last executing test programs: 22.193317959s ago: executing program 0 (id=1): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c00)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000d00)={@local, 0x40, r1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000b00)={'dummy0\x00', 0x1043}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x38}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000e00)='dummy0\x00', 0x7) bind$inet6(r3, &(0x7f0000000600)={0xa, 0x4e25, 0x0, @empty}, 0x1c) listen(r3, 0xa) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000300)={0x3, 0x40, 0x0, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x4e25, 0x0, @local, 0x2}, 0xffffffffffffffff, 0x3e8}}, 0x48) nanosleep(&(0x7f0000000700)={0x0, 0x10000000}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000400)={0x4, 0x8, 0x0, {0xffffffffffffffff, 0x3e8}}, 0x10) nanosleep(&(0x7f0000000700)={0x0, 0x10000000}, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000500)={0x6, 0x118, 0x0, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}}}, 0x120) r5 = accept4$inet6(r3, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000800)='\x00'/20, 0x14, 0x0, 0x0, 0x0) close(r5) 19.537669704s ago: executing program 3 (id=15): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c010310000000000040000000"], 0xf) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04050400c90016"], 0x7) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x7) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e0401520c00"], 0x7) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040e04011a0c00"], 0x7) nanosleep(&(0x7f0000000600)={0x0, 0x2faf080}, 0x0) syz_emit_vhci(&(0x7f0000000a00)=ANY=[@ANYBLOB="040e04016d0c00"], 0x7) nanosleep(&(0x7f0000000b00)={0x0, 0x2faf080}, 0x0) write(0xffffffffffffffff, &(0x7f0000000c00)="29000000010001", 0x7) nanosleep(&(0x7f0000000f00)={0x0, 0x2faf080}, 0x0) syz_emit_vhci(&(0x7f0000001000)=ANY=[@ANYBLOB="040e0401082000"], 0x7) 19.361124812s ago: executing program 0 (id=16): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408680630b00020102030109023b00010100"], 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 18.666999493s ago: executing program 3 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='reado', 0x5) 18.326009244s ago: executing program 3 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='md0\n', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='raid1\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='acti', 0x4) 17.61760372s ago: executing program 3 (id=20): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)) r8 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) nanosleep(&(0x7f0000000d00)={0x0, 0x5f5e100}, 0x0) r9 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) dup2(r7, r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000200)=[{0x0}], 0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f0000004000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, &(0x7f0000005000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000d00)={0x0, 0x5f5e100}, 0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000001000)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0107523, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd}) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000001100)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0107523, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd={0x10000}}) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000001200)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0107523, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd={0x20000}}) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000001300)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0107523, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd={0x30000}}) io_uring_enter(r1, 0x4, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000d00)={0x0, 0x5f5e100}, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000006000)=@IORING_OP_READV_FIXED={0x3c, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000007000)=[{0x0, 0x1000}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) 15.543550306s ago: executing program 0 (id=23): r0 = syz_io_uring_setup(0x10, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind(r4, &(0x7f0000000100)=@generic={0x21, "34000200100002001b5b00"}, 0x80) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000800)='./proc\x00', &(0x7f0000000900)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/afs/cells\x00', 0x1, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000001100)='add mycell 127.0.', 0x11}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000510)=""/1024, 0x400}], 0x1, &(0x7f0000000400)=""/24, 0x18}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f0000000320)={0x0, 0x0, &(0x7f0000000520)=[{&(0x7f0000000530)=""/1024, 0x400}], 0x1, &(0x7f0000000420)=""/24, 0x18}}) 15.334137588s ago: executing program 3 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000005c0)='-2 -3 -4 +4.2\n\x00', 0xe) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./export/sub\x00', 0x1ff) mount$tmpfs(0x0, &(0x7f0000000140)='./export/sub\x00', &(0x7f0000000180), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 myclient\n\x00', 0x23) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='myclient ./export 2147483647 25632 0 0 0\n\x00', 0x29) write(r2, &(0x7f00000002c0)='myclient ./export/sub 2147483647 25632 0 0 1\n\x00', 0x2d) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='tcp 2049\n\x00', 0x9) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='8\n\x00', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) stat(&(0x7f0000000500)='./mnt/sub\x00', &(0x7f0000000540)) 15.183150204s ago: executing program 0 (id=26): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)) r8 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) nanosleep(&(0x7f0000000d00)={0x0, 0x5f5e100}, 0x0) r9 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) dup2(r7, r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000200)=[{0x0}], 0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f0000004000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, &(0x7f0000005000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000d00)={0x0, 0x5f5e100}, 0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000001100)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0107523, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd={0x10000}}) io_uring_enter(r1, 0x4, 0x0, 0x0, 0x0, 0x0) 14.023455992s ago: executing program 0 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000005c0)='-2 -3 -4 +4.2\n\x00', 0xe) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./export/sub\x00', 0x1ff) mount$tmpfs(0x0, &(0x7f0000000140)='./export/sub\x00', &(0x7f0000000180), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 myclient\n\x00', 0x23) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='myclient ./export 2147483647 25632 0 0 0\n\x00', 0x29) write(r2, &(0x7f00000002c0)='myclient ./export/sub 2147483647 25632 0 0 1\n\x00', 0x2d) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='tcp 2049\n\x00', 0x9) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='8\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000440)='127.0.0.1:/export\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='nolock,clientaddr=127.0.0.1,addr=127.0.0.1\x00']) stat(&(0x7f0000000500)='./mnt/sub\x00', &(0x7f0000000540)) 8.673885131s ago: executing program 3 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f00000003c0)='reado', 0x5) 3.719765992s ago: executing program 4 (id=72): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dummy.img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='md0\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='7:0\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='raid1\x00', 0x6) 3.235148303s ago: executing program 1 (id=84): r0 = syz_io_uring_setup(0x10, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind(r4, &(0x7f0000000100)=@generic={0x21, "34000200100002001b5b00"}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./proc\x00', 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/afs/cells\x00', 0x1, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000001100)='add mycell 127.0.', 0x11}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000510)=""/1024, 0x400}], 0x1, &(0x7f0000000400)=""/24, 0x18}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f0000000320)={0x0, 0x0, &(0x7f0000000520)=[{&(0x7f0000000530)=""/1024, 0x400}], 0x1, &(0x7f0000000420)=""/24, 0x18}}) 3.150351483s ago: executing program 4 (id=75): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3a}, 0x78}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40000000000000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000001) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000580)={0x0, &(0x7f0000000440)=[@nested_amd_stgi={0x17e, 0x10}, @rdmsr={0x66, 0x18, {0x9d5}}, @wr_drn={0x68, 0x20, {0x2, 0xc}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host32=0x4c00, 0x4, 0x80000000, 0x100}}, @uexit={0x0, 0x18, 0x6}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest32=0x481a, 0x8, 0x81, 0x8}}, @enable_nested={0x12c, 0x18}, @cpuid={0x64, 0x18, {0x8, 0xb0a}}], 0x100}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) 2.952982357s ago: executing program 4 (id=76): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408680630b00020102030109023b00010100a0320904000002ff00000007"], 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 2.493999923s ago: executing program 1 (id=77): mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='loop\x00', 0x4) symlinkat(&(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/subsystems/testnqn\x00') r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write(r1, &(0x7f0000000340)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/nvme/nvme0/reset_controller\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='1\x00', 0x1) 1.978680438s ago: executing program 2 (id=79): r0 = syz_io_uring_setup(0x10, &(0x7f0000000000), 0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./proc\x00', &(0x7f0000000900)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/afs/cells\x00', 0x1, 0x0) syz_io_uring_submit(0x0, r1, r2, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000001100)='add mycell 127.0.', 0x11}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 1.756274308s ago: executing program 2 (id=80): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c010310000000000040000000"], 0xf) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04050400c90016"], 0x7) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0401550c"], 0x7) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e0401520c00"], 0x7) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040e04011a0c00"], 0x7) nanosleep(&(0x7f0000000600)={0x0, 0x2faf080}, 0x0) syz_emit_vhci(&(0x7f0000000a00)=ANY=[@ANYBLOB="040e04016d0c00"], 0x7) nanosleep(&(0x7f0000000b00)={0x0, 0x2faf080}, 0x0) write(0xffffffffffffffff, &(0x7f0000000c00)="29000000010001", 0x7) nanosleep(&(0x7f0000000f00)={0x0, 0x2faf080}, 0x0) syz_emit_vhci(&(0x7f0000001000)=ANY=[@ANYBLOB="040e0401082000"], 0x7) 1.552666718s ago: executing program 1 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f0000000500)=""/10, 0xa) 1.455640835s ago: executing program 2 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000300), 0x0) 1.415458726s ago: executing program 1 (id=83): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dummy.img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='md0\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='raid1\x00', 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-loop0/slot\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='0\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='active\x00', 0x7) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r7, &(0x7f00000004c0)='+8\x00', 0x3) 1.21591475s ago: executing program 2 (id=85): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dummy.img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='md0\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='7:0\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='raid1\x00', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='1\x00', 0x2) write(0xffffffffffffffff, &(0x7f00000003c0)='0\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='active\x00', 0x7) 1.15430961s ago: executing program 4 (id=86): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dummy.img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='7:0\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='raid1\x00', 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-loop0/slot\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='0\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='active\x00', 0x7) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r7, &(0x7f00000004c0)='+8\x00', 0x3) 733.574718ms ago: executing program 1 (id=87): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3a}, 0x78}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40000000000000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000001) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000580)={0x0, &(0x7f0000000440)=[@nested_amd_stgi={0x17e, 0x10}, @rdmsr={0x66, 0x18, {0x9d5}}, @wr_drn={0x68, 0x20, {0x2, 0xc}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host32=0x4c00, 0x4, 0x80000000, 0x100}}, @uexit={0x0, 0x18, 0x6}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest32=0x481a, 0x8, 0x81, 0x8}}, @enable_nested={0x12c, 0x18}, @cpuid={0x64, 0x18, {0x8, 0xb0a}}], 0x100}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) 731.68785ms ago: executing program 2 (id=88): r0 = syz_io_uring_setup(0x10, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind(r4, &(0x7f0000000100)=@generic={0x21, "34000200100002001b5b00"}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./proc\x00', 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/afs/cells\x00', 0x1, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000001100)='add mycell 127.0.', 0x11}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000510)=""/1024, 0x400}], 0x1, &(0x7f0000000400)=""/24, 0x18}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f0000000320)={0x0, 0x0, &(0x7f0000000520)=[{&(0x7f0000000530)=""/1024, 0x400}], 0x1, &(0x7f0000000420)=""/24, 0x18}}) 347.835048ms ago: executing program 1 (id=89): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dummy.img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='md0\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='7:0\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='raid1\x00', 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-loop0/slot\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='0\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='active\x00', 0x7) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r7, &(0x7f00000004c0)='+8\x00', 0x3) 347.044547ms ago: executing program 4 (id=90): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='md0\n', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='acti', 0x4) 216.808316ms ago: executing program 4 (id=91): r0 = syz_io_uring_setup(0x10, &(0x7f0000000000), 0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./proc\x00', &(0x7f0000000900)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/afs/cells\x00', 0x1, 0x0) syz_io_uring_submit(0x0, r1, r2, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000001100)='add mycell 127.0.', 0x11}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=92): mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='loop\x00', 0x4) symlinkat(&(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/subsystems/testnqn\x00') r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write(r1, &(0x7f0000000340)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/nvme/nvme0/reset_controller\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='1\x00', 0x1) kernel console output (not intermixed with test programs): [ 92.378702][ T31] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts. [ 98.331514][ T5573] cgroup: Unknown subsys name 'net' [ 98.574252][ T5573] cgroup: Unknown subsys name 'cpuset' [ 98.629526][ T5573] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.618101][ T5573] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 103.178383][ T5592] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.193532][ T5595] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.194468][ T5595] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.197203][ T5592] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.198560][ T5595] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.200984][ T5592] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.202691][ T5595] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.204224][ T5595] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.239444][ T5595] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.240246][ T5595] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.315485][ T4900] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.325882][ T4900] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.337716][ T4900] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.347219][ T4900] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.358521][ T4900] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.408926][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 103.437188][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 103.440663][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 103.452168][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 103.454671][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 103.476233][ T4900] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.503157][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.509703][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.514758][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.518913][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.329066][ T5595] Bluetooth: hci1: command tx timeout [ 105.329072][ T59] Bluetooth: hci0: command tx timeout [ 105.407204][ T59] Bluetooth: hci2: command tx timeout [ 105.571741][ T59] Bluetooth: hci3: command tx timeout [ 105.572833][ T59] Bluetooth: hci4: command tx timeout [ 105.987985][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.989164][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.989339][ T5586] bridge_slave_0: entered allmulticast mode [ 105.992102][ T5586] bridge_slave_0: entered promiscuous mode [ 106.045059][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.045243][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.045860][ T5586] bridge_slave_1: entered allmulticast mode [ 106.051598][ T5586] bridge_slave_1: entered promiscuous mode [ 106.132416][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.132667][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.132835][ T5587] bridge_slave_0: entered allmulticast mode [ 106.135516][ T5587] bridge_slave_0: entered promiscuous mode [ 106.205176][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.205376][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.205570][ T5587] bridge_slave_1: entered allmulticast mode [ 106.210534][ T5587] bridge_slave_1: entered promiscuous mode [ 106.260887][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.337488][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.337671][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.337850][ T5588] bridge_slave_0: entered allmulticast mode [ 106.340712][ T5588] bridge_slave_0: entered promiscuous mode [ 106.351551][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.390489][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.390678][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.390840][ T5590] bridge_slave_0: entered allmulticast mode [ 106.393967][ T5590] bridge_slave_0: entered promiscuous mode [ 106.396148][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.396272][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.396821][ T5588] bridge_slave_1: entered allmulticast mode [ 106.403409][ T5588] bridge_slave_1: entered promiscuous mode [ 106.426893][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.428643][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.428847][ T5589] bridge_slave_0: entered allmulticast mode [ 106.434195][ T5589] bridge_slave_0: entered promiscuous mode [ 106.439131][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.439261][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.439460][ T5590] bridge_slave_1: entered allmulticast mode [ 106.442412][ T5590] bridge_slave_1: entered promiscuous mode [ 106.525458][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.526965][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.527799][ T5589] bridge_slave_1: entered allmulticast mode [ 106.533426][ T5589] bridge_slave_1: entered promiscuous mode [ 106.559753][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.594238][ T5586] team0: Port device team_slave_0 added [ 106.616057][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.638275][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.642125][ T5586] team0: Port device team_slave_1 added [ 106.685412][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.692197][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.719229][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.746775][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.798157][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.802748][ T5587] team0: Port device team_slave_0 added [ 106.848478][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.848548][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.848574][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.880173][ T5587] team0: Port device team_slave_1 added [ 106.904040][ T5588] team0: Port device team_slave_0 added [ 106.904994][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.905009][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.905031][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.952764][ T5590] team0: Port device team_slave_0 added [ 106.956759][ T5588] team0: Port device team_slave_1 added [ 106.974726][ T5589] team0: Port device team_slave_0 added [ 106.994143][ T5590] team0: Port device team_slave_1 added [ 107.012782][ T5589] team0: Port device team_slave_1 added [ 107.013940][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.013955][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.013978][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.075527][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.075592][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.075618][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.100492][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.100511][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.100534][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.164778][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.165652][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.165677][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.171710][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.171728][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.171750][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.206297][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.206316][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.206339][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.211317][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.211336][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.211359][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.243182][ T5586] hsr_slave_0: entered promiscuous mode [ 107.245217][ T5586] hsr_slave_1: entered promiscuous mode [ 107.249218][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.249237][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.249261][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.407254][ T5595] Bluetooth: hci0: command tx timeout [ 107.407296][ T5595] Bluetooth: hci1: command tx timeout [ 107.487373][ T59] Bluetooth: hci2: command tx timeout [ 107.647451][ T59] Bluetooth: hci4: command tx timeout [ 107.648549][ T5595] Bluetooth: hci3: command tx timeout [ 107.853797][ T5587] hsr_slave_0: entered promiscuous mode [ 107.856075][ T5587] hsr_slave_1: entered promiscuous mode [ 107.858760][ T5587] debugfs: 'hsr0' already exists in 'hsr' [ 107.858887][ T5587] Cannot create hsr debugfs directory [ 107.944587][ T5588] hsr_slave_0: entered promiscuous mode [ 107.948326][ T5588] hsr_slave_1: entered promiscuous mode [ 107.949307][ T5588] debugfs: 'hsr0' already exists in 'hsr' [ 107.949330][ T5588] Cannot create hsr debugfs directory [ 108.004899][ T5590] hsr_slave_0: entered promiscuous mode [ 108.006327][ T5590] hsr_slave_1: entered promiscuous mode [ 108.007427][ T5590] debugfs: 'hsr0' already exists in 'hsr' [ 108.007451][ T5590] Cannot create hsr debugfs directory [ 108.046335][ T5589] hsr_slave_0: entered promiscuous mode [ 108.049319][ T5589] hsr_slave_1: entered promiscuous mode [ 108.050200][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 108.050223][ T5589] Cannot create hsr debugfs directory [ 108.907982][ T5586] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.961212][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.968351][ T5586] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.996371][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.004162][ T5586] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 109.031818][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.058458][ T5586] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 109.092283][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.245331][ T5587] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 109.270395][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.282729][ T5587] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 109.310494][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.322095][ T5587] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 109.352827][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.376749][ T5587] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 109.403427][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.487279][ T5595] Bluetooth: hci1: command tx timeout [ 109.487293][ T59] Bluetooth: hci0: command tx timeout [ 109.554289][ T5588] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.567322][ T5595] Bluetooth: hci2: command tx timeout [ 109.601819][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.615686][ T5588] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.641065][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.653026][ T5588] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.681990][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.706744][ T5588] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.727316][ T5595] Bluetooth: hci3: command tx timeout [ 109.727409][ T5595] Bluetooth: hci4: command tx timeout [ 109.752358][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.903114][ T5590] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 109.931291][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.952464][ T5590] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 110.009011][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.019317][ T5590] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 110.061730][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.089876][ T5590] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 110.122818][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.133901][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.273660][ T5589] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 110.304786][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.320488][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.328474][ T5589] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 110.361575][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.375409][ T5589] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 110.402573][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.413305][ T5589] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 110.442081][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.479396][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.480068][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.560586][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.561134][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.598341][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.715463][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.769917][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.770164][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.812093][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.840136][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.840331][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.985427][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.055723][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.096310][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.100347][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.170702][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.172372][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.254419][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.305694][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.305964][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.326913][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.428429][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.430949][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.568175][ T59] Bluetooth: hci0: command tx timeout [ 111.573750][ T59] Bluetooth: hci1: command tx timeout [ 111.595572][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.649782][ T5595] Bluetooth: hci2: command tx timeout [ 111.656465][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.656695][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.793264][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.793783][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.807256][ T5595] Bluetooth: hci4: command tx timeout [ 111.807292][ T5595] Bluetooth: hci3: command tx timeout [ 112.131646][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.835583][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.926169][ T5586] veth0_vlan: entered promiscuous mode [ 113.045533][ T5586] veth1_vlan: entered promiscuous mode [ 113.294492][ T5587] veth0_vlan: entered promiscuous mode [ 113.312080][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.325120][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.423060][ T5586] veth0_macvtap: entered promiscuous mode [ 113.440435][ T5587] veth1_vlan: entered promiscuous mode [ 113.496642][ T5586] veth1_macvtap: entered promiscuous mode [ 113.672754][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.741374][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.782575][ T5587] veth0_macvtap: entered promiscuous mode [ 113.796846][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.850315][ T5588] veth0_vlan: entered promiscuous mode [ 113.864470][ T5587] veth1_macvtap: entered promiscuous mode [ 113.973385][ T5588] veth1_vlan: entered promiscuous mode [ 114.049517][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.268304][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.438415][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.452059][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.536302][ T5589] veth0_vlan: entered promiscuous mode [ 114.556340][ T5590] veth0_vlan: entered promiscuous mode [ 114.629651][ T5588] veth0_macvtap: entered promiscuous mode [ 114.722725][ T5588] veth1_macvtap: entered promiscuous mode [ 114.751424][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.751828][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.761414][ T5589] veth1_vlan: entered promiscuous mode [ 114.826059][ T5590] veth1_vlan: entered promiscuous mode [ 115.029010][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.036761][ T1485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.046066][ T1485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.094188][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.209454][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.210479][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.249984][ T5589] veth0_macvtap: entered promiscuous mode [ 115.266361][ T5590] veth0_macvtap: entered promiscuous mode [ 115.329318][ T5589] veth1_macvtap: entered promiscuous mode [ 115.348139][ T5590] veth1_macvtap: entered promiscuous mode [ 115.726766][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.750752][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.875941][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.889207][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.897091][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.897112][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.088104][ T1160] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.088845][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.088872][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.143211][ T5776] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 116.171376][ T36] audit: type=1800 audit(1788459830.136:2): pid=5779 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.4" name="addr_trtype" dev="configfs" ino=8002 res=0 errno=0 [ 116.196140][ T5776] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 116.389567][ T5776] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 117.022799][ T1160] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.469412][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.479122][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.941745][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.947558][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.043432][ T5797] dummy0 speed is unknown, defaulting to 1000 [ 118.102857][ T5797] dummy0 speed is unknown, defaulting to 1000 [ 118.176292][ T151] nvmet: connect request for invalid subsystem testnqn! [ 118.196444][ T5793] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 118.272375][ T5797] dummy0 speed is unknown, defaulting to 1000 [ 118.322173][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.322240][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.335302][ T5797] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 118.335343][ T5797] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 118.335385][ T5797] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 118.361796][ T5797] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 118.498720][ T5797] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 118.751794][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.752387][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.753337][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.756245][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.756527][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.756944][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.770004][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.770028][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.903086][ T36] audit: type=1800 audit(1788459832.866:3): pid=5806 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.11" name="enable" dev="configfs" ino=8397 res=0 errno=0 [ 118.906777][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.149217][ T5797] dummy0 speed is unknown, defaulting to 1000 [ 119.155356][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.159629][ T151] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.159915][ T151] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.160247][ T151] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.160499][ T151] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.160707][ T151] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.239646][ T151] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.277770][ T106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.278082][ T106] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.278287][ T106] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.278449][ T106] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.353871][ T5797] dummy0 speed is unknown, defaulting to 1000 [ 119.374305][ T5797] dummy0 speed is unknown, defaulting to 1000 [ 119.626358][ T5797] dummy0 speed is unknown, defaulting to 1000 [ 119.653566][ T5797] dummy0 speed is unknown, defaulting to 1000 [ 120.384767][ T5821] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 120.490104][ T5821] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 120.761984][ T49] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.837216][ T5317] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.020652][ T49] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 2.00 [ 121.057719][ T5317] usb 1-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 2.00 [ 121.124847][ T5317] usb 1-1: config index 0 descriptor too short (expected 59, got 54) [ 121.125400][ T5813] ftl_cs: FTL header not found. [ 121.130551][ T5317] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.130580][ T5317] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 121.161511][ T49] usb 2-1: config index 0 descriptor too short (expected 59, got 54) [ 121.171725][ T49] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.189630][ T5317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.197155][ T5317] usb 1-1: Product: syz [ 121.197179][ T5317] usb 1-1: Manufacturer: syz [ 121.197195][ T5317] usb 1-1: SerialNumber: syz [ 121.223516][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.231979][ T49] usb 2-1: Product: syz [ 121.232003][ T49] usb 2-1: Manufacturer: syz [ 121.232020][ T49] usb 2-1: SerialNumber: syz [ 122.814836][ T1251] usb 1-1: USB disconnect, device number 2 [ 123.032772][ T5813] block2mtd: mtd1: [/dev/zram0] erase_size = 64KiB [65536] [ 124.014758][ T1160] nvmet: connect request for invalid subsystem testnqn! [ 124.028479][ T5851] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 127.405202][ T49] ljca 2-1:1.0: probe with driver ljca failed with error -110 [ 127.542150][ T5896] loop0: detected capacity change from 0 to 32768 [ 128.124688][ T49] usb 2-1: USB disconnect, device number 2 [ 128.902961][ T5874] NFSD: Failed to start, no listeners configured. [ 128.980136][ T5897] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 129.017332][ T49] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 129.021492][ T5902] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 129.273296][ T49] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 2.00 [ 129.285219][ T49] usb 2-1: config index 0 descriptor too short (expected 59, got 54) [ 129.293709][ T49] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.293788][ T49] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 129.344724][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.352891][ T49] usb 2-1: Product: syz [ 129.352914][ T49] usb 2-1: Manufacturer: syz [ 129.352930][ T49] usb 2-1: SerialNumber: syz [ 129.483700][ T49] ljca 2-1:1.0: bulk endpoints not found [ 129.610647][ T5917] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 129.711287][ T5842] usb 2-1: USB disconnect, device number 3 [ 130.639940][ T3198] nvmet: connect request for invalid subsystem testnqn! [ 130.647996][ T5927] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 131.069749][ T5881] svc: failed to register lockdv1 RPC service (errno 512). [ 131.113113][ T5939] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 131.120950][ T5881] lockd_up: makesock failed, error=-512 [ 131.815175][ T5950] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 132.363642][ T5950] md/raid1:md0: active with 1 out of 1 mirrors [ 132.900413][ T5962] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 133.137216][ T5691] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 133.323841][ T5691] usb 5-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 2.00 [ 133.345241][ T5691] usb 5-1: config index 0 descriptor too short (expected 59, got 54) [ 133.346250][ T5691] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.346317][ T5691] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 133.376465][ T5691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.376493][ T5691] usb 5-1: Product: syz [ 133.376507][ T5691] usb 5-1: Manufacturer: syz [ 133.376520][ T5691] usb 5-1: SerialNumber: syz [ 133.390667][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.390761][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.590200][ T5691] ljca 5-1:1.0: bulk endpoints not found [ 133.782094][ T5317] usb 5-1: USB disconnect, device number 2 [ 134.152229][ T3198] nvmet: connect request for invalid subsystem testnqn! [ 134.162139][ T5984] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 134.772630][ T6001] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 135.321692][ T6014] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 135.679362][ T6025] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 136.189312][ T6042] FAULT_INJECTION: forcing a failure. [ 136.189312][ T6042] name fail_futex, interval 1, probability 0, space 0, times 1 [ 136.189589][ T6042] CPU: 0 UID: 0 PID: 6042 Comm: syz.4.75 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 136.189615][ T6042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.189626][ T6042] Call Trace: [ 136.189635][ T6042] [ 136.189643][ T6042] dump_stack_lvl+0xe8/0x150 [ 136.189679][ T6042] should_fail_ex+0x46b/0x600 [ 136.189707][ T6042] get_futex_key+0x1b4/0x1580 [ 136.189745][ T6042] ? __pfx_get_futex_key+0x10/0x10 [ 136.189773][ T6042] ? trace_buffer_unlock_commit_regs+0x156/0x520 [ 136.189809][ T6042] futex_wake+0x119/0x600 [ 136.189836][ T6042] ? __pfx_futex_wake+0x10/0x10 [ 136.189855][ T6042] ? eprobe_trigger_func+0x1280/0x1390 [ 136.189898][ T6042] do_futex+0x458/0x4e0 [ 136.189931][ T6042] ? __pfx_do_futex+0x10/0x10 [ 136.189967][ T6042] __se_sys_futex+0x3a8/0x450 [ 136.189999][ T6042] ? trace_syscall_enter+0x58/0x110 [ 136.190025][ T6042] ? __pfx___se_sys_futex+0x10/0x10 [ 136.190057][ T6042] ? trace_syscall_enter+0x58/0x110 [ 136.190082][ T6042] ? rcu_is_watching+0x16/0xb0 [ 136.190107][ T6042] ? __x64_sys_futex+0x21/0xf0 [ 136.190137][ T6042] do_syscall_64+0x166/0x520 [ 136.190157][ T6042] ? trace_irq_disable+0x3b/0x140 [ 136.190179][ T6042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.190198][ T6042] ? clear_bhb_loop+0x70/0xc0 [ 136.190221][ T6042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.190240][ T6042] RIP: 0033:0x7f69f3aae159 [ 136.190258][ T6042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.190282][ T6042] RSP: 002b:00007f69f1d060e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 136.190304][ T6042] RAX: ffffffffffffffda RBX: 00007f69f3d35fa8 RCX: 00007f69f3aae159 [ 136.190318][ T6042] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f69f3d35fac [ 136.190331][ T6042] RBP: 00007f69f3d35fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 136.190344][ T6042] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 136.190357][ T6042] R13: 00007f69f3d36038 R14: 00007fff80169a40 R15: 00007fff80169b28 [ 136.190387][ T6042] [ 136.261633][ T6038] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 136.947289][ T5317] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 137.069704][ T151] nvmet: connect request for invalid subsystem testnqn! [ 137.078161][ T6052] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 137.138089][ T5317] usb 5-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 2.00 [ 137.152078][ T5317] usb 5-1: config index 0 descriptor too short (expected 59, got 54) [ 137.152112][ T5317] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.152160][ T5317] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 137.201943][ T5317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.202025][ T5317] usb 5-1: Product: syz [ 137.202041][ T5317] usb 5-1: Manufacturer: syz [ 137.202056][ T5317] usb 5-1: SerialNumber: syz [ 137.291682][ T5317] ljca 5-1:1.0: bulk endpoints not found [ 137.482334][ T5691] usb 5-1: USB disconnect, device number 3 [ 137.978367][ T6072] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 138.197100][ T6079] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 138.862868][ T6101] FAULT_INJECTION: forcing a failure. [ 138.862868][ T6101] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 138.867340][ T6101] CPU: 0 UID: 0 PID: 6101 Comm: syz.1.87 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 138.867368][ T6101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.867380][ T6101] Call Trace: [ 138.867389][ T6101] [ 138.867399][ T6101] dump_stack_lvl+0xe8/0x150 [ 138.867434][ T6101] should_fail_ex+0x46b/0x600 [ 138.867462][ T6101] _copy_from_user+0x2d/0xb0 [ 138.867486][ T6101] addrconf_add_ifaddr+0x108/0x3e0 [ 138.867517][ T6101] ? __pfx_addrconf_add_ifaddr+0x10/0x10 [ 138.867539][ T6101] ? kasan_quarantine_put+0xbb/0x1f0 [ 138.867575][ T6101] inet6_ioctl+0x14e/0x2e0 [ 138.867598][ T6101] ? __pfx_inet6_ioctl+0x10/0x10 [ 138.867616][ T6101] ? tomoyo_path_number_perm+0x219/0x5f0 [ 138.867640][ T6101] ? do_vfs_ioctl+0x1184/0x1550 [ 138.867666][ T6101] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 138.867696][ T6101] sock_do_ioctl+0x101/0x320 [ 138.867719][ T6101] ? __pfx_sock_do_ioctl+0x10/0x10 [ 138.867736][ T6101] ? hook_file_ioctl+0x1f5/0x610 [ 138.867766][ T6101] ? __asan_memset+0x22/0x50 [ 138.867787][ T6101] ? smack_file_ioctl+0x265/0x370 [ 138.867821][ T6101] sock_ioctl+0x57d/0x7f0 [ 138.867851][ T6101] ? __pfx_sock_ioctl+0x10/0x10 [ 138.867879][ T6101] ? __fget_files+0x2a/0x420 [ 138.867897][ T6101] ? __fget_files+0x3a8/0x420 [ 138.867914][ T6101] ? __fget_files+0x2a/0x420 [ 138.867935][ T6101] ? bpf_lsm_file_ioctl+0x9/0x20 [ 138.867956][ T6101] ? __pfx_sock_ioctl+0x10/0x10 [ 138.867983][ T6101] __se_sys_ioctl+0xff/0x170 [ 138.868008][ T6101] do_syscall_64+0x166/0x520 [ 138.868029][ T6101] ? trace_irq_disable+0x3b/0x140 [ 138.868052][ T6101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.868070][ T6101] ? clear_bhb_loop+0x70/0xc0 [ 138.868093][ T6101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.868112][ T6101] RIP: 0033:0x7f560e16e159 [ 138.868131][ T6101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.868147][ T6101] RSP: 002b:00007f560c3c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.868169][ T6101] RAX: ffffffffffffffda RBX: 00007f560e3f5fa0 RCX: 00007f560e16e159 [ 138.868184][ T6101] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000004 [ 138.868197][ T6101] RBP: 00007f560e205024 R08: 0000000000000000 R09: 0000000000000000 [ 138.868209][ T6101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.868221][ T6101] R13: 00007f560e3f6038 R14: 00007f560e3f5fa0 R15: 00007ffc3ed720a8 [ 138.868251][ T6101] [ 139.308916][ T6106] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 139.422863][ T151] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000024: 0000 [#1] SMP KASAN PTI [ 139.434812][ T151] KASAN: null-ptr-deref in range [0x0000000000000120-0x0000000000000127] [ 139.443242][ T151] CPU: 0 UID: 0 PID: 151 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 139.453129][ T151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.463187][ T151] Workqueue: nvme-reset-wq nvme_loop_reset_ctrl_work [ 139.469874][ T151] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 139.475913][ T151] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 139.495616][ T151] RSP: 0018:ffffc900041378c8 EFLAGS: 00010206 [ 139.501726][ T151] RAX: dffffc0000000000 RBX: ffffffff8b57cf93 RCX: 8000000000000001 [ 139.510149][ T151] RDX: 0000000000000000 RSI: ffffffff8b57cf93 RDI: 0000000000000024 [ 139.518146][ T151] RBP: ffffc90004137a38 R08: 0000000000000001 R09: 0000000000000000 [ 139.526137][ T151] R10: dffffc0000000000 R11: ffffed100cb53acf R12: 0000000000000120 [ 139.534116][ T151] R13: 0000000000000000 R14: 0000000000000120 R15: 0000000000000001 [ 139.542128][ T151] FS: 0000000000000000(0000) GS:ffff888125bd5000(0000) knlGS:0000000000000000 [ 139.551084][ T151] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.557790][ T151] CR2: 000000110c352972 CR3: 0000000011826000 CR4: 00000000003526f0 [ 139.565809][ T151] Call Trace: [ 139.569098][ T151] [ 139.572164][ T151] __kasan_check_byte+0x12/0x40 [ 139.577027][ T151] lock_acquire+0x7d/0x350 [ 139.581573][ T151] ? __pfx___flush_work+0x10/0x10 [ 139.586638][ T151] ? rcu_is_watching+0x16/0xb0 [ 139.591634][ T151] rt_spin_lock+0x83/0x400 [ 139.596082][ T151] ? blk_mq_quiesce_queue+0x2f/0x190 [ 139.601378][ T151] ? __pfx_rt_spin_lock+0x10/0x10 [ 139.606437][ T151] ? enable_work+0x17f/0x230 [ 139.611245][ T151] ? lockdep_hardirqs_on+0x7b/0x110 [ 139.616502][ T151] ? enable_work+0x1fd/0x230 [ 139.621112][ T151] blk_mq_quiesce_queue+0x2f/0x190 [ 139.626473][ T151] nvme_loop_reset_ctrl_work+0x1cf/0x810 [ 139.632135][ T151] ? process_scheduled_works+0x97a/0x1630 [ 139.638054][ T151] process_scheduled_works+0xc3d/0x1630 [ 139.643879][ T151] ? __pfx_process_scheduled_works+0x10/0x10 [ 139.650272][ T151] ? assign_work+0x3cf/0x5d0 [ 139.654978][ T151] worker_thread+0xa47/0xfb0 [ 139.659598][ T151] kthread+0x38b/0x470 [ 139.663703][ T151] ? __pfx_worker_thread+0x10/0x10 [ 139.669233][ T151] ? __pfx_kthread+0x10/0x10 [ 139.673854][ T151] ret_from_fork+0x514/0xb70 [ 139.678492][ T151] ? __pfx_ret_from_fork+0x10/0x10 [ 139.683624][ T151] ? __switch_to+0xc89/0x1420 [ 139.688339][ T151] ? __pfx_kthread+0x10/0x10 [ 139.693137][ T151] ret_from_fork_asm+0x1a/0x30 [ 139.698714][ T151] [ 139.701752][ T151] Modules linked in: [ 139.706636][ T151] ---[ end trace 0000000000000000 ]--- [ 139.7 ** replaying previous printk message ** [ 139.722092][ T151] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 139.722178][ T151] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 139.722195][ T151] RSP: 0018:ffffc900041378c8 EFLAGS: 00010206 [ 139.722213][ T151] RAX: dffffc0000000000 RBX: ffffffff8b57cf93 RCX: 8000000000000001 [ 139.722225][ T151] RDX: 0000000000000000 RSI: ffffffff8b57cf93 RDI: 0000000000000024 [ 139.722234][ T151] RBP: ffffc90004137a38 R08: 0000000000000001 R09: 0000000000000000 [ 139.722246][ T151] R10: dffffc0000000000 R11: ffffed100cb53acf R12: 0000000000000120 [ 139.722258][ T151] R13: 0000000000000000 R14: 0000000000000120 R15: 0000000000000001 [ 139.722284][ T151] FS: 0000000000000000(0000) GS:ffff888125bd5000(0000) knlGS:0000000000000000 [ 139.722299][ T151] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.722312][ T151] CR2: 00007f560c3a5d58 CR3: 0000000011992000 CR4: 00000000003526f0 [ 139.722332][ T151] Kernel panic - not syncing: Fatal exception