last executing test programs: 2.230330214s ago: executing program 0 (id=122): io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xf, 0xffffffffffffffff, &(0x7f0000000000)='F', 0x1, 0x9}]) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f00000001c0)=0x9c) 1.818915957s ago: executing program 2 (id=129): r0 = socket$kcm(0x2, 0x5, 0x0) socket$kcm(0x11, 0x20000000000000a, 0x300) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 1.762155007s ago: executing program 2 (id=130): recvmmsg(0xffffffffffffffff, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000002a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000002940)=""/193, 0xc1}], 0x6}, 0x400801}], 0x1, 0x2042, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0xffe3, 0x0}}], 0x400005c, 0x2400c8a0) 1.658092895s ago: executing program 2 (id=132): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x1000002}}) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0xfffffffd, 0x30, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', r1, 0x0, 0x0, 0x1, 0x0, 0x0, @mcast2, @empty, 0x0, 0x7800, 0x1000002}}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) 1.633601849s ago: executing program 2 (id=133): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000140)=@chain) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, 0x0, 0x0, r0) 1.571977706s ago: executing program 2 (id=134): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000940)=[@in6={0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e20, @remote}], 0x2c) 1.510264864s ago: executing program 2 (id=135): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) r0 = memfd_create(&(0x7f0000000480)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\b\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8-\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x13\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~f\xb4%!X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\x00\x00\x00\x00\x00\x00\x00\x00\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xaek\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\b\x00\x00\x00\x00\x00\x00\x00\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x93(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x00'/704, 0x7) syz_usb_connect(0x3, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r0, @ANYBLOB="79a9"], 0x0) r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r1, &(0x7f0000002200)=ANY=[], 0xfffffcd9) close_range(r0, 0xffffffffffffffff, 0x0) 1.29625848s ago: executing program 0 (id=136): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2e, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x1, 0x0, 0x6}}, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x728}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}]}, 0x5c}}, 0x0) 1.118448649s ago: executing program 0 (id=138): r0 = socket$kcm(0x2, 0x5, 0x0) socket$kcm(0x11, 0x20000000000000a, 0x300) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 1.055574792s ago: executing program 0 (id=139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x14}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x28000) 935.24121ms ago: executing program 0 (id=141): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x1000002}}) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0xfffffffd, 0x30, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', r1, 0x0, 0x0, 0x1, 0x0, 0x0, @mcast2, @empty, 0x0, 0x7800, 0x1000002}}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) 781.106566ms ago: executing program 3 (id=143): syz_open_dev$video(0x0, 0x10001, 0x8000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @loopback, 0x1e}, 0x1c) 746.183801ms ago: executing program 3 (id=144): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, 0x0, 0x0) 712.312905ms ago: executing program 0 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = syz_open_dev$loop(0x0, 0x7, 0x13a322) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, 0xffffffffffffff17, 0x0, 0x0) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) write(r2, &(0x7f0000000080), 0x0) ioctl(r1, 0x10001, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 586.31525ms ago: executing program 1 (id=146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c000180050001000300000006"], 0xbc}}, 0x0) 471.942373ms ago: executing program 3 (id=147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) 398.308948ms ago: executing program 1 (id=148): r0 = socket$kcm(0x2, 0x5, 0x0) socket$kcm(0x11, 0x20000000000000a, 0x300) sendmsg$inet(r0, 0x0, 0x3e8) 270.162289ms ago: executing program 3 (id=149): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x14}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x28000) 232.70528ms ago: executing program 1 (id=150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd4}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x6}, 0x1c) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000000303010000000000000000000a0000000c0002000000230100000001"], 0x54}}, 0x0) 155.096892ms ago: executing program 1 (id=151): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x6, 0x100000001, 0x3, 0x200024, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff}) write$binfmt_elf32(r0, &(0x7f0000000bc0)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0xef, 0x1, 0xc, 0x5, 0x2, 0x6, 0x9, 0x33f, 0x34, 0xb9, 0x6, 0x8, 0x20, 0x1, 0x2, 0xf, 0xdd}, [{0x6, 0x0, 0xfffffff9, 0x7, 0x6, 0xb65, 0x100, 0x1}]}, 0x54) 139.170901ms ago: executing program 3 (id=152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e657400000005000100"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) 34.421565ms ago: executing program 1 (id=153): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x1000002}}) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0xfffffffd, 0x30, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', r1, 0x0, 0x0, 0x1, 0x0, 0x0, @mcast2, @empty, 0x0, 0x7800, 0x1000002}}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) 19.078156ms ago: executing program 3 (id=154): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000140)=@chain) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000780), 0x0, r0) 0s ago: executing program 1 (id=155): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./config\x00', &(0x7f0000000880)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000980)='1\n\x00', 0x2) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x2, 0x0) write(r1, 0x0, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r2, &(0x7f0000000ac0)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/subsystems/testsubsys/namespaces/1/resv_enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000b40)='1\n\x00', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000bc0)='1\n\x00', 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.78' (ED25519) to the list of known hosts. [ 75.659041][ T5603] cgroup: Unknown subsys name 'net' [ 75.710725][ T5603] cgroup: Unknown subsys name 'cpuset' [ 75.713905][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.311729][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.058725][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.060492][ T5615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.061597][ T5615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.063868][ T5615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.064775][ T5615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.170765][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.171896][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.174055][ T5615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.192900][ T5615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.199570][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.295817][ T4931] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.307345][ T4931] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.309608][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.310589][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.313983][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.315908][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.323895][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.332636][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.339612][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.375194][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.754849][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.755650][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.771884][ T5613] bridge_slave_0: entered allmulticast mode [ 82.780729][ T5613] bridge_slave_0: entered promiscuous mode [ 82.829911][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.830026][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.830125][ T5613] bridge_slave_1: entered allmulticast mode [ 82.831461][ T5613] bridge_slave_1: entered promiscuous mode [ 82.932252][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.932402][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.932528][ T5623] bridge_slave_0: entered allmulticast mode [ 82.934131][ T5623] bridge_slave_0: entered promiscuous mode [ 82.980728][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.980968][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.981187][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.981318][ T5623] bridge_slave_1: entered allmulticast mode [ 82.982876][ T5623] bridge_slave_1: entered promiscuous mode [ 83.019832][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.019927][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.020328][ T5619] bridge_slave_0: entered allmulticast mode [ 83.021925][ T5619] bridge_slave_0: entered promiscuous mode [ 83.026149][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.069958][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.070057][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.070418][ T5619] bridge_slave_1: entered allmulticast mode [ 83.072000][ T5619] bridge_slave_1: entered promiscuous mode [ 83.107182][ T5615] Bluetooth: hci0: command tx timeout [ 83.161867][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.192590][ T5613] team0: Port device team_slave_0 added [ 83.195043][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.195293][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.195379][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.195487][ T5622] bridge_slave_0: entered allmulticast mode [ 83.199135][ T5622] bridge_slave_0: entered promiscuous mode [ 83.212436][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.213545][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.213820][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.222737][ T5622] bridge_slave_1: entered allmulticast mode [ 83.233007][ T5622] bridge_slave_1: entered promiscuous mode [ 83.261938][ T5613] team0: Port device team_slave_1 added [ 83.267250][ T5615] Bluetooth: hci1: command tx timeout [ 83.292618][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.347321][ T5615] Bluetooth: hci2: command tx timeout [ 83.371630][ T5623] team0: Port device team_slave_0 added [ 83.395005][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.396085][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.396103][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.396124][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.411313][ T5623] team0: Port device team_slave_1 added [ 83.418991][ T5619] team0: Port device team_slave_0 added [ 83.423413][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.423453][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.423522][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.439987][ T5615] Bluetooth: hci3: command tx timeout [ 83.517705][ T5619] team0: Port device team_slave_1 added [ 83.530449][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.533087][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.533127][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.533198][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.597862][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.597878][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.597902][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.620120][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.620172][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.620231][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.625340][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.625380][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.625449][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.770107][ T5622] team0: Port device team_slave_0 added [ 83.773725][ T5622] team0: Port device team_slave_1 added [ 83.788956][ T5613] hsr_slave_0: entered promiscuous mode [ 83.790030][ T5613] hsr_slave_1: entered promiscuous mode [ 83.878068][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.878084][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.878107][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.911913][ T5619] hsr_slave_0: entered promiscuous mode [ 83.914867][ T5619] hsr_slave_1: entered promiscuous mode [ 83.922657][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 83.922901][ T5619] Cannot create hsr debugfs directory [ 83.957398][ T5623] hsr_slave_0: entered promiscuous mode [ 83.958275][ T5623] hsr_slave_1: entered promiscuous mode [ 83.958843][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 83.958879][ T5623] Cannot create hsr debugfs directory [ 83.959806][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.959819][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.959842][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.159291][ T5622] hsr_slave_0: entered promiscuous mode [ 84.160197][ T5622] hsr_slave_1: entered promiscuous mode [ 84.160717][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 84.160737][ T5622] Cannot create hsr debugfs directory [ 84.525677][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.542356][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.543857][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.562021][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.562831][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.566030][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.588367][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.592504][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.669675][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.675426][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.691790][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.704106][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.704850][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.721337][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.722156][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.727358][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.837981][ T5623] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.841752][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.842822][ T5623] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.861546][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.886625][ T5623] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.891568][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.892655][ T5623] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.895238][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.017365][ T5622] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.020361][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.026205][ T5622] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.049317][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.050240][ T5622] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.052890][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.055669][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.087243][ T5622] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.091792][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.155707][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.189548][ T5615] Bluetooth: hci0: command tx timeout [ 85.195648][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.214996][ T984] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.215113][ T984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.245679][ T984] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.245746][ T984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.288943][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.313837][ T96] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.313909][ T96] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.343697][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.347830][ T5615] Bluetooth: hci1: command tx timeout [ 85.371798][ T724] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.371868][ T724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.427960][ T5615] Bluetooth: hci2: command tx timeout [ 85.431457][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.459866][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.468650][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.468936][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.501604][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.501719][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.506699][ T5615] Bluetooth: hci3: command tx timeout [ 85.560197][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.604618][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.604792][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.647872][ T984] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.647973][ T984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.708268][ T5623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.518255][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.659408][ T5613] veth0_vlan: entered promiscuous mode [ 86.683960][ T5613] veth1_vlan: entered promiscuous mode [ 86.705291][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.761065][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.825691][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.903987][ T5613] veth0_macvtap: entered promiscuous mode [ 86.926171][ T5623] veth0_vlan: entered promiscuous mode [ 86.951268][ T5613] veth1_macvtap: entered promiscuous mode [ 86.988433][ T5623] veth1_vlan: entered promiscuous mode [ 86.994953][ T5619] veth0_vlan: entered promiscuous mode [ 87.053093][ T5619] veth1_vlan: entered promiscuous mode [ 87.065290][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.082593][ T5622] veth0_vlan: entered promiscuous mode [ 87.086284][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.145648][ T5622] veth1_vlan: entered promiscuous mode [ 87.206752][ T1171] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.206897][ T1171] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.206939][ T1171] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.206976][ T1171] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.264980][ T5623] veth0_macvtap: entered promiscuous mode [ 87.266741][ T5615] Bluetooth: hci0: command tx timeout [ 87.295220][ T5623] veth1_macvtap: entered promiscuous mode [ 87.324962][ T5619] veth0_macvtap: entered promiscuous mode [ 87.342904][ T5619] veth1_macvtap: entered promiscuous mode [ 87.412454][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.412476][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.432412][ T5615] Bluetooth: hci1: command tx timeout [ 87.444139][ T5622] veth0_macvtap: entered promiscuous mode [ 87.462758][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.465717][ T5622] veth1_macvtap: entered promiscuous mode [ 87.475759][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.499368][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.515592][ T5615] Bluetooth: hci2: command tx timeout [ 87.537601][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.562988][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.563010][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.591060][ T5615] Bluetooth: hci3: command tx timeout [ 87.591118][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.635260][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.677730][ T5613] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.763287][ T1163] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.858099][ T1163] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.882717][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.882737][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.940728][ T1163] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.953972][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.954028][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.954043][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.954252][ T1163] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.955182][ T1163] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.968283][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.969006][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.123220][ T724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.123242][ T724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.154995][ T5769] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.221086][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.221109][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.374394][ T5774] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.399188][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.399211][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.401018][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.402537][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.402674][ T1171] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.402712][ T1171] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.470199][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.470224][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.352989][ T5615] Bluetooth: hci0: command tx timeout [ 89.503845][ T5815] netlink: 52 bytes leftover after parsing attributes in process `syz.0.18'. [ 89.517352][ T5615] Bluetooth: hci1: command tx timeout [ 89.589905][ T5615] Bluetooth: hci2: command tx timeout [ 89.678762][ T5615] Bluetooth: hci3: command tx timeout [ 89.924476][ T5829] ======================================================= [ 89.924476][ T5829] WARNING: The mand mount option has been deprecated and [ 89.924476][ T5829] and is ignored by this kernel. Remove the mand [ 89.924476][ T5829] option from the mount to silence this warning. [ 89.924476][ T5829] ======================================================= [ 89.968500][ T5829] overlayfs: failed lookup in lower (newroot/9, name='file1', err=-40): overlapping layers [ 90.886347][ T5856] netlink: 'syz.3.37': attribute type 1 has an invalid length. [ 90.886800][ T5856] netlink: 84 bytes leftover after parsing attributes in process `syz.3.37'. [ 90.886832][ T5856] netlink: 'syz.3.37': attribute type 2 has an invalid length. [ 90.886845][ T5856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37'. [ 90.970813][ T5856] null_blk: my_zoned_dev: using native zone append [ 91.135154][ T5856] null_blk: disk my_zoned_dev created [ 91.183697][ T5859] block device autoloading is deprecated and will be removed. [ 91.845131][ T1612] cfg80211: failed to load regulatory.db [ 92.809038][ T5899] netlink: 52 bytes leftover after parsing attributes in process `syz.0.52'. [ 93.374375][ T5919] netlink: 52 bytes leftover after parsing attributes in process `syz.3.62'. [ 94.795319][ T5888] Set syz0 is full, maxelem 65536 reached [ 95.516533][ T5615] Bluetooth: hci2: command tx timeout [ 96.371415][ T5989] netlink: 1028 bytes leftover after parsing attributes in process `syz.0.87'. [ 96.608686][ T31] audit: type=1326 audit(1790152748.275:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5993 comm="syz.0.91" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687c39e159 code=0x7ffc0000 [ 96.610472][ T31] audit: type=1326 audit(1790152748.285:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5993 comm="syz.0.91" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687c39e159 code=0x7ffc0000 [ 97.137232][ T6004] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 97.137262][ T6004] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 97.172516][ T6004] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 97.172539][ T6004] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 97.668788][ T5615] Bluetooth: hci2: command 0x0406 tx timeout [ 97.703315][ T6004] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 97.703344][ T6004] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 97.729582][ T6004] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 97.729610][ T6004] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 98.224338][ T6021] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.99'. [ 99.327145][ T5967] Set syz0 is full, maxelem 65536 reached [ 100.033962][ T6048] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 100.990632][ T6090] LUN: removable file: (no medium) [ 101.627142][ T30] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.738836][ T6115] 9pnet_fd: p9_fd_create_unix (6115): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 101.782037][ T30] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 101.807060][ T30] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 101.807098][ T30] usb 3-1: config 0 interface 0 has no altsetting 0 [ 101.811697][ T30] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 101.811725][ T30] usb 3-1: Product: syz [ 101.811741][ T30] usb 3-1: Manufacturer: syz [ 101.811757][ T30] usb 3-1: SerialNumber: syz [ 101.894359][ T30] usb 3-1: config 0 descriptor?? [ 101.922933][ T30] usb 3-1: selecting invalid altsetting 0 [ 102.255406][ T30] usb 3-1: USB disconnect, device number 2 [ 102.264564][ T6109] usb 3-1: cannot submit urb 0, error -19: no device [ 102.265019][ T6109] usb 3-1: cannot submit urb 0, error -19: no device [ 102.265448][ T6109] usb 3-1: cannot submit urb 0, error -19: no device [ 102.265873][ T6109] usb 3-1: cannot submit urb 0, error -19: no device [ 102.266291][ T6109] usb 3-1: cannot submit urb 0, error -19: no device [ 102.272487][ T6109] usb 3-1: cannot submit urb 0, error -19: no device [ 102.273364][ T6109] usb 3-1: cannot submit urb 0, error -19: no device [ 102.291914][ T6109] usb 3-1: cannot submit urb 0, error -19: no device [ 102.293036][ T6109] usb 3-1: cannot submit urb 0, error -19: no device [ 102.300918][ T6109] usb 3-1: cannot submit urb 0, error -19: no device [ 102.383606][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 102.469599][ T6135] udevd[6135]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.631482][ T6144] netlink: 52 bytes leftover after parsing attributes in process `syz.1.150'. [ 102.742873][ T6148] netlink: 48 bytes leftover after parsing attributes in process `syz.3.152'. [ 102.864747][ T6153] nvmet: adding nsid 1 to subsystem testsubsys [ 102.878578][ T6153] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 102.890621][ T6153] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 102.899087][ T6153] CPU: 1 UID: 0 PID: 6153 Comm: syz.1.155 Not tainted syzkaller #0 PREEMPT(full) [ 102.908345][ T6153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.918430][ T6153] RIP: 0010:strlen+0x29/0x70 [ 102.923059][ T6153] Code: 90 f3 0f 1e fa 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 102.942706][ T6153] RSP: 0018:ffffc900068a7978 EFLAGS: 00010246 [ 102.948833][ T6153] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 102.956843][ T6153] RDX: ffffc90004041000 RSI: 0000000000000094 RDI: 0000000000000000 [ 102.964848][ T6153] RBP: ffffc900068a7ab8 R08: ffffffff909bb37f R09: 1ffffffff213766f [ 102.972839][ T6153] R10: dffffc0000000000 R11: fffffbfff2137670 R12: 1ffff92000d14f40 [ 102.980835][ T6153] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 102.988838][ T6153] FS: 00007fb2dc9b56c0(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000 [ 102.997802][ T6153] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.004407][ T6153] CR2: 000000110c3219ae CR3: 000000007f176000 CR4: 00000000003526f0 [ 103.012402][ T6153] Call Trace: [ 103.015747][ T6153] [ 103.018696][ T6153] do_getname_kernel+0x1d/0x230 [ 103.023595][ T6153] ? getname_kernel+0xd/0x20 [ 103.028206][ T6153] filp_open+0x87/0x1d0 [ 103.032422][ T6153] ? __pfx_filp_open+0x10/0x10 [ 103.037220][ T6153] ? __pfx___mutex_lock+0x10/0x10 [ 103.042300][ T6153] nvmet_file_ns_enable+0x74/0x350 [ 103.047459][ T6153] nvmet_ns_enable+0xaa/0x780 [ 103.052199][ T6153] ? lock_acquire+0x115/0x350 [ 103.056923][ T6153] nvmet_ns_enable_store+0xd7/0x170 [ 103.062164][ T6153] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 103.068024][ T6153] ? down_read+0x2b9/0x320 [ 103.072475][ T6153] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 103.078336][ T6153] configfs_write_iter+0x337/0x430 [ 103.083498][ T6153] vfs_write+0x612/0xba0 [ 103.087812][ T6153] ? __pfx_vfs_write+0x10/0x10 [ 103.092636][ T6153] ? __fget_files+0x2a/0x420 [ 103.097257][ T6153] ksys_write+0x150/0x270 [ 103.101619][ T6153] ? __pfx_ksys_write+0x10/0x10 [ 103.106497][ T6153] do_syscall_64+0x166/0x520 [ 103.111099][ T6153] ? trace_irq_disable+0x3b/0x140 [ 103.116155][ T6153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.122243][ T6153] ? clear_bhb_loop+0x70/0xc0 [ 103.126947][ T6153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.132859][ T6153] RIP: 0033:0x7fb2dbb9e159 [ 103.137308][ T6153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.156947][ T6153] RSP: 002b:00007fb2dc9b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.165455][ T6153] RAX: ffffffffffffffda RBX: 00007fb2dbe25fa0 RCX: 00007fb2dbb9e159 [ 103.173500][ T6153] RDX: 0000000000000002 RSI: 0000200000000bc0 RDI: 0000000000000003 [ 103.181504][ T6153] RBP: 00007fb2dbc3506b R08: 0000000000000000 R09: 0000000000000000 [ 103.189505][ T6153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.197500][ T6153] R13: 00007fb2dbe26038 R14: 00007fb2dbe25fa0 R15: 00007ffd5ebad058 [ 103.205506][ T6153] [ 103.208545][ T6153] Modules linked in: [ 103.213275][ T6153] ---[ end trace 0000000000000000 ]--- [ 103.222478][ T6153] RIP: 0010:strlen+0x29/0x70 [ 103.222513][ T6153] Code: 90 f3 0f 1e fa 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 103.222533][ T6153] RSP: 0018:ffffc900068a7978 EFLAGS: 00010246 [ 103.222555][ T6153] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 103.222570][ T6153] RDX: ffffc90004041000 RSI: 0000000000000094 RDI: 0000000000000000 [ 103.222585][ T6153] RBP: ffffc900068a7ab8 R08: ffffffff909bb37f R09: 1ffffffff213766f [ 103.222602][ T6153] R10: dffffc0000000000 R11: fffffbfff2137670 R12: 1ffff92000d14f40 [ 103.222623][ T6153] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 103.222641][ T6153] FS: 00007fb2dc9b56c0(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000 [ 103.222661][ T6153] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.222677][ T6153] CR2: 00007fff16d98fd8 CR3: 000000007f176000 CR4: 00000000003526f0 [ 103.222770][ T6153] Kernel panic - not syncing: Fatal exception [ 103.322776][ T6153] Kernel Offset: disabled [ 103.327114][ T6153] Rebooting in 86400 seconds..