last executing test programs: 5.767017135s ago: executing program 2 (id=22): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)={0x74, 0x1, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008040}, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f0000000000)=0x80000000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000940)={0x0, 0x8c}, 0x0, &(0x7f0000000b80)="cb44032c2a3a518de9000000c11a536275a146d65e2988ef1a4992f9a2675b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62ddf7f799a4257d4bf67e86244beee88b1e3e5bac3ad4dea44fc08db9f741b76996bf785368bc3b20816471f5254e6e9e7a9ccd90d32ebcf5ea", 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x1, 0xfffffffe, 0x1}}) r5 = socket$inet(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb0100181800000017fffff00400000002000000010000"], &(0x7f0000000640)=""/192, 0x34, 0xc0, 0x1}, 0x28) statx(0xffffffffffffffff, 0x0, 0x400, 0x404, 0x0) 4.885618461s ago: executing program 2 (id=26): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(&(0x7f000000cffc)=0xfffffff5, 0x9, 0x0, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 4.532225191s ago: executing program 3 (id=27): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() r1 = fsopen(&(0x7f0000000600)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0xa) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fcntl$dupfd(r5, 0x406, r4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x49436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x1000, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 4.048355517s ago: executing program 1 (id=31): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x9, 0x80000001, 0x3, 0x4, 0xffff, 0x0, 0x300000}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setns(0xffffffffffffffff, 0x64000000) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r3, 0x0, 0x0) 4.012867078s ago: executing program 2 (id=32): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.995568475s ago: executing program 0 (id=33): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x80) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 3.636246435s ago: executing program 3 (id=35): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc}, 0x10) syz_emit_ethernet(0x12, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000280)='THAWED\x00', 0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppoe(0xffffffffffffffff, &(0x7f0000000680)={0x18, 0x0, {0x103, @remote, 'sit0\x00'}}, 0x1e) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x0, 0x1, 0xffffffff, 0x0, {0x2f}}, 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x600}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)={0x15c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4040800) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000040)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000080)={r8, 0x3, r7, 0x5}) writev(r6, &(0x7f0000000580)=[{&(0x7f0000000400)="1d2c", 0x2}], 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)={0x20, r10, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) 3.353809856s ago: executing program 2 (id=36): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000000000ee0a0000010900010073797a31000000002400048020000180080001006c6f670014000280080005405ef9d6657812b036000000020900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 3.353580157s ago: executing program 2 (id=37): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f00000002c0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 2.893344693s ago: executing program 1 (id=39): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) close(0x3) 2.87260431s ago: executing program 0 (id=40): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r0, &(0x7f0000000200)='transport=rdma,nqn=nqn.2.14-08.org.nvmexpress.discovery,traddr=127.0.0.1', 0x48) 2.802306109s ago: executing program 1 (id=41): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x9436, 0x42, 0x1, 0x1f4}, 0x0, 0x1, 0x0, 0x0) 2.802119193s ago: executing program 0 (id=42): keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x1}) 2.801420881s ago: executing program 0 (id=43): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x54815}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.710878906s ago: executing program 1 (id=44): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)={0x5, 0x355, 0x509, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x7, 0x0, 0x0, 0x0, "35cf52530599b474"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x51) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r1, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 2.704988818s ago: executing program 1 (id=45): syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280), &(0x7f00000005c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff401007018000010102030109026c0001010080fa090400000aff00000009050102000200000009050202000200000009050302000200000009050402000200000009050502000200000009058102000200000009058202000200000009058302000200000009058402000200000009058502"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000000c0), &(0x7f0000000180)=0x4) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x204800, 0x48, 0x3}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000", @ANYRES32=r0, @ANYBLOB="00010000316f0600300012800b00010067656e657665000020000280080011"], 0x64}}, 0x20000000) 2.704523728s ago: executing program 0 (id=46): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = fsopen(&(0x7f0000000300)='sysfs\x00', 0x0) r2 = msgget$private(0x0, 0x10) msgctl$MSG_STAT_ANY(r2, 0xd, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 2.685502361s ago: executing program 0 (id=47): r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) 1.054941873s ago: executing program 4 (id=55): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x401, 0x0, 0x0, {0x92258420943190a, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x40091}, 0x40) 1.047717793s ago: executing program 4 (id=56): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4048044) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x4, r5, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7}) 609.817365ms ago: executing program 3 (id=57): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x54815}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 535.331848ms ago: executing program 3 (id=58): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = fsopen(&(0x7f0000000300)='sysfs\x00', 0x0) r2 = msgget$private(0x0, 0x10) msgctl$MSG_STAT_ANY(r2, 0xd, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 520.010935ms ago: executing program 3 (id=59): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ocfs2\x00', 0x4000, &(0x7f0000000140)='\xba%\'#[/\xc0(@*R^\'+\x00') dup(0xffffffffffffffff) syz_ublk_setup_queues(r0, r6, &(0x7f00000004c0)={0x0, 0x1c85, 0x10, 0x1, 0x1f1}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe709, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x2, 0x26d}}], 0x1, 0x0, 0x0) 338.59789ms ago: executing program 3 (id=60): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x62, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0x2d, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x7, 0x0, 0x4, 0x2, 0x9, 0x7, 0x7, 0x1, 0x3, 0x98, 0x12, 0x8, 0x40, 0x9, 0x202}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 122.928714ms ago: executing program 4 (id=61): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000240), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r4, &(0x7f0000000740)='fc\n', 0x3) 122.603147ms ago: executing program 4 (id=62): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x80) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 122.506216ms ago: executing program 2 (id=63): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000280)='L', 0x1) 51.346098ms ago: executing program 1 (id=64): syz_usb_connect(0x2, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0xb7, 0xca, 0xa5, 0x10, 0x15c2, 0x37, 0xc446, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfa, 0x80, 0xa0, 0x6, "", [{{0x9, 0x4, 0x50, 0x0, 0x0, 0xff, 0xff, 0xff, 0x40}}]}}]}}, 0x0) 16.771052ms ago: executing program 4 (id=65): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dbg\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dbg/split_huge_pages\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='30001,0x7f0000200000,', 0x15) 0s ago: executing program 4 (id=66): bind$inet6(0xffffffffffffffff, 0x0, 0x0) gettid() prlimit64(0x0, 0xe, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) kexec_load(0xd0ffbf, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)) 0s ago: executing program 4 (id=67): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000240), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='1\n', 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r7, &(0x7f00000006c0)='fc\n', 0x3) r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r8, &(0x7f0000000740)='fc\n', 0x3) write(0xffffffffffffffff, &(0x7f00000007c0)='nn-', 0x3) write(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.62' (ED25519) to the list of known hosts. [ 29.040752][ T4694] cgroup: Unknown subsys name 'net' [ 29.170817][ T4694] cgroup: Unknown subsys name 'cpuset' [ 29.172834][ T4694] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.323346][ T4694] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.094841][ T4712] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.106047][ T4719] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.106670][ T4719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.107014][ T4721] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.107314][ T4721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.107504][ T4721] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.110668][ T4721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.110787][ T4721] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.110906][ T4721] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.112199][ T4720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.113393][ T4720] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.113564][ T4720] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.114218][ T4720] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.114456][ T4720] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.114613][ T4720] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.114983][ T4720] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.115361][ T4720] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.115726][ T4720] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.115996][ T4720] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.116805][ T4720] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.117534][ T4720] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.118193][ T4712] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.118490][ T4722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.129443][ T4722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.131306][ T4722] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.487845][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.488131][ T4705] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.488203][ T4705] bridge_slave_0: entered allmulticast mode [ 30.488697][ T4705] bridge_slave_0: entered promiscuous mode [ 30.498866][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.498912][ T4705] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.499040][ T4705] bridge_slave_1: entered allmulticast mode [ 30.503209][ T4705] bridge_slave_1: entered promiscuous mode [ 30.507914][ T4704] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.507962][ T4704] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.508036][ T4704] bridge_slave_0: entered allmulticast mode [ 30.508483][ T4704] bridge_slave_0: entered promiscuous mode [ 30.520617][ T4704] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.520701][ T4704] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.520807][ T4704] bridge_slave_1: entered allmulticast mode [ 30.521237][ T4704] bridge_slave_1: entered promiscuous mode [ 30.532151][ T4705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.561056][ T4705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.568266][ T4704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.582167][ T4705] team0: Port device team_slave_0 added [ 30.584252][ T4704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.597292][ T4705] team0: Port device team_slave_1 added [ 30.604937][ T4704] team0: Port device team_slave_0 added [ 30.606972][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.608358][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.610112][ T4708] bridge_slave_0: entered allmulticast mode [ 30.611755][ T4708] bridge_slave_0: entered promiscuous mode [ 30.613777][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.615209][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.616701][ T4708] bridge_slave_1: entered allmulticast mode [ 30.618291][ T4708] bridge_slave_1: entered promiscuous mode [ 30.628845][ T4704] team0: Port device team_slave_1 added [ 30.643186][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.643448][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.643557][ T4709] bridge_slave_0: entered allmulticast mode [ 30.643993][ T4709] bridge_slave_0: entered promiscuous mode [ 30.644890][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.644925][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.644973][ T4709] bridge_slave_1: entered allmulticast mode [ 30.645379][ T4709] bridge_slave_1: entered promiscuous mode [ 30.649361][ T4704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.649376][ T4704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.649387][ T4704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.650246][ T4704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.650253][ T4704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.650265][ T4704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.669450][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.669475][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.669504][ T4705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.680617][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.683394][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.691126][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.691153][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.691179][ T4705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.701129][ T4704] hsr_slave_0: entered promiscuous mode [ 30.702795][ T4704] hsr_slave_1: entered promiscuous mode [ 30.720159][ T4705] hsr_slave_0: entered promiscuous mode [ 30.720492][ T4705] hsr_slave_1: entered promiscuous mode [ 30.720725][ T4705] debugfs: 'hsr0' already exists in 'hsr' [ 30.720768][ T4705] Cannot create hsr debugfs directory [ 30.722220][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.722277][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.722331][ T4713] bridge_slave_0: entered allmulticast mode [ 30.722878][ T4713] bridge_slave_0: entered promiscuous mode [ 30.723724][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.723750][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.723798][ T4713] bridge_slave_1: entered allmulticast mode [ 30.724261][ T4713] bridge_slave_1: entered promiscuous mode [ 30.726161][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.727215][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.727994][ T4708] team0: Port device team_slave_0 added [ 30.728802][ T4708] team0: Port device team_slave_1 added [ 30.755554][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.764598][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.764624][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.764639][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.767114][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.767122][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.767135][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.774733][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.775874][ T4709] team0: Port device team_slave_0 added [ 30.790646][ T4709] team0: Port device team_slave_1 added [ 30.801399][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.801989][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.802020][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.804681][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.804689][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.804702][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.818554][ T4708] hsr_slave_0: entered promiscuous mode [ 30.818876][ T4708] hsr_slave_1: entered promiscuous mode [ 30.819077][ T4708] debugfs: 'hsr0' already exists in 'hsr' [ 30.819087][ T4708] Cannot create hsr debugfs directory [ 30.828177][ T4713] team0: Port device team_slave_0 added [ 30.832928][ T4713] team0: Port device team_slave_1 added [ 30.840779][ T4709] hsr_slave_0: entered promiscuous mode [ 30.842212][ T4709] hsr_slave_1: entered promiscuous mode [ 30.843692][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 30.844815][ T4709] Cannot create hsr debugfs directory [ 30.881865][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.881902][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.881920][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.901265][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.901290][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.901316][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.937506][ T4704] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.940985][ T4704] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.941376][ T4704] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.943541][ T4704] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.954460][ T4704] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.957446][ T4704] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.967075][ T4713] hsr_slave_0: entered promiscuous mode [ 30.968619][ T4713] hsr_slave_1: entered promiscuous mode [ 30.969607][ T4713] debugfs: 'hsr0' already exists in 'hsr' [ 30.969619][ T4713] Cannot create hsr debugfs directory [ 30.971117][ T4704] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.972493][ T4704] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.995384][ T4705] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.998009][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.998642][ T4705] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.000812][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.002429][ T4705] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.004670][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.014151][ T4705] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.016588][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.041105][ T4704] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.041160][ T4704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.041402][ T4704] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.041448][ T4704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.052737][ T4709] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.055088][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.056980][ T4709] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.059123][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.060378][ T4709] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.061631][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.071931][ T4709] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.074017][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.077119][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.077168][ T4705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.077252][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.077282][ T4705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.096195][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.096345][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.096457][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.096494][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.100668][ T4708] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.105342][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.118214][ T4704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.124735][ T4708] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.126950][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.128846][ T4708] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.131289][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.135573][ T4705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.135785][ T4708] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.137859][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.148877][ T4704] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.154234][ T907] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.156115][ T907] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.157745][ T907] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.160779][ T907] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.165272][ T907] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.167299][ T907] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.177355][ T4705] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.183130][ T907] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.183180][ T907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.189730][ T4713] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.191894][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.192221][ T4713] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.193914][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.202435][ T4713] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.204858][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.207264][ T3045] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.207305][ T3045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.207693][ T3045] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.207712][ T3045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.208196][ T3045] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.208215][ T3045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.229551][ T4713] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.232052][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.257173][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.276673][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.279606][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.284086][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.284130][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.298941][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.303242][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.313139][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.316317][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.316365][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.316730][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.316756][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.343553][ T4708] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.347031][ T4708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.357627][ T4709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.360174][ T4709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.365191][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.365229][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.366421][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.366455][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.366770][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.366789][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.376021][ T4713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.423514][ T4705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.443160][ T4705] veth0_vlan: entered promiscuous mode [ 31.446561][ T4705] veth1_vlan: entered promiscuous mode [ 31.458170][ T4705] veth0_macvtap: entered promiscuous mode [ 31.466793][ T4705] veth1_macvtap: entered promiscuous mode [ 31.473337][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.477459][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.526933][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.526967][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.550332][ T907] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.550460][ T907] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.550483][ T907] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.556413][ T3045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.556447][ T3045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.589466][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.603803][ T4705] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.623254][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.628118][ T4704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.639044][ T4713] veth0_vlan: entered promiscuous mode [ 31.662208][ T4704] veth0_vlan: entered promiscuous mode [ 31.668170][ T4713] veth1_vlan: entered promiscuous mode [ 31.671157][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.674438][ T4704] veth1_vlan: entered promiscuous mode [ 31.703263][ T4709] veth0_vlan: entered promiscuous mode [ 31.712484][ T4709] veth1_vlan: entered promiscuous mode [ 31.716197][ T4704] veth0_macvtap: entered promiscuous mode [ 31.717770][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.728553][ T4704] veth1_macvtap: entered promiscuous mode [ 31.736087][ T4709] veth0_macvtap: entered promiscuous mode [ 31.737135][ T4709] veth1_macvtap: entered promiscuous mode [ 31.801060][ T30] audit: type=1807 audit(31.770:2): action=measure uid>1000 res=1 [ 32.020496][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.021581][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.034728][ T4704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.035823][ T4704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.054979][ T4713] veth0_macvtap: entered promiscuous mode [ 32.056269][ T4713] veth1_macvtap: entered promiscuous mode [ 32.078620][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.088459][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.099717][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.099745][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.111965][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.111997][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.133352][ T3045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.133389][ T3045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.144033][ T3045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.144063][ T3045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.162936][ T4708] veth0_vlan: entered promiscuous mode [ 32.169954][ T50] Bluetooth: hci3: command tx timeout [ 32.170155][ T50] Bluetooth: hci0: command tx timeout [ 32.170221][ T50] Bluetooth: hci4: command tx timeout [ 32.170283][ T50] Bluetooth: hci1: command tx timeout [ 32.170344][ T50] Bluetooth: hci2: command tx timeout [ 32.180281][ T3045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.180308][ T3045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.192712][ T4708] veth1_vlan: entered promiscuous mode [ 32.218457][ T4708] veth0_macvtap: entered promiscuous mode [ 32.226701][ T4897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.228229][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.228241][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.231533][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.231758][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.231780][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.231797][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.231815][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.231831][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.231847][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.231863][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.231878][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.231893][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.231909][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.231924][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.233645][ T4708] veth1_macvtap: entered promiscuous mode [ 32.236946][ T4897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.247860][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.248900][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.265370][ T4899] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 32.266851][ T4899] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 32.280546][ T3045] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.280612][ T3045] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.280639][ T3045] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.280658][ T3045] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.296708][ T3045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.296742][ T3045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.323871][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.323904][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.337775][ T4899] nvmet_rdma: address family 255 not supported [ 32.880566][ T4878] ima: policy update completed [ 32.881402][ T30] audit: type=1802 audit(32.860:3): pid=4878 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=completed comm="syz.1.2" res=1 errno=0 [ 32.982800][ T4914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.985280][ T4914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.235534][ T4934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.236262][ T4934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.243522][ T4940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.244846][ T4940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.249618][ T4710] Bluetooth: hci2: command tx timeout [ 34.249647][ T4710] Bluetooth: hci1: command tx timeout [ 34.249672][ T4710] Bluetooth: hci4: command tx timeout [ 34.249690][ T4710] Bluetooth: hci0: command tx timeout [ 34.249708][ T4710] Bluetooth: hci3: command tx timeout [ 34.262617][ T4939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'. [ 34.409335][ T4943] ======================================================= [ 34.409335][ T4943] WARNING: The mand mount option has been deprecated and [ 34.409335][ T4943] and is ignored by this kernel. Remove the mand [ 34.409335][ T4943] option from the mount to silence this warning. [ 34.409335][ T4943] ======================================================= [ 34.499815][ T12] IPVS: starting estimator thread 0... [ 34.593027][ T4944] IPVS: using max 43 ests per chain, 103200 per kthread [ 34.597595][ T4946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.599832][ T4946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.708309][ T4948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17'. [ 34.708347][ T4948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17'. [ 34.710790][ T4948] geneve2: entered promiscuous mode [ 34.836053][ T4952] netlink: 'syz.3.18': attribute type 4 has an invalid length. [ 36.120027][ T4963] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 36.339025][ T50] Bluetooth: hci3: command tx timeout [ 36.339196][ T50] Bluetooth: hci4: command tx timeout [ 36.339452][ T50] Bluetooth: hci1: command tx timeout [ 36.339632][ T50] Bluetooth: hci2: command tx timeout [ 36.510753][ T4970] Bluetooth: MGMT ver 1.23 [ 36.940889][ T4947] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 37.448797][ T4995] dvmrp6: entered allmulticast mode [ 37.505310][ T5000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.505564][ T5000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.735396][ T12] IPVS: starting estimator thread 0... [ 37.835065][ T5007] syzkaller0: entered promiscuous mode [ 37.835104][ T5007] syzkaller0: entered allmulticast mode [ 37.851624][ T5009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.851716][ T5003] IPVS: using max 59 ests per chain, 141600 per kthread [ 37.853842][ T5009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.105721][ T5013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'. [ 38.581185][ T4710] Bluetooth: hci2: command tx timeout [ 38.581225][ T4710] Bluetooth: hci1: command tx timeout [ 38.581257][ T4710] Bluetooth: hci4: command tx timeout [ 38.581276][ T4710] Bluetooth: hci3: command tx timeout [ 38.639087][ T5028] nvme nvme1: rdma_resolve_addr failed (-19). [ 38.682764][ T5038] tipc: Enabling of bearer rejected, failed to enable media [ 38.733687][ T5045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'. [ 38.795113][ T5051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.795320][ T5051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.893263][ T5054] netlink: 20 bytes leftover after parsing attributes in process `syz.1.45'. [ 38.893303][ T5054] netlink: 20 bytes leftover after parsing attributes in process `syz.1.45'. [ 38.894946][ T5054] geneve2: entered promiscuous mode [ 39.013162][ T5056] syzkaller0: entered promiscuous mode [ 39.013200][ T5056] syzkaller0: entered allmulticast mode [ 39.050511][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 39.225110][ T10] usb 1-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 39.229115][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.235339][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.235366][ T10] usb 1-1: Product: syz [ 39.235393][ T10] usb 1-1: Manufacturer: syz [ 39.235406][ T10] usb 1-1: SerialNumber: syz [ 39.255219][ T10] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 40.350184][ T10] gspca_mr97310a: reg read [21] error -110 [ 40.350245][ T10] mr97310a 1-1:1.0: probe with driver mr97310a failed with error -110 [ 40.874330][ T5084] tipc: Enabling of bearer rejected, failed to enable media [ 40.889614][ T5051] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 41.181651][ T5101] syzkaller0: entered promiscuous mode [ 41.181685][ T5101] syzkaller0: entered allmulticast mode [ 41.299431][ T50] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 41.363461][ T5107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.363850][ T5107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.434294][ T5110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.435686][ T5110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.519041][ T5116] nvmet: adding nsid 1 to subsystem testsubsys [ 41.522333][ T5116] Unable to handle kernel paging request at virtual address dfff800000000000 [ 41.524422][ T5116] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 41.526721][ T5116] Mem abort info: [ 41.527578][ T5116] ESR = 0x0000000096000005 [ 41.528809][ T5116] EC = 0x25: DABT (current EL), IL = 32 bits [ 41.531241][ T5116] SET = 0, FnV = 0 [ 41.532082][ T5116] EA = 0, S1PTW = 0 [ 41.532117][ T5116] FSC = 0x05: level 1 translation fault [ 41.532132][ T5116] Data abort info: [ 41.532143][ T5116] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 41.536271][ T5116] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 41.536308][ T5116] GCS = 0, Overlay = 0, DirtyBit = 0 [ 41.536323][ T5116] [dfff800000000000] address between user and kernel address ranges [ 41.536503][ T5116] Internal error: Oops: 0000000096000005 [#1] SMP [ 41.541287][ T5116] Modules linked in: [ 41.541948][ T5116] CPU: 1 UID: 0 PID: 5116 Comm: syz.4.67 Not tainted syzkaller #0 PREEMPT [ 41.543457][ T5116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 41.545346][ T5116] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 41.546817][ T5116] pc : strlen+0x28/0x84 [ 41.547598][ T5116] lr : do_getname_kernel+0x2c/0x1f4 [ 41.548532][ T5116] sp : ffff800093557860 [ 41.549243][ T5116] x29: ffff800093557880 x28: ffff0000f050f2c0 x27: ffff8000828a798c [ 41.550676][ T5116] x26: ffff0000cf57b000 x25: 1fffe0001e0a1e42 x24: dfff800000000000 [ 41.552143][ T5116] x23: 1fffe0001860940e x22: 00000000fffffff1 x21: 0000000000000000 [ 41.553594][ T5116] x20: 0000000000000000 x19: 0000000000000000 x18: 00000000ffffffff [ 41.555028][ T5116] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000020000600 [ 41.556487][ T5116] x14: ffff80008b0df2b0 x13: 0000000000000001 x12: 0000000000000000 [ 41.557969][ T5116] x11: 0000000000000000 x10: dfff800000000000 x9 : 0000000000000000 [ 41.559457][ T5116] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 41.560958][ T5116] x5 : ffff80008aaa73d0 x4 : 0000000000000008 x3 : ffff80008289b5f4 [ 41.562513][ T5116] x2 : 0000000000000000 x1 : ffff0000d9653b00 x0 : 0000000000000000 [ 41.563955][ T5116] Call trace: [ 41.564533][ T5116] strlen+0x28/0x84 (P) [ 41.565291][ T5116] do_getname_kernel+0x2c/0x1f4 [ 41.566190][ T5116] getname_kernel+0x24/0x34 [ 41.567032][ T5116] filp_open+0x2c/0x60 [ 41.567772][ T5116] nvmet_file_ns_enable+0x88/0x30c [ 41.568709][ T5116] nvmet_ns_enable+0xac/0x4ec [ 41.569567][ T5116] nvmet_ns_enable_store+0xd4/0x170 [ 41.570493][ T5116] configfs_write_iter+0x27c/0x354 [ 41.571419][ T5116] vfs_write+0x51c/0xa0c [ 41.572196][ T5116] ksys_write+0x12c/0x228 [ 41.572982][ T5116] __arm64_sys_write+0x84/0x98 [ 41.573844][ T5116] invoke_syscall+0x98/0x244 [ 41.574645][ T5116] el0_svc_common+0xec/0x23c [ 41.575464][ T5116] do_el0_svc+0x4c/0x5c [ 41.576199][ T5116] el0_svc+0x64/0x260 [ 41.576912][ T5116] el0t_64_sync_handler+0x44/0x104 [ 41.577826][ T5116] el0t_64_sync+0x198/0x19c [ 41.578599][ T5116] Code: aa0003e8 f2fbffea d343fd0b 1200090c (38ea696b) [ 41.579812][ T5116] ---[ end trace 0000000000000000 ]--- [ 41.891832][ T5116] Kernel panic - not syncing: Oops: Fatal exception [ 41.892994][ T5116] SMP: stopping secondary CPUs [ 41.893815][ T5116] Kernel Offset: disabled [ 41.894565][ T5116] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 41.895763][ T5116] Memory Limit: none [ 42.167836][ T5116] Rebooting in 86400 seconds..