[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 80.865610][ T27] audit: type=1800 audit(1580096763.196:25): pid=9521 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 80.894233][ T27] audit: type=1800 audit(1580096763.196:26): pid=9521 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 80.925031][ T27] audit: type=1800 audit(1580096763.206:27): pid=9521 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.140' (ECDSA) to the list of known hosts. 2020/01/27 03:46:13 fuzzer started 2020/01/27 03:46:15 dialing manager at 10.128.0.26:36489 2020/01/27 03:46:16 syscalls: 2928 2020/01/27 03:46:16 code coverage: enabled 2020/01/27 03:46:16 comparison tracing: enabled 2020/01/27 03:46:16 extra coverage: enabled 2020/01/27 03:46:16 setuid sandbox: enabled 2020/01/27 03:46:16 namespace sandbox: enabled 2020/01/27 03:46:16 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/27 03:46:16 fault injection: enabled 2020/01/27 03:46:16 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/27 03:46:16 net packet injection: enabled 2020/01/27 03:46:16 net device setup: enabled 2020/01/27 03:46:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/27 03:46:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 03:49:06 executing program 0: syzkaller login: [ 264.167810][ T9688] IPVS: ftp: loaded support on port[0] = 21 03:49:06 executing program 1: [ 264.304391][ T9688] chnl_net:caif_netlink_parms(): no params data found [ 264.397102][ T9688] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.406144][ T9688] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.419416][ T9688] device bridge_slave_0 entered promiscuous mode [ 264.430980][ T9688] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.438829][ T9688] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.464273][ T9688] device bridge_slave_1 entered promiscuous mode [ 264.487511][ T9691] IPVS: ftp: loaded support on port[0] = 21 [ 264.504707][ T9688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.529728][ T9688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.568382][ T9688] team0: Port device team_slave_0 added 03:49:06 executing program 2: [ 264.578804][ T9688] team0: Port device team_slave_1 added [ 264.639522][ T9688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.654868][ T9688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.704221][ T9688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.748169][ T9688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.764236][ T9688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.814230][ T9688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.850345][ T9693] IPVS: ftp: loaded support on port[0] = 21 03:49:07 executing program 3: [ 265.068889][ T9688] device hsr_slave_0 entered promiscuous mode 03:49:07 executing program 4: [ 265.154535][ T9688] device hsr_slave_1 entered promiscuous mode [ 265.234621][ T9691] chnl_net:caif_netlink_parms(): no params data found [ 265.265390][ T9696] IPVS: ftp: loaded support on port[0] = 21 [ 265.375392][ T9698] IPVS: ftp: loaded support on port[0] = 21 [ 265.406157][ T9691] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.414274][ T9691] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.423400][ T9691] device bridge_slave_0 entered promiscuous mode 03:49:07 executing program 5: [ 265.480435][ T9691] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.488518][ T9691] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.501681][ T9691] device bridge_slave_1 entered promiscuous mode [ 265.653423][ T9691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.669308][ T9691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.690628][ T9700] IPVS: ftp: loaded support on port[0] = 21 [ 265.769420][ T9696] chnl_net:caif_netlink_parms(): no params data found [ 265.779330][ T9693] chnl_net:caif_netlink_parms(): no params data found [ 265.789394][ T9691] team0: Port device team_slave_0 added [ 265.799515][ T9691] team0: Port device team_slave_1 added [ 265.805436][ T9688] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 265.882950][ T9688] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 265.965906][ T9688] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 266.020966][ T9688] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 266.087741][ T9691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.095633][ T9691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.123445][ T9691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.166321][ T9691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.176555][ T9691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.206715][ T9691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.220387][ T9693] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.229479][ T9693] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.240208][ T9693] device bridge_slave_0 entered promiscuous mode [ 266.251302][ T9693] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.258963][ T9693] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.267124][ T9693] device bridge_slave_1 entered promiscuous mode [ 266.326861][ T9696] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.334505][ T9696] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.342195][ T9696] device bridge_slave_0 entered promiscuous mode [ 266.372598][ T9693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.390097][ T9696] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.398511][ T9696] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.408886][ T9696] device bridge_slave_1 entered promiscuous mode [ 266.507882][ T9691] device hsr_slave_0 entered promiscuous mode [ 266.564840][ T9691] device hsr_slave_1 entered promiscuous mode [ 266.624346][ T9691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.632217][ T9691] Cannot create hsr debugfs directory [ 266.640866][ T9698] chnl_net:caif_netlink_parms(): no params data found [ 266.667326][ T9693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.721266][ T9693] team0: Port device team_slave_0 added [ 266.730960][ T9696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.776424][ T9693] team0: Port device team_slave_1 added [ 266.788631][ T9696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.831076][ T9693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.838339][ T9693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.864750][ T9693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.879427][ T9696] team0: Port device team_slave_0 added [ 266.895168][ T9696] team0: Port device team_slave_1 added [ 266.915310][ T9693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.922418][ T9693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.953506][ T9693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.979353][ T9700] chnl_net:caif_netlink_parms(): no params data found [ 267.001352][ T9698] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.008724][ T9698] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.016618][ T9698] device bridge_slave_0 entered promiscuous mode [ 267.089293][ T9693] device hsr_slave_0 entered promiscuous mode [ 267.144759][ T9693] device hsr_slave_1 entered promiscuous mode [ 267.204329][ T9693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.211990][ T9693] Cannot create hsr debugfs directory [ 267.221650][ T9698] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.230294][ T9698] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.238483][ T9698] device bridge_slave_1 entered promiscuous mode [ 267.252079][ T9696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.260414][ T9696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.286666][ T9696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.327286][ T9696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.334969][ T9696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.361968][ T9696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.427541][ T9696] device hsr_slave_0 entered promiscuous mode [ 267.465604][ T9696] device hsr_slave_1 entered promiscuous mode [ 267.524333][ T9696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.531950][ T9696] Cannot create hsr debugfs directory [ 267.545719][ T9698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.558750][ T9698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.628890][ T9700] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.636231][ T9700] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.644599][ T9700] device bridge_slave_0 entered promiscuous mode [ 267.655100][ T9698] team0: Port device team_slave_0 added [ 267.661090][ T9700] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.668296][ T9700] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.676386][ T9700] device bridge_slave_1 entered promiscuous mode [ 267.720453][ T9698] team0: Port device team_slave_1 added [ 267.734701][ T9700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.751942][ T9698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.760425][ T9698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.786913][ T9698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.805865][ T9698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.812863][ T9698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.840253][ T9698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.861200][ T9700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.969778][ T9688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.977136][ T9691] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 268.078536][ T9698] device hsr_slave_0 entered promiscuous mode [ 268.154707][ T9698] device hsr_slave_1 entered promiscuous mode [ 268.194358][ T9698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.202050][ T9698] Cannot create hsr debugfs directory [ 268.210088][ T9700] team0: Port device team_slave_0 added [ 268.224444][ T9691] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 268.286938][ T9691] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 268.326909][ T9700] team0: Port device team_slave_1 added [ 268.332695][ T9691] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 268.429700][ T3143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.438510][ T3143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.476586][ T9688] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.497453][ T9700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.504955][ T9700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.531947][ T9700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.546819][ T9700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.553877][ T9700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.581176][ T9700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.600715][ T9693] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 268.663157][ T9693] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 268.741385][ T9693] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 268.796062][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.809138][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.817733][ T3075] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.824926][ T3075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.886655][ T9700] device hsr_slave_0 entered promiscuous mode [ 268.934828][ T9700] device hsr_slave_1 entered promiscuous mode [ 268.974275][ T9700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.981861][ T9700] Cannot create hsr debugfs directory [ 269.024823][ T9693] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 269.076177][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.089506][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 269.098621][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.109467][ T3139] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.116668][ T3139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.130947][ T9696] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 269.210021][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 269.229499][ T9696] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 269.311635][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.320975][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.330676][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.339490][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 269.349116][ T9696] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 269.441186][ T9696] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 269.509009][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.518326][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.568018][ T9698] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 269.596694][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.605370][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.613815][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.622665][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.636605][ T9688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 269.657171][ T9698] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 269.751945][ T9698] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 269.807187][ T9698] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 269.881109][ T9691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.913253][ T9700] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 269.980166][ T9688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.995171][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.002627][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.021139][ T9700] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 270.093466][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.106579][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.114905][ T9700] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 270.156999][ T9700] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 270.213790][ T9691] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.227258][ T9693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.247544][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 270.256376][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 270.307534][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.316615][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.325708][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.334908][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.343344][ T2741] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.350432][ T2741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.364024][ T9696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.374907][ T9693] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.398810][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.406995][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.416856][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.425888][ T2742] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.433952][ T2742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.470474][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.479657][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.487512][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.502436][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.512181][ T2741] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.519298][ T2741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.527367][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 270.535781][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 270.545183][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.555828][ T9696] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.577314][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.585851][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 270.593506][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 270.603248][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.612374][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.621699][ T2741] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.628828][ T2741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.637232][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.650289][ T9688] device veth0_vlan entered promiscuous mode [ 270.674671][ T9688] device veth1_vlan entered promiscuous mode [ 270.688722][ T9698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.699040][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 270.709022][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.718490][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.727446][ T3139] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.734582][ T3139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.742146][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.752848][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.761764][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.772507][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.782220][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.801337][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 270.810331][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.825500][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.835654][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.844765][ T2741] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.851832][ T2741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.896630][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.906049][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.915184][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.923123][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.931529][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.940564][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.952573][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.969395][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.986563][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.999173][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.008015][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 271.016624][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.025177][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 271.033491][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.051275][ T9688] device veth0_macvtap entered promiscuous mode [ 271.062636][ T9698] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.087940][ T9700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.096840][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.106059][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 271.115038][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.123460][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.132936][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.141824][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 271.150724][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.159282][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 271.167566][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 271.179473][ T9688] device veth1_macvtap entered promiscuous mode [ 271.200679][ T9691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 271.217459][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 271.226119][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.237777][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.246238][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 271.255169][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.263374][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 271.271914][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.287479][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.296454][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.305228][ T3139] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.312551][ T3139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.323070][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 271.331550][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 271.340283][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.360908][ T9688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.372068][ T9693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 271.383847][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 271.403011][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 271.412718][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.421504][ T3075] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.428637][ T3075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.437062][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 271.446136][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 271.455037][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 271.476398][ T9691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.488669][ T9688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.537273][ T9700] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.544303][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.551786][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.559601][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 271.568705][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 271.578124][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.586258][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.593843][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.603115][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.611130][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.627479][ T9693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.673712][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.683175][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.695467][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.704022][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.712589][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.720221][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.727962][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 271.736403][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.744926][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.753476][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.762295][ T2736] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.772530][ T2736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.780427][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 271.789360][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.798133][ T2736] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.805345][ T2736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.814349][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.822996][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.832361][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 271.842528][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 271.850489][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 271.872208][ T9696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.912747][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 271.935115][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.946909][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.955849][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.964662][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.974552][ T9698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 271.982467][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.016618][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 272.043876][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 03:49:14 executing program 0: [ 272.117345][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 272.131867][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 272.143744][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 272.153014][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 272.162872][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.172560][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.182768][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.194907][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.203595][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 03:49:14 executing program 0: [ 272.213323][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.237724][ T9691] device veth0_vlan entered promiscuous mode [ 272.253830][ T9693] device veth0_vlan entered promiscuous mode [ 272.278272][ T9700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.293532][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 272.303332][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 272.319700][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 03:49:14 executing program 0: [ 272.330758][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 272.346667][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 272.360472][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 03:49:14 executing program 0: [ 272.393653][ T9693] device veth1_vlan entered promiscuous mode [ 272.415760][ T9698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.452875][ T9691] device veth1_vlan entered promiscuous mode [ 272.475380][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 272.483634][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 03:49:14 executing program 0: [ 272.505090][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 272.512941][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 272.521888][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 272.530996][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 272.540354][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 03:49:14 executing program 0: [ 272.556195][ T9696] device veth0_vlan entered promiscuous mode [ 272.594762][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 272.612316][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 272.620441][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 272.629187][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 272.637644][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 272.687103][ T9696] device veth1_vlan entered promiscuous mode [ 272.709773][ T9700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.724556][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 272.732617][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 03:49:15 executing program 0: [ 272.757752][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 272.840379][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 272.855214][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 272.893273][ T9693] device veth0_macvtap entered promiscuous mode [ 272.926694][ T9691] device veth0_macvtap entered promiscuous mode [ 272.946178][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 272.955169][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 272.963864][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 272.992105][ T9693] device veth1_macvtap entered promiscuous mode [ 273.008463][ T9691] device veth1_macvtap entered promiscuous mode [ 273.025758][ T9696] device veth0_macvtap entered promiscuous mode [ 273.037592][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 273.049131][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 273.057989][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 273.066736][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 273.107477][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 273.117392][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.126358][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.135010][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 273.143585][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 273.153578][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.161721][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.170534][ T9696] device veth1_macvtap entered promiscuous mode [ 273.190116][ T9698] device veth0_vlan entered promiscuous mode [ 273.221678][ T9693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 273.233418][ T9693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.245211][ T9693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.260999][ T9698] device veth1_vlan entered promiscuous mode [ 273.278130][ T9691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 273.290959][ T9691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.301487][ T9691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 273.312243][ T9691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.323448][ T9691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.337470][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 273.346998][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 273.355262][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.363901][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.372793][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.381456][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.390826][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.399511][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.409707][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.417937][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.434097][ T9696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 273.451245][ T9696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.461532][ T9696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 273.472856][ T9696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.487531][ T9696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 273.501146][ T9696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.518870][ T9696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.528818][ T9691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 273.542554][ T9691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.557825][ T9691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.565553][ T9693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 273.576221][ T9693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.586578][ T9693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 273.597690][ T9693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.609160][ T9693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.631537][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 273.646835][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.658774][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.668033][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 273.678241][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 273.687092][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 273.695996][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 273.707713][ T9696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 273.720846][ T9696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.731534][ T9696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 273.742237][ T9696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.756268][ T9696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 273.766839][ T9696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.778111][ T9696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.787481][ T9700] device veth0_vlan entered promiscuous mode [ 273.814328][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 273.823029][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 273.927791][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 273.940661][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 273.958723][ T9700] device veth1_vlan entered promiscuous mode [ 273.972260][ T9698] device veth0_macvtap entered promiscuous mode [ 274.027399][ T9698] device veth1_macvtap entered promiscuous mode 03:49:16 executing program 1: 03:49:16 executing program 0: 03:49:16 executing program 2: [ 274.116778][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 274.140327][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 274.268497][ T9700] device veth0_macvtap entered promiscuous mode [ 274.306995][ T9698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.350802][ T9698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.374263][ T9698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.392199][ T9698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.419555][ T9698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.433579][ T9698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.444048][ T9698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.454945][ T9698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.467313][ T9698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.481223][ T9700] device veth1_macvtap entered promiscuous mode [ 274.494871][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 274.503261][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 274.511690][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 274.520891][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 274.532297][ T9698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.543929][ T9698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.554795][ T9698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.565719][ T9698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.575917][ T9698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.586424][ T9698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.596604][ T9698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.607955][ T9698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.619554][ T9698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.635494][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 274.644791][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 274.674683][ T9700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.685532][ T9700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.697611][ T9700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.708824][ T9700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.719753][ T9700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.730648][ T9700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.741024][ T9700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.752276][ T9700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.763216][ T9700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.774845][ T9700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.786396][ T9700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.801430][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 274.811426][ T3139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 274.824763][ T9700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.835971][ T9700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.846511][ T9700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.857268][ T9700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.868047][ T9700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.880101][ T9700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.891771][ T9700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.902621][ T9700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.913011][ T9700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.923607][ T9700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.935683][ T9700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.945990][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 274.956263][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 03:49:17 executing program 4: 03:49:17 executing program 3: 03:49:17 executing program 0: 03:49:17 executing program 2: 03:49:17 executing program 1: 03:49:17 executing program 5: 03:49:17 executing program 3: 03:49:17 executing program 2: 03:49:17 executing program 1: 03:49:17 executing program 0: 03:49:17 executing program 5: 03:49:17 executing program 4: 03:49:17 executing program 2: 03:49:17 executing program 3: 03:49:17 executing program 5: 03:49:17 executing program 1: 03:49:17 executing program 4: 03:49:17 executing program 0: 03:49:17 executing program 5: 03:49:18 executing program 3: 03:49:18 executing program 2: 03:49:18 executing program 1: 03:49:18 executing program 0: 03:49:18 executing program 4: 03:49:18 executing program 2: 03:49:18 executing program 5: 03:49:18 executing program 3: 03:49:18 executing program 1: 03:49:18 executing program 4: 03:49:18 executing program 5: 03:49:18 executing program 2: 03:49:18 executing program 0: 03:49:18 executing program 3: 03:49:18 executing program 4: 03:49:18 executing program 5: 03:49:18 executing program 2: 03:49:18 executing program 1: 03:49:18 executing program 3: 03:49:18 executing program 0: 03:49:18 executing program 4: 03:49:18 executing program 5: 03:49:18 executing program 0: 03:49:18 executing program 2: 03:49:18 executing program 1: 03:49:18 executing program 3: 03:49:19 executing program 4: 03:49:19 executing program 2: 03:49:19 executing program 5: 03:49:19 executing program 0: 03:49:19 executing program 3: 03:49:19 executing program 1: 03:49:19 executing program 2: 03:49:19 executing program 4: 03:49:19 executing program 5: 03:49:19 executing program 0: 03:49:19 executing program 3: 03:49:19 executing program 4: 03:49:19 executing program 2: 03:49:19 executing program 1: 03:49:19 executing program 0: 03:49:19 executing program 5: 03:49:19 executing program 3: 03:49:19 executing program 2: 03:49:19 executing program 1: 03:49:19 executing program 0: 03:49:19 executing program 4: 03:49:19 executing program 5: 03:49:19 executing program 3: 03:49:20 executing program 2: 03:49:20 executing program 1: 03:49:20 executing program 4: 03:49:20 executing program 5: 03:49:20 executing program 0: 03:49:20 executing program 3: 03:49:20 executing program 2: 03:49:20 executing program 4: 03:49:20 executing program 5: 03:49:20 executing program 3: 03:49:20 executing program 0: 03:49:20 executing program 1: 03:49:20 executing program 5: 03:49:20 executing program 2: 03:49:20 executing program 3: 03:49:20 executing program 4: 03:49:20 executing program 0: 03:49:20 executing program 1: 03:49:20 executing program 5: 03:49:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f0000000000)="fc0000001c000705ab092506b86807020aab087a0500000001000393210001c0f0020000000000010000000000039815fa2c1ec28648000000b9d95662070000bc000c04f0036cdf0d11512fd633d440000400600720d3d5bbc91a3e2e80772c05dafd5a32e273fc83ab82d718f74cec18444ef90d475ef8b29d3ef3d92c83170e5bba2e177312e081bea05d44021e8ca062914a463ae4f5df77bc4cb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd0734ba3dffe5f5aa1dd1890058a10000c880ac801fe4af000041f0d48f6f0000080548deac279cc4848e3825924509260e26429fbe11017d627403050efaddd3254395c500", 0xfc) 03:49:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x1) open(0x0, 0x448000, 0x10) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x0) io_setup(0x9, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000240)=""/207) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x581, 0x0) write$P9_RVERSION(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000001280000c7d40000323030302e75118a047ce77f23407721ae9486820a79dd7576721b049cb26c981703805351aeed4054066a113874eaa13f2f260a6b725d9675a7d6d3a09ebc297bcaf84f94317400c986b51e8379c2f5fb530000"], 0x15) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', 'u\x00'}, 0x7) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe86970") r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r4, 0x221}, 0x14}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') readv(r5, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) ioctl$DRM_IOCTL_GET_STATS(r5, 0x80f86406, &(0x7f0000000740)=""/55) 03:49:20 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19e, 0x0) 03:49:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}, 0x4, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x0) r1 = open(0x0, 0x448000, 0x10) close(r0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x0) io_setup(0x9, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000240)=""/207) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x581, 0x0) write$P9_RVERSION(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000001280000c7d40000323030302e75118a047ce77f23407721ae9486820a79dd7576721b049cb26c981703805351aeed4054066a113874eaa13f2f260a6b725d9675a7d6d3a09ebc297bcaf84f94317400c986b51e8379c2f5fb530000"], 0x15) write$apparmor_exec(r2, &(0x7f0000000000)={'exec ', 'u\x00'}, 0x7) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x0, 0x221}, 0x14}}, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0xfffffffffffffffe, 0x1, {0x40}}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') readv(r5, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) ioctl$DRM_IOCTL_GET_STATS(r5, 0x80f86406, &(0x7f0000000740)=""/55) syz_kvm_setup_cpu$x86(r5, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000380)="362e262e0f43ebf247a7c4a17f12c766b83a000f00d8f2470f10f5660fc77100430f07c744240038000000c744240255db0000ff2c240f20510f01c5", 0x3c}], 0x1, 0xc, &(0x7f0000000400), 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x40, 0x8000) 03:49:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) [ 278.640082][ C0] hrtimer: interrupt took 50946 ns 03:49:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:49:21 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, 0x0) [ 278.786723][ T9932] nvme_fabrics: missing parameter 'transport=%s' 03:49:21 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, 0x0) [ 278.845370][ T9932] nvme_fabrics: missing parameter 'nqn=%s' 03:49:21 executing program 0: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00'}, 0x45c) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) [ 278.915419][ T9942] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 279.040961][ T9934] nvme_fabrics: missing parameter 'transport=%s' [ 279.053228][ T9934] nvme_fabrics: missing parameter 'nqn=%s' 03:49:21 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, 0x0) 03:49:21 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, 0x0) [ 279.144033][ T9932] nvme_fabrics: missing parameter 'transport=%s' [ 279.173414][ T9932] nvme_fabrics: missing parameter 'nqn=%s' 03:49:21 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x19e, 0x0) [ 279.193157][ T9934] nvme_fabrics: missing parameter 'transport=%s' [ 279.234908][ T9934] nvme_fabrics: missing parameter 'nqn=%s' 03:49:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x1) open(0x0, 0x448000, 0x10) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x0) io_setup(0x9, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000240)=""/207) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x581, 0x0) write$P9_RVERSION(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000001280000c7d40000323030302e75118a047ce77f23407721ae9486820a79dd7576721b049cb26c981703805351aeed4054066a113874eaa13f2f260a6b725d9675a7d6d3a09ebc297bcaf84f94317400c986b51e8379c2f5fb530000"], 0x15) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', 'u\x00'}, 0x7) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe86970") r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r4, 0x221}, 0x14}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') readv(r5, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) ioctl$DRM_IOCTL_GET_STATS(r5, 0x80f86406, &(0x7f0000000740)=""/55) 03:49:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}, 0x4, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x0) r1 = open(0x0, 0x448000, 0x10) close(r0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x0) io_setup(0x9, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000240)=""/207) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x581, 0x0) write$P9_RVERSION(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000001280000c7d40000323030302e75118a047ce77f23407721ae9486820a79dd7576721b049cb26c981703805351aeed4054066a113874eaa13f2f260a6b725d9675a7d6d3a09ebc297bcaf84f94317400c986b51e8379c2f5fb530000"], 0x15) write$apparmor_exec(r2, &(0x7f0000000000)={'exec ', 'u\x00'}, 0x7) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x0, 0x221}, 0x14}}, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0xfffffffffffffffe, 0x1, {0x40}}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') readv(r5, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) ioctl$DRM_IOCTL_GET_STATS(r5, 0x80f86406, &(0x7f0000000740)=""/55) syz_kvm_setup_cpu$x86(r5, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000380)="362e262e0f43ebf247a7c4a17f12c766b83a000f00d8f2470f10f5660fc77100430f07c744240038000000c744240255db0000ff2c240f20510f01c5", 0x3c}], 0x1, 0xc, &(0x7f0000000400), 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x40, 0x8000) 03:49:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}, 0x4, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x0) r1 = open(0x0, 0x448000, 0x10) close(r0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x0) io_setup(0x9, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000240)=""/207) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x581, 0x0) write$P9_RVERSION(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000001280000c7d40000323030302e75118a047ce77f23407721ae9486820a79dd7576721b049cb26c981703805351aeed4054066a113874eaa13f2f260a6b725d9675a7d6d3a09ebc297bcaf84f94317400c986b51e8379c2f5fb530000"], 0x15) write$apparmor_exec(r2, &(0x7f0000000000)={'exec ', 'u\x00'}, 0x7) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x0, 0x221}, 0x14}}, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0xfffffffffffffffe, 0x1, {0x40}}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') readv(r5, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) ioctl$DRM_IOCTL_GET_STATS(r5, 0x80f86406, &(0x7f0000000740)=""/55) syz_kvm_setup_cpu$x86(r5, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000380)="362e262e0f43ebf247a7c4a17f12c766b83a000f00d8f2470f10f5660fc77100430f07c744240038000000c744240255db0000ff2c240f20510f01c5", 0x3c}], 0x1, 0xc, &(0x7f0000000400), 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x40, 0x8000) 03:49:21 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, 0x0) 03:49:21 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, 0x0) [ 279.624389][ T9976] nvme_fabrics: missing parameter 'transport=%s' [ 279.714391][ T9976] nvme_fabrics: missing parameter 'nqn=%s' 03:49:22 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, 0x0) 03:49:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x1) open(0x0, 0x448000, 0x10) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x0) io_setup(0x9, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000240)=""/207) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x581, 0x0) write$P9_RVERSION(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000001280000c7d40000323030302e75118a047ce77f23407721ae9486820a79dd7576721b049cb26c981703805351aeed4054066a113874eaa13f2f260a6b725d9675a7d6d3a09ebc297bcaf84f94317400c986b51e8379c2f5fb530000"], 0x15) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', 'u\x00'}, 0x7) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe86970") r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r4, 0x221}, 0x14}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') readv(r5, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) ioctl$DRM_IOCTL_GET_STATS(r5, 0x80f86406, &(0x7f0000000740)=""/55) [ 279.838870][ T9984] nvme_fabrics: missing parameter 'transport=%s' [ 279.873581][ T9984] nvme_fabrics: missing parameter 'nqn=%s' 03:49:22 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, 0x0) 03:49:22 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde12, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) [ 280.176680][ T9985] nvme_fabrics: missing parameter 'transport=%s' [ 280.183072][ T9985] nvme_fabrics: missing parameter 'nqn=%s' 03:49:22 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="bd", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") close(r0) 03:49:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}, 0x4, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x0) r1 = open(0x0, 0x448000, 0x10) close(r0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x0) io_setup(0x9, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000240)=""/207) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x581, 0x0) write$P9_RVERSION(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000001280000c7d40000323030302e75118a047ce77f23407721ae9486820a79dd7576721b049cb26c981703805351aeed4054066a113874eaa13f2f260a6b725d9675a7d6d3a09ebc297bcaf84f94317400c986b51e8379c2f5fb530000"], 0x15) write$apparmor_exec(r2, &(0x7f0000000000)={'exec ', 'u\x00'}, 0x7) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x0, 0x221}, 0x14}}, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0xfffffffffffffffe, 0x1, {0x40}}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') readv(r5, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) ioctl$DRM_IOCTL_GET_STATS(r5, 0x80f86406, &(0x7f0000000740)=""/55) syz_kvm_setup_cpu$x86(r5, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000380)="362e262e0f43ebf247a7c4a17f12c766b83a000f00d8f2470f10f5660fc77100430f07c744240038000000c744240255db0000ff2c240f20510f01c5", 0x3c}], 0x1, 0xc, &(0x7f0000000400), 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x40, 0x8000) [ 280.237299][T10004] nvme_fabrics: missing parameter 'transport=%s' [ 280.272191][T10004] nvme_fabrics: missing parameter 'nqn=%s' [ 280.637056][T10016] nvme_fabrics: missing parameter 'transport=%s' [ 280.660174][T10016] nvme_fabrics: missing parameter 'nqn=%s' 03:49:23 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x19e, 0x0) 03:49:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}, 0x4, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x0) r1 = open(0x0, 0x448000, 0x10) close(r0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x0) io_setup(0x9, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000240)=""/207) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x581, 0x0) write$P9_RVERSION(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000001280000c7d40000323030302e75118a047ce77f23407721ae9486820a79dd7576721b049cb26c981703805351aeed4054066a113874eaa13f2f260a6b725d9675a7d6d3a09ebc297bcaf84f94317400c986b51e8379c2f5fb530000"], 0x15) write$apparmor_exec(r2, &(0x7f0000000000)={'exec ', 'u\x00'}, 0x7) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x0, 0x221}, 0x14}}, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0xfffffffffffffffe, 0x1, {0x40}}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') readv(r5, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) ioctl$DRM_IOCTL_GET_STATS(r5, 0x80f86406, &(0x7f0000000740)=""/55) syz_kvm_setup_cpu$x86(r5, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000380)="362e262e0f43ebf247a7c4a17f12c766b83a000f00d8f2470f10f5660fc77100430f07c744240038000000c744240255db0000ff2c240f20510f01c5", 0x3c}], 0x1, 0xc, &(0x7f0000000400), 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x40, 0x8000) 03:49:23 executing program 3: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000000)={0x18}, 0x13) write(r0, &(0x7f00000000c0)='8', 0x1) 03:49:23 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde12, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) 03:49:23 executing program 2: socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000800010073667100480002000000000000000000000000000000000000000000000000000000000000471a00000000000000000000000000000000000000000000f3aff151ed1e4a08454f9c9ed6974ba345296ca6ffafecb3ab42207c5c129cdf6500"/126], 0x74}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x42, 0x0) 03:49:23 executing program 0: ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10000000000f, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0}) wait4(0x0, 0x0, 0x80000002, 0x0) getpid() socket$inet6(0xa, 0x0, 0x0) 03:49:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE(r2, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/20, 0x14}}, 0x120) 03:49:23 executing program 3: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000000)={0x18}, 0x13) write(r0, &(0x7f00000000c0)='8', 0x1) [ 281.442552][T10046] nvme_fabrics: missing parameter 'transport=%s' 03:49:23 executing program 0: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000000)={0x18}, 0x13) write(r0, &(0x7f00000000c0)='8', 0x1) [ 281.496941][ T3075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 281.518017][ T3075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 281.549913][ T3075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 281.579107][ T3075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 281.646672][ T3075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 281.653277][T10046] nvme_fabrics: missing parameter 'nqn=%s' [ 281.681179][ T3075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 03:49:24 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde12, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) 03:49:24 executing program 3: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000000)={0x18}, 0x13) write(r0, &(0x7f00000000c0)='8', 0x1) [ 281.707975][ T3075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 281.720776][ T3075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 281.733234][ T3075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 281.749333][ T3075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 281.760657][ T3075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 281.774576][ T3075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 281.782239][ T3075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 281.790152][ T3075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 281.802229][ T3075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 281.813845][ T3075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 281.829693][ T3075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 281.840884][ T3075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 03:49:24 executing program 4: ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x12, 0xffffffff}]}}}]}, 0x3c}}, 0x0) [ 281.858867][ T3075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 281.905103][ T3075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 281.949438][ T3075] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 282.031684][T10071] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551615) [ 282.078491][T10071] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 282.273589][T10077] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551615) [ 282.296676][T10077] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 03:49:24 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x19e, 0x0) 03:49:24 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) r1 = socket(0x2000000015, 0x80005, 0x0) dup3(r1, r0, 0x0) 03:49:24 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000001c0)="240000005a001f02ff03f4f9002304000a04f51110000100020100020800028001000000", 0x24) 03:49:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:49:24 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde12, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) 03:49:24 executing program 4: ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x12, 0xffffffff}]}}}]}, 0x3c}}, 0x0) 03:49:24 executing program 0: io_uring_setup(0xa4, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000480)='/dev/vcsa#\x00', 0x813c, 0x0) dup(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 03:49:25 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, 0x0) [ 282.648084][T10093] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551615) [ 282.721484][T10093] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 03:49:25 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000001c0)="2400000058001f02ff03f4f9002304000a04f51110000100020100020800028001000000", 0x24) 03:49:25 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde12, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201) r2 = dup2(r1, r0) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) [ 282.985449][T10119] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:49:25 executing program 4: ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x12, 0xffffffff}]}}}]}, 0x3c}}, 0x0) 03:49:25 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) [ 283.243980][T10124] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551615) [ 283.284472][T10124] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 03:49:26 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x19e, 0x0) 03:49:26 executing program 0: 03:49:26 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde12, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201) r2 = dup2(r1, r0) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) 03:49:26 executing program 3: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x13) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)="38da5cca9d", 0x5) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 03:49:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000010003b04000200000000000000800000", @ANYRES32, @ANYBLOB="00000000ffffffff1800120008000100736974000c00020008001400", @ANYRES32], 0x38}}, 0x0) 03:49:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x1) open(0x0, 0x448000, 0x10) close(r0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) io_setup(0x9, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x581, 0x0) write$P9_RVERSION(r2, 0x0, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', 'u\x00'}, 0x7) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r4 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r4}, 0x14}}, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x0, 0x1, {0x40}}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') readv(r5, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) ioctl$DRM_IOCTL_GET_STATS(r5, 0x80f86406, &(0x7f0000000740)=""/55) 03:49:26 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x19e, 0x0) 03:49:26 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde12, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201) r2 = dup2(r1, r0) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) [ 283.885996][T10145] nvme_fabrics: missing parameter 'transport=%s' [ 283.913025][T10145] nvme_fabrics: missing parameter 'nqn=%s' 03:49:26 executing program 3: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x13) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)="38da5cca9d", 0x5) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 03:49:26 executing program 2: socket$inet6(0xa, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0}) wait4(0x0, 0x0, 0x80000002, 0x0) getpid() 03:49:26 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde12, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) 03:49:26 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x19e, 0x0) [ 284.171786][T10145] nvme_fabrics: missing parameter 'transport=%s' [ 284.231726][T10145] nvme_fabrics: missing parameter 'nqn=%s' 03:49:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x1) open(0x0, 0x448000, 0x10) close(r0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) io_setup(0x9, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x581, 0x0) write$P9_RVERSION(r2, 0x0, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', 'u\x00'}, 0x7) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r4 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r4}, 0x14}}, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x0, 0x1, {0x40}}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') readv(r5, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) ioctl$DRM_IOCTL_GET_STATS(r5, 0x80f86406, &(0x7f0000000740)=""/55) 03:49:27 executing program 3: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x13) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)="38da5cca9d", 0x5) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 03:49:27 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde12, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) 03:49:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x1) open(0x0, 0x448000, 0x10) close(r0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) io_setup(0x9, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x581, 0x0) write$P9_RVERSION(r2, 0x0, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', 'u\x00'}, 0x7) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r4 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r4}, 0x14}}, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x0, 0x1, {0x40}}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') readv(r5, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) ioctl$DRM_IOCTL_GET_STATS(r5, 0x80f86406, &(0x7f0000000740)=""/55) 03:49:27 executing program 2: socket$inet6(0xa, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0}) wait4(0x0, 0x0, 0x80000002, 0x0) getpid() 03:49:27 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x19e, 0x0) 03:49:27 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde12, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) 03:49:27 executing program 3: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x13) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)="38da5cca9d", 0x5) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 03:49:27 executing program 2: socket$inet6(0xa, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0}) wait4(0x0, 0x0, 0x80000002, 0x0) getpid() [ 285.085992][T10192] nvme_fabrics: missing parameter 'transport=%s' [ 285.106071][T10192] nvme_fabrics: missing parameter 'nqn=%s' 03:49:27 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x19e, 0x0) 03:49:27 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde12, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) 03:49:27 executing program 2: madvise(&(0x7f0000a96000/0x4000)=nil, 0x4000, 0x12) pkey_mprotect(&(0x7f000001e000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:49:27 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = dup2(r1, r0) syz_genetlink_get_family_id$tipc(0x0) close(r2) r3 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r4, 0x200006) sendfile(r0, r4, 0x0, 0x8000fffffffe) 03:49:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af25, &(0x7f0000000180)) 03:49:27 executing program 3: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x13) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)="38da5cca9d", 0x5) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 03:49:27 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde12, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) 03:49:27 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) pipe(0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cgroup.controllers\x00', 0x0, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) bind$inet(r3, &(0x7f0000e13000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0x4) connect$inet(r3, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bind(r4, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000100)="ce0310000013000000911efc1fb35c22cc6dc37916217d8599b512eceb92bd309611b99e975050d8fc03240ca3ac5c66bf00000000", 0x35, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r6, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e21, 0x4, @mcast1, 0xea}], 0x4c) sendmmsg$inet_sctp(r5, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000180)=[{r5}], 0x1, 0xfffffe38) r7 = syz_open_dev$vcsa(0xfffffffffffffffe, 0x4, 0x0) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, &(0x7f00000000c0)) r8 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r8, 0x400, 0x0) fcntl$getflags(r8, 0x3) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x1c1800) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000340)) ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000100)=0x4) close(r9) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000340)) ioctl$PPPIOCSMAXCID(r10, 0x40047451, &(0x7f0000000100)) close(r10) fstat(0xffffffffffffffff, &(0x7f0000000880)) sendmmsg$unix(r8, 0x0, 0x0, 0x20000000) r11 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) sendmsg$key(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000580)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/zero\x00', 0x1, 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x600043, 0x40) r12 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r12, &(0x7f00000000c0)='./file0\x00') mkdirat(r12, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r13 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r13, &(0x7f0000000280)='./file0/file0\x00') renameat2(r13, &(0x7f0000000100)='./file0/file0\x00', r13, &(0x7f0000000340)='./file0\x00', 0x0) r14 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r14, &(0x7f0000000280)='./file0/file0\x00') 03:49:27 executing program 3: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x13) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 03:49:27 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x2000000015, 0x80005, 0x0) dup3(r4, r0, 0x0) 03:49:28 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde12, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) 03:49:28 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x800006, 0x0, 0x0, 0x4000000000001004}]}, 0x10) sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f0000000400), 0x36591e62e503a8b, 0x0) 03:49:28 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) preadv(r0, &(0x7f00000017c0), 0x19e, 0x0) 03:49:28 executing program 3: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x13) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) [ 285.959894][T10254] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 285.989492][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 285.989504][ T27] audit: type=1800 audit(1580096968.316:31): pid=10242 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16616 res=0 03:49:28 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde12, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) 03:49:28 executing program 5: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000080)) 03:49:28 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) preadv(r0, &(0x7f00000017c0), 0x19e, 0x0) 03:49:28 executing program 3: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x13) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 03:49:28 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde12, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) 03:49:29 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) pipe(0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cgroup.controllers\x00', 0x0, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) bind$inet(r3, &(0x7f0000e13000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0x4) connect$inet(r3, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bind(r4, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000100)="ce0310000013000000911efc1fb35c22cc6dc37916217d8599b512eceb92bd309611b99e975050d8fc03240ca3ac5c66bf00000000", 0x35, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r6, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e21, 0x4, @mcast1, 0xea}], 0x4c) sendmmsg$inet_sctp(r5, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000180)=[{r5}], 0x1, 0xfffffe38) r7 = syz_open_dev$vcsa(0xfffffffffffffffe, 0x4, 0x0) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, &(0x7f00000000c0)) r8 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r8, 0x400, 0x0) fcntl$getflags(r8, 0x3) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x1c1800) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000340)) ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000100)=0x4) close(r9) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000340)) ioctl$PPPIOCSMAXCID(r10, 0x40047451, &(0x7f0000000100)) close(r10) fstat(0xffffffffffffffff, &(0x7f0000000880)) sendmmsg$unix(r8, 0x0, 0x0, 0x20000000) r11 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) sendmsg$key(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000580)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/zero\x00', 0x1, 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x600043, 0x40) r12 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r12, &(0x7f00000000c0)='./file0\x00') mkdirat(r12, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r13 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r13, &(0x7f0000000280)='./file0/file0\x00') renameat2(r13, &(0x7f0000000100)='./file0/file0\x00', r13, &(0x7f0000000340)='./file0\x00', 0x0) r14 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r14, &(0x7f0000000280)='./file0/file0\x00') 03:49:29 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde12, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) 03:49:29 executing program 3: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x13) write(r1, &(0x7f00000000c0)="38da5cca9d", 0x5) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x0) 03:49:29 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000606ff0)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x0, 0x4, @mcast1}], 0x3c) poll(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000340)) close(r0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) 03:49:29 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) preadv(r0, &(0x7f00000017c0), 0x19e, 0x0) 03:49:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x1) open(0x0, 0x0, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) io_setup(0x0, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000240)=""/207) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x581, 0x0) write$P9_RVERSION(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000001280000c7d40000323030302e75118a047ce77f23407721ae9486820a79dd7576721b049cb26c981703805351aeed4054066a113874eaa13f2f260a6b725d9675a7d6d3a09ebc297bcaf84f"], 0x53) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', 'u\x00'}, 0x7) socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) syz_open_dev$video(0x0, 0x0, 0x8000) 03:49:29 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) 03:49:29 executing program 3: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x13) write(r1, &(0x7f00000000c0)="38da5cca9d", 0x5) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x0) 03:49:29 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x19e, 0x0) [ 287.581950][T10314] nvme_fabrics: missing parameter 'transport=%s' [ 287.614404][T10314] nvme_fabrics: missing parameter 'nqn=%s' 03:49:30 executing program 3: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x13) write(r1, &(0x7f00000000c0)="38da5cca9d", 0x5) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x0) 03:49:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x1) open(0x0, 0x0, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) io_setup(0x0, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000240)=""/207) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x581, 0x0) write$P9_RVERSION(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000001280000c7d40000323030302e75118a047ce77f23407721ae9486820a79dd7576721b049cb26c981703805351aeed4054066a113874eaa13f2f260a6b725d9675a7d6d3a09ebc297bcaf84f"], 0x53) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', 'u\x00'}, 0x7) socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) syz_open_dev$video(0x0, 0x0, 0x8000) 03:49:30 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) pipe(0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cgroup.controllers\x00', 0x0, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) bind$inet(r3, &(0x7f0000e13000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0x4) connect$inet(r3, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bind(r4, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000100)="ce0310000013000000911efc1fb35c22cc6dc37916217d8599b512eceb92bd309611b99e975050d8fc03240ca3ac5c66bf00000000", 0x35, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r6, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e21, 0x4, @mcast1, 0xea}], 0x4c) sendmmsg$inet_sctp(r5, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000180)=[{r5}], 0x1, 0xfffffe38) r7 = syz_open_dev$vcsa(0xfffffffffffffffe, 0x4, 0x0) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, &(0x7f00000000c0)) r8 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r8, 0x400, 0x0) fcntl$getflags(r8, 0x3) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x1c1800) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000340)) ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000100)=0x4) close(r9) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000340)) ioctl$PPPIOCSMAXCID(r10, 0x40047451, &(0x7f0000000100)) close(r10) fstat(0xffffffffffffffff, &(0x7f0000000880)) sendmmsg$unix(r8, 0x0, 0x0, 0x20000000) r11 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) sendmsg$key(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000580)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/zero\x00', 0x1, 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x600043, 0x40) r12 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r12, &(0x7f00000000c0)='./file0\x00') mkdirat(r12, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r13 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r13, &(0x7f0000000280)='./file0/file0\x00') renameat2(r13, &(0x7f0000000100)='./file0/file0\x00', r13, &(0x7f0000000340)='./file0\x00', 0x0) r14 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r14, &(0x7f0000000280)='./file0/file0\x00') [ 288.045558][T10351] nvme_fabrics: missing parameter 'transport=%s' [ 288.059469][T10351] nvme_fabrics: missing parameter 'nqn=%s' [ 288.189965][T10356] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:49:30 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) pipe(0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cgroup.controllers\x00', 0x0, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) bind$inet(r3, &(0x7f0000e13000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0x4) connect$inet(r3, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bind(r4, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000100)="ce0310000013000000911efc1fb35c22cc6dc37916217d8599b512eceb92bd309611b99e975050d8fc03240ca3ac5c66bf00000000", 0x35, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r6, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e21, 0x4, @mcast1, 0xea}], 0x4c) sendmmsg$inet_sctp(r5, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000180)=[{r5}], 0x1, 0xfffffe38) r7 = syz_open_dev$vcsa(0xfffffffffffffffe, 0x4, 0x0) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, &(0x7f00000000c0)) r8 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r8, 0x400, 0x0) fcntl$getflags(r8, 0x3) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x1c1800) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000340)) ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000100)=0x4) close(r9) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000340)) ioctl$PPPIOCSMAXCID(r10, 0x40047451, &(0x7f0000000100)) close(r10) fstat(0xffffffffffffffff, &(0x7f0000000880)) sendmmsg$unix(r8, 0x0, 0x0, 0x20000000) r11 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) sendmsg$key(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000580)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/zero\x00', 0x1, 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x600043, 0x40) r12 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r12, &(0x7f00000000c0)='./file0\x00') mkdirat(r12, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r13 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r13, &(0x7f0000000280)='./file0/file0\x00') renameat2(r13, &(0x7f0000000100)='./file0/file0\x00', r13, &(0x7f0000000340)='./file0\x00', 0x0) r14 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r14, &(0x7f0000000280)='./file0/file0\x00') 03:49:30 executing program 3: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)="38da5cca9d", 0x5) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 03:49:30 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x19e, 0x0) 03:49:30 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) 03:49:30 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="bd", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") close(r0) 03:49:30 executing program 4: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) 03:49:30 executing program 3: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)="38da5cca9d", 0x5) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 03:49:30 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x19e, 0x0) 03:49:30 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) 03:49:31 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19e, 0x0) 03:49:31 executing program 3: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)="38da5cca9d", 0x5) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) [ 289.019349][T10396] ================================================================== [ 289.027975][T10396] BUG: KASAN: use-after-free in snd_timer_resolution+0xf1/0x110 [ 289.036482][T10396] Read of size 8 at addr ffff88808d432200 by task syz-executor.4/10396 [ 289.044740][T10396] [ 289.047102][T10396] CPU: 1 PID: 10396 Comm: syz-executor.4 Not tainted 5.5.0-rc6-next-20200116-syzkaller #0 [ 289.057453][T10396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.067513][T10396] Call Trace: [ 289.070963][T10396] dump_stack+0x197/0x210 [ 289.075314][T10396] ? snd_timer_resolution+0xf1/0x110 [ 289.080690][T10396] print_address_description.constprop.0.cold+0xd4/0x30b [ 289.087820][T10396] ? snd_timer_resolution+0xf1/0x110 [ 289.093213][T10396] ? snd_timer_resolution+0xf1/0x110 [ 289.098763][T10396] __kasan_report.cold+0x1b/0x32 [ 289.103893][T10396] ? snd_timer_resolution+0xf1/0x110 [ 289.109170][T10396] kasan_report+0x12/0x20 [ 289.113569][T10396] __asan_report_load8_noabort+0x14/0x20 [ 289.119202][T10396] snd_timer_resolution+0xf1/0x110 [ 289.124552][T10396] snd_seq_info_timer_read+0x95/0x2f1 [ 289.129940][T10396] snd_info_seq_show+0xcb/0x120 [ 289.134851][T10396] seq_read+0x4ca/0x1170 [ 289.139463][T10396] ? seq_open_private+0x50/0x50 [ 289.144394][T10396] proc_reg_read+0x1f8/0x2b0 [ 289.148981][T10396] ? proc_reg_unlocked_ioctl+0x2a0/0x2a0 [ 289.154696][T10396] do_iter_read+0x4a4/0x660 [ 289.159250][T10396] ? dup_iter+0x260/0x260 [ 289.163593][T10396] vfs_readv+0xf0/0x160 [ 289.167833][T10396] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 289.173902][T10396] ? __kasan_check_read+0x11/0x20 [ 289.179039][T10396] ? do_dup2+0x4f0/0x4f0 [ 289.183280][T10396] ? __fget_light+0x1ad/0x270 [ 289.187956][T10396] do_preadv+0x1c4/0x280 [ 289.192193][T10396] ? do_readv+0x330/0x330 [ 289.196584][T10396] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 289.202058][T10396] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 289.207671][T10396] ? do_syscall_64+0x26/0x790 [ 289.212408][T10396] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 289.218664][T10396] ? do_syscall_64+0x26/0x790 [ 289.223337][T10396] __x64_sys_preadv+0x9a/0xf0 [ 289.228018][T10396] do_syscall_64+0xfa/0x790 [ 289.232542][T10396] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 289.238511][T10396] RIP: 0033:0x45b349 [ 289.242425][T10396] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 289.262110][T10396] RSP: 002b:00007fa21db44c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 289.270605][T10396] RAX: ffffffffffffffda RBX: 00007fa21db456d4 RCX: 000000000045b349 [ 289.278570][T10396] RDX: 000000000000019e RSI: 00000000200017c0 RDI: 0000000000000004 [ 289.286581][T10396] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 289.295065][T10396] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 289.303032][T10396] R13: 000000000000084f R14: 00000000004c9c13 R15: 000000000075bf2c [ 289.311127][T10396] [ 289.313456][T10396] Allocated by task 10392: [ 289.317968][T10396] save_stack+0x23/0x90 [ 289.322141][T10396] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 289.327767][T10396] kasan_kmalloc+0x9/0x10 [ 289.333838][T10396] kmem_cache_alloc_trace+0x158/0x790 [ 289.339563][T10396] snd_timer_instance_new+0x4a/0x300 [ 289.344866][T10396] snd_seq_timer_open+0x1c0/0x590 [ 289.350235][T10396] queue_use+0xf1/0x270 [ 289.354482][T10396] snd_seq_queue_alloc+0x2c5/0x4d0 [ 289.359959][T10396] snd_seq_ioctl_create_queue+0xb0/0x330 [ 289.365846][T10396] snd_seq_ioctl+0x21e/0x3e0 [ 289.370782][T10396] ksys_ioctl+0x123/0x180 [ 289.375255][T10396] __x64_sys_ioctl+0x73/0xb0 [ 289.379853][T10396] do_syscall_64+0xfa/0x790 [ 289.384974][T10396] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 289.390971][T10396] [ 289.393377][T10396] Freed by task 10391: [ 289.397695][T10396] save_stack+0x23/0x90 [ 289.402414][T10396] __kasan_slab_free+0x102/0x150 [ 289.407341][T10396] kasan_slab_free+0xe/0x10 [ 289.411840][T10396] kfree+0x10a/0x2c0 [ 289.415740][T10396] snd_timer_instance_free+0x7c/0xa0 [ 289.421030][T10396] snd_seq_timer_close+0x99/0xe0 [ 289.426489][T10396] queue_delete+0x52/0xb0 [ 289.430897][T10396] snd_seq_queue_client_leave+0x3a/0x1c0 [ 289.436515][T10396] seq_free_client1.part.0+0xec/0x240 [ 289.441888][T10396] seq_free_client+0x80/0xf0 [ 289.446839][T10396] snd_seq_release+0x55/0xf0 [ 289.451430][T10396] __fput+0x2ff/0x890 [ 289.455427][T10396] ____fput+0x16/0x20 [ 289.459504][T10396] task_work_run+0x145/0x1c0 [ 289.464203][T10396] exit_to_usermode_loop+0x316/0x380 [ 289.469519][T10396] do_syscall_64+0x676/0x790 [ 289.474279][T10396] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 289.480351][T10396] [ 289.482676][T10396] The buggy address belongs to the object at ffff88808d432200 [ 289.482676][T10396] which belongs to the cache kmalloc-256 of size 256 [ 289.496980][T10396] The buggy address is located 0 bytes inside of [ 289.496980][T10396] 256-byte region [ffff88808d432200, ffff88808d432300) [ 289.511206][T10396] The buggy address belongs to the page: [ 289.516847][T10396] page:ffffea0002350c80 refcount:1 mapcount:0 mapping:ffff8880aa4008c0 index:0xffff88808d432a00 [ 289.527974][T10396] flags: 0xfffe0000000200(slab) [ 289.532819][T10396] raw: 00fffe0000000200 ffffea000280bb08 ffffea000256cdc8 ffff8880aa4008c0 [ 289.541594][T10396] raw: ffff88808d432a00 ffff88808d432000 0000000100000007 0000000000000000 [ 289.550169][T10396] page dumped because: kasan: bad access detected [ 289.556576][T10396] [ 289.558891][T10396] Memory state around the buggy address: [ 289.564514][T10396] ffff88808d432100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 289.572760][T10396] ffff88808d432180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 289.581822][T10396] >ffff88808d432200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 289.590394][T10396] ^ [ 289.594472][T10396] ffff88808d432280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 289.602548][T10396] ffff88808d432300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 289.610609][T10396] ================================================================== [ 289.618665][T10396] Disabling lock debugging due to kernel taint 03:49:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r2, 0x800) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000000)=0x1) sendfile(r2, r3, 0x0, 0xc800) [ 289.664289][T10396] Kernel panic - not syncing: panic_on_warn set ... [ 289.670931][T10396] CPU: 1 PID: 10396 Comm: syz-executor.4 Tainted: G B 5.5.0-rc6-next-20200116-syzkaller #0 [ 289.682304][T10396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.692359][T10396] Call Trace: [ 289.695669][T10396] dump_stack+0x197/0x210 [ 289.700074][T10396] panic+0x2e3/0x75c [ 289.704117][T10396] ? add_taint.cold+0x16/0x16 [ 289.708805][T10396] ? snd_timer_resolution+0xf1/0x110 [ 289.714185][T10396] ? preempt_schedule+0x4b/0x60 [ 289.719043][T10396] ? ___preempt_schedule+0x16/0x18 [ 289.724329][T10396] ? trace_hardirqs_on+0x5e/0x240 [ 289.729363][T10396] ? snd_timer_resolution+0xf1/0x110 [ 289.735611][T10396] end_report+0x47/0x4f [ 289.739787][T10396] ? snd_timer_resolution+0xf1/0x110 [ 289.745099][T10396] __kasan_report.cold+0xe/0x32 [ 289.749960][T10396] ? snd_timer_resolution+0xf1/0x110 [ 289.755275][T10396] kasan_report+0x12/0x20 [ 289.759706][T10396] __asan_report_load8_noabort+0x14/0x20 [ 289.765358][T10396] snd_timer_resolution+0xf1/0x110 [ 289.770485][T10396] snd_seq_info_timer_read+0x95/0x2f1 [ 289.775972][T10396] snd_info_seq_show+0xcb/0x120 [ 289.781117][T10396] seq_read+0x4ca/0x1170 [ 289.782929][ T27] audit: type=1804 audit(1580096972.056:32): pid=10409 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir512748958/syzkaller.0acdw3/27/bus" dev="sda1" ino=16651 res=1 [ 289.785535][T10396] ? seq_open_private+0x50/0x50 [ 289.785551][T10396] proc_reg_read+0x1f8/0x2b0 [ 289.785567][T10396] ? proc_reg_unlocked_ioctl+0x2a0/0x2a0 [ 289.785586][T10396] do_iter_read+0x4a4/0x660 [ 289.785606][T10396] ? dup_iter+0x260/0x260 [ 289.810334][ T27] audit: type=1804 audit(1580096972.056:33): pid=10409 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir512748958/syzkaller.0acdw3/27/bus" dev="sda1" ino=16651 res=1 [ 289.814928][T10396] vfs_readv+0xf0/0x160 [ 289.814945][T10396] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 289.814958][T10396] ? __kasan_check_read+0x11/0x20 [ 289.814979][T10396] ? do_dup2+0x4f0/0x4f0 [ 289.878043][T10396] ? __fget_light+0x1ad/0x270 [ 289.883020][T10396] do_preadv+0x1c4/0x280 [ 289.887275][T10396] ? do_readv+0x330/0x330 [ 289.891644][T10396] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 289.897098][T10396] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 289.902657][T10396] ? do_syscall_64+0x26/0x790 [ 289.907581][T10396] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 289.913651][T10396] ? do_syscall_64+0x26/0x790 [ 289.918318][T10396] __x64_sys_preadv+0x9a/0xf0 [ 289.923107][T10396] do_syscall_64+0xfa/0x790 [ 289.927653][T10396] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 289.933696][T10396] RIP: 0033:0x45b349 [ 289.937995][T10396] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 289.957973][T10396] RSP: 002b:00007fa21db44c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 289.966519][T10396] RAX: ffffffffffffffda RBX: 00007fa21db456d4 RCX: 000000000045b349 [ 289.974740][T10396] RDX: 000000000000019e RSI: 00000000200017c0 RDI: 0000000000000004 [ 289.982848][T10396] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 289.992052][T10396] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 290.000012][T10396] R13: 000000000000084f R14: 00000000004c9c13 R15: 000000000075bf2c [ 290.008886][T10396] Kernel Offset: disabled [ 290.013368][T10396] Rebooting in 86400 seconds..