343][ T5932] ksys_write+0x12a/0x250 [ 54.392364][ T5932] do_syscall_64+0x123/0x790 [ 54.394489][ T5932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.397124][ T5932] [ 54.397124][ T5932] -> #1 (&q->q_usage_counter(io)#2){++++}-{0:0}: [ 54.400804][ T5932] lock_acquire+0x1d1/0x380 [ 54.403351][ T5932] blk_alloc_queue+0x610/0x790 [ 54.405638][ T5932] __blk_alloc_disk+0xa0/0x170 [ 54.407872][ T5932] brd_alloc.isra.0+0x41a/0x820 [ 54.410219][ T5932] brd_init+0x167/0x190 [ 54.412197][ T5932] do_one_initcall+0x11c/0x6f0 [ 54.414413][ T5932] kernel_init_freeable+0x6ea/0x7b0 [ 54.416860][ T5932] kernel_init+0x21/0x1e0 [ 54.419065][ T5932] ret_from_fork+0x730/0xd60 [ 54.421371][ T5932] ret_from_fork_asm+0x1a/0x30 [ 54.424152][ T5932] [ 54.424152][ T5932] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 54.427556][ T5932] check_prev_add+0xeb/0xe60 [ 54.429744][ T5932] __lock_acquire+0x1528/0x1f40 [ 54.431980][ T5932] lock_acquire+0x1d1/0x380 [ 54.434115][ T5932] fs_reclaim_acquire+0xc4/0x100 [ 54.436403][ T5932] kmem_cache_alloc_noprof+0x63/0x6a0 [ 54.438990][ T5932] __radix_tree_preload+0x333/0x820 [ 54.441426][ T5932] blkg_conf_prep+0x489/0xf10 [ 54.444331][ T5932] tg_set_conf.isra.0+0x1ed/0x500 [ 54.447081][ T5932] cgroup_file_write+0x1e6/0x8a0 [ 54.449691][ T5932] kernfs_fop_write_iter+0x3e0/0x5f0 [ 54.452222][ T5932] vfs_write+0x6af/0x1050 [ 54.454351][ T5932] ksys_write+0x12a/0x250 [ 54.456399][ T5932] do_syscall_64+0x123/0x790 [ 54.458608][ T5932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.461368][ T5932] [ 54.461368][ T5932] other info that might help us debug this: [ 54.461368][ T5932] [ 54.466243][ T5932] Chain exists of: [ 54.466243][ T5932] fs_reclaim --> &q->q_usage_counter(io)#2 --> &q->blkcg_mutex [ 54.466243][ T5932] [ 54.471784][ T5932] Possible unsafe locking scenario: [ 54.471784][ T5932] [ 54.474886][ T5932] CPU0 CPU1 [ 54.477133][ T5932] ---- ---- [ 54.479437][ T5932] lock(&q->blkcg_mutex); [ 54.481535][ T5932] lock(&q->q_usage_counter(io)#2); [ 54.485290][ T5932] lock(&q->blkcg_mutex); [ 54.488432][ T5932] lock(fs_reclaim); [ 54.490155][ T5932] [ 54.490155][ T5932] *** DEADLOCK *** [ 54.490155][ T5932] [ 54.493504][ T5932] locks held by syz.2.20/5932: 6, last CPU#2: [ 54.496181][ T5932] #0: ffff888039262d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 54.499949][ T5932] #1: ffff8880303e6460 (sb_writers#11){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 54.503751][ T5932] #2: ffff888035009480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 54.508068][ T5932] #3: ffff888055091c38 (kn->active#65){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 54.512375][ T5932] #4: ffff888028d8df80 (&q->rq_qos_mutex){+.+.}-{4:4}, at: blkg_conf_open_bdev+0x253/0x410 [ 54.516699][ T5932] #5: ffff888028d8e100 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xbc/0xf10 [ 54.520883][ T5932] [ 54.520883][ T5932] stack backtrace: [ 54.523570][ T5932] CPU: 2 UID: 0 PID: 5932 Comm: syz.2.20 Not tainted syzkaller #0 PREEMPT(full) [ 54.527413][ T5932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.531667][ T5932] Call Trace: [ 54.533119][ T5932] [ 54.534382][ T5932] dump_stack_lvl+0x100/0x190 [ 54.536631][ T5932] print_circular_bug.cold+0x178/0x1be [ 54.539331][ T5932] check_noncircular+0x146/0x160 [ 54.541525][ T5932] check_prev_add+0xeb/0xe60 [ 54.543489][ T5932] ? check_noncircular+0x97/0x160 [ 54.545634][ T5932] __lock_acquire+0x1528/0x1f40 [ 54.547706][ T5932] lock_acquire+0x1d1/0x380 [ 54.549636][ T5932] ? kmem_cache_alloc_noprof+0x63/0x6a0 [ 54.551992][ T5932] fs_reclaim_acquire+0xc4/0x100 [ 54.554168][ T5932] ? kmem_cache_alloc_noprof+0x63/0x6a0 [ 54.556742][ T5932] kmem_cache_alloc_noprof+0x63/0x6a0 [ 54.559246][ T5932] ? __radix_tree_preload+0x2f4/0x820 [ 54.561697][ T5932] ? __radix_tree_preload+0x333/0x820 [ 54.563939][ T5932] __radix_tree_preload+0x333/0x820 [ 54.566150][ T5932] blkg_conf_prep+0x489/0xf10 [ 54.568126][ T5932] tg_set_conf.isra.0+0x1ed/0x500 [ 54.570246][ T5932] ? __pfx_tg_set_conf.isra.0+0x10/0x10 [ 54.572548][ T5932] ? kernfs_root+0xf8/0x2a0 [ 54.574475][ T5932] cgroup_file_write+0x1e6/0x8a0 [ 54.576659][ T5932] ? __pfx_tg_set_conf_uint+0x10/0x10 [ 54.579402][ T5932] ? __pfx_cgroup_file_write+0x10/0x10 [ 54.582856][ T5932] ? __kmalloc_noprof+0x350/0x840 [ 54.585424][ T5932] kernfs_fop_write_iter+0x3e0/0x5f0 [ 54.587658][ T5932] ? __pfx_cgroup_file_write+0x10/0x10 [ 54.589956][ T5932] vfs_write+0x6af/0x1050 [ 54.591766][ T5932] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 54.594204][ T5932] ? __pfx_vfs_write+0x10/0x10 [ 54.596206][ T5932] ? find_held_lock+0x2b/0x80 [ 54.598194][ T5932] ksys_write+0x12a/0x250 [ 54.599999][ T5932] ? __pfx_ksys_write+0x10/0x10 [ 54.602052][ T5932] do_syscall_64+0x123/0x790 [ 54.603992][ T5932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.606462][ T5932] RIP: 0033:0x7f57ce39e159 [ 54.608369][ T5932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.617255][ T5932] RSP: 002b:00007f57cc5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 54.620829][ T5932] RAX: ffffffffffffffda RBX: 00007f57ce625fa0 RCX: 00007f57ce39e159 [ 54.624085][ T5932] RDX: 000000000000006a RSI: 00002000000000c0 RDI: 0000000000000005 [ 54.627318][ T5932] RBP: 00007f57ce43506b R08: 0000000000000000 R09: 0000000000000000 [ 54.630603][ T5932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.633894][ T5932] R13: 00007f57ce626038 R14: 00007f57ce625fa0 R15: 00007ffe9d642de8 [ 54.637231][ T5932] [ 55.068173][ T43] kauditd_printk_skb: 72 callbacks suppressed [ 55.068192][ T43] audit: type=1400 audit(1790928915.255:240): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 56.339564][ T5092] Bluetooth: hci0: command tx timeout [ 56.339595][ T5092] Bluetooth: hci2: command tx timeout [ 56.339614][ T5092] Bluetooth: hci3: command tx timeout [ 56.419637][ T5092] Bluetooth: hci1: command tx timeout [ 58.419869][ T5744] Bluetooth: hci2: command tx timeout [ 58.419899][ T5744] Bluetooth: hci0: command tx timeout [ 58.419931][ T5092] Bluetooth: hci3: command tx timeout [ 58.499905][ T5092] Bluetooth: hci1: command tx timeout