last executing test programs: 1.501671837s ago: executing program 3 (id=4): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0c0400c9000000000000000000"], 0xf) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c9000b000700060001030001100707"], 0x10) nanosleep(&(0x7f0000000540)={0x0, 0x5f5e100}, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c9001500110006000300"/26], 0x1a) nanosleep(&(0x7f0000000580)={0x0, 0x5f5e100}, 0x0) write(r0, &(0x7f0000000400)="1c0000000700aaaaaaaaaa1101", 0xd) 1.466611572s ago: executing program 2 (id=3): r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x800) write(r0, &(0x7f0000000000)="38000000240001040100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002800500010010000000", 0x38) write(r0, &(0x7f0000000040)="38000000240001040200000000000000000000000100000000000200010001000000000008000100657473000c0002800500010010000000", 0x38) write(r0, &(0x7f0000000140)="38000000240001040600000000000000000000000100000000000600050001000000000008000100657473000c0002800500010010000000", 0x38) write(r0, &(0x7f0000000200)="38000000240001040900000000000000000000000100000000000900080001000000000008000100657473000c0002800500010010000000", 0x38) write(r0, &(0x7f0000000240)="38000000240001040a00000000000000000000000100000000000a00090001000000000008000100657473000c0002800500010010000000", 0x38) write(r0, &(0x7f0000000500)="240000002a0001039900000000000000000000000100"/34, 0x22) read(r0, &(0x7f0000002000), 0x8000) 1.405823894s ago: executing program 1 (id=2): r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x800) write(r0, &(0x7f0000000000)="38000000240001040100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002800500010010000000", 0x38) write(r0, &(0x7f0000000040)="38000000240001040200000000000000000000000100000000000200010001000000000008000100657473000c0002800500010010000000", 0x38) write(r0, &(0x7f0000000140)="38000000240001040600000000000000000000000100000000000600050001000000000008000100657473000c0002800500010010000000", 0x38) write(r0, &(0x7f0000000200)="38000000240001040900000000000000000000000100000000000900080001000000000008000100657473000c0002800500010010000000", 0x38) write(r0, &(0x7f0000000240)="38000000240001040a00000000000000000000000100000000000a00090001000000000008000100657473000c0002800500010010000000", 0x38) write(r0, &(0x7f0000000500)="240000002a0001039900000000000000000000000100"/36, 0x24) read(r0, 0x0, 0x0) 1.279760374s ago: executing program 2 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/sctp/intl_enable\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='1\x00', 0x1) close(r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100)=0x2, 0x4) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000140)="0000000001000000", 0x8) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x200}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000300)='\x00'/4096, 0x1000, 0x0, 0x0, 0x0) 1.264206511s ago: executing program 1 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='8', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='9', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='10', 0x2) unshare(0x6a040000) unshare(0x6a040000) write(r0, &(0x7f0000000000)='12', 0x2) unshare(0x6a040000) write(r0, &(0x7f0000000000)='13', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r0, &(0x7f0000000000)='14', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r0, &(0x7f0000000000)='15', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r0, &(0x7f0000000000)='16', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='17', 0x2) unshare(0x6a040000) 1.136690017s ago: executing program 2 (id=7): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000001800010400000000000000000a000000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=r2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0) 1.01024397s ago: executing program 2 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv6/conf/syz_tun/forwarding\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='1', 0x1) 967.521415ms ago: executing program 2 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100), &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='md0\n', 0x4) close(r0) write(0xffffffffffffffff, &(0x7f0000000700)='none\n', 0x5) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/level\x00', 0x2, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0) write(r2, &(0x7f0000000b00)='2\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/block/md0/md/new_dev\x00', 0x2, 0x0) write(r3, &(0x7f0000000d00)='1:0\n', 0x4) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0) write(r4, &(0x7f0000000f00)='0\n', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r5, 0x0, 0x0) close(r5) write(0xffffffffffffffff, &(0x7f0000001300)='1:1\n', 0x4) close(0xffffffffffffffff) r6 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x2, 0x0) write(r6, &(0x7f0000001500)='1\n', 0x2) close(r6) 868.619172ms ago: executing program 2 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='8', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='9', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='10', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) unshare(0x6a040000) write(r0, &(0x7f0000000000)='12', 0x2) unshare(0x6a040000) write(r0, &(0x7f0000000000)='13', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r0, &(0x7f0000000000)='14', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r0, &(0x7f0000000000)='15', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r0, &(0x7f0000000000)='16', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='17', 0x2) unshare(0x6a040000) 620.324642ms ago: executing program 3 (id=13): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./backing_file\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) dup2(r1, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/syz\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/syz/node/node0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/syz/node/node0/ipv4_port\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='7777\n', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/syz/node/node0/ipv4_address\x00', 0x2, 0x0) write(r3, &(0x7f0000000440)='127.0.0.1\n', 0xa) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/syz/node/node0/num\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='0\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/syz/node/node0/local\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/cluster/syz/heartbeat/hb0/start_block\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/cluster/syz/heartbeat/hb0/dev\x00', 0x2, 0x0) write(r5, &(0x7f0000000700)='7\n', 0x2) 561.409015ms ago: executing program 3 (id=14): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000090)={&(0x7f0000000300)=@newtclass={0x30, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000000b0)={&(0x7f0000000500)=@setlink={0x20, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x41, 0x1}}, 0x20}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000700)={0x11, 0x300, r2}, 0x14) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f00000005c0)=0x10001, 0x4) write(r3, &(0x7f0000000600)='\x00'/1000, 0x3e8) write(r3, &(0x7f0000000600)='\x00'/1000, 0x3e8) 546.202998ms ago: executing program 0 (id=15): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, 0x0, 0x0) write(r1, &(0x7f0000000140)="0d000000010001", 0x7) read(r1, &(0x7f0000000400)=""/128, 0x80) read(r1, &(0x7f0000000400)=""/128, 0x80) write(r1, &(0x7f0000000200)="34000000070001020304050601", 0xd) 371.723639ms ago: executing program 0 (id=16): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000001800010400000000000000000a000000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=r2, @ANYBLOB="0600150008000000200016801c0001"], 0x60}}, 0x0) 323.528539ms ago: executing program 1 (id=17): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000001800010400000000000000000a000000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=r2, @ANYBLOB="06001500080000002000"], 0x60}}, 0x0) 319.626025ms ago: executing program 0 (id=18): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000001800010400000000000000000a000000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=r2, @ANYBLOB="06001500080000002000"], 0x60}}, 0x0) 319.205809ms ago: executing program 1 (id=19): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x35, 0x5, 0x57e, 0x330, 0x0, 0x0, "0600ff0901a101150026ff007508951f852009018102852109018102852209018102851609019102851709019102851509019102c0"}}, 0x14d) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x16, ' \x00'/22}}, 0x1c) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x16, "2200001600"/22}}, 0x1c) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x16, "2200001600"/22}}, 0x1c) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x16, "2100005000fa00000000000500"/22}}, 0x1c) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x0, 0x2) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x2) syz_open_dev$evdev(&(0x7f0000000500), 0x2, 0x2) syz_open_dev$evdev(&(0x7f0000000500), 0x3, 0x2) syz_open_dev$evdev(&(0x7f0000000500), 0x4, 0x2) syz_open_dev$evdev(&(0x7f0000000500), 0x5, 0x2) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x16, "2200001600"/22}}, 0x1c) 249.364483ms ago: executing program 0 (id=20): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) mmap(&(0x7f0000155000/0x3000)=nil, 0x3000, 0x1000006, 0x81011, r0, 0x7afb2000) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000300)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaa61385081c8277bc96138deb952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d510100000000000000ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68", 0xc4}, {&(0x7f0000000cc0)="459000f0000000ee66c372f3", 0xc}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c1808f3125266538de14f70d50bc538b", 0xe9}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002e00)=[{&(0x7f0000000d00)="a6aa78ac33e2a9f6e0de6743e06915e6c4eb533157d3399e0876e7020e78973fe91c5e3631fd7f4950699111270065252cb4f24cdb632998b6c4eb32bec8f63c45a47c628f16edf9cf1bc7c8d37ad8458077af1c3e80659c8be6e7c3333fdb24e015cda160e5ed0226fa5020afb3862003c0b98488ed52ee", 0x78}, {0x0}, {&(0x7f0000001000)}, {&(0x7f0000001e00)="4a5b065c24c48453c3e34c3e41ecc726d3b2bdb92b709d232d487a3710b5c34eb8323076a771d5e530eca348782cbbe4875016c0f9b7727a659d2a7b361533e2473d8033e1ac44bff623e323b9109f1f4465240db0c6c5bf67074befb3bfe5f2b04d584aa87ec0e1cd9df86a2793ca5d4dfaf0733a435440bb6b90aa139b13921f73caf4f84f1bb8a80ef198acbc7dab2e39b45e199070a3f82f50a21c4e4b283fde801dbf40cd2734cfe27391d481309be999a664e27e73d8b7344cb409315c715a5c915dfb42c89b476dc5573f569b3791914b1c567cdf98b7a3d1510a27459a64f14b1f8adc4cd1887f3c97c23716791f921194681e7ddf77e929af45eb18da399fb45bb1bad5ae49831feb061e4d6620b24a24820691192fa4e5ba08394e79b89bb16983c892bfe75a4aef25809de1632985911c696996386e033c8916a6a6d9b9570d8cda6c3ad9e4bfac6ae95d713e0b2040892da453f71630ca4afc0bd5bb5dd0bb19a695b743af331bdab760ce3e3be12538d23c59673ba32cf18e0cbb1c1ab4a5c360e786a3914e6c404dec6162ff3cde77e3064c4affdbbc039faaf19c35a9d8850f15d1111e9fd669f43ea711c0ca1ea139dabbb2edccdcf16feb124c4b037ce4eae344fd275bb222795fb976ac01346a6f6e103c144adbbe8c263aafe636688ef6d9f69ccb7c36783c8d2f783a15bb0f8daeaffbc9ea2cb636214afa57bf9dba64728894752e6fd9f77d7e2e51f67ac1bdec5479d1a6aebe6a36066dbc9018e7db3dd04ef5c8253d6f5f64a0f60fc014f46b24f9582232e6efeca9d2f4d1ea8a73f200d159486a6f724db155678be6ea383b826a35be38832533b9789b2fe5c5dcf0879f36571c9271d0bd92758841583cd4dd327abfe8de297093ffb5e253fb1d0228fdb0b3d0e7d6165dd2dc136b173ec684b01ec763a022942ae296e1e82236da292f6eb9ec5b23e40f16aae66f9d45761c1d00d15ebb5ca58c005c6949df830678b31c1560a74ebce502bf8546d124a54fd5a73af7c6b498d2836aa4505022187d02d4c006596aba60ee0effc6d831ee09473fe7cb82a17c6caf95fa568937c17d916f5bbeade7d10be3a1bca21b2e3d2abde12a38a13669d7dbc0aff1bd895834c23e28e6045aa2c898b9d8e695c774f5742047d34d8209c455eb15999d60c5f4a335f0e56afd690c3be389390908536aeafb098d56874d865109c23ca1bfe785058a21c557d08b536bc3c0b1eb56f61f2c85f06056e0ea885843de0b09eafbbb377d6ae4687c0ad3bd8446ffbc65b43a9601ed3de68e7def1629eaa0468479a0696fca324dfd94d33502d66a15c689d23f603803e966f8a06de765ff1633fcb9cc501cac161c2ae3c7e282a11b1bdd6eb3574806eeb40ad800b76548a6b8aa48e024147b44b316fbd2bf481b34566f627ddd90c4a6045c579598e685d5ed03ff27e61551c0c1498d2c7ab49c8f63f2736b5e4c4c2d98fa1d56e61ea08cff723a5219944db100efdf83dcf419612c9995480c1ae7722b9451aece2166dc6ebe10c0f057c00fdab282fe6aa625264b0fc1be8d61a71b8b476463fa80449e7c91e7e0186ae385d3067bd8478483f98d136056ac38e0308dd7f90ffbdba88d29274415f5aa2dd0b5458a7e6804f2ff740ff4145aaf51d45525dcc88e6ed172af658694df6b5caf343fd256a110d4d98206e3d628a84d5780b70d6f64e79b47054e2908977ccb75b9238a15f528be3cea102e338b39fbd586af2a99aa357ebf1d44db1f672830dd0511dcb513237c876d3d5b67a888b59dd9ddf891b3a86b520e809fd136caece78b1373027b0784ca4b0a2100f844d1ad654d49ea95c3931f96dca58f80bef39be97efddddc2defc5324e48e28c105a014ad3734a282c443c7aa99c6a091373512d8b835fae94f998cb77054fa7bcd9628c476117f9c12f5ce8c8a130194b0f8eed972b06209d9c72dca64ec80b500c19eeabe13c8739410d52c2d59f7f923d3ad25570b2e8e27070011f9b655cc8f8b0da799a759401a253c569b22a043f194e3e6260bf51c877dac6194f819d6cc2e3fcbb91dc19deb193c0070b6df7eeff1ee3d422d03016d3f23d257aaef9f7d2ac5f427ccef40031a937a648ab9e70a277df5a6caee0a9f2e37458dbdc0ca40ebe5af427069fb46a01000da7cb32dbd5b232ad12fb681ebd31dce0c0ff093ab352df2c815a677b1eb7c604d6721ca55aedd848142b6c37dfaffd048ffdd886ada7a5c27eb54225d4a86f7b2f6cf707550d1746a5339344609babdc2779fbcdb977ae85201b46336ae79ccb9eeb65f97c9aab1973dbcc9550934f5b33ff7c6679a7890aed1224c0299ce516f8675d58020c09ce2fbd30a09b6da6e70be2b9670568cf23033ed34ebedf2e12df8cbc1cd8d3625c78041cba28ed6386273f8cab5ba496a2c65b409567f36badf968ec81f296e97893d8609dd73fa7215db8a6d71e8cf5dce41eabd9a4fd1a823a6f5926c887f1eac0e4d3e700a6b82cbba25aef44f89dbb22fb1db11ca148fbedba48685343fe2d4bc916748dec07e4e3cf737f32566a3f1d76e20465c38005e9577bd5af6d766a42768226b709c8f53862ab177ae19c02e2bf61eaf7fcf3d824f7250964b2b9827892d8bfac41e6cae2d7f4aca52eea10d759dcfe966f1b4aad5d44e7b5458b21879c23cbfdb5f2bdcb973036a6e2e8f403099e60b5e66ff5ebb4bd7002622586e8ca4014855bea2df98578b75a4ce07d1857e975dc1517425114f52db932f35283b1d3cde68a5633628748967e641ac47471c64b1710b604b7418b9b3a483bc2a8e6f8dc08439aba7604b9f89ae141cbb41a12a2aa29017dc0dd4ae411f0e1658fcc001c49a51cb5e8963851d7a2018b6055e6753ac50f6a57bfe2733d835afe7b74c4958ce2bb987c8a270a4c50fe8f0965a7c7074ef31352dabd729e162a8c0f4d8db6f7a3e8fab3e24f4e820faff2383677b4cfefaf10a1d6d24e8e593b09b1c26954cd6b55ceb4309b34c7bfa7e088184642c0ad4e8d9514b2ca5fd7dcfd0b4077992f724fdb49b798f73995710c7bef184283c4b9c930e73c8a237f2bfc2070407d0fb2ebfff2c43a6b17a725a43b2bef14bcf5d61a99f08ccdc5729385b1ab9b4a1087f23ebc4ce2afa467b8146ecae43db48355f51ec780c5312a7e8d9f400716df666cea0333a80443c35329d5cda72278ed5a9322d35dbb05a4af7088e5baad0f51100c5f7a44504de114e5a4621abffc77b8fc42a5b310243afe7a907c100e639d4b36aae36b3e18d4262059bb0a2b89f790b400690c19a036c9926869027f06ae6f51cbf9b1dcfe93f30eaabb2731b41125226a0c0917d573f970d70c1d775a871c6bb3fcc517462b155d05cf7485f516664288fd99ef77c6ecf3aa9e8cd42fc891325d0994e520c917f974ee44dd5cb0783833c58d4865b0ffb382fe15cf4b4bbaf22bdbffb66cc0820dbc825a377a028b10f618cd9f1ed02a9e3614ea9b56a2c0b9f18e9c32fcaf826adf8daa32b92cd2a09c003398f430883fb19195e2f3a740208d4efd27a7191f82973ea0bcfd4f5b589ec1a3aa67684a3cf315e12c7e631a53199a8bb708e521c8c8725a97c32794622155a7fd8241339897782f014953ab1a838b3b32753efe72ec56c8271f1aa20377367ea6875496cf065298126f24b207b9ba62a6fbe2017ead7b0bada9082b302e16ddc3cce0f982daaad870d7d0c70db9a25de0bad7ff59c5bd81573d69f1732a966f039ba12991d2c9650068b1afe3cdaf07e63f7656f5585266942222dbe40c1a7b32fc4a55264701a53b8045aa2c1b83130f5714a238eafab2e4bffb5c5bc8fe2a8d10a7c933cf25d628a3d0d04041914c955ec5b1b3b67d57ab48a53056cea458fb09d8ad8eab5626daa509081b5835f86d2d663c042ec9d319a7ad707008c9d921a6d21640f2d7bcaf6fe94e4e1cd92cbb528d0d8667e22a9e22547db444a66750299b6bd27463bc6b1fb56551ae04044c643b55a1627cb6e4859e48cae203506d5df3cc9db2f36da78e8c05a5361f3ac16adb7e6b9cad7511ffcab8d4db1775674baa528a6367291bfeba158baa72662ba4e1c69de5f56ad4e88fcc09b26db3821bb85190d6d6cbe5f5899f9c5696d588d7c1c1834ddcf5eef8f966b04dd9c9a81d0808bf5f5bd26d429274a6ddbef77ac6ef5900e26e32594da5671438249be98351847a4407720c6cdb6610578e1671b92605ce0344abcc3f0912593dda81c35c4bb85c5143528674dad78d5f628978c520d2217cef33838a1d423ce0e57d5e1d2d19bf0243991f65619f9c4c078045e128e0d2c24c0f37b2faf94566ea794a8c7c2b449a527e8041e20e6f42e1d86300ab064a5f1f957697f1550252e19cf97cec7a0733f85ea98bc5bfd519e02af8867c7663dc53b06bf7e9e4a367dacaa22ab41771817edaf375191dd16e66ce7e4d6c731afcbdffec42921c36e0516fe96cd8795d1614f7b32794aa5094eea029c1192a3ee79efdebff988c17d2d53c5cdc6e90c8d6e5ef6413aa011f6aaf80c48a1f87b53a6a087b766ec2a2bdbb82c35bbf7234abbbdf0a2914b221b7960555c083ab4a37c65faf755e4f91a6c791b112e3b7d7986844147deeeddf0944c1c03ab24011afb8d775a94fbee4a8db9585c31a471a22212bb4c834495dbff3f5d472c06503b9b428591ac1bd689a779591edab5caff89975b207833a3ad7b280d8103e2fe2c1f2fec7257239dc139bdde23cad39b1a186f93a7f9f0cad374a4ec95fb9f0a8d107110557fc36c89ff301d1cb9dbc683b98031f544638017d94961c2f373b7f54ab1dfc48f3ce6278d6b7f71ab93fe87eb9281ea1a7e3ca3ae59ed424c27adcd9ccf97c52705e8d53e55bfd1d8db7dd3154468b77043dc3370d97a7375bda2d764cf7ee2ecb7edc36e017cb6fdda9ea1d638506358bf96c1523e627a5215d57291590c89af61e658e6b19200d1213812003ab553815faa6277b506972d36704b48d573d0de49e3ab9d3eddfc942729f6c81251a071df69ca29f555b751c1b2a89557b7959304982825adc7826f73aaa0b2cc1943580d214f6b1e84fb8f27a5ff3a366b4bc19dc77155876dc23c99a8125147872a1fcff983f9d13a2030eceb6a1d50a8358c1dbed92b4a86cf67978f3ec6b267666f69883cf2039e2f9ab6f7fb54acfb51a4e8b9eecf7de23985a7bd6d1d32b5fdf56621143503ab8a320049f07142fc00ff6aa35abd7de1ac19ec9aed5387684421146786d7edee17993f19330e1bf3d755ca8a59d01b0c25b4fcc5bac503f6d084c9ded43055e6538e3f7a6a81c50c89951c1d9be850c52ff1f7f736b21c8b85d4446b3532f94da3a3850fa201eeeaaedc42dcd7c64d82dd7029c3eeaa3f26ae70e0409e9399777fe50f8ad0a75fc9c88c9bfb3572563b11be750c6e6685fa58e0c52011987af9dfbd14271706adb36f2841179dc8862fa3270ca12c738b7e4a3a9f9e6bcd719b08f63da493afd8921c160e0a873d423d6bd4b29f1d8cd89d2b8a21f9be188891b2d5c7c32a715c44038245f33fa64b2268e555b67182afdd738558863516ccfef61c83c3dc8d09a51d1183376ac20337665ddd2a525004eae5f1ca4e180faa03dd3b2479bb5e73dcd8078d9e66b6e50a97e36fb2c2c34011483ad5e2639341edffa97ce2106c94d8760d7af16c3fbfd781e77cc765fd03bf1707d1bfcbf5c59311479fc5840649e1a28bbd19a99ae2cb268f216824f67aa66ae2b8865da130b1088b13012", 0x1000}], 0x4}}, {{0x0, 0x0, &(0x7f0000002ec0)=[{0x0}], 0x1, &(0x7f0000002f00)}}], 0x4, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 248.679396ms ago: executing program 0 (id=21): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./dev\x00', &(0x7f0000001040)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000003000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000007465737400") r3 = openat(0xffffffffffffff9c, &(0x7f0000002100)='./dummy\x00', 0x42, 0x1ff) write(r3, &(0x7f0000003138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00integrity\x00\x00\x00\x00\x00\x00\x007:0 0 4 J 0\x00', 0x34) close(r3) ioctl(r2, 0xc138fd09, &(0x7f0000003000)="0400000000000000000000006c01000038010000010000000000000000000000000000000000000000000000000000007465737400") ioctl(r2, 0xc138fd06, &(0x7f0000003000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000007465737400") nanosleep(&(0x7f0000004000)={0x0, 0x5f5e100}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004100)='./dev/dm-0\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000005000)="11111111111111111111111111111111", 0x10, 0x0) pwrite64(r4, &(0x7f0000005000)='\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"', 0x10, 0x1000) 0s ago: executing program 0 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='rd_pages=64\n', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='naa.6001405c935d7912\n', 0x16) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0/virtual_scsi_port\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='1\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1/tcm.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n', 0xc) close(r4) nanosleep(&(0x7f00000006c0)={0x0, 0x5f5e100}, 0x0) syz_open_dev$sg(&(0x7f0000000700), 0x1, 0x2) r5 = syz_open_dev$sg(&(0x7f0000000700), 0x0, 0x2) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000740)={0x53, 0xffffffffffffffff, 0x10, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000780)="8f000000000000000000000000010000", 0x0, 0x3e8, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:22429' (ED25519) to the list of known hosts. [ 32.918430][ T5651] cgroup: Unknown subsys name 'net' [ 33.044892][ T5651] cgroup: Unknown subsys name 'cpuset' [ 33.047109][ T5651] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.924224][ T5651] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.713447][ T5735] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.714979][ T5735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.715452][ T5735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.716135][ T5735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.716812][ T5735] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.721778][ T5098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.729835][ T65] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.731991][ T65] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.733557][ T65] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.735257][ T65] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.736831][ T65] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.737104][ T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.739073][ T5740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.739445][ T5742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.740426][ T5740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.741635][ T5735] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.750658][ T5740] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.751740][ T5740] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.758054][ T5740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.758498][ T5740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.304149][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.304267][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.304360][ T5733] bridge_slave_0: entered allmulticast mode [ 38.305343][ T5733] bridge_slave_0: entered promiscuous mode [ 38.329937][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.330005][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.330068][ T5733] bridge_slave_1: entered allmulticast mode [ 38.330753][ T5733] bridge_slave_1: entered promiscuous mode [ 38.357051][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.357111][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.357283][ T5737] bridge_slave_0: entered allmulticast mode [ 38.358072][ T5737] bridge_slave_0: entered promiscuous mode [ 38.368855][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.384397][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.384440][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.384493][ T5737] bridge_slave_1: entered allmulticast mode [ 38.385237][ T5737] bridge_slave_1: entered promiscuous mode [ 38.392884][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.419887][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.419965][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.420026][ T5743] bridge_slave_0: entered allmulticast mode [ 38.420775][ T5743] bridge_slave_0: entered promiscuous mode [ 38.446661][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.446776][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.446867][ T5743] bridge_slave_1: entered allmulticast mode [ 38.448036][ T5743] bridge_slave_1: entered promiscuous mode [ 38.451945][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.454501][ T5733] team0: Port device team_slave_0 added [ 38.465026][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.471893][ T5733] team0: Port device team_slave_1 added [ 38.518579][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.519321][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.519335][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.519355][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.521394][ T5737] team0: Port device team_slave_0 added [ 38.521920][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.521932][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.521960][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.523555][ T5737] team0: Port device team_slave_1 added [ 38.523633][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.523672][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.523732][ T5738] bridge_slave_0: entered allmulticast mode [ 38.524413][ T5738] bridge_slave_0: entered promiscuous mode [ 38.526396][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.526572][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.526630][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.526687][ T5738] bridge_slave_1: entered allmulticast mode [ 38.527371][ T5738] bridge_slave_1: entered promiscuous mode [ 38.598025][ T5743] team0: Port device team_slave_0 added [ 38.601486][ T5733] hsr_slave_0: entered promiscuous mode [ 38.601961][ T5733] hsr_slave_1: entered promiscuous mode [ 38.604306][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.606276][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.606548][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.606555][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.606567][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.607533][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.607540][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.607551][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.613383][ T5743] team0: Port device team_slave_1 added [ 38.640765][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.640778][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.640797][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.642706][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.642718][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.642732][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.644063][ T5738] team0: Port device team_slave_0 added [ 38.668354][ T5738] team0: Port device team_slave_1 added [ 38.673951][ T5737] hsr_slave_0: entered promiscuous mode [ 38.674861][ T5737] hsr_slave_1: entered promiscuous mode [ 38.675431][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 38.675500][ T5737] Cannot create hsr debugfs directory [ 38.731563][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.731574][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.731587][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.758020][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.758035][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.758053][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.761359][ T5743] hsr_slave_0: entered promiscuous mode [ 38.761962][ T5743] hsr_slave_1: entered promiscuous mode [ 38.762246][ T5743] debugfs: 'hsr0' already exists in 'hsr' [ 38.762257][ T5743] Cannot create hsr debugfs directory [ 38.854504][ T5738] hsr_slave_0: entered promiscuous mode [ 38.854948][ T5738] hsr_slave_1: entered promiscuous mode [ 38.855269][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 38.855279][ T5738] Cannot create hsr debugfs directory [ 39.027076][ T5733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.032836][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.033525][ T5733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.037733][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.044028][ T5733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.046819][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.051797][ T5733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.056997][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.079672][ T5743] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.082586][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.083378][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.083468][ T5733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.083670][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.083712][ T5733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.087626][ T5743] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.089948][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.090324][ T5743] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.095019][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.095486][ T5743] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.098194][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.144643][ T5737] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.147876][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.149613][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.149656][ T5743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.150142][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.150197][ T5743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.156044][ T5737] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.160416][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.164870][ T5737] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.167797][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.168545][ T5737] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.172020][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.173509][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.175257][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.186227][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.186499][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.249708][ T5738] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.253942][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.255317][ T5738] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.260105][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.261285][ T5738] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.264730][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.269195][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.272957][ T5738] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.275385][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.302526][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.314268][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.316943][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.316994][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.320855][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.320927][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.337039][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.343376][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.343452][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.357494][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.357559][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.388887][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.417096][ T5743] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.428416][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.430832][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.439592][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.439658][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.446032][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.446076][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.458241][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.468380][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.468430][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.484865][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.484911][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.708939][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.735635][ T5743] veth0_vlan: entered promiscuous mode [ 39.739888][ T5743] veth1_vlan: entered promiscuous mode [ 39.759997][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.765257][ T5743] veth0_macvtap: entered promiscuous mode [ 39.773549][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.775493][ T5743] veth1_macvtap: entered promiscuous mode [ 39.791945][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.794220][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.803669][ T5740] Bluetooth: hci1: command tx timeout [ 39.803817][ T5740] Bluetooth: hci0: command tx timeout [ 39.803887][ T5740] Bluetooth: hci2: command tx timeout [ 39.804009][ T65] Bluetooth: hci3: command tx timeout [ 39.807097][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.836969][ T5733] veth0_vlan: entered promiscuous mode [ 39.871584][ T5733] veth1_vlan: entered promiscuous mode [ 39.885938][ T5737] veth0_vlan: entered promiscuous mode [ 39.907800][ T5738] veth0_vlan: entered promiscuous mode [ 39.910760][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.910778][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.919695][ T5737] veth1_vlan: entered promiscuous mode [ 39.920849][ T5738] veth1_vlan: entered promiscuous mode [ 39.946884][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.946897][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.948576][ T5733] veth0_macvtap: entered promiscuous mode [ 39.954858][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.955506][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.959436][ T5733] veth1_macvtap: entered promiscuous mode [ 39.978075][ T5737] veth0_macvtap: entered promiscuous mode [ 39.983497][ T5738] veth0_macvtap: entered promiscuous mode [ 39.989607][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.990219][ T5737] veth1_macvtap: entered promiscuous mode [ 39.997134][ T5738] veth1_macvtap: entered promiscuous mode [ 40.005916][ T5743] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.009154][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.019881][ T5743] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.028472][ T5743] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.031602][ T5743] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.035815][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.038122][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.046811][ T5743] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.065363][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.094185][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.126640][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.126654][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.172049][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.172059][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.181582][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.181595][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.189854][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.189867][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.193419][ T5811] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.193441][ T5811] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.193457][ T5811] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.193474][ T5811] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.193490][ T5811] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.193508][ T5811] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.193524][ T5811] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.193541][ T5811] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.193557][ T5811] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.193574][ T5811] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.193590][ T5811] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.193607][ T5811] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.193624][ T5811] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.211826][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.211838][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.228383][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.228399][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.269844][ T5885] FAULT_INJECTION: forcing a failure. [ 40.269844][ T5885] name failslab, interval 1, probability 0, space 0, times 1 [ 40.269864][ T5885] CPU: 0 UID: 0 PID: 5885 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 40.269877][ T5885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.269883][ T5885] Call Trace: [ 40.269888][ T5885] [ 40.269892][ T5885] dump_stack_lvl+0x100/0x190 [ 40.269911][ T5885] should_fail_ex.cold+0x5/0xa [ 40.269925][ T5885] should_failslab+0xc2/0x120 [ 40.269941][ T5885] __kmalloc_cache_noprof+0x91/0x6d0 [ 40.269958][ T5885] ? stack_depot_init+0x17/0x80 [ 40.269973][ T5885] ? __hw_addr_create+0x57/0x220 [ 40.269993][ T5885] __hw_addr_create+0x57/0x220 [ 40.270011][ T5885] __hw_addr_add_ex+0x32b/0x650 [ 40.270028][ T5885] ? stack_depot_init+0x38/0x80 [ 40.270043][ T5885] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 40.270062][ T5885] ? __mutex_unlock_slowpath+0x35d/0x930 [ 40.270096][ T5885] dev_addr_init+0x161/0x250 [ 40.270110][ T5885] ? __pfx_dev_addr_init+0x10/0x10 [ 40.270125][ T5885] ? __pfx_ipgre_tap_setup+0x10/0x10 [ 40.270139][ T5885] ? __pfx_ipgre_tap_setup+0x10/0x10 [ 40.270150][ T5885] alloc_netdev_mqs+0x363/0x15c0 [ 40.270168][ T5885] __ip_tunnel_create+0x398/0x670 [ 40.270183][ T5885] ? __pfx___ip_tunnel_create+0x10/0x10 [ 40.270197][ T5885] ? net_generic+0xea/0x2a0 [ 40.270214][ T5885] ip_tunnel_init_net+0x230/0x780 [ 40.270231][ T5885] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 40.270251][ T5885] ? __pfx_ipgre_tap_init_net+0x10/0x10 [ 40.270264][ T5885] ops_init+0x1e2/0x5f0 [ 40.270282][ T5885] setup_net+0x118/0x3a0 [ 40.270297][ T5885] ? __pfx_setup_net+0x10/0x10 [ 40.270316][ T5885] copy_net_ns+0x345/0x7a0 [ 40.270333][ T5885] create_new_namespaces+0x3ea/0xac0 [ 40.270359][ T5885] unshare_nsproxy_namespaces+0xf2/0x220 [ 40.270377][ T5885] ksys_unshare+0x4a2/0xa70 [ 40.270390][ T5885] ? __pfx_ksys_unshare+0x10/0x10 [ 40.270408][ T5885] __ia32_sys_unshare+0x30/0x40 [ 40.270420][ T5885] __do_fast_syscall_32+0x13a/0x8b0 [ 40.270440][ T5885] do_fast_syscall_32+0x32/0x70 [ 40.270458][ T5885] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 40.270472][ T5885] RIP: 0023:0xf703efec [ 40.270485][ T5885] Code: Unable to access opcode bytes at 0xf703efc2. [ 40.270490][ T5885] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 40.270501][ T5885] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 40.270508][ T5885] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.270514][ T5885] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 40.270520][ T5885] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 40.270526][ T5885] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 40.270539][ T5885] [ 40.273034][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.506584][ T5894] Bluetooth: MGMT ver 1.23 [ 40.529863][ T5902] FAULT_INJECTION: forcing a failure. [ 40.529863][ T5902] name failslab, interval 1, probability 0, space 0, times 0 [ 40.529895][ T5902] CPU: 2 UID: 0 PID: 5902 Comm: syz.1.6 Not tainted syzkaller #0 PREEMPT(full) [ 40.529916][ T5902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.529936][ T5902] Call Trace: [ 40.529942][ T5902] [ 40.529949][ T5902] dump_stack_lvl+0x100/0x190 [ 40.529979][ T5902] should_fail_ex.cold+0x5/0xa [ 40.530005][ T5902] should_failslab+0xc2/0x120 [ 40.530047][ T5902] __kmalloc_cache_noprof+0x91/0x6d0 [ 40.530078][ T5902] ? alloc_fs_context+0x57/0xf40 [ 40.530111][ T5902] alloc_fs_context+0x57/0xf40 [ 40.530141][ T5902] mq_init_ns+0x16e/0x820 [ 40.530167][ T5902] copy_ipcs+0x3dd/0x7e0 [ 40.530193][ T5902] create_new_namespaces+0x20a/0xac0 [ 40.530220][ T5902] ? security_capable+0x80/0x260 [ 40.530247][ T5902] unshare_nsproxy_namespaces+0xf2/0x220 [ 40.530277][ T5902] ksys_unshare+0x4a2/0xa70 [ 40.530295][ T5902] ? __pfx_ksys_unshare+0x10/0x10 [ 40.530321][ T5902] __ia32_sys_unshare+0x30/0x40 [ 40.530338][ T5902] __do_fast_syscall_32+0x13a/0x8b0 [ 40.530369][ T5902] do_fast_syscall_32+0x32/0x70 [ 40.530395][ T5902] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 40.530424][ T5902] RIP: 0023:0xf7f78fec [ 40.530443][ T5902] Code: Unable to access opcode bytes at 0xf7f78fc2. [ 40.530451][ T5902] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 40.530472][ T5902] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 40.530484][ T5902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.530495][ T5902] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 40.530506][ T5902] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 40.530515][ T5902] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 40.530534][ T5902] [ 40.535196][ T5902] FAULT_INJECTION: forcing a failure. [ 40.535196][ T5902] name failslab, interval 1, probability 0, space 0, times 0 [ 40.535500][ T5902] CPU: 2 UID: 0 PID: 5902 Comm: syz.1.6 Not tainted syzkaller #0 PREEMPT(full) [ 40.535521][ T5902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.535531][ T5902] Call Trace: [ 40.535536][ T5902] [ 40.535542][ T5902] dump_stack_lvl+0x100/0x190 [ 40.535570][ T5902] should_fail_ex.cold+0x5/0xa [ 40.535592][ T5902] should_failslab+0xc2/0x120 [ 40.535614][ T5902] __kmalloc_cache_noprof+0x91/0x6d0 [ 40.535641][ T5902] ? alloc_fs_context+0x57/0xf40 [ 40.535669][ T5902] alloc_fs_context+0x57/0xf40 [ 40.535695][ T5902] mq_init_ns+0x16e/0x820 [ 40.535718][ T5902] copy_ipcs+0x3dd/0x7e0 [ 40.535743][ T5902] create_new_namespaces+0x20a/0xac0 [ 40.535767][ T5902] ? security_capable+0x80/0x260 [ 40.535790][ T5902] unshare_nsproxy_namespaces+0xf2/0x220 [ 40.535817][ T5902] ksys_unshare+0x4a2/0xa70 [ 40.535836][ T5902] ? __pfx_ksys_unshare+0x10/0x10 [ 40.535860][ T5902] __ia32_sys_unshare+0x30/0x40 [ 40.535878][ T5902] __do_fast_syscall_32+0x13a/0x8b0 [ 40.535906][ T5902] do_fast_syscall_32+0x32/0x70 [ 40.535931][ T5902] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 40.535946][ T5902] RIP: 0023:0xf7f78fec [ 40.535964][ T5902] Code: Unable to access opcode bytes at 0xf7f78fc2. [ 40.535971][ T5902] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 40.535988][ T5902] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 40.536000][ T5902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.536009][ T5902] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 40.536018][ T5902] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 40.536029][ T5902] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 40.536050][ T5902] [ 40.539817][ T5902] FAULT_INJECTION: forcing a failure. [ 40.539817][ T5902] name failslab, interval 1, probability 0, space 0, times 0 [ 40.539844][ T5902] CPU: 2 UID: 0 PID: 5902 Comm: syz.1.6 Not tainted syzkaller #0 PREEMPT(full) [ 40.539864][ T5902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.539874][ T5902] Call Trace: [ 40.539880][ T5902] [ 40.539888][ T5902] dump_stack_lvl+0x100/0x190 [ 40.539937][ T5902] should_fail_ex.cold+0x5/0xa [ 40.539961][ T5902] should_failslab+0xc2/0x120 [ 40.539986][ T5902] __kmalloc_noprof+0xfc/0x840 [ 40.540006][ T5902] ? __list_lru_init+0xd9/0x4b0 [ 40.540034][ T5902] __list_lru_init+0xd9/0x4b0 [ 40.540059][ T5902] sget_fc+0xa76/0x1f20 [ 40.540082][ T5902] ? __pfx_set_anon_super_fc+0x10/0x10 [ 40.540109][ T5902] ? __pfx_sget_fc+0x10/0x10 [ 40.540124][ T5902] ? refcount_dec_not_one+0x136/0x1c0 [ 40.540144][ T5902] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 40.540164][ T5902] ? __kasan_kmalloc+0xaa/0xb0 [ 40.540183][ T5902] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 40.540210][ T5902] ? __kasan_kmalloc+0xaa/0xb0 [ 40.540233][ T5902] ? __pfx_mqueue_fill_super+0x10/0x10 [ 40.540251][ T5902] get_tree_nodev+0x28/0x190 [ 40.540267][ T5902] mqueue_get_tree+0xf1/0x130 [ 40.540285][ T5902] vfs_get_tree+0x92/0x320 [ 40.540308][ T5902] fc_mount_longterm+0x1a/0x270 [ 40.540327][ T5902] mq_init_ns+0x482/0x820 [ 40.540352][ T5902] copy_ipcs+0x3dd/0x7e0 [ 40.540375][ T5902] create_new_namespaces+0x20a/0xac0 [ 40.540398][ T5902] ? security_capable+0x80/0x260 [ 40.540421][ T5902] unshare_nsproxy_namespaces+0xf2/0x220 [ 40.540446][ T5902] ksys_unshare+0x4a2/0xa70 [ 40.540463][ T5902] ? __pfx_ksys_unshare+0x10/0x10 [ 40.540489][ T5902] __ia32_sys_unshare+0x30/0x40 [ 40.540506][ T5902] __do_fast_syscall_32+0x13a/0x8b0 [ 40.540540][ T5902] do_fast_syscall_32+0x32/0x70 [ 40.540572][ T5902] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 40.540595][ T5902] RIP: 0023:0xf7f78fec [ 40.540615][ T5902] Code: Unable to access opcode bytes at 0xf7f78fc2. [ 40.540623][ T5902] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 40.540641][ T5902] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 40.540653][ T5902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.540663][ T5902] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 40.540675][ T5902] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 40.540686][ T5902] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 40.540711][ T5902] [ 40.602258][ T5902] FAULT_INJECTION: forcing a failure. [ 40.602258][ T5902] name failslab, interval 1, probability 0, space 0, times 0 [ 40.602287][ T5902] CPU: 2 UID: 0 PID: 5902 Comm: syz.1.6 Not tainted syzkaller #0 PREEMPT(full) [ 40.602307][ T5902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.602319][ T5902] Call Trace: [ 40.602324][ T5902] [ 40.602345][ T5902] dump_stack_lvl+0x100/0x190 [ 40.602374][ T5902] should_fail_ex.cold+0x5/0xa [ 40.602397][ T5902] should_failslab+0xc2/0x120 [ 40.602422][ T5902] kmem_cache_alloc_noprof+0x92/0x6a0 [ 40.602443][ T5902] ? __kernfs_new_node+0xd2/0xa10 [ 40.602470][ T5902] __kernfs_new_node+0xd2/0xa10 [ 40.602496][ T5902] ? __pfx___kernfs_new_node+0x10/0x10 [ 40.602522][ T5902] ? lock_acquire+0x1d1/0x380 [ 40.602546][ T5902] ? kernfs_root+0x23/0x2a0 [ 40.602567][ T5902] ? find_held_lock+0x2b/0x80 [ 40.602584][ T5902] ? kernfs_root+0xee/0x2a0 [ 40.602604][ T5902] ? kernfs_root+0xee/0x2a0 [ 40.602628][ T5902] kernfs_new_node+0x117/0x150 [ 40.602655][ T5902] __kernfs_create_file+0x53/0x350 [ 40.602685][ T5902] sysfs_add_file_mode_ns+0x207/0x3c0 [ 40.602711][ T5902] internal_create_group+0x593/0xfb0 [ 40.602757][ T5902] ? kobject_init_and_add+0x129/0x180 [ 40.602778][ T5902] ? __pfx_internal_create_group+0x10/0x10 [ 40.602799][ T5902] ? __pfx_kobject_init_and_add+0x10/0x10 [ 40.602818][ T5902] ? ops_init+0x1e2/0x5f0 [ 40.602843][ T5902] ? ksys_unshare+0x4a2/0xa70 [ 40.602860][ T5902] ? __ia32_sys_unshare+0x30/0x40 [ 40.602876][ T5902] ? __do_fast_syscall_32+0x13a/0x8b0 [ 40.602901][ T5902] ? do_fast_syscall_32+0x32/0x70 [ 40.602924][ T5902] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 40.602950][ T5902] internal_create_groups+0x9d/0x150 [ 40.602972][ T5902] netdev_queue_update_kobjects+0x115/0x6f0 [ 40.602998][ T5902] netdev_register_kobject+0x2e9/0x410 [ 40.603018][ T5902] register_netdevice+0x15b6/0x25a0 [ 40.603047][ T5902] ? __pfx_register_netdevice+0x10/0x10 [ 40.603073][ T5902] ? alloc_netdev_mqs+0x120a/0x15c0 [ 40.603100][ T5902] register_netdev+0x34/0x50 [ 40.603123][ T5902] sit_init_net+0x2c0/0x5e0 [ 40.603148][ T5902] ? __pfx_sit_init_net+0x10/0x10 [ 40.603172][ T5902] ops_init+0x1e2/0x5f0 [ 40.603198][ T5902] setup_net+0x118/0x3a0 [ 40.603222][ T5902] ? __pfx_setup_net+0x10/0x10 [ 40.603253][ T5902] copy_net_ns+0x345/0x7a0 [ 40.603281][ T5902] create_new_namespaces+0x3ea/0xac0 [ 40.603312][ T5902] unshare_nsproxy_namespaces+0xf2/0x220 [ 40.603340][ T5902] ksys_unshare+0x4a2/0xa70 [ 40.603359][ T5902] ? __pfx_ksys_unshare+0x10/0x10 [ 40.603385][ T5902] __ia32_sys_unshare+0x30/0x40 [ 40.603402][ T5902] __do_fast_syscall_32+0x13a/0x8b0 [ 40.603432][ T5902] do_fast_syscall_32+0x32/0x70 [ 40.603458][ T5902] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 40.603480][ T5902] RIP: 0023:0xf7f78fec [ 40.603499][ T5902] Code: Unable to access opcode bytes at 0xf7f78fc2. [ 40.603509][ T5902] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 40.603526][ T5902] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 40.603537][ T5902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.603547][ T5902] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 40.603556][ T5902] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 40.603566][ T5902] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 40.603589][ T5902] [ 40.893308][ T5916] FAULT_INJECTION: forcing a failure. [ 40.893308][ T5916] name failslab, interval 1, probability 0, space 0, times 0 [ 40.893329][ T5916] CPU: 3 UID: 0 PID: 5916 Comm: syz.2.11 Not tainted syzkaller #0 PREEMPT(full) [ 40.893341][ T5916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.893348][ T5916] Call Trace: [ 40.893351][ T5916] [ 40.893362][ T5916] dump_stack_lvl+0x100/0x190 [ 40.893381][ T5916] should_fail_ex.cold+0x5/0xa [ 40.893396][ T5916] should_failslab+0xc2/0x120 [ 40.893413][ T5916] __kmalloc_cache_noprof+0x91/0x6d0 [ 40.893431][ T5916] ? copy_ipcs+0x10d/0x7e0 [ 40.893449][ T5916] copy_ipcs+0x10d/0x7e0 [ 40.893463][ T5916] create_new_namespaces+0x20a/0xac0 [ 40.893479][ T5916] ? security_capable+0x80/0x260 [ 40.893494][ T5916] unshare_nsproxy_namespaces+0xf2/0x220 [ 40.893510][ T5916] ksys_unshare+0x4a2/0xa70 [ 40.893525][ T5916] ? __pfx_ksys_unshare+0x10/0x10 [ 40.893540][ T5916] __ia32_sys_unshare+0x30/0x40 [ 40.893550][ T5916] __do_fast_syscall_32+0x13a/0x8b0 [ 40.893568][ T5916] do_fast_syscall_32+0x32/0x70 [ 40.893584][ T5916] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 40.893599][ T5916] RIP: 0023:0xf705efec [ 40.893613][ T5916] Code: Unable to access opcode bytes at 0xf705efc2. [ 40.893618][ T5916] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 40.893629][ T5916] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 40.893636][ T5916] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.893643][ T5916] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 40.893649][ T5916] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 40.893655][ T5916] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 40.893668][ T5916] [ 40.896218][ T5916] FAULT_INJECTION: forcing a failure. [ 40.896218][ T5916] name failslab, interval 1, probability 0, space 0, times 0 [ 40.896236][ T5916] CPU: 3 UID: 0 PID: 5916 Comm: syz.2.11 Not tainted syzkaller #0 PREEMPT(full) [ 40.896247][ T5916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.896254][ T5916] Call Trace: [ 40.896257][ T5916] [ 40.896262][ T5916] dump_stack_lvl+0x100/0x190 [ 40.896279][ T5916] should_fail_ex.cold+0x5/0xa [ 40.896293][ T5916] should_failslab+0xc2/0x120 [ 40.896307][ T5916] __kmalloc_cache_noprof+0x91/0x6d0 [ 40.896324][ T5916] ? __kasan_kmalloc+0xaa/0xb0 [ 40.896336][ T5916] ? mqueue_init_fs_context+0x4b/0x690 [ 40.896353][ T5916] mqueue_init_fs_context+0x4b/0x690 [ 40.896374][ T5916] alloc_fs_context+0x60c/0xf40 [ 40.896391][ T5916] mq_init_ns+0x16e/0x820 [ 40.896406][ T5916] copy_ipcs+0x3dd/0x7e0 [ 40.896420][ T5916] create_new_namespaces+0x20a/0xac0 [ 40.896436][ T5916] ? security_capable+0x80/0x260 [ 40.896450][ T5916] unshare_nsproxy_namespaces+0xf2/0x220 [ 40.896467][ T5916] ksys_unshare+0x4a2/0xa70 [ 40.896478][ T5916] ? __pfx_ksys_unshare+0x10/0x10 [ 40.896493][ T5916] __ia32_sys_unshare+0x30/0x40 [ 40.896503][ T5916] __do_fast_syscall_32+0x13a/0x8b0 [ 40.896522][ T5916] do_fast_syscall_32+0x32/0x70 [ 40.896538][ T5916] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 40.896551][ T5916] RIP: 0023:0xf705efec [ 40.896562][ T5916] Code: Unable to access opcode bytes at 0xf705efc2. [ 40.896567][ T5916] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 40.896578][ T5916] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 40.896584][ T5916] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.896592][ T5916] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 40.896598][ T5916] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 40.896604][ T5916] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 40.896617][ T5916] [ 40.899703][ T5916] FAULT_INJECTION: forcing a failure. [ 40.899703][ T5916] name failslab, interval 1, probability 0, space 0, times 0 [ 40.899724][ T5916] CPU: 3 UID: 0 PID: 5916 Comm: syz.2.11 Not tainted syzkaller #0 PREEMPT(full) [ 40.899740][ T5916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.899749][ T5916] Call Trace: [ 40.899755][ T5916] [ 40.899761][ T5916] dump_stack_lvl+0x100/0x190 [ 40.899782][ T5916] should_fail_ex.cold+0x5/0xa [ 40.899801][ T5916] should_failslab+0xc2/0x120 [ 40.899821][ T5916] __kmalloc_cache_noprof+0x91/0x6d0 [ 40.899847][ T5916] ? sget_fc+0x117/0x1f20 [ 40.899858][ T5916] ? sget_fc+0x1ba/0x1f20 [ 40.899871][ T5916] sget_fc+0x1ba/0x1f20 [ 40.899883][ T5916] ? __pfx_set_anon_super_fc+0x10/0x10 [ 40.899898][ T5916] ? __pfx_sget_fc+0x10/0x10 [ 40.899907][ T5916] ? refcount_dec_not_one+0x136/0x1c0 [ 40.899920][ T5916] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 40.899932][ T5916] ? __kasan_kmalloc+0xaa/0xb0 [ 40.899944][ T5916] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 40.899960][ T5916] ? __kasan_kmalloc+0xaa/0xb0 [ 40.899973][ T5916] ? __pfx_mqueue_fill_super+0x10/0x10 [ 40.899985][ T5916] get_tree_nodev+0x28/0x190 [ 40.899996][ T5916] mqueue_get_tree+0xf1/0x130 [ 40.900008][ T5916] vfs_get_tree+0x92/0x320 [ 40.900024][ T5916] fc_mount_longterm+0x1a/0x270 [ 40.900035][ T5916] mq_init_ns+0x482/0x820 [ 40.900049][ T5916] copy_ipcs+0x3dd/0x7e0 [ 40.900064][ T5916] create_new_namespaces+0x20a/0xac0 [ 40.900079][ T5916] ? security_capable+0x80/0x260 [ 40.900093][ T5916] unshare_nsproxy_namespaces+0xf2/0x220 [ 40.900110][ T5916] ksys_unshare+0x4a2/0xa70 [ 40.900120][ T5916] ? __pfx_ksys_unshare+0x10/0x10 [ 40.900135][ T5916] __ia32_sys_unshare+0x30/0x40 [ 40.900145][ T5916] __do_fast_syscall_32+0x13a/0x8b0 [ 40.900164][ T5916] do_fast_syscall_32+0x32/0x70 [ 40.900180][ T5916] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 40.900193][ T5916] RIP: 0023:0xf705efec [ 40.900205][ T5916] Code: Unable to access opcode bytes at 0xf705efc2. [ 40.900211][ T5916] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 40.900221][ T5916] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 40.900228][ T5916] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.900234][ T5916] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 40.900240][ T5916] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 40.900246][ T5916] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 40.900258][ T5916] [ 40.974590][ T5916] FAULT_INJECTION: forcing a failure. [ 40.974590][ T5916] name failslab, interval 1, probability 0, space 0, times 0 [ 40.974610][ T5916] CPU: 2 UID: 0 PID: 5916 Comm: syz.2.11 Not tainted syzkaller #0 PREEMPT(full) [ 40.974623][ T5916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.974630][ T5916] Call Trace: [ 40.974634][ T5916] [ 40.974639][ T5916] dump_stack_lvl+0x100/0x190 [ 40.974658][ T5916] should_fail_ex.cold+0x5/0xa [ 40.974672][ T5916] should_failslab+0xc2/0x120 [ 40.974688][ T5916] __kmalloc_cache_noprof+0x91/0x6d0 [ 40.974706][ T5916] ? __hw_addr_create+0x57/0x220 [ 40.974725][ T5916] __hw_addr_create+0x57/0x220 [ 40.974746][ T5916] __hw_addr_add_ex+0x32b/0x650 [ 40.974765][ T5916] ? stack_depot_init+0x38/0x80 [ 40.974781][ T5916] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 40.974798][ T5916] ? __mutex_unlock_slowpath+0x35d/0x930 [ 40.974816][ T5916] dev_addr_init+0x161/0x250 [ 40.974828][ T5916] ? __pfx_dev_addr_init+0x10/0x10 [ 40.974842][ T5916] ? __pfx_loopback_setup+0x10/0x10 [ 40.974871][ T5916] ? __pfx_loopback_setup+0x10/0x10 [ 40.974882][ T5916] alloc_netdev_mqs+0x363/0x15c0 [ 40.974899][ T5916] ? __pfx_loopback_net_init+0x10/0x10 [ 40.974910][ T5916] loopback_net_init+0x38/0x170 [ 40.974922][ T5916] ? __pfx_loopback_net_init+0x10/0x10 [ 40.974933][ T5916] ops_init+0x1e2/0x5f0 [ 40.974950][ T5916] setup_net+0x118/0x3a0 [ 40.974966][ T5916] ? __pfx_setup_net+0x10/0x10 [ 40.974986][ T5916] copy_net_ns+0x345/0x7a0 [ 40.975004][ T5916] create_new_namespaces+0x3ea/0xac0 [ 40.975023][ T5916] unshare_nsproxy_namespaces+0xf2/0x220 [ 40.975040][ T5916] ksys_unshare+0x4a2/0xa70 [ 40.975051][ T5916] ? __pfx_ksys_unshare+0x10/0x10 [ 40.975067][ T5916] __ia32_sys_unshare+0x30/0x40 [ 40.975077][ T5916] __do_fast_syscall_32+0x13a/0x8b0 [ 40.975095][ T5916] do_fast_syscall_32+0x32/0x70 [ 40.975112][ T5916] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 40.975126][ T5916] RIP: 0023:0xf705efec [ 40.975139][ T5916] Code: Unable to access opcode bytes at 0xf705efc2. [ 40.975144][ T5916] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 40.975154][ T5916] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 40.975161][ T5916] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.975167][ T5916] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 40.975173][ T5916] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 40.975179][ T5916] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 40.975192][ T5916] [ 41.504234][ T5948] loop0: detected capacity change from 0 to 32768 [ 41.505336][ T2351] wiimote 0005:057E:0330.0002: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 41.505960][ T2351] wiimote 0005:057E:0330.0002: New device registered [ 41.813068][ T5943] wiimote 0005:057E:0330.0002: Device removed [ 41.825049][ T5960] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 41.892683][ T5098] Bluetooth: hci2: command tx timeout [ 41.892709][ T5098] Bluetooth: hci1: command tx tim ** replaying previous printk message ** [ 41.892709][ T5098] Bluetooth: hci1: command tx timeout [ 41.892766][ T65] Bluetooth: hci3: command tx timeout [ 41.905865][ T5960] [ 41.911554][ T5960] ====================================================== [ 41.913709][ T5960] WARNING: possible circular locking dependency detected [ 41.915802][ T5960] syzkaller #0 Not tainted [ 41.917247][ T5960] ------------------------------------------------------ [ 41.919706][ T5960] syz.0.22/5960 is trying to acquire lock: [ 41.921847][ T5960] ffffffff90480980 (tpg_instances_lock){+.+.}-{4:4}, at: tcm_alloc+0x20/0x440 [ 41.924542][ T5960] [ 41.924542][ T5960] but task is already holding lock: [ 41.926716][ T5960] ffff88806e746390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 41.929422][ T5960] [ 41.929422][ T5960] which lock already depends on the new lock. [ 41.929422][ T5960] [ 41.932760][ T5960] [ 41.932760][ T5960] the existing dependency chain (in reverse order) is: [ 41.935864][ T5960] [ 41.935864][ T5960] -> #2 (&gi->lock){+.+.}-{4:4}: [ 41.937962][ T5960] lock_acquire+0x1d1/0x380 [ 41.939463][ T5960] __mutex_lock+0x1a4/0x1bd0 [ 41.941059][ T5960] config_usb_cfg_link+0x57/0x3a0 [ 41.942911][ T5960] configfs_symlink+0x695/0x1340 [ 41.944497][ T5960] vfs_symlink+0x178/0x4d0 [ 41.946175][ T5960] filename_symlinkat+0x2a6/0x560 [ 41.948310][ T5960] __ia32_sys_symlinkat+0x9b/0xe0 [ 41.950090][ T5960] __do_fast_syscall_32+0x13a/0x8b0 [ 41.951874][ T5960] do_fast_syscall_32+0x32/0x70 [ 41.953626][ T5960] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 41.955755][ T5960] [ 41.955755][ T5960] -> #1 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 41.958450][ T5960] lock_acquire+0x1d1/0x380 [ 41.960061][ T5960] down_write+0x8b/0x1f0 [ 41.961604][ T5960] configfs_depend_item_unlocked+0xf3/0x6a0 [ 41.964293][ T5960] usbg_make_tpg+0x251/0x610 [ 41.965963][ T5960] target_fabric_make_tpg+0xab/0x8c0 [ 41.967806][ T5960] configfs_mkdir+0x525/0xd40 [ 41.969458][ T5960] vfs_mkdir+0x364/0x850 [ 41.970980][ T5960] filename_mkdirat+0x48b/0x5e0 [ 41.972712][ T5960] __ia32_sys_mkdirat+0x88/0xc0 [ 41.974400][ T5960] __do_fast_syscall_32+0x13a/0x8b0 [ 41.976179][ T5960] do_fast_syscall_32+0x32/0x70 [ 41.977876][ T5960] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 41.980263][ T5960] [ 41.980263][ T5960] -> #0 (tpg_instances_lock){+.+.}-{4:4}: [ 41.983239][ T5960] check_prev_add+0xeb/0xe60 [ 41.984857][ T5960] __lock_acquire+0x1528/0x1f40 [ 41.986572][ T5960] lock_acquire+0x1d1/0x380 [ 41.988158][ T5960] __mutex_lock+0x1a4/0x1bd0 [ 41.989816][ T5960] tcm_alloc+0x20/0x440 [ 41.991307][ T5960] usb_get_function+0x5e/0xd0 [ 41.993021][ T5960] config_usb_cfg_link+0x1ed/0x3a0 [ 41.994723][ T5960] configfs_symlink+0x695/0x1340 [ 41.996348][ T5960] vfs_symlink+0x178/0x4d0 [ 41.997938][ T5960] filename_symlinkat+0x2a6/0x560 [ 42.000208][ T5960] __ia32_sys_symlinkat+0x9b/0xe0 [ 42.001945][ T5960] __do_fast_syscall_32+0x13a/0x8b0 [ 42.003770][ T5960] do_fast_syscall_32+0x32/0x70 [ 42.005451][ T5960] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 42.007563][ T5960] [ 42.007563][ T5960] other info that might help us debug this: [ 42.007563][ T5960] [ 42.010745][ T5960] Chain exists of: [ 42.010745][ T5960] tpg_instances_lock --> &sb->s_type->i_mutex_key#24 --> &gi->lock [ 42.010745][ T5960] [ 42.015595][ T5960] Possible unsafe locking scenario: [ 42.015595][ T5960] [ 42.017917][ T5960] CPU0 CPU1 [ 42.019583][ T5960] ---- ---- [ 42.021284][ T5960] lock(&gi->lock); [ 42.022588][ T5960] lock(&sb->s_type->i_mutex_key#24); [ 42.025447][ T5960] lock(&gi->lock); [ 42.027830][ T5960] lock(tpg_instances_lock); [ 42.029335][ T5960] [ 42.029335][ T5960] *** DEADLOCK *** [ 42.029335][ T5960] [ 42.031884][ T5960] locks held by syz.0.22/5960: 3, last CPU#2: [ 42.033817][ T5960] #0: ffff888022a0e460 (sb_writers#12){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 42.037054][ T5960] #1: ffff888013ab9440 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 42.040813][ T5960] #2: ffff88806e746390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 42.043840][ T5960] [ 42.043840][ T5960] stack backtrace: [ 42.045669][ T5960] CPU: 2 UID: 0 PID: 5960 Comm: syz.0.22 Not tainted syzkaller #0 PREEMPT(full) [ 42.048974][ T5960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 42.052235][ T5960] Call Trace: [ 42.053343][ T5960] [ 42.054285][ T5960] dump_stack_lvl+0x100/0x190 [ 42.055765][ T5960] print_circular_bug.cold+0x178/0x1be [ 42.057487][ T5960] check_noncircular+0x146/0x160 [ 42.059304][ T5960] check_prev_add+0xeb/0xe60 [ 42.061273][ T5960] ? __schedule+0x126b/0x6920 [ 42.063274][ T5960] __lock_acquire+0x1528/0x1f40 [ 42.065355][ T5960] lock_acquire+0x1d1/0x380 [ 42.067299][ T5960] ? tcm_alloc+0x20/0x440 [ 42.068753][ T5960] ? __pfx___might_resched+0x10/0x10 [ 42.070448][ T5960] __mutex_lock+0x1a4/0x1bd0 [ 42.071929][ T5960] ? tcm_alloc+0x20/0x440 [ 42.073776][ T5960] ? tcm_alloc+0x20/0x440 [ 42.075396][ T5960] ? __mutex_lock+0x8f4/0x1bd0 [ 42.076899][ T5960] ? config_usb_cfg_link+0x57/0x3a0 [ 42.078571][ T5960] ? __pfx___mutex_lock+0x10/0x10 [ 42.080164][ T5960] ? __lock_acquire+0x5c0/0x1f40 [ 42.081726][ T5960] ? tcm_alloc+0x20/0x440 [ 42.083139][ T5960] tcm_alloc+0x20/0x440 [ 42.084516][ T5960] usb_get_function+0x5e/0xd0 [ 42.086532][ T5960] config_usb_cfg_link+0x1ed/0x3a0 [ 42.088735][ T5960] ? mntput_no_expire+0xe7/0x220 [ 42.090803][ T5960] configfs_symlink+0x695/0x1340 [ 42.092919][ T5960] ? bpf_lsm_inode_permission+0x9/0x10 [ 42.095222][ T5960] ? security_inode_permission+0xbf/0x250 [ 42.097637][ T5960] ? __pfx_configfs_symlink+0x10/0x10 [ 42.099937][ T5960] vfs_symlink+0x178/0x4d0 [ 42.101856][ T5960] filename_symlinkat+0x2a6/0x560 [ 42.104012][ T5960] ? __pfx_filename_symlinkat+0x10/0x10 [ 42.106326][ T5960] ? strncpy_from_user+0x19d/0x2d0 [ 42.108506][ T5960] ? do_getname+0x191/0x390 [ 42.110496][ T5960] __ia32_sys_symlinkat+0x9b/0xe0 [ 42.112645][ T5960] __do_fast_syscall_32+0x13a/0x8b0 [ 42.114814][ T5960] do_fast_syscall_32+0x32/0x70 [ 42.116838][ T5960] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 42.119089][ T5960] RIP: 0023:0xf703efec [ 42.120831][ T5960] Code: Unable to access opcode bytes at 0xf703efc2. [ 42.123626][ T5960] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 42.127210][ T5960] RAX: ffffffffffffffda RBX: 00000000800005c0 RCX: 00000000ffffff9c [ 42.130160][ T5960] RDX: 0000000080000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.133239][ T5960] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 42.135831][ T5960] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 42.138322][ T5960] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 42.140789][ T5960] [ 42.393247][ T5092] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 42.574252][ T5092] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 42.574689][ T5092] usb 5-1: Dual-Role OTG device on HNP port [ 42.574887][ T5092] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.575785][ T5826] Using the BOT protocol [ 42.579227][ T5826] Using the UAS protocol [ 42.581184][ T5092] scsi host6: uas [ 42.593315][ T153] scsi 6:0:0:0: Direct-Access LIO-ORG RAMDISK-MCP 4.0 PQ: 0 ANSI: 6 [ 42.596200][ T153] sd 6:0:0:0: Attached scsi generic sg2 type 0 [ 42.599257][ T46] sd 6:0:0:0: [sdb] 512 512-byte logical blocks: (262 kB/256 KiB) [ 42.599972][ T46] sd 6:0:0:0: [sdb] Write Protect is off [ 42.599988][ T46] sd 6:0:0:0: [sdb] Mode Sense: 43 00 00 08 [ 42.601402][ T46] sd 6:0:0:0: [sdb] Write cache: disabled, read cache: enabled, doesn't support DPO or FUA [ 42.612784][ T1353] wiimote 0005:057E:0330.0002: detected device: Nintendo Wii Remote Plus (Gen 2) [ 42.625345][ T1353] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0002/input/input6 [ 42.630003][ T1353] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0002/input/input7 [ 42.631657][ T1353] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0002/input/input5 [ 42.642887][ T46] sd 6:0:0:0: [sdb] Attached SCSI disk [ 43.962626][ T5740] Bluetooth: hci1: command tx timeout [ 43.962646][ T5740] Bluetooth: hci2: command tx timeout [ 43.962684][ T65] Bluetooth: hci3: command tx timeout [ 46.042589][ T5098] Bluetooth: hci2: command tx timeout [ 46.042608][ T5098] Bluetooth: hci1: command tx timeout [ 46.042627][ T65] Bluetooth: hci3: command tx timeout