last executing test programs: 4m56.866216842s ago: executing program 32 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./nfsd\x00', &(0x7f0000000b00)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./rpc_pipefs\x00', &(0x7f0000000400)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000d00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000f00)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)='8\n', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) read(r8, &(0x7f0000000380), 0x40a) write(r8, &(0x7f00000003c0)="010400000100000001", 0x9) read(r8, &(0x7f0000000440), 0x40a) write(r8, &(0x7f0000000480)="0105000002000000", 0x8) nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='127.0.0.1:/\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000800)='nfs4\x00', 0x0, &(0x7f0000000900)='clientaddr=127.0.0.1,addr=127.0.0.1\x00') (async) nanosleep(&(0x7f0000000500)={0x1}, 0x0) 4m51.609168732s ago: executing program 33 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./nfsd\x00', &(0x7f0000000b00)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./rpc_pipefs\x00', &(0x7f0000000400)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000d00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000f00)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000110)='8\n', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) read(r8, &(0x7f0000001000), 0x40a) write(r8, &(0x7f0000001000), 0x40a) read(r8, &(0x7f0000002000), 0x40a) write(r8, &(0x7f0000002000), 0x40a) read(r9, &(0x7f0000001000), 0x40a) write(r9, &(0x7f0000001000), 0x40a) read(r9, &(0x7f0000002000), 0x40a) write(r9, &(0x7f0000002000), 0x40a) read(r10, &(0x7f0000001000), 0x40a) write(r10, &(0x7f0000001000), 0x40a) read(r10, &(0x7f0000002000), 0x40a) write(r10, &(0x7f0000002000), 0x40a) nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='127.0.0.1:/\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000800)='nfs4\x00', 0x0, &(0x7f0000000900)='clientaddr=127.0.0.1,addr=127.0.0.1\x00') (async) 4m47.461658506s ago: executing program 34 (id=32): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1111, @empty}, 0x10) listen(r0, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r1, &(0x7f0000000180)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,data_digest\x00'/80, 0x4b) nanosleep(&(0x7f0000000080)={0x0, 0x5f5e100}, 0x0) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000100)="01008000800000000000000200004000"/128, 0x80) nanosleep(&(0x7f0000000080)={0x0, 0x1dcd6500}, 0x0) 4m43.298549259s ago: executing program 35 (id=35): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000080)={0x14, 0x0, 0x0}, &(0x7f00000000c0)={0x34, &(0x7f0000000100)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, 0x0, 0x0}, &(0x7f0000000180)={0x34, &(0x7f00000001c0)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000200)={0x14, 0x0, 0x0}, &(0x7f0000000240)={0x34, &(0x7f0000000280)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f00000002c0)={0x14, 0x0, 0x0}, &(0x7f0000000300)={0x34, &(0x7f0000000340)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000380)={0x14, 0x0, 0x0}, &(0x7f00000003c0)={0x34, &(0x7f0000000400)={0x20, 0x18, 0x1, ')'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000440)={0x14, 0x0, 0x0}, &(0x7f0000000480)={0x34, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000500)={0x14, 0x0, 0x0}, &(0x7f0000000540)={0x34, &(0x7f0000000580)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f00000005c0)={0x14, 0x0, 0x0}, &(0x7f0000000600)={0x34, &(0x7f0000000640)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000680)={0x14, 0x0, 0x0}, &(0x7f00000006c0)={0x34, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000740)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000880)='mem\x00', 0x3) 4m16.723150128s ago: executing program 36 (id=93): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000170005007e05000006030000000000000000000005010905a10105091901290815002501950875018102c0"], 0x111c) nanosleep(&(0x7f0000002000)={0x1}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000003000)=ANY=[@ANYBLOB="0c0000000300300000"], 0x111c) 4m16.677165889s ago: executing program 37 (id=98): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000004000)='./dev\x00', &(0x7f0000005000)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001000)='./dev/infiniband/uverbs0\x00', 0x2, 0x0) 4m16.64111968s ago: executing program 38 (id=85): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1111, @empty}, 0x10) listen(r0, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r1, &(0x7f0000000200)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,hdr_digest\x00', 0x40) (async) nanosleep(&(0x7f0000000080)={0x0, 0x5f5e100}, 0x0) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000100)="01008000800000000000000200004000"/128, 0x80) nanosleep(&(0x7f0000000080)={0x0, 0x1dcd6500}, 0x0) 4m16.521901213s ago: executing program 39 (id=80): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='+3 +4\n\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/pool_threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='1\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) nanosleep(&(0x7f0000000240)={0x2}, 0x0) mount$nfs4(&(0x7f0000000280)='127.0.0.1:/\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f00000002c0), 0x0, 0x0) 4m16.504655123s ago: executing program 40 (id=97): syz_clone(0x2ca15080, 0x0, 0xffffffffffffffdb, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x24, &(0x7f00000002c0), 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000ac0)='./binderfs/binder0\x00', 0x402, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB='nonumtail=0,allow_utime=00000000000000002200003,utf8=0,iocharset=iso8859-6,shortname=win95,codepage=850,iocharset=macromanian,uni_xlate=1,uni_xlate=0,shortname=win95,utf8=0,utf8=0,obj_user=,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c7063723d30303030303030303030303030303034343739302c736d61636b66736465663d2d2c6f626a5f747970653daf2da0a7563d2c7375626a5f757365723d2f2c657569643dc61aa4b52854f61acf39b23cd5eb1627f59ee7746b8e9b173d2382484ca2466b8e487597d32214a71ce72cf4d29de92333376a76d1fccab775068771932c99090e93cf7d9b19fdb6251a930fdb7206486506efac0bd1afed2e24296188d0fa58ab93f192f851f288aa1f4c94c8a3d3991466a89c9d5f8999bea1064fbc0530be4e469d1bf52dfd07926afb63dc5b1f57bfe05ae1713e911651ee144affddceb9796e40118700000000", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x25, 0x35b, &(0x7f0000000200)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m43.465812752s ago: executing program 41 (id=106): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @loopback}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x43) (async) r2 = accept$inet(r0, 0x0, 0x0) read(r2, &(0x7f0000000300)=""/128, 0x80) write(r2, &(0x7f0000000400)="01008000800000000000000200004000"/127, 0x80) 3m40.398723048s ago: executing program 42 (id=126): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x1111, @loopback}, 0x10) listen(r0, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write(r1, &(0x7f0000000100)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,data_digest\x00', 0x41) nanosleep(&(0x7f0000000180)={0x0, 0x5f5e100}, 0x0) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f00000001c0)="01008000800000000000000200004000", 0x10) write(r2, &(0x7f0000000200)='\x00'/16, 0x10) nanosleep(&(0x7f0000000240)={0x0, 0x1dcd6500}, 0x0) 3m20.702954936s ago: executing program 43 (id=194): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @loopback}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x44) (async) r2 = accept$inet(r0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000300)=""/128, 0x80, 0x0, 0x0, 0x0) 3m8.431629461s ago: executing program 44 (id=254): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40f30c709108010102030109022e0001010080fa0904000004ff00000007050102000200070582020002000705830340000107050403400001"], 0x0) syz_usb_ep_write(r0, 0x83, 0x4, &(0x7f0000000100)="00cf0000") syz_usb_ep_write(r0, 0x83, 0x8, &(0x7f0000000200)="040200002301114a") syz_usb_control_io(r0, &(0x7f0000001000)={0x1c, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="00011200000012010002ffffff40f30c7091080101020301"], &(0x7f0000001200)=ANY=[@ANYBLOB="00022e00000009022e0001010080fa0904000004ff00000007050102000200070582020002000705830340000107050403400001"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001000)={0x1c, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="00011200000012010002ffffff40f30c7091080101020301"], &(0x7f0000001200)=ANY=[@ANYBLOB="00022e00000009022e0001010080fa0904000004ff00000007050102000200070582020002000705830340000107050403400001"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001000)={0x1c, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="00011200000012010002ffffff40f30c7091080101020301"], &(0x7f0000001200)=ANY=[@ANYBLOB="00022e00000009022e0001010080fa0904000004ff00000007050102000200070582020002000705830340000107050403400001"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001000)={0x1c, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="00011200000012010002ffffff40f30c7091080101020301"], &(0x7f0000001200)=ANY=[@ANYBLOB="00022e00000009022e0001010080fa0904000004ff00000007050102000200070582020002000705830340000107050403400001"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001000)={0x1c, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="00011200000012010002ffffff40f30c7091080101020301"], &(0x7f0000001200)=ANY=[@ANYBLOB="00022e00000009022e0001010080fa0904000004ff00000007050102000200070582020002000705830340000107050403400001"], 0x0, 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) syz_80211_join_ibss(&(0x7f0000000400)='wlan0\x00', &(0x7f0000000500)=@random='syzkaller', 0x9, 0x1) syz_usb_disconnect(r0) 3m2.231987954s ago: executing program 45 (id=277): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @loopback}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x44) (async) r2 = accept$inet(r0, 0x0, 0x0) read(r2, &(0x7f0000000300)=""/128, 0x80) write(r2, &(0x7f0000000400)="01008000800000000000000200004000"/128, 0x80) 2m32.575801609s ago: executing program 7 (id=469): r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022b0001010080320904000002030000000921000000012222000705810308000007050203080000"], 0x0) syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000100)=""/31) 2m32.039344482s ago: executing program 7 (id=476): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="3000000010000500000000000000000003010000100002007664706173696d5f626c6b000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="3000000011000500000000000000000003010000100002007664706173696d5f626c6b000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="3000000012000500000000000000000003010000100002007664706173696d5f626c6b000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="3000000013000500000000000000000003010000100002007664706173696d5f626c6b000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="3000000014000500000000000000000003010000100002007664706173696d5f626c6b000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="3000000015000500000000000000000003010000100002007664706173696d5f626c6b000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="3000000016000500000000000000000003010000100002007664706173696d5f626c6b000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="3000000017000500000000000000000003010000100002007664706173696d5f626c6b000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)="3000000018000500000000000000000003010000100002007664706173696d5f626c6b000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)="3000000019000500000000000000000003010000100002007664706173696d5f626c6b000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)="300000001a000500000000000000000003010000100002007664706173696d5f626c6b000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)="300000001b000500000000000000000003010000100002007664706173696d5f626c6b000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)="300000001c000500000000000000000003010000100002007664706173696d5f626c6b000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)="300000001d000500000000000000000003010000100002007664706173696d5f626c6b000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="300000001e000500000000000000000003010000100002007664706173696d5f626c6b000a0004007664706130000000", 0x30}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/vda\x00', 0x2, 0x0) read(r1, &(0x7f0000000800), 0x1000) 2m31.042669747s ago: executing program 7 (id=489): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='ubi0:vol0\x00', 0x0, &(0x7f0000000580)='ubifs\x00', 0x0, &(0x7f00000005c0)) 2m31.007344248s ago: executing program 7 (id=480): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @local}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=172.20.20.170,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x48) r2 = accept$inet(r0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000300)=""/128, 0x80, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)="010080008000000000000002001000"/129, 0x80, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000500)=""/4096, 0x1000, 0x0, 0x0, 0x0) 2m23.468126995s ago: executing program 46 (id=443): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='/dev/loop0,65536\x00', 0x11) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl(r3, 0x40186f40, &(0x7f0000000700)='\x00'/24) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000b00)="000000000100000000a00000000000000300040000000000766f6c3000"/152) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./mnt\x00', 0x1ff) mount(&(0x7f0000000d00)=@filename='ubi0_0\x00', &(0x7f0000000c00)='./mnt\x00', &(0x7f0000000e00)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000f00)='./mnt/test\x00', 0x42, 0x1ff) 2m15.97848474s ago: executing program 47 (id=480): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @local}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=172.20.20.170,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x48) r2 = accept$inet(r0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000300)=""/128, 0x80, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)="010080008000000000000002001000"/129, 0x80, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000500)=""/4096, 0x1000, 0x0, 0x0, 0x0) 2m6.768904738s ago: executing program 48 (id=500): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @empty}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x44) (async) r2 = accept$inet(r0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000300)=""/128, 0x80, 0x0, 0x0, 0x0) 1m56.301862798s ago: executing program 49 (id=546): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1111, @empty}, 0x10) listen(r0, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r1, &(0x7f0000000300)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,data_digest\x00', 0x41) (async) nanosleep(&(0x7f0000000080)={0x0, 0x5f5e100}, 0x0) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000100)="01008000800000000000000200004000"/128, 0x80) nanosleep(&(0x7f0000000080)={0x0, 0x1dcd6500}, 0x0) 1m54.223595209s ago: executing program 50 (id=550): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @empty}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x45) (async) r2 = accept$inet(r0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000300)=""/128, 0x80, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)="01008000800000000000000200"/128, 0x80, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000500)=""/128, 0x80, 0x0, 0x0, 0x0) 1m51.998077415s ago: executing program 6 (id=632): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dummy.img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) pwrite64(r0, &(0x7f0000000140)="6269746d03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000001000000100"/200, 0xc8, 0x1000) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='md0\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='7:0\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='raid1\x00', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='1\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-loop0/slot\x00', 0x1, 0x0) write(r6, &(0x7f00000005c0)='0\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r7, &(0x7f0000000640)='active', 0x6) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r8, &(0x7f00000006c0)='none\x00', 0x5) write(r8, &(0x7f0000000700)='+8\n', 0x3) 1m51.797867509s ago: executing program 6 (id=633): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0\x00') r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002000)="00000080fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000008000000000000000", 0x84, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002100)="00000078fe534d4240000100160000c00100010001000000000000000100000000000000000000000000000001000000000000000000000000000000000000000000000009000000480030004e544c4d5353500002000000000000000000000000020800"/123, 0x7b, 0x0, 0x0, 0x0) 1m50.98584432s ago: executing program 6 (id=636): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000280)='external:0\x00', 0xb) 1m49.455854458s ago: executing program 6 (id=638): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="3000000013000500000000000000000003010000100002007664706173696d5f626c6b000a0004007664", 0x2a}], 0x1}, 0x0) 1m49.430784448s ago: executing program 6 (id=639): r0 = syz_usb_connect(0x2, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000400000000000000102030109027e00020100803209040000010e0100000d240100011e0000000000010108240201000200000924030201010001000705810310000109040100010e0200000e240101170082000200000001000b240601010001000000001e240701004001f0000000000000000000000058020015160500011516050007058202000201"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000001000)={0x20, 0x81, 0x1a, "00000101151605000000000000000000000000b0040000040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000001000)={0x20, 0x81, 0x1a, "00000101151605000000000000000000000000b0040000040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000001000)={0x20, 0x81, 0x1a, "00000101151605000000000000000000000000b0040000040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000400), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000500)={0x1, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000600)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000700)=0x1) syz_usb_ep_write(r0, 0x82, 0x10, &(0x7f0000000800)='\x00'/16) 1m47.880616627s ago: executing program 51 (id=584): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./nfsd\x00', &(0x7f0000000b00)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./rpc_pipefs\x00', &(0x7f0000000400)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000d00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000f00)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000110)='8\n', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x2}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) read(r8, &(0x7f0000001000), 0x40a) write(r8, &(0x7f0000001000), 0x40a) nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='127.0.0.1:/\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000800)='nfs4\x00', 0x0, &(0x7f0000000900)='clientaddr=127.0.0.1,addr=127.0.0.1\x00') (async) nanosleep(&(0x7f0000000500)={0x1}, 0x0) 1m47.837867708s ago: executing program 6 (id=646): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @loopback}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x44) (async) r2 = accept$inet(r0, 0x0, 0x0) read(r2, &(0x7f0000000300)=""/128, 0x80) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000600)='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x70}], 0x1) nanosleep(&(0x7f0000000700)={0x1}, 0x0) 1m40.340498793s ago: executing program 52 (id=605): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./export\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./export\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 mydomain\n', 0x23) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='mydomain ./export 2147483647 9218 0 0 0\n', 0x28) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='mydomain 1 \\x00000000 2147483647 ./export\n', 0x2a) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/versions\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='-2 -3 +4\n', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='tcp 2049\n', 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='1\n', 0x2) (async) mount$nfs4(&(0x7f00000004c0)='127.0.0.1:/\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)={[{'vers=4.2'}]}) 1m38.750169333s ago: executing program 7 (id=662): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="3000000013000500000000000000000003010000100002007664706173696d5f626c6b000a0004007664", 0x2a}], 0x1}, 0x0) 1m38.721301923s ago: executing program 7 (id=664): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./nfsd\x00', &(0x7f0000000b00)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./rpc_pipefs\x00', &(0x7f0000000400)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000d00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000f00)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000640)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r3, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000110)='8\n', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) read(r8, &(0x7f0000000f40)=""/1034, 0x40a) write(r8, &(0x7f0000001380)='\x00'/1034, 0x40a) read(r8, &(0x7f00000017c0)=""/1034, 0x40a) write(r8, &(0x7f0000001c00)='\x00'/1034, 0x40a) read(r9, &(0x7f0000002040)=""/1034, 0x40a) write(r9, &(0x7f0000002480)='\x00'/1034, 0x40a) read(r9, &(0x7f00000028c0)=""/1034, 0x40a) write(r9, &(0x7f0000002d00)='\x00'/1034, 0x40a) read(r10, &(0x7f0000003140)=""/1034, 0x40a) write(r10, &(0x7f0000003580)='\x00'/1034, 0x40a) read(r10, &(0x7f00000039c0)=""/1034, 0x40a) write(r10, &(0x7f0000003e00)='\x00'/1034, 0x40a) nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='127.0.0.1:/\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000800)='nfs4\x00', 0x0, &(0x7f0000000900)='clientaddr=127.0.0.1,addr=127.0.0.1\x00') 1m36.345483572s ago: executing program 53 (id=635): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./nfs4\x00', 0x1ff) mount$nfs4(&(0x7f00000002c0)='127.0.0.1:/\x00', &(0x7f0000000300)='./nfs4\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{'addr=127.0.0.1'}, {'vers=4.2'}, {'sec=sys'}]}) 1m32.746015831s ago: executing program 54 (id=646): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @loopback}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x44) (async) r2 = accept$inet(r0, 0x0, 0x0) read(r2, &(0x7f0000000300)=""/128, 0x80) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000600)='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x70}], 0x1) nanosleep(&(0x7f0000000700)={0x1}, 0x0) 1m25.585639769s ago: executing program 3 (id=734): sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/vda\x00', 0x2, 0x0) read(r0, &(0x7f0000000800), 0x1000) 1m25.51427748s ago: executing program 3 (id=735): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="3000000013000500000000000000000003010000100002007664706173696d5f626c6b000a00040076647061300000", 0x2f}], 0x1}, 0x0) 1m25.51375223s ago: executing program 3 (id=736): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dummy.img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='md0\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='7:0\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='raid1\x00', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='file:0\x00', 0x7) 1m25.480435121s ago: executing program 3 (id=737): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000480)='inactive\x00', 0x9) 1m25.397834463s ago: executing program 3 (id=738): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024044e27000100000001090212000101008032090400000002020000"], 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x17}) 1m24.894039706s ago: executing program 3 (id=739): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./nfsd\x00', &(0x7f0000000b00)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./rpc_pipefs\x00', &(0x7f0000000400)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000d00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000f00)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000110)='8\n', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x2}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) read(r8, &(0x7f0000001000), 0x40a) write(r8, &(0x7f0000002000)="010400000100000001", 0x40a) read(r8, &(0x7f0000003000), 0x40a) write(r8, &(0x7f0000004000)="0105000002000000", 0x40a) nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='127.0.0.1:/\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000800)='nfs4\x00', 0x0, &(0x7f0000000900)='clientaddr=127.0.0.1,addr=127.0.0.1\x00') (async) nanosleep(&(0x7f0000000500)={0x1}, 0x0) 1m23.561121669s ago: executing program 55 (id=664): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./nfsd\x00', &(0x7f0000000b00)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./rpc_pipefs\x00', &(0x7f0000000400)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000d00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000f00)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000640)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r3, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000110)='8\n', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) read(r8, &(0x7f0000000f40)=""/1034, 0x40a) write(r8, &(0x7f0000001380)='\x00'/1034, 0x40a) read(r8, &(0x7f00000017c0)=""/1034, 0x40a) write(r8, &(0x7f0000001c00)='\x00'/1034, 0x40a) read(r9, &(0x7f0000002040)=""/1034, 0x40a) write(r9, &(0x7f0000002480)='\x00'/1034, 0x40a) read(r9, &(0x7f00000028c0)=""/1034, 0x40a) write(r9, &(0x7f0000002d00)='\x00'/1034, 0x40a) read(r10, &(0x7f0000003140)=""/1034, 0x40a) write(r10, &(0x7f0000003580)='\x00'/1034, 0x40a) read(r10, &(0x7f00000039c0)=""/1034, 0x40a) write(r10, &(0x7f0000003e00)='\x00'/1034, 0x40a) nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='127.0.0.1:/\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000800)='nfs4\x00', 0x0, &(0x7f0000000900)='clientaddr=127.0.0.1,addr=127.0.0.1\x00') 1m15.137540697s ago: executing program 0 (id=791): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r0, &(0x7f0000000480), 0x0) 1m15.091016359s ago: executing program 0 (id=793): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r0, &(0x7f0000000480), 0x0) 1m15.04542657s ago: executing program 0 (id=783): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x800) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x1}, 0xe) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040f0400010d20"], 0x7) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e130100c8000000aaaaaaaaaa1000000000000000"], 0x16) nanosleep(&(0x7f0000000700)={0x0, 0x10000000}, 0x0) sendto$inet(r0, &(0x7f0000000800)='\x00', 0x1, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000900)={0x2}, 0x0) 1m14.181992601s ago: executing program 0 (id=788): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="010000000000220010000000000000010000000000020800450000740001400040063c817f0000017f00000104d204d200000001000000005010000000000000", 0x40}, {&(0x7f0000000300)='\x00'/76, 0x4c}], 0x2) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000500)="010000000000220010000000000000010000000000020800450000740002400040063c807f0000017f00000104d204d20000004d000000005010000000000000", 0x40}, {&(0x7f0000000600)='\x00'/76, 0x4c}], 0x2) 1m14.007251136s ago: executing program 0 (id=795): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='inact', 0x5) 1m13.961394087s ago: executing program 0 (id=797): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/recoverydir\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)='/tmp\n\x00', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000840)='-2 -3 +4\n\x00', 0x9) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 my_domain\n\x00', 0x24) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='my_domain /tmp 2147483647 9216 0 0 0\n\x00', 0x25) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='my_domain 1 \\x00000000 2147483647 /tmp\n\x00', 0x27) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r6, &(0x7f0000000340)='1\n\x00', 0x2) close(r6) nanosleep(&(0x7f0000000540)={0x1}, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000580)={0x2, 0x801, @loopback}, 0x10) write(r7, &(0x7f00000005c0)="80000098123456780000000000000002000186a300000004000000010000000000000000000000000000000000000000000000010000000200000016000000200100010000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000000000001000010000000001c00000001000000000000000000000001000000064f574e4552400000", 0x9c) 1m11.737923772s ago: executing program 8 (id=808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="010000000000220010000000000000010000000000020800450000740001400040063c817f0000017f00000104d204d200000001000000005010000000000000", 0x40}, {&(0x7f0000000300)='\x00'/76, 0x4c}], 0x2) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000500)="010000000000220010000000000000010000000000020800450000740002400040063c807f0000017f00000104d204d20000004d000000005010000000000000", 0x40}, {&(0x7f0000000600)='\x00'/76, 0x4c}], 0x2) 1m11.573385286s ago: executing program 8 (id=809): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) close(r1) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='/dev/loop0,65536\x00', 0x11) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl(r3, 0x40186f40, &(0x7f0000000700)='\x00'/24) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r4, 0x40986f00, &(0x7f0000000b00)="000000000100000000a00000000000000300040000000000766f6c3000"/152) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./mnt\x00', 0x1ff) mount(&(0x7f0000000d00)=@filename='ubi0_0\x00', &(0x7f0000000c00)='./mnt\x00', &(0x7f0000000e00)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000f00)='./mnt/test\x00', 0x42, 0x1ff) 1m11.276500813s ago: executing program 8 (id=810): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dummy.img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) pwrite64(r0, &(0x7f0000000140)="6269746d03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000001000000100"/200, 0xc8, 0x1000) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='md0\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='7:0\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='raid1\x00', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='1\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-loop0/slot\x00', 0x1, 0x0) write(r6, &(0x7f00000005c0)='0\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r7, &(0x7f0000000640)='active\x00', 0x7) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r8, &(0x7f00000006c0)='non', 0x3) write(r8, &(0x7f0000000700)='+8\n', 0x3) 1m11.033746159s ago: executing program 8 (id=811): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8914, &(0x7f0000000700)={'wlan1\x00', @ifru_flags=0x1043}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, &(0x7f0000000340)) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, &(0x7f0000000340)) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, &(0x7f0000000340)) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, &(0x7f0000000340)) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, &(0x7f0000000340)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6, {0x1, 0x0, 0x0, 0x1}}}, 0x4f) 1m9.78185441s ago: executing program 8 (id=814): r0 = memfd_create(&(0x7f0000000040)='dummy\x00', 0x0) ftruncate(r0, 0x6400000) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1) r3 = memfd_create(&(0x7f0000000100)='dummy2\x00', 0x0) ftruncate(r3, 0x6400000) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='md0\x00', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r6, &(0x7f0000000300)='7:0\x00', 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r7, &(0x7f0000000380)='7:1\x00', 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r8, &(0x7f0000000400)='raid1\x00', 0x6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r9, &(0x7f0000000480)='2\x00', 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r10, &(0x7f0000000500)='readonly\x00', 0x9) r11 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/bitmap/metadata\x00', 0x1, 0x0) write(r11, &(0x7f0000000580)='external\x00', 0x9) r12 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/block/md0/md/bitmap/chunksize\x00', 0x1, 0x0) write(r12, &(0x7f0000000600)='4096\x00', 0x5) r13 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/block/md0/md/bitmap/time_base\x00', 0x1, 0x0) write(r13, &(0x7f0000000680)='1\x00', 0x2) r14 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r14, &(0x7f0000000700)='+8\x00', 0x3) 1m9.776135021s ago: executing program 56 (id=739): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./nfsd\x00', &(0x7f0000000b00)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./rpc_pipefs\x00', &(0x7f0000000400)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000d00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000f00)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000110)='8\n', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x2}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) read(r8, &(0x7f0000001000), 0x40a) write(r8, &(0x7f0000002000)="010400000100000001", 0x40a) read(r8, &(0x7f0000003000), 0x40a) write(r8, &(0x7f0000004000)="0105000002000000", 0x40a) nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='127.0.0.1:/\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000800)='nfs4\x00', 0x0, &(0x7f0000000900)='clientaddr=127.0.0.1,addr=127.0.0.1\x00') (async) nanosleep(&(0x7f0000000500)={0x1}, 0x0) 1m9.537484496s ago: executing program 8 (id=816): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000300)={0x6, 'syz_tun\x00', {0x2}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000400)={0x0, 'syz_tun\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000500)={'syz_tun\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000600)={'vlan0\x00', 0x101}) syz_emit_ethernet(0x26, &(0x7f0000000700)={@random="122233445566", @random="aabbccddeeff", @val={@void}, {@generic={0x800, "4500001400000000400100000102030405060708"}}}, 0x0) 58.847763041s ago: executing program 57 (id=797): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/recoverydir\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)='/tmp\n\x00', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000840)='-2 -3 +4\n\x00', 0x9) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 my_domain\n\x00', 0x24) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='my_domain /tmp 2147483647 9216 0 0 0\n\x00', 0x25) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='my_domain 1 \\x00000000 2147483647 /tmp\n\x00', 0x27) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r6, &(0x7f0000000340)='1\n\x00', 0x2) close(r6) nanosleep(&(0x7f0000000540)={0x1}, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000580)={0x2, 0x801, @loopback}, 0x10) write(r7, &(0x7f00000005c0)="80000098123456780000000000000002000186a300000004000000010000000000000000000000000000000000000000000000010000000200000016000000200100010000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000000000001000010000000001c00000001000000000000000000000001000000064f574e4552400000", 0x9c) 54.265889975s ago: executing program 58 (id=816): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000300)={0x6, 'syz_tun\x00', {0x2}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000400)={0x0, 'syz_tun\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000500)={'syz_tun\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000600)={'vlan0\x00', 0x101}) syz_emit_ethernet(0x26, &(0x7f0000000700)={@random="122233445566", @random="aabbccddeeff", @val={@void}, {@generic={0x800, "4500001400000000400100000102030405060708"}}}, 0x0) 52.551159658s ago: executing program 1 (id=831): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/irq\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/64, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:03.0/resource\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/256, 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:02.0/irq\x00', 0x0, 0x0) read(r2, &(0x7f0000000300)=""/64, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/devices/0000:00:02.0/resource\x00', 0x0, 0x0) read(r3, &(0x7f0000000380)=""/256, 0x100) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/devices/0000:00:04.0/irq\x00', 0x0, 0x0) read(r4, &(0x7f0000000500)=""/64, 0x40) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/pci/devices/0000:00:04.0/resource\x00', 0x0, 0x0) read(r5, &(0x7f0000000580)=""/256, 0x100) 52.481900459s ago: executing program 1 (id=832): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dummy.img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) pwrite64(r0, &(0x7f0000000140)="6269746d03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000001000000100"/200, 0xc8, 0x1000) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='md0\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='7:0\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='raid1\x00', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='1\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-loop0/slot\x00', 0x1, 0x0) write(r6, &(0x7f00000005c0)='0\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r7, &(0x7f0000000640)='active\x00', 0x7) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r8, &(0x7f00000006c0)='none', 0x4) write(r8, &(0x7f0000000700)='+8\n', 0x3) 52.331403913s ago: executing program 1 (id=833): r0 = syz_usb_connect(0x3, 0x54, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e0010140120a01000000010203010902360002010080000904000003e00101000705810310000107050202000200070582020002000904010002e00101000705030100020007058301000200"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000400)="0e0401030c00") nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000410)="0e0c010310000000000020000000") nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000420)="0e0c010110000600000600000000") nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0xc, &(0x7f0000000430)="0e0a01091000010203040506") nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x46, &(0x7f0000000440)="0e4401021000"/70) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) write(r1, &(0x7f0000000200)="f100040000", 0x5) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write(r2, &(0x7f0000000240)="f100040000", 0x5) 51.435771825s ago: executing program 1 (id=835): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dummy.img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='file:0\x00', 0x7) 51.333937017s ago: executing program 1 (id=836): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x7, 0x5, 0x57e, 0x306, 0x0, 0x0, "05010905a101c0"}}, 0x11f) 41.114004381s ago: executing program 1 (id=845): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./nfsd\x00', &(0x7f0000000b00)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./rpc_pipefs\x00', &(0x7f0000000400)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='tcp 2049\n', 0x9) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)='8\n', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) read(r7, &(0x7f0000001000)=""/1034, 0x40a) write(r7, &(0x7f0000001000)='\x00'/1034, 0x40a) read(r7, &(0x7f0000002000)=""/1034, 0x40a) write(r7, &(0x7f0000002000)='\x00'/1034, 0x40a) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='127.0.0.1:/\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000800)='nfs4\x00', 0x0, &(0x7f0000000900)='clientaddr=127.0.0.1,addr=127.0.0.1\x00') (async) read(r7, &(0x7f0000003000)=""/1034, 0x40a) write(r7, &(0x7f0000003000)='\x00'/1034, 0x40a) read(r7, &(0x7f0000004000)=""/1034, 0x40a) write(r7, &(0x7f0000004000)='\x00'/1034, 0x40a) 40.237935273s ago: executing program 2 (id=842): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a00"/84], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073756200"], 0x0, 0x5a}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 40.237658702s ago: executing program 2 (id=843): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dummy.img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='file:0\x00', 0x7) 40.201870353s ago: executing program 2 (id=844): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070005007e05000006030000000000000000000005010905a101c0"], 0x11f) nanosleep(&(0x7f0000000200)={0x1}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c0000000300300000"], 0xb) 39.572724399s ago: executing program 4 (id=849): sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/vda\x00', 0x2, 0x0) read(r0, &(0x7f0000000800), 0x1000) 39.492036671s ago: executing program 4 (id=852): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='/dev/loop0,65536\x00', 0x11) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl(r3, 0x40186f40, &(0x7f0000000700)='\x00'/24) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r4, 0x40986f00, &(0x7f0000000b00)="000000000100000000a00000000000000300040000000000766f6c3000"/152) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./mnt\x00', 0x1ff) mount(&(0x7f0000000d00)=@filename='ubi0_0\x00', &(0x7f0000000c00)='./mnt\x00', &(0x7f0000000e00)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000f00)='./mnt/test\x00', 0x42, 0x1ff) 39.184820629s ago: executing program 4 (id=855): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='inactive', 0x8) 39.13791648s ago: executing program 4 (id=856): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/irq\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/64, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:03.0/resource\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/256, 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:02.0/irq\x00', 0x0, 0x0) read(r2, &(0x7f0000000300)=""/64, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/devices/0000:00:02.0/resource\x00', 0x0, 0x0) read(r3, &(0x7f0000000380)=""/256, 0x100) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/devices/0000:00:04.0/irq\x00', 0x0, 0x0) read(r4, &(0x7f0000000500)=""/64, 0x40) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/pci/devices/0000:00:04.0/resource\x00', 0x0, 0x0) read(r5, &(0x7f0000000580)=""/256, 0x100) 39.098050071s ago: executing program 4 (id=858): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1111, @empty}, 0x10) listen(r0, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r1, &(0x7f0000000200)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,hdr_digest,data_digest\x00', 0x4b) nanosleep(&(0x7f0000000080)={0x0, 0x5f5e100}, 0x0) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000100)="01008000800000000000000200004000"/128, 0x80) nanosleep(&(0x7f0000000080)={0x0, 0x1dcd6500}, 0x0) 38.464819057s ago: executing program 4 (id=860): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @local}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=172.20.20.170,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x47) r2 = accept$inet(r0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000300)=""/128, 0x80, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)="010080008000000000000002001000"/128, 0x7f, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000500)=""/4096, 0x1000, 0x0, 0x0, 0x0) 38.173450204s ago: executing program 5 (id=864): r0 = memfd_create(&(0x7f0000000040)='dummy\x00', 0x0) ftruncate(r0, 0x6400000) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1) r3 = memfd_create(&(0x7f0000000100)='dummy2\x00', 0x0) ftruncate(r3, 0x6400000) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='md0\x00', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r6, &(0x7f0000000300)='7:0\x00', 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r7, &(0x7f0000000380)='7:1\x00', 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r8, &(0x7f0000000400)='raid1\x00', 0x6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r9, &(0x7f0000000480)='2\x00', 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r10, &(0x7f0000000500)='readonly\x00', 0x9) r11 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/bitmap/metadata\x00', 0x1, 0x0) write(r11, &(0x7f0000000580)='external\x00', 0x9) 35.11451244s ago: executing program 5 (id=866): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='/dev/loop0,65536\x00', 0x11) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl(r3, 0x40186f40, &(0x7f0000000700)='\x00'/24) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r4, 0x40986f00, &(0x7f0000000b00)="000000000100000000a00000000000000300040000000000766f6c3000"/152) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./mnt\x00', 0x1ff) mount(&(0x7f0000000d00)=@filename='ubi0_0\x00', &(0x7f0000000c00)='./mnt\x00', &(0x7f0000000e00)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000f00)='./mnt/test\x00', 0x42, 0x1ff) 34.811280667s ago: executing program 5 (id=868): r0 = memfd_create(&(0x7f0000000040)='dummy\x00', 0x0) ftruncate(r0, 0x6400000) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1) r3 = memfd_create(&(0x7f0000000100)='dummy2\x00', 0x0) ftruncate(r3, 0x6400000) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='md0\x00', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r6, &(0x7f0000000300)='7:0\x00', 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r7, &(0x7f0000000380)='7:1\x00', 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r8, &(0x7f0000000400)='raid1\x00', 0x6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r9, &(0x7f0000000480)='2\x00', 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r10, &(0x7f0000000500)='readonly\x00', 0x9) r11 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/bitmap/metadata\x00', 0x1, 0x0) write(r11, &(0x7f0000000580)='external\x00', 0x9) r12 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/block/md0/md/bitmap/chunksize\x00', 0x1, 0x0) write(r12, &(0x7f0000000600)='4096\x00', 0x5) 34.656193491s ago: executing program 5 (id=870): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dummy.img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='file:0\x00', 0x7) 34.638091101s ago: executing program 5 (id=871): r0 = memfd_create(&(0x7f0000000040)='dummy\x00', 0x0) ftruncate(r0, 0x6400000) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1) r3 = memfd_create(&(0x7f0000000100)='dummy2\x00', 0x0) ftruncate(r3, 0x6400000) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='md0\x00', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r6, &(0x7f0000000300)='7:0\x00', 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r7, &(0x7f0000000380)='7:1\x00', 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r8, &(0x7f0000000400)='raid1\x00', 0x6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r9, &(0x7f0000000480)='2\x00', 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r10, &(0x7f0000000500)='readonly\x00', 0x9) r11 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/bitmap/metadata\x00', 0x1, 0x0) write(r11, &(0x7f0000000580)='external\x00', 0x9) r12 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/block/md0/md/bitmap/chunksize\x00', 0x1, 0x0) write(r12, &(0x7f0000000600)='4096\x00', 0x5) r13 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/block/md0/md/bitmap/time_base\x00', 0x1, 0x0) write(r13, &(0x7f0000000680)='1\x00', 0x2) 33.766857223s ago: executing program 2 (id=872): sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) read(r0, &(0x7f0000000800), 0x1000) 33.693862085s ago: executing program 2 (id=873): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='md0\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='raid1\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='2\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='1:0\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='1:1\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/state\x00', 0x2, 0x0) write(r5, &(0x7f00000003c0)='writemostly\x00', 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r6, &(0x7f0000000440)='readonly\x00', 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/bitmap/backlog\x00', 0x2, 0x0) write(r7, &(0x7f00000004c0)='1024\x00', 0x5) 33.628500106s ago: executing program 2 (id=874): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1111, @empty}, 0x10) listen(r0, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r1, &(0x7f0000000200)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,hdr_digest,data_digest\x00', 0x4b) nanosleep(&(0x7f0000000080)={0x0, 0x5f5e100}, 0x0) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000100)="01008000800000000000000200004000"/128, 0x80) nanosleep(&(0x7f0000000080)={0x0, 0x1dcd6500}, 0x0) 31.595091227s ago: executing program 5 (id=875): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @local}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=172.20.20.170,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x48) r2 = accept$inet(r0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000300)=""/128, 0x80, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)="010080008000000000000002001000"/128, 0x80, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000500)=""/4096, 0x1000, 0x0, 0x0, 0x0) 25.967252406s ago: executing program 59 (id=845): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./nfsd\x00', &(0x7f0000000b00)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./rpc_pipefs\x00', &(0x7f0000000400)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='tcp 2049\n', 0x9) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)='8\n', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) read(r7, &(0x7f0000001000)=""/1034, 0x40a) write(r7, &(0x7f0000001000)='\x00'/1034, 0x40a) read(r7, &(0x7f0000002000)=""/1034, 0x40a) write(r7, &(0x7f0000002000)='\x00'/1034, 0x40a) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='127.0.0.1:/\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000800)='nfs4\x00', 0x0, &(0x7f0000000900)='clientaddr=127.0.0.1,addr=127.0.0.1\x00') (async) read(r7, &(0x7f0000003000)=""/1034, 0x40a) write(r7, &(0x7f0000003000)='\x00'/1034, 0x40a) read(r7, &(0x7f0000004000)=""/1034, 0x40a) write(r7, &(0x7f0000004000)='\x00'/1034, 0x40a) 23.215903704s ago: executing program 60 (id=860): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @local}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=172.20.20.170,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x47) r2 = accept$inet(r0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000300)=""/128, 0x80, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)="010080008000000000000002001000"/128, 0x7f, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000500)=""/4096, 0x1000, 0x0, 0x0, 0x0) 18.515950351s ago: executing program 61 (id=874): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1111, @empty}, 0x10) listen(r0, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r1, &(0x7f0000000200)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,hdr_digest,data_digest\x00', 0x4b) nanosleep(&(0x7f0000000080)={0x0, 0x5f5e100}, 0x0) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000100)="01008000800000000000000200004000"/128, 0x80) nanosleep(&(0x7f0000000080)={0x0, 0x1dcd6500}, 0x0) 16.554108179s ago: executing program 62 (id=875): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @local}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=172.20.20.170,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x48) r2 = accept$inet(r0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000300)=""/128, 0x80, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)="010080008000000000000002001000"/128, 0x80, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000500)=""/4096, 0x1000, 0x0, 0x0, 0x0) 15.485415766s ago: executing program 9 (id=910): openat(0xffffffffffffff9c, &(0x7f0000000040)='./dummy.img\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r0, &(0x7f00000004c0)='file:0\x00', 0x7) 15.485011576s ago: executing program 9 (id=911): r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='readonly\x00', 0x9) 15.409688898s ago: executing program 9 (id=912): r0 = memfd_create(&(0x7f0000000040)='dummy\x00', 0x0) ftruncate(r0, 0x6400000) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1) r3 = memfd_create(&(0x7f0000000100)='dummy2\x00', 0x0) ftruncate(r3, 0x6400000) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='md0\x00', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r6, &(0x7f0000000300)='7:0\x00', 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r7, &(0x7f0000000380)='7:1\x00', 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r8, &(0x7f0000000400)='raid1\x00', 0x6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r9, &(0x7f0000000480)='2\x00', 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r10, &(0x7f0000000500)='readonly\x00', 0x9) r11 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/bitmap/metadata\x00', 0x1, 0x0) write(r11, &(0x7f0000000580)='external\x00', 0x9) write(0xffffffffffffffff, &(0x7f0000000600)='4096\x00', 0x5) 15.352747619s ago: executing program 9 (id=913): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dummy.img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) pwrite64(r0, &(0x7f0000000140)="6269746d03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000001000000100"/200, 0xc8, 0x1000) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='md0\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='7:0\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='raid1\x00', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='1\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-loop0/slot\x00', 0x1, 0x0) write(r6, &(0x7f00000005c0)='0\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r7, &(0x7f0000000640)='active\x00', 0x7) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r8, &(0x7f00000006c0)='none\x00', 0x5) write(r8, &(0x7f0000000700)='+8', 0x2) 15.161728634s ago: executing program 9 (id=914): r0 = memfd_create(&(0x7f0000000040)='dummy\x00', 0x0) ftruncate(r0, 0x6400000) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1) r3 = memfd_create(&(0x7f0000000100)='dummy2\x00', 0x0) ftruncate(r3, 0x6400000) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='md0\x00', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r6, &(0x7f0000000300)='7:0\x00', 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r7, &(0x7f0000000380)='7:1\x00', 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r8, &(0x7f0000000400)='raid1\x00', 0x6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r9, &(0x7f0000000480)='2\x00', 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r10, &(0x7f0000000500)='readonly\x00', 0x9) r11 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/bitmap/metadata\x00', 0x1, 0x0) write(r11, &(0x7f0000000580)='external\x00', 0x9) r12 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/block/md0/md/bitmap/chunksize\x00', 0x1, 0x0) write(r12, &(0x7f0000000600)='4096\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000680)='1\x00', 0x2) 15.029852387s ago: executing program 9 (id=915): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='./dev/ram0,131072\x00', 0x12) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/ubi_ctrl\x00', 0x2, 0x0) ioctl(r1, 0x40186f40, &(0x7f0000000300)="000000000100"/24) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r2, 0x40986f00, &(0x7f0000000380)="000000000100000000001000000000000300040000000000766f6c3000"/152) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000480)=@filename='./dev/ubi0_0\x00', &(0x7f00000004c0)='./mnt\x00', &(0x7f0000000500)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0x400000, 0x0) 0s ago: executing program 63 (id=915): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='./dev/ram0,131072\x00', 0x12) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/ubi_ctrl\x00', 0x2, 0x0) ioctl(r1, 0x40186f40, &(0x7f0000000300)="000000000100"/24) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r2, 0x40986f00, &(0x7f0000000380)="000000000100000000001000000000000300040000000000766f6c3000"/152) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000480)=@filename='./dev/ubi0_0\x00', &(0x7f00000004c0)='./mnt\x00', &(0x7f0000000500)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0x400000, 0x0) kernel console output (not intermixed with test programs): ldn't find an available UDC or it's busy [ 261.243480][T11274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.829345][ C0] usb 1-1: received EP1 urb->status = -71 [ 261.833772][ T5056] input: as /devices/platform/dummy_hcd.0/usb1/1-1/input/input35 [ 261.842903][ T5056] usb 1-1: USB disconnect, device number 18 [ 261.907492][T11260] CIFS: VFS: cifs_mount failed w/return code = -112 [ 262.019486][T11320] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 262.019486][T11320] [ 262.021821][T11320] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 262.024824][T11320] CIFS: Attempting to mount \\172.20.20.170\share [ 262.033602][T11320] CIFS: VFS: cifs_mount failed w/return code = -112 [ 262.077861][T11329] md: could not open device unknown-block(7,0). [ 262.197023][T11336] ubi: mtd0 is already attached to ubi0 [ 262.204585][ T9664] udevd[9664]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.247026][ T4339] Bluetooth: hci12: command 0x0419 tx timeout [ 262.263347][T11339] ubi0 error: ubi_create_volume: volume 0 already exists [ 262.264662][T11339] ubi0 error: ubi_create_volume: cannot create volume 0, error -17 [ 262.266735][T11346] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 262.318593][T11336] UBIFS error (ubi0:0 pid 11336): ubifs_mount: too small LEBs (3968 bytes), min. is 15360 bytes [ 262.383593][T11355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.403333][T11355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.406492][T11353] md: could not open device unknown-block(7,0). [ 262.539082][T11367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.541124][T11367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.543657][ T4538] device hsr_slave_0 left promiscuous mode [ 262.567541][ T4538] device hsr_slave_1 left promiscuous mode [ 262.655858][ T4538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.657236][ T4538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.659370][ T4538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.660625][ T4538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.662183][ T4538] device bridge_slave_1 left promiscuous mode [ 262.663296][ T4538] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.696335][ T4538] device bridge_slave_0 left promiscuous mode [ 262.697604][ T4538] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.765742][ T22] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 262.815878][ T4538] device veth1_macvtap left promiscuous mode [ 262.816970][ T4538] device veth0_macvtap left promiscuous mode [ 262.818066][ T4538] device veth1_vlan left promiscuous mode [ 262.819082][ T4538] device veth0_vlan left promiscuous mode [ 262.941561][T11384] md: could not open device unknown-block(7,0). [ 262.947053][ T22] usb 1-1: not running at top speed; connect to a high speed hub [ 262.949369][ T22] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 262.951618][ T22] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 262.953298][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.959253][ T22] gspca_main: spca501-2.14.0 probing 0000:0000 [ 263.114425][T11390] siw: device registration error -23 [ 263.150469][ T4339] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 263.152965][ T4339] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 263.155974][ T4339] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 263.157937][ T4339] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 263.165264][ T4339] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 263.167041][ T4339] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 263.665820][ T22] gspca_spca501: reg write: error -110 [ 263.666855][ T22] spca501 1-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 263.668128][ T22] spca501: probe of 1-1:1.0 failed with error -22 [ 263.669928][ T22] usb 1-1: Found UVC 1.00 device (0000:0000) [ 263.671788][ T22] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 263.673840][ T22] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -32 (exp. 26). [ 263.675378][ T22] uvcvideo 1-1:1.1: Failed to initialize the device (-5). [ 264.155588][T11400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.164629][T11400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.335344][T11406] ubi: mtd0 is already attached to ubi0 [ 264.383997][ T7] usb 1-1: USB disconnect, device number 19 [ 264.391034][T11407] ubi0 error: ubi_create_volume: volume 0 already exists [ 264.392321][T11407] ubi0 error: ubi_create_volume: cannot create volume 0, error -17 [ 264.445505][T11406] UBIFS error (ubi0:0 pid 11406): ubifs_mount: too small LEBs (3968 bytes), min. is 15360 bytes [ 264.544689][T11409] md: could not open device unknown-block(7,0). [ 264.571199][T11411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.574365][T11411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.827715][ T4538] team0 (unregistering): Port device team_slave_1 removed [ 264.841572][T11415] md: could not open device unknown-block(7,0). [ 264.973427][ T4538] team0 (unregistering): Port device team_slave_0 removed [ 265.116889][ T4538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.205804][ T4345] Bluetooth: hci2: command 0x0409 tx timeout [ 265.326630][ T4538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.817500][ T4538] bond0 (unregistering): Released all slaves [ 267.173896][T11391] dummy0 speed is unknown, defaulting to 1000 [ 267.175311][T11391] lo speed is unknown, defaulting to 1000 [ 267.275825][T11391] chnl_net:caif_netlink_parms(): no params data found [ 267.285803][ T4345] Bluetooth: hci2: command 0x041b tx timeout [ 267.292418][T11391] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.293672][T11391] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.295398][T11391] device bridge_slave_0 entered promiscuous mode [ 267.297798][T11391] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.299050][T11391] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.300540][T11391] device bridge_slave_1 entered promiscuous mode [ 267.308139][T11391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.311167][T11391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.318676][T11391] team0: Port device team_slave_0 added [ 267.320676][T11391] team0: Port device team_slave_1 added [ 267.326569][T11391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.327792][T11391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.332193][T11391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.334800][T11391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.336167][T11391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.341397][T11391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.387512][T11391] device hsr_slave_0 entered promiscuous mode [ 267.425909][T11391] device hsr_slave_1 entered promiscuous mode [ 267.475768][T11391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.477210][T11391] Cannot create hsr debugfs directory [ 267.597774][T11391] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.619690][T11452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.621387][T11452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.678530][T11391] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.776914][T11391] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.885816][ T14] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 267.886989][T11391] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.076522][ T14] usb 1-1: not running at top speed; connect to a high speed hub [ 268.078682][ T14] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 268.080518][ T14] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 268.083794][ T14] usb 1-1: New USB device found, idVendor=0b95, idProduct=7720, bcdDevice= 0.00 [ 268.085373][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.095455][ T14] usb 1-1: Product: syz [ 268.096284][ T14] usb 1-1: Manufacturer: syz [ 268.097064][ T14] usb 1-1: SerialNumber: syz [ 268.099619][T11450] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 268.101043][T11450] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 268.306040][T11450] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 268.307457][T11450] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 268.510420][ T14] asix 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 268.512216][ T14] asix: probe of 1-1:1.0 failed with error -61 [ 268.936876][T11391] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 268.977977][T11391] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 269.016857][T11391] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 269.050151][T11391] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 269.122559][T11391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.128568][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.130196][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.133294][T11391] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.144462][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.146938][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.148886][ T4414] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.150136][ T4414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.151690][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 269.153311][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.154832][ T4414] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.156209][ T4414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.163620][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 269.165525][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.168049][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.169728][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.171441][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.173886][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.175482][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.180995][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.185247][T11391] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.188676][T11391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 269.365773][ T4339] Bluetooth: hci2: command 0x040f tx timeout [ 269.870477][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.872251][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 269.874095][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.875872][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.091443][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.092932][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.096348][T11391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.343037][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 270.344867][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 270.352713][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 270.354261][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 270.361874][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 270.363380][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 270.547370][T11391] device veth0_vlan entered promiscuous mode [ 270.551758][T11391] device veth1_vlan entered promiscuous mode [ 270.559427][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 270.561222][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 270.562790][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 270.564396][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 270.578808][T11391] device veth0_macvtap entered promiscuous mode [ 270.581266][T11391] device veth1_macvtap entered promiscuous mode [ 270.586613][T11391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.588484][T11391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.590259][T11391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.592141][T11391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.593919][T11391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.597334][T11391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.599431][T11391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.603696][T11391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.605300][T11391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.607469][T11391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.609171][T11391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.610953][T11391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.612507][T11391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.624945][ T114] usb 1-1: USB disconnect, device number 20 [ 270.627913][T11391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.629610][T11391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.631362][T11391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.633017][T11391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.634699][T11391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.636494][T11391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.638199][T11391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.639804][T11391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.641614][T11391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.643248][T11391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.646992][T11391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.649680][T11391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.651023][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 270.653161][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 270.661862][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 270.666176][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 270.686222][T11498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.687820][T11498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.753022][T11504] md: could not open device unknown-block(7,0). [ 270.799233][T11499] ubi: mtd0 is already attached to ubi0 [ 270.851796][T11502] ubi0 error: ubi_create_volume: volume 0 already exists [ 270.852983][T11502] ubi0 error: ubi_create_volume: cannot create volume 0, error -17 [ 270.906653][T11499] UBIFS error (ubi0:0 pid 11499): ubifs_mount: too small LEBs (3968 bytes), min. is 15360 bytes [ 271.033010][T11510] ceph: No mds server is up or the cluster is laggy [ 271.039356][T11391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.041446][T11391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.043216][T11391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.045078][T11391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.053899][T11391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.057878][T11391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.059828][T11391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.061678][T11391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.063320][T11391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.064949][T11391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.066990][T11391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.068986][T11391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.070605][T11391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.072258][T11391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.073927][T11391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.076523][T11391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.078403][T11391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.080368][T11391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.082221][T11391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.084125][T11391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.086231][T11391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.088333][T11391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.090063][T11391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.092073][T11391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.095111][T11391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.098327][T11391] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.100204][T11391] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.102158][T11391] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.103970][T11391] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.162179][T11518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.165885][T11518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.248368][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 271.250139][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 271.277016][ T4677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.278731][ T4677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.280301][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 271.445993][ T4345] Bluetooth: hci2: command 0x0419 tx timeout [ 271.473820][ T4677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.475361][ T4677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.477324][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 271.534396][T11523] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 271.534396][T11523] [ 271.537868][T11523] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 271.540563][T11523] CIFS: Attempting to mount \\172.20.20.170\share [ 271.545179][T11523] CIFS: VFS: cifs_mount failed w/return code = -112 [ 271.579531][T11527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.581466][T11527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.630991][ T4339] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci11/hci11:200' [ 271.632954][ T4339] CPU: 1 PID: 4339 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 271.634237][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 271.635983][ T4339] Workqueue: hci11 hci_rx_work [ 271.636887][ T4339] Call trace: [ 271.637493][ T4339] dump_backtrace+0x1c4/0x1f0 [ 271.638400][ T4339] show_stack+0x2c/0x3c [ 271.639186][ T4339] __dump_stack+0x30/0x40 [ 271.640023][ T4339] dump_stack_lvl+0xf4/0x15c [ 271.640897][ T4339] dump_stack+0x1c/0x5c [ 271.641735][ T4339] sysfs_create_dir_ns+0x244/0x264 [ 271.642672][ T4339] kobject_add_internal+0x5a8/0xb18 [ 271.643622][ T4339] kobject_add+0x144/0x20c [ 271.644465][ T4339] device_add+0x3dc/0xe4c [ 271.645279][ T4339] hci_conn_add_sysfs+0xb8/0x1bc [ 271.646209][ T4339] le_conn_complete_evt+0xd3c/0x1300 [ 271.647204][ T4339] hci_le_conn_complete_evt+0x114/0x3b8 [ 271.648258][ T4339] hci_le_meta_evt+0x2c0/0x4a8 [ 271.649158][ T4339] hci_event_packet+0x64c/0xe60 [ 271.650025][ T4339] hci_rx_work+0x310/0xa70 [ 271.650834][ T4339] process_one_work+0x7e4/0x13bc [ 271.651734][ T4339] worker_thread+0x8cc/0xfe8 [ 271.652594][ T4339] kthread+0x254/0x2e0 [ 271.653353][ T4339] ret_from_fork+0x10/0x20 [ 271.657259][ T4339] kobject_add_internal failed for hci11:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 271.659563][ T4339] Bluetooth: hci11: failed to register connection device [ 272.282285][T11541] md: could not open device unknown-block(7,0). [ 272.514604][T11545] device syz_tun entered promiscuous mode [ 272.551199][T11548] device vlan0 entered promiscuous mode [ 272.617365][T11551] ubi: mtd0 is already attached to ubi0 [ 272.670312][T11555] ubi0 error: ubi_create_volume: volume 0 already exists [ 272.672003][T11555] ubi0 error: ubi_create_volume: cannot create volume 0, error -17 [ 272.710206][T11566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.711758][T11566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.724461][T11551] UBIFS error (ubi0:0 pid 11551): ubifs_mount: too small LEBs (3968 bytes), min. is 15360 bytes [ 272.844351][T11577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.850663][T11577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.061348][T11598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.685816][ T4339] Bluetooth: hci11: command 0x2016 tx timeout [ 273.997373][T11603] md: could not open device unknown-block(7,0). [ 274.174403][T11608] ceph: No mds server is up or the cluster is laggy [ 274.298994][T11614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.302112][T11614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.356826][ T4317] wiimote 0005:057E:0306.000C: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz1 [ 274.359010][ T4317] wiimote 0005:057E:0306.000C: New device registered [ 274.451672][T11626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.453472][T11626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.189512][T11618] wiimote 0005:057E:0306.000C: Device removed [ 275.209227][T11635] ubi: mtd0 is already attached to ubi0 [ 275.262046][T11636] ubi0 error: ubi_create_volume: volume 0 already exists [ 275.263465][T11636] ubi0 error: ubi_create_volume: cannot create volume 0, error -17 [ 275.319139][T11635] UBIFS error (ubi0:0 pid 11635): ubifs_mount: too small LEBs (3968 bytes), min. is 15360 bytes [ 275.365945][ T4317] wiimote 0005:057E:0306.000C: detected device: Nintendo Wii Remote (Gen 1) [ 275.369188][ T4317] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.000C/input/input37 [ 275.380876][ T4317] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.000C/input/input38 [ 275.385553][ T4317] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.000C/input/input36 [ 275.453063][T11639] md: could not open device unknown-block(7,0). [ 275.678476][ T4538] device hsr_slave_0 left promiscuous mode [ 275.715923][ T4538] device hsr_slave_1 left promiscuous mode [ 275.785845][ T4538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.787306][ T4538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.789621][ T4538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.790960][ T4538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.792596][ T4538] device bridge_slave_1 left promiscuous mode [ 275.794512][ T4538] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.847340][ T4538] device bridge_slave_0 left promiscuous mode [ 275.848401][ T4538] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.898383][ T4538] device hsr_slave_0 left promiscuous mode [ 275.916994][T11648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.935812][ T4538] device hsr_slave_1 left promiscuous mode [ 276.016178][ T4538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.017656][ T4538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.020024][T11652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.021843][T11652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.026362][ T4538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.028247][ T4538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.030012][ T4538] device bridge_slave_1 left promiscuous mode [ 276.031376][ T4538] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.057233][ T4538] device bridge_slave_0 left promiscuous mode [ 276.059472][ T4538] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.108119][ T4538] device hsr_slave_0 left promiscuous mode [ 276.145796][ T4538] device hsr_slave_1 left promiscuous mode [ 276.225843][ T4538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.227425][ T4538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.229423][ T4538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.230945][ T4538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.232389][ T4538] device bridge_slave_1 left promiscuous mode [ 276.233566][ T4538] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.266148][ T4538] device bridge_slave_0 left promiscuous mode [ 276.267208][ T4538] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.311529][ T4538] device hsr_slave_0 left promiscuous mode [ 276.345879][ T4538] device hsr_slave_1 left promiscuous mode [ 276.425735][ T4538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.427049][ T4538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.429045][ T4538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.430685][ T4538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.432365][ T4538] device bridge_slave_1 left promiscuous mode [ 276.433559][ T4538] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.476569][ T4538] device bridge_slave_0 left promiscuous mode [ 276.477733][ T4538] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.615779][ T4538] device veth1_macvtap left promiscuous mode [ 276.616929][ T4538] device veth0_macvtap left promiscuous mode [ 276.618029][ T4538] device veth1_vlan left promiscuous mode [ 276.619114][ T4538] device veth0_vlan left promiscuous mode [ 276.706071][ T4538] device veth1_macvtap left promiscuous mode [ 276.707224][ T4538] device veth0_macvtap left promiscuous mode [ 276.708319][ T4538] device veth1_vlan left promiscuous mode [ 276.709421][ T4538] device veth0_vlan left promiscuous mode [ 276.795812][ T4538] device veth1_macvtap left promiscuous mode [ 276.796866][ T4538] device veth0_macvtap left promiscuous mode [ 276.797927][ T4538] device veth1_vlan left promiscuous mode [ 276.799011][ T4538] device veth0_vlan left promiscuous mode [ 276.885926][ T4538] device veth1_macvtap left promiscuous mode [ 276.887087][ T4538] device veth0_macvtap left promiscuous mode [ 276.888617][ T4538] device veth1_vlan left promiscuous mode [ 276.889773][ T4538] device veth0_vlan left promiscuous mode [ 276.933637][T11660] loop1: detected capacity change from 0 to 204800 [ 276.940552][ T4339] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.942696][ T4339] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.944463][ T4339] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.946560][ T4339] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.948542][ T4339] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.949978][ T4339] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.964886][T11660] md: could not open device unknown-block(7,0). [ 276.996554][ T4538] infiniband syz0: set down [ 277.035383][T11660] md: pers->run() failed ... [ 277.137506][ T4538] infiniband rxe0: set down [ 278.965735][ T4345] Bluetooth: hci3: command 0x0409 tx timeout [ 279.157816][ T4538] team0 (unregistering): Port device team_slave_1 removed [ 279.327800][ T4538] team0 (unregistering): Port device team_slave_0 removed [ 279.496595][ T4538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.716067][ T4538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.576808][ T4416] smc: removing ib device syz0 [ 281.045754][ T4339] Bluetooth: hci3: command 0x041b tx timeout [ 281.187825][ T4538] bond0 (unregistering): Released all slaves [ 283.125726][ T4345] Bluetooth: hci3: command 0x040f tx timeout [ 283.538657][ T4538] team0 (unregistering): Port device team_slave_1 removed [ 283.717069][ T4538] team0 (unregistering): Port device team_slave_0 removed [ 283.876385][ T4538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.086969][ T4538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.652266][ T9425] NFSD: attempt to initialize umh client tracking in a container ignored. [ 284.653893][ T9425] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 284.655347][ T9425] NFSD: Unable to initialize client recovery tracking! (-22) [ 284.657028][ T9425] NFSD: starting 90-second grace period (net f00004eb) [ 285.205676][ T4339] Bluetooth: hci3: command 0x0419 tx timeout [ 285.547261][ T4538] bond0 (unregistering): Released all slaves [ 286.045793][ T9436] NFSD: attempt to initialize umh client tracking in a container ignored. [ 286.047500][ T9436] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 286.049058][ T9436] NFSD: Unable to initialize client recovery tracking! (-22) [ 286.050333][ T9436] NFSD: starting 90-second grace period (net f00004eb) [ 287.435783][ T9705] NFSD: attempt to initialize umh client tracking in a container ignored. [ 287.437350][ T9705] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 287.438804][ T9705] NFSD: Unable to initialize client recovery tracking! (-22) [ 287.440051][ T9705] NFSD: starting 90-second grace period (net f00005c6) [ 287.825953][T11682] rdma_rxe: rxe_register_device failed with error -23 [ 287.829847][T11682] rdma_rxe: failed to add lo [ 287.879928][ T4538] team0 (unregistering): Port device team_slave_1 removed [ 287.915043][ T4345] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 287.930840][ T4345] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 287.933625][ T4345] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 287.936646][T11691] md: could not open device unknown-block(7,0). [ 287.942953][ T4344] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 287.944963][ T4344] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 287.946885][ T4344] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 287.983704][T11691] md: pers->run() failed ... [ 288.047504][ T4538] team0 (unregistering): Port device team_slave_0 removed [ 288.226953][ T4538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.248307][T11698] ubi: mtd0 is already attached to ubi0 [ 288.300917][T11699] ubi0 error: ubi_create_volume: volume 0 already exists [ 288.302225][T11699] ubi0 error: ubi_create_volume: cannot create volume 0, error -17 [ 288.355400][T11698] UBIFS error (ubi0:0 pid 11698): ubifs_mount: too small LEBs (3968 bytes), min. is 15360 bytes [ 288.362170][T11701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.363699][T11701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.416246][ T4538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.816649][T10104] NFSD: attempt to initialize umh client tracking in a container ignored. [ 288.818205][T10104] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 288.819995][T10104] NFSD: Unable to initialize client recovery tracking! (-22) [ 288.821189][T10104] NFSD: starting 90-second grace period (net f000091c) [ 289.866776][ T4538] bond0 (unregistering): Released all slaves [ 290.005710][ T4344] Bluetooth: hci4: command 0x0409 tx timeout [ 290.147649][ T39] smc: removing ib device rxe0 [ 290.175869][T11002] NFSD: attempt to initialize umh client tracking in a container ignored. [ 290.177511][T11002] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 290.179125][T11002] NFSD: Unable to initialize client recovery tracking! (-22) [ 290.180635][T11002] NFSD: starting 90-second grace period (net f0000c04) [ 291.536434][T11004] NFSD: attempt to initialize umh client tracking in a container ignored. [ 291.538563][T11004] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 291.540093][T11004] NFSD: Unable to initialize client recovery tracking! (-22) [ 291.541381][T11004] NFSD: starting 90-second grace period (net f0000c04) [ 291.845952][ T4344] Bluetooth: hci1: command 0x0406 tx timeout [ 292.085859][ T4339] Bluetooth: hci4: command 0x041b tx timeout [ 292.187347][ T4538] team0 (unregistering): Port device team_slave_1 removed [ 292.356340][ T4538] team0 (unregistering): Port device team_slave_0 removed [ 292.438126][ T4344] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 292.440545][ T4344] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 292.440715][T11709] md: could not open device unknown-block(7,0). [ 292.442381][ T4344] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 292.444615][ T4344] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 292.446940][ T4344] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 292.448320][ T4344] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 292.503345][T11709] md: pers->run() failed ... [ 292.516212][ T4538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.537601][T11711] ubi: mtd0 is already attached to ubi0 [ 292.573110][T11721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.574733][T11721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.590350][T11715] ubi0 error: ubi_create_volume: volume 0 already exists [ 292.591673][T11715] ubi0 error: ubi_create_volume: cannot create volume 0, error -17 [ 292.644395][T11711] UBIFS error (ubi0:0 pid 11711): ubifs_mount: too small LEBs (3968 bytes), min. is 15360 bytes [ 292.706156][ T4538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.772455][T11471] wiimote 0005:057E:0306.000D: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz1 [ 292.774131][T11471] wiimote 0005:057E:0306.000D: New device registered [ 293.600919][T11729] wiimote 0005:057E:0306.000D: Device removed [ 293.845761][T11471] wiimote 0005:057E:0306.000D: detected device: Nintendo Wii Remote (Gen 1) [ 293.851336][T11471] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.000D/input/input40 [ 293.859047][T11471] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.000D/input/input41 [ 293.866365][T11471] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.000D/input/input39 [ 294.143512][T11737] md: could not open device unknown-block(7,0). [ 294.166527][ T4344] Bluetooth: hci4: command 0x040f tx timeout [ 294.170816][T11737] md: pers->run() failed ... [ 294.187150][ T4538] bond0 (unregistering): Released all slaves [ 294.342610][T11742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.344254][T11742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.469392][ T4377] infiniband syz0: ib_query_port failed (-19) [ 294.476810][ T22] dummy0 speed is unknown, defaulting to 1000 [ 294.477929][ T114] lo speed is unknown, defaulting to 1000 [ 294.485813][ T4339] Bluetooth: hci6: command 0x0409 tx timeout [ 294.560461][T11670] device syz_tun entered promiscuous mode [ 294.817712][T11661] chnl_net:caif_netlink_parms(): no params data found [ 294.956662][T11661] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.963742][T11661] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.989109][T11661] device bridge_slave_0 entered promiscuous mode [ 295.041449][T11688] chnl_net:caif_netlink_parms(): no params data found [ 295.049665][T11661] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.050855][T11661] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.052726][T11661] device bridge_slave_1 entered promiscuous mode [ 295.088054][T11712] chnl_net:caif_netlink_parms(): no params data found [ 295.114558][T11661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.118269][T11688] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.119613][T11688] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.121304][T11688] device bridge_slave_0 entered promiscuous mode [ 295.137228][T11661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.141588][T11688] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.142960][T11688] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.144830][T11688] device bridge_slave_1 entered promiscuous mode [ 295.160302][T11661] team0: Port device team_slave_0 added [ 295.162244][T11661] team0: Port device team_slave_1 added [ 295.181506][T11712] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.183113][T11712] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.185004][T11712] device bridge_slave_0 entered promiscuous mode [ 295.197102][T11688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.199994][T11688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.264108][T11661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.265426][T11661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.286489][T11661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.288573][T11712] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.289774][T11712] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.291416][T11712] device bridge_slave_1 entered promiscuous mode [ 295.302479][T11688] team0: Port device team_slave_0 added [ 295.303160][ T5738] wiimote 0005:057E:0306.000E: hidraw1: BLUETOOTH HID v0.00 Gamepad [syz0] on syz1 [ 295.304484][T11688] team0: Port device team_slave_1 added [ 295.305205][ T5738] wiimote 0005:057E:0306.000E: New device registered [ 295.313564][T11661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.314699][T11661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.317793][T11806] wiimote 0005:057E:0306.000E: Device removed [ 295.320578][T11661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.340597][T11809] fido_id[11809]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 295.344654][T11688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.347817][T11688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.352427][T11688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.396958][T11661] device hsr_slave_0 entered promiscuous mode [ 295.446149][T11661] device hsr_slave_1 entered promiscuous mode [ 295.467304][T11688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.468607][T11688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.473426][T11688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.477074][T11712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.480470][T11712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.495498][T11712] team0: Port device team_slave_0 added [ 295.519399][T11712] team0: Port device team_slave_1 added [ 295.550995][T11712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.552800][T11712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.557941][T11712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.562348][T11712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.563795][T11712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.569031][T11712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.616848][T11688] device hsr_slave_0 entered promiscuous mode [ 295.651857][T11688] device hsr_slave_1 entered promiscuous mode [ 295.686045][T11688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.688133][T11688] Cannot create hsr debugfs directory [ 295.726929][T11712] device hsr_slave_0 entered promiscuous mode [ 295.745963][T11712] device hsr_slave_1 entered promiscuous mode [ 295.795776][T11712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.797238][T11712] Cannot create hsr debugfs directory [ 295.889015][T11661] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.958769][T11661] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.027165][T11661] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.077819][T11661] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.245781][ T4344] Bluetooth: hci4: command 0x0419 tx timeout [ 296.307483][T11712] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.326169][ T5738] wiimote 0005:057E:0306.000E: detected device: Nintendo Wii Remote (Gen 1) [ 296.327762][ T5738] sysfs: cannot create duplicate filename '/class/power_supply/wiimote_battery_syz0' [ 296.329352][ T5738] CPU: 1 PID: 5738 Comm: kworker/1:11 Not tainted syzkaller #0 [ 296.330536][ T5738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 296.332140][ T5738] Workqueue: events wiimote_init_worker [ 296.333076][ T5738] Call trace: [ 296.333731][ T5738] dump_backtrace+0x1c4/0x1f0 [ 296.334633][ T5738] show_stack+0x2c/0x3c [ 296.335432][ T5738] __dump_stack+0x30/0x40 [ 296.336337][ T5738] dump_stack_lvl+0xf4/0x15c [ 296.337310][ T5738] dump_stack+0x1c/0x5c [ 296.338200][ T5738] sysfs_warn_dup+0x9c/0xb8 [ 296.339162][ T5738] sysfs_do_create_link_sd+0xc8/0x120 [ 296.340234][ T5738] sysfs_create_link+0x74/0x94 [ 296.341171][ T5738] device_add+0x744/0xe4c [ 296.342029][ T5738] __power_supply_register+0x95c/0xba4 [ 296.343112][ T5738] power_supply_register+0x38/0x4c [ 296.344060][ T5738] wiimod_battery_probe+0x1b4/0x304 [ 296.345001][ T5738] wiimote_init_worker+0x189c/0x2434 [ 296.345957][ T5738] process_one_work+0x7e4/0x13bc [ 296.346870][ T5738] worker_thread+0x8cc/0xfe8 [ 296.347722][ T5738] kthread+0x254/0x2e0 [ 296.348508][ T5738] ret_from_fork+0x10/0x20 [ 296.349587][ T5738] wiimote 0005:057E:0306.000E: cannot register battery device [ 296.420226][T11712] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.506692][T11712] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.565726][ T4344] Bluetooth: hci6: command 0x041b tx timeout [ 296.627088][T11712] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.907852][T11688] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.988878][T11688] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.097374][T11688] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.256964][T11688] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.666560][T11661] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 297.767711][ T4538] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.772440][T11661] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 297.806788][T11661] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 297.907415][ T4538] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.910249][T11661] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 297.988552][ T4538] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.992156][T11712] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 298.034440][T11712] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 298.136711][ T4538] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.142945][T11712] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 298.186843][T11712] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 298.230741][T11688] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 298.267577][T11688] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 298.315902][T11688] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 298.373042][T11688] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 298.464054][T11661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.507672][T11712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.509851][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 298.511363][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.521555][T11661] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.525224][T11688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.533447][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 298.535035][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.546701][T11712] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.645839][ T4344] Bluetooth: hci6: command 0x040f tx timeout [ 298.667547][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 298.669294][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 298.670808][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.672133][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.674089][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 298.675868][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 298.677559][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.678856][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.680527][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 298.693240][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 298.695290][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 298.697947][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.700533][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 298.705044][T11688] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.749498][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 298.751629][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 298.753144][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.754375][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.755920][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 298.762372][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 298.763979][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.765221][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.766987][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 298.770864][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 298.772712][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 298.774833][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.776183][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.783591][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 298.785330][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 298.788457][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 298.790260][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 298.792394][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 298.794052][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 298.795894][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 298.798026][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 298.799614][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 298.857544][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 298.859296][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 298.861072][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 298.862617][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.863898][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.865420][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 298.868092][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 298.870524][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 298.872253][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 298.883885][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 298.886292][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 298.888217][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 298.932840][T11688] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 298.934592][T11688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 298.945955][T11712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 298.948157][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 298.950064][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 298.951816][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 298.953981][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 298.958519][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 298.960357][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 298.966061][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 298.968141][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 298.969813][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 298.971292][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 298.977218][T11661] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 298.979623][T11661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 299.049170][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 299.050872][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 299.052326][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 299.053881][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.055525][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 299.063662][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.067475][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 299.140116][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 299.141724][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 299.144859][T11712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.232848][T11688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.234930][T11661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.293959][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 299.295418][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 299.297472][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 299.298910][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 299.312496][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 299.314579][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 299.383812][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 299.385506][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 299.405872][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 299.407471][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 299.409025][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 299.410678][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 299.412899][T11661] device veth0_vlan entered promiscuous mode [ 299.461190][T11661] device veth1_vlan entered promiscuous mode [ 299.463089][T11712] device veth0_vlan entered promiscuous mode [ 299.466401][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 299.468029][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 299.469697][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 299.471397][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 299.473261][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 299.474862][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 299.502594][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 299.504402][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 299.508459][T11712] device veth1_vlan entered promiscuous mode [ 299.521945][T11688] device veth0_vlan entered promiscuous mode [ 299.524006][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 299.527030][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 299.529115][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 299.530954][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 299.532790][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 299.543936][T11661] device veth0_macvtap entered promiscuous mode [ 299.546177][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 299.547861][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 299.549500][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 299.551284][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 299.811437][T11661] device veth1_macvtap entered promiscuous mode [ 299.815189][T11712] device veth0_macvtap entered promiscuous mode [ 299.823972][T11712] device veth1_macvtap entered promiscuous mode [ 299.829678][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 299.832642][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 299.835354][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 299.837158][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 299.838753][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 299.843423][T11688] device veth1_vlan entered promiscuous mode [ 299.857548][T11661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.859424][T11661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.861174][T11661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.862908][T11661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.864561][T11661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.867730][T11661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.869571][T11661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.871557][T11661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.873140][T11661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.874832][T11661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.877381][T11661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.879205][T11661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.880867][T11661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.882622][T11661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.884238][T11661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.886551][T11661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.888341][T11661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.890101][T11661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.892741][T11661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.928828][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 299.930689][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 299.937904][T11661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.939796][T11661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.941659][T11661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.943568][T11661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.945348][T11661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.947673][T11661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.949308][T11661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.951029][T11661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.952746][T11661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.954539][T11661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.956911][T11661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.958763][T11661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.960565][T11661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.962302][T11661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.964020][T11661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.966263][T11661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.967961][T11661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.969829][T11661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.972262][T11661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.974543][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 299.976729][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 299.978343][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 299.980064][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 300.300199][T11661] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.301799][T11661] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.303327][T11661] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.304862][T11661] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.309475][T11688] device veth0_macvtap entered promiscuous mode [ 300.313147][T11688] device veth1_macvtap entered promiscuous mode [ 300.328181][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.330029][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.331786][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.333584][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.335314][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.340359][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.342157][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.343926][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.345582][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.347946][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.349948][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.351656][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.353329][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.355341][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.357680][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.359541][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.361303][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.363181][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.364958][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.374562][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.377446][T11712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.382374][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 300.384061][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 300.385577][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 300.389916][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 300.444389][ T4538] device hsr_slave_0 left promiscuous mode [ 300.486718][ T4538] device hsr_slave_1 left promiscuous mode [ 300.566276][ T4538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.567659][ T4538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.570203][ T4538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.571506][ T4538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.572992][ T4538] device bridge_slave_1 left promiscuous mode [ 300.574144][ T4538] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.596225][ T4538] device bridge_slave_0 left promiscuous mode [ 300.597387][ T4538] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.725723][ T4344] Bluetooth: hci6: command 0x0419 tx timeout [ 300.755823][ T4538] device veth1_macvtap left promiscuous mode [ 300.757001][ T4538] device veth0_macvtap left promiscuous mode [ 300.758062][ T4538] device veth1_vlan left promiscuous mode [ 300.759089][ T4538] device veth0_vlan left promiscuous mode [ 302.486451][T11308] NFSD: attempt to initialize umh client tracking in a container ignored. [ 302.488129][T11308] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 302.489675][T11308] NFSD: Unable to initialize client recovery tracking! (-22) [ 302.490986][T11308] NFSD: starting 90-second grace period (net f0000dbd) [ 302.789054][ T4538] team0 (unregistering): Port device team_slave_1 removed [ 302.967455][ T4538] team0 (unregistering): Port device team_slave_0 removed [ 303.137021][ T4538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.356813][ T4538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.887724][ T4538] bond0 (unregistering): Released all slaves [ 305.178446][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.180355][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.182166][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.184103][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.186638][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.188330][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.189958][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.191595][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.193103][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.194757][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.197055][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.198945][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.200547][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.202420][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.204235][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.206879][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.208554][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.210313][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.212904][T11712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.222217][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 305.223965][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 305.251589][T11712] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.253176][T11712] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.254625][T11712] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.256540][T11712] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.266163][ T4537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.267541][ T4537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.272743][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 305.295256][T11688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.303121][T11688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.304987][T11688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.307342][T11688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.308914][T11688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.310602][T11688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.312270][T11688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.314000][T11688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.315557][T11688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.317729][T11688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.319529][T11688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.321400][T11688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.323185][T11688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.324977][T11688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.327013][T11688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.328817][T11688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.330550][T11688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.332390][T11688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.334113][T11688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.336124][T11688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.339536][T11688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.341545][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 305.343430][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 305.372084][T11688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.373998][T11688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.376303][T11688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.378121][T11688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.379812][T11688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.381607][T11688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.383279][T11688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.385076][T11688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.387848][T11688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.389665][T11688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.391375][T11688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.393207][T11688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.394906][T11688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.397580][T11688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.399340][T11688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.401197][T11688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.402771][T11688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.404510][T11688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.406632][T11688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.408571][T11688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.411020][T11688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.412416][ T1619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.413720][ T1619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.419026][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 305.420774][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 305.422906][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 305.430910][T11688] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.432494][T11688] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.434044][T11688] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.435604][T11688] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.462524][ T4416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.463979][ T4416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.476866][ T1619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.478303][ T1619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.480626][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 305.483158][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 305.487206][ T4416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.490819][ T4416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.506391][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 305.524234][ T4416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.526048][ T4416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.527389][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 305.566087][T11984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.571429][T11984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.587349][T11988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.588950][T11988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.661763][T11999] md: could not open device unknown-block(7,0). [ 305.691608][T11999] md: pers->run() failed ... [ 305.891982][T12016] ubi: mtd0 is already attached to ubi0 [ 305.899514][T12026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.944423][T12019] ubi0 error: ubi_create_volume: volume 0 already exists [ 305.951508][T12019] ubi0 error: ubi_create_volume: cannot create volume 0, error -17 [ 306.005541][T12016] UBIFS error (ubi0:0 pid 12016): ubifs_mount: too small LEBs (3968 bytes), min. is 15360 bytes [ 306.206122][T12048] md: could not open device unknown-block(7,0). [ 306.234527][T12048] md: pers->run() failed ... [ 306.478055][ T4419] wiimote 0005:057E:0306.000F: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz1 [ 306.480013][ T4419] wiimote 0005:057E:0306.000F: New device registered [ 306.893485][T12079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.895145][T12079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.184218][T12089] md: could not open device unknown-block(7,0). [ 307.210479][T12089] md: pers->run() failed ... [ 307.294523][T12091] ubi: mtd0 is already attached to ubi0 [ 307.307996][T12069] wiimote 0005:057E:0306.000F: Device removed [ 307.323633][T12097] md: pers->run() failed ... [ 307.351916][T12094] ubi0 error: ubi_create_volume: volume 0 already exists [ 307.353281][T12094] ubi0 error: ubi_create_volume: cannot create volume 0, error -17 [ 307.363547][T12097] md0: can't set backlog, no write mostly device available [ 307.392280][T12102] md: could not open device unknown-block(7,0). [ 307.414471][T12091] UBIFS error (ubi0:0 pid 12091): ubifs_mount: too small LEBs (3968 bytes), min. is 15360 bytes [ 307.416253][T12102] md: pers->run() failed ... [ 307.525867][ T4419] wiimote 0005:057E:0306.000F: detected device: Nintendo Wii Remote (Gen 1) [ 307.529978][ T4419] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.000F/input/input44 [ 307.533506][ T4419] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.000F/input/input45 [ 307.539679][ T4419] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.000F/input/input43 [ 307.678188][T12112] nvme_tcp: queue 0: header digest mismatch host: enabled ctrl: disabled [ 308.476119][T12138] ubi: mtd0 is already attached to ubi0 [ 308.528092][T12135] ubi0 error: ubi_create_volume: volume 0 already exists [ 308.529441][T12135] ubi0 error: ubi_create_volume: cannot create volume 0, error -17 [ 308.552834][T12141] md: could not open device unknown-block(7,0). [ 308.573867][T12141] md: pers->run() failed ... [ 308.582803][T12138] UBIFS error (ubi0:0 pid 12138): ubifs_mount: too small LEBs (3968 bytes), min. is 15360 bytes [ 308.966833][ T4344] Bluetooth: hci1: command 0x00f1 tx timeout [ 310.248833][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.249989][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.528378][T12134] block2mtd: error: cannot open device ./dev/loop0 [ 311.603045][T12150] md: could not open device unknown-block(7,0). [ 311.627658][T12150] md: pers->run() failed ... [ 311.675520][T12148] ubi: mtd0 is already attached to ubi0 [ 311.702848][T12157] md: could not open device unknown-block(7,0). [ 311.725112][T12157] md: pers->run() failed ... [ 311.733582][T12152] ubi0 error: ubi_create_volume: volume 0 already exists [ 311.734850][T12152] ubi0 error: ubi_create_volume: cannot create volume 0, error -17 [ 311.789022][T12148] UBIFS error (ubi0:0 pid 12148): ubifs_mount: too small LEBs (3968 bytes), min. is 15360 bytes [ 311.913130][T12165] md: could not open device unknown-block(7,0). [ 311.941141][T12165] md: pers->run() failed ... [ 312.069303][T12178] ubi: ubi0 already exists [ 312.081860][T12179] md: could not open device unknown-block(7,0). [ 312.106496][T12179] md: pers->run() failed ... [ 312.185899][T12163] UBIFS error (ubi0:0 pid 12163): ubifs_mount: too small LEBs (3968 bytes), min. is 15360 bytes [ 312.962732][T12191] md: pers->run() failed ... [ 313.006177][T12194] md0: can't set backlog, no write mostly device available [ 314.746828][T11314] NFSD: attempt to initialize umh client tracking in a container ignored. [ 314.749825][T11314] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 314.751503][T11314] NFSD: Unable to initialize client recovery tracking! (-22) [ 314.752976][T11314] NFSD: starting 90-second grace period (net f0000dbd) [ 315.045995][T12168] block2mtd: error: cannot open device /dev/loop0 [ 315.181200][T12205] md: could not open device unknown-block(7,0). [ 315.196924][T12205] md: pers->run() failed ... [ 316.106251][T11578] NFSD: attempt to initialize umh client tracking in a container ignored. [ 316.107887][T11578] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 316.109358][T11578] NFSD: Unable to initialize client recovery tracking! (-22) [ 316.110597][T11578] NFSD: starting 90-second grace period (net f0000cdf) [ 316.543992][ T4538] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.678548][ T4538] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.779368][ T4538] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.856932][ T4538] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.884811][ T4538] device hsr_slave_0 left promiscuous mode [ 318.926481][ T4538] device hsr_slave_1 left promiscuous mode [ 318.995730][ T4538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.997215][ T4538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.999197][ T4538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.000522][ T4538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.002122][ T4538] device bridge_slave_1 left promiscuous mode [ 319.003175][ T4538] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.036809][ T4538] device bridge_slave_0 left promiscuous mode [ 319.037929][ T4538] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.165860][ T4538] device veth1_macvtap left promiscuous mode [ 319.166917][ T4538] device veth0_macvtap left promiscuous mode [ 319.167982][ T4538] device veth1_vlan left promiscuous mode [ 319.168953][ T4538] device veth0_vlan left promiscuous mode [ 320.505841][T12004] NFSD: attempt to initialize umh client tracking in a container ignored. [ 320.507526][T12004] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 320.509005][T12004] NFSD: Unable to initialize client recovery tracking! (-22) [ 320.510457][T12004] NFSD: starting 90-second grace period (net f0000975) [ 320.705351][T12381] md: could not open device unknown-block(7,0). [ 320.780592][T12381] md: pers->run() failed ... [ 320.814506][ T4344] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 320.820395][ T4344] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 320.822665][ T4344] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 320.826319][ T4344] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 320.828106][ T4344] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 320.829457][ T4344] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 320.888530][T12389] md: could not open device unknown-block(7,0). [ 320.912472][T12389] md: pers->run() failed ... [ 321.175895][T12395] ubi: mtd0 is already attached to ubi0 [ 321.228832][T12394] ubi0 error: ubi_create_volume: volume 0 already exists [ 321.230144][T12394] ubi0 error: ubi_create_volume: cannot create volume 0, error -17 [ 321.242079][ T4538] team0 (unregistering): Port device team_slave_1 removed [ 321.282681][T12395] UBIFS error (ubi0:0 pid 12395): ubifs_mount: too small LEBs (3968 bytes), min. is 15360 bytes [ 321.438149][ T4538] team0 (unregistering): Port device team_slave_0 removed [ 321.447675][T12403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.449235][T12403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.601631][ T4538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.806429][ T4538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.267470][ T4538] bond0 (unregistering): Released all slaves [ 323.482615][ T4339] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 323.485086][ T4339] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 323.487451][ T4339] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 323.489533][ T4339] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 323.491366][ T4339] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 323.492770][ T4339] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 323.847831][T12384] chnl_net:caif_netlink_parms(): no params data found [ 323.885704][T12384] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.887068][T12384] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.888813][T12384] device bridge_slave_0 entered promiscuous mode [ 323.890925][T12384] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.895327][T12384] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.902963][T12384] device bridge_slave_1 entered promiscuous mode [ 323.906986][T12408] chnl_net:caif_netlink_parms(): no params data found [ 323.935173][T12408] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.937134][T12408] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.938877][T12408] device bridge_slave_0 entered promiscuous mode [ 323.944860][T12384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.947559][T12408] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.948843][T12408] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.950589][T12408] device bridge_slave_1 entered promiscuous mode [ 323.971045][T12384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.996360][T12408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.999064][T12408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.005564][T12447] md: could not open device unknown-block(7,0). [ 324.012793][T12408] team0: Port device team_slave_0 added [ 324.018867][T12384] team0: Port device team_slave_0 added [ 324.020714][T12384] team0: Port device team_slave_1 added [ 324.031880][T12408] team0: Port device team_slave_1 added [ 324.038407][T12408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.039658][T12408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.044025][T12408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.047411][T12384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.048643][T12384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.053225][T12384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.056411][T12384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.057664][T12384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.062258][T12384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.062937][T12447] md: pers->run() failed ... [ 324.065024][T12408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.067316][T12408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.071640][T12408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.119745][T12384] device hsr_slave_0 entered promiscuous mode [ 324.156740][T12384] device hsr_slave_1 entered promiscuous mode [ 324.195729][T12384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.197055][T12384] Cannot create hsr debugfs directory [ 324.241955][T12408] device hsr_slave_0 entered promiscuous mode [ 324.292982][T12408] device hsr_slave_1 entered promiscuous mode [ 324.326607][T12408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.327929][T12408] Cannot create hsr debugfs directory [ 325.535754][ T4339] Bluetooth: hci1: command 0x0409 tx timeout [ 326.579816][ T4414] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.669998][ T4414] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.777242][ T4414] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.908420][ T4414] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.193168][ T4414] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.286704][ T4414] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.347869][ T4414] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.351988][T12408] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 327.398078][T12408] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 327.448695][T12408] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 327.527974][ T4414] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.534446][T12408] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 327.589039][T12384] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 327.611366][ T4344] Bluetooth: hci1: command 0x041b tx timeout [ 327.638072][T12384] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 327.689850][T12384] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 327.726794][T12384] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 327.839056][ T4414] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.853507][T12408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.873162][T12384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.880290][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.881802][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.887152][T12408] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.890034][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 327.894164][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.896058][ T4538] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.897367][ T4538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.901828][T12384] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.956794][ T4414] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.959584][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 327.961360][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.962951][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.964535][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 327.968656][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.970352][ T4538] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.971587][ T4538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.973049][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 327.974801][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.980981][ T4538] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.982164][ T4538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.983657][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 327.986474][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 327.988261][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.989680][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.990849][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.993290][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.004460][T12384] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 328.009815][T12384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.013988][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.015734][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.017525][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 328.019579][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 328.021303][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 328.023020][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 328.024727][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 328.030850][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 328.032417][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 328.034034][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 328.035607][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 328.039739][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 328.068061][ T4414] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.072328][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.086973][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 328.089139][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 328.090892][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 328.092562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 328.094475][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 328.102320][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 328.103902][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 328.105557][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 328.110218][T12408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 328.113730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 328.177170][ T4414] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.206038][ T4344] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 328.210509][ T4344] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 328.212354][ T4344] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 328.226370][ T4344] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 328.227969][ T4344] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 328.229477][ T4344] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 328.288228][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 328.289640][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 328.293163][T12408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.308015][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 328.309475][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 328.324198][T12585] chnl_net:caif_netlink_parms(): no params data found [ 328.329198][T12384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.375791][T12585] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.377114][T12585] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.378658][T12585] device bridge_slave_0 entered promiscuous mode [ 328.402304][T12585] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.403501][T12585] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.405102][T12585] device bridge_slave_1 entered promiscuous mode [ 328.422021][T12585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.435226][T12585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.453490][T12585] team0: Port device team_slave_0 added [ 328.478531][T12585] team0: Port device team_slave_1 added [ 328.484270][T12585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.485428][T12585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.499268][T12585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.503576][T12585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.506164][T12585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.510714][T12585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.577370][T12585] device hsr_slave_0 entered promiscuous mode [ 328.606075][T12585] device hsr_slave_1 entered promiscuous mode [ 328.616597][T12585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.618009][T12585] Cannot create hsr debugfs directory [ 328.633270][T12408] device veth0_vlan entered promiscuous mode [ 328.647315][T12408] device veth1_vlan entered promiscuous mode [ 328.655135][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 328.664184][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 328.666736][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 328.668364][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 328.669961][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 328.671531][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 328.673278][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 328.690307][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 328.691908][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 328.696259][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 328.697857][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 328.699789][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 328.708657][T12408] device veth0_macvtap entered promiscuous mode [ 328.711885][T12384] device veth0_vlan entered promiscuous mode [ 328.713213][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 328.714836][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 328.717609][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 328.719200][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 328.721281][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 328.726983][T12384] device veth1_vlan entered promiscuous mode [ 328.731954][T12408] device veth1_macvtap entered promiscuous mode [ 328.750326][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 328.751987][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 328.753581][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 328.755167][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 328.757944][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 328.764501][T12384] device veth0_macvtap entered promiscuous mode [ 328.768775][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.770432][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.772000][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.773680][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.775229][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.778505][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.780269][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.782180][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.783898][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.786262][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.788104][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.789761][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.791372][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.793111][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.794683][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.796871][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.798520][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.800284][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.801895][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.803896][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.810921][T12408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.815479][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.818550][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.820337][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.822322][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.824173][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.826344][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.828051][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.829897][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.831649][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.833326][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.834965][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.837437][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.839242][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.841165][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.842998][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.844844][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.846815][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.848517][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.850063][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.851687][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.854487][T12408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.192845][T12643] md: could not open device unknown-block(7,0). [ 329.216124][T12643] md: pers->run() failed ... [ 329.475728][T12649] ubi: mtd0 is already attached to ubi0 [ 329.528653][T12648] ubi0 error: ubi_create_volume: volume 0 already exists [ 329.529913][T12648] ubi0 error: ubi_create_volume: cannot create volume 0, error -17 [ 329.583099][T12649] UBIFS error (ubi0:0 pid 12649): ubifs_mount: too small LEBs (3968 bytes), min. is 15360 bytes [ 329.685889][ T4339] Bluetooth: hci1: command 0x040f tx timeout [ 329.715626][T12653] md: could not open device unknown-block(7,0). [ 329.736837][T12653] md: pers->run() failed ... [ 329.829084][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 329.830820][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 329.832762][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 329.834475][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 329.844407][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 329.850061][T12384] device veth1_macvtap entered promiscuous mode [ 329.936129][T12665] md: could not open device unknown-block(7,0). [ 329.951832][T12665] md: pers->run() failed ... [ 330.173450][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.175286][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.178345][ T4344] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 330.186815][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.188687][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.190265][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.191906][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.193472][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.195219][ T4344] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 330.198207][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.199788][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.201591][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.203260][ T4344] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 330.204484][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.206291][ T4344] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 330.207074][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.207781][ T4344] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 330.209117][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.210732][ T4344] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 330.214248][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.221962][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.223617][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.225301][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.227975][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.229741][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.231641][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.233424][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.235142][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.239265][T12671] ubi: mtd0 is already attached to ubi0 [ 330.244273][T12384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.245856][ T4344] Bluetooth: hci5: command 0x0409 tx timeout [ 330.249933][T12408] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.251503][T12408] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.253039][T12408] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.254587][T12408] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.291350][T12674] ubi0 error: ubi_create_volume: volume 0 already exists [ 330.292829][T12674] ubi0 error: ubi_create_volume: cannot create volume 0, error -17 [ 330.345489][T12671] UBIFS error (ubi0:0 pid 12671): ubifs_mount: too small LEBs (3968 bytes), min. is 15360 bytes [ 330.490198][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 330.492094][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 330.539615][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.541342][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.542965][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.544744][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.547470][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.549185][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.550831][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.552554][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.554207][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.561508][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.563266][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.564984][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.568413][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.570278][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.572000][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.573788][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.575337][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.577901][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.585819][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.587628][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.589282][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.590979][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.602798][T12384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.632442][T12686] md: could not open device unknown-block(7,0). [ 330.652504][T12686] md: pers->run() failed ... [ 330.900340][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 330.902114][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 330.935603][T12695] ubi: mtd0 is already attached to ubi0 [ 330.937201][T12384] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.938776][T12384] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.940340][T12384] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.941934][T12384] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.005502][T12693] ubi0 error: ubi_create_volume: volume 0 already exists [ 331.007037][T12693] ubi0 error: ubi_create_volume: cannot create volume 0, error -17 [ 331.059443][T12695] UBIFS error (ubi0:0 pid 12695): ubifs_mount: too small LEBs (3968 bytes), min. is 15360 bytes [ 331.227228][T12703] md: could not open device unknown-block(7,0). [ 331.250184][T12703] md: pers->run() failed ... [ 331.322763][T12708] md: could not open device unknown-block(7,0). [ 331.344482][T12708] md: pers->run() failed ... [ 331.456884][T12672] chnl_net:caif_netlink_parms(): no params data found [ 331.460326][ T4538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.464202][ T4538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.473341][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 331.522836][T12714] md: could not open device unknown-block(7,0). [ 331.543227][T12714] md: pers->run() failed ... [ 331.654618][T12719] ubi: ubi0 already exists [ 331.661484][T12719] ubi0 error: ubi_create_volume: volume 0 already exists [ 331.662759][T12719] ubi0 error: ubi_create_volume: cannot create volume 0, error -17 [ 331.665380][T12719] UBIFS error (ubi0:0 pid 12719): ubifs_mount: too small LEBs (3968 bytes), min. is 15360 bytes [ 331.765800][ T4339] Bluetooth: hci1: command 0x0419 tx timeout [ 332.245874][ T4339] Bluetooth: hci7: command 0x0409 tx timeout [ 332.325726][ T4339] Bluetooth: hci5: command 0x041b tx timeout [ 334.325945][ T4339] Bluetooth: hci7: command 0x041b tx timeout [ 334.405880][ T4339] Bluetooth: hci5: command 0x040f tx timeout [ 336.405788][ T4339] Bluetooth: hci7: command 0x040f tx timeout [ 336.487000][ T4339] Bluetooth: hci5: command 0x0419 tx timeout [ 338.485739][ T4339] Bluetooth: hci7: command 0x0419 tx timeout [ 346.725967][ T4344] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 346.732898][ T4344] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 346.734780][ T4344] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 346.737571][ T4344] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 346.739090][ T4344] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 346.740359][ T4344] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 348.805848][ T4339] Bluetooth: hci8: command 0x0409 tx timeout [ 350.885769][ T4339] Bluetooth: hci8: command 0x041b tx timeout [ 352.965773][ T4339] Bluetooth: hci8: command 0x040f tx timeout [ 355.046474][ T4344] Bluetooth: hci8: command 0x0419 tx timeout [ 371.687073][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.688220][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.688777][ T52] nvme nvme1: queue 0: timeout request 0x0 type 4 [ 371.691805][T12128] nvme nvme1: Connect command failed, error wo/DNR bit: 881 [ 371.693434][T12128] nvme nvme1: failed to connect queue: 0 ret=881 [ 371.763160][T12196] nvme nvme1: failed to connect socket: -512 [ 371.777979][T12202] nvme nvme1: failed to connect socket: -512 [ 380.804562][ T4344] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 380.807872][ T4344] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 380.809440][ T4344] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 380.811043][ T4344] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 380.812934][ T4344] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 380.814343][ T4344] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 382.895715][ T4344] Bluetooth: hci2: command 0x0409 tx timeout [ 383.821809][ T4339] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 383.823685][ T4339] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 383.825274][ T4339] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 383.829558][ T4339] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 383.831103][ T4339] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 383.832850][ T4339] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 384.965734][ T4339] Bluetooth: hci2: command 0x041b tx timeout [ 385.845794][ T4339] Bluetooth: hci3: command 0x0409 tx timeout [ 387.047000][ T4339] Bluetooth: hci2: command 0x040f tx timeout [ 387.925676][ T4339] Bluetooth: hci3: command 0x041b tx timeout [ 388.840944][ T4344] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 388.843150][ T4344] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 388.844662][ T4344] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 388.846506][ T4344] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 388.848014][ T4344] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 388.849347][ T4344] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 389.125808][ T4339] Bluetooth: hci2: command 0x0419 tx timeout [ 390.005708][ T4339] Bluetooth: hci3: command 0x040f tx timeout [ 390.855430][ T4344] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 390.858022][ T4344] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 390.859656][ T4344] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 390.861212][ T4344] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 390.863041][ T4344] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 390.864320][ T4344] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 390.886256][ T4339] Bluetooth: hci6: command 0x0409 tx timeout [ 392.085846][ T4339] Bluetooth: hci3: command 0x0419 tx timeout [ 392.885758][ T4339] Bluetooth: hci9: command 0x0409 tx timeout [ 392.965796][ T4339] Bluetooth: hci6: command 0x041b tx timeout [ 394.975687][ T4344] Bluetooth: hci9: command 0x041b tx timeout [ 395.045848][ T4339] Bluetooth: hci6: command 0x040f tx timeout [ 397.045974][ T4339] Bluetooth: hci9: command 0x040f tx timeout [ 397.135704][ T4339] Bluetooth: hci6: command 0x0419 tx timeout [ 399.125783][ T4344] Bluetooth: hci9: command 0x0419 tx timeout [ 406.916101][ T4339] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 406.918272][ T4339] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 406.919967][ T4339] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 406.922036][ T4339] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 406.923575][ T4339] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 406.924961][ T4339] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 408.965879][ T4344] Bluetooth: hci10: command 0x0409 tx timeout [ 411.045864][ T4344] Bluetooth: hci10: command 0x041b tx timeout [ 413.125730][ T4339] Bluetooth: hci10: command 0x040f tx timeout [ 414.725932][ T4339] Bluetooth: hci4: command 0x0406 tx timeout [ 415.215739][ T4344] Bluetooth: hci10: command 0x0419 tx timeout [ 433.126768][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.127950][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.055944][ T4344] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 441.058249][ T4344] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 441.059912][ T4344] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 441.061864][ T4344] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 441.063352][ T4344] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 441.064754][ T4344] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 443.125843][ T4344] Bluetooth: hci11: command 0x0409 tx timeout [ 444.019879][ T4344] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 444.022452][ T4344] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 444.024527][ T4344] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 444.026451][ T4344] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 444.028020][ T4344] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 444.029436][ T4344] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 445.215731][ T4339] Bluetooth: hci11: command 0x041b tx timeout [ 446.095756][ T4339] Bluetooth: hci12: command 0x0409 tx timeout [ 447.285741][ T4339] Bluetooth: hci11: command 0x040f tx timeout [ 448.165760][ T4344] Bluetooth: hci12: command 0x041b tx timeout [ 449.032989][ T4339] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 449.035046][ T4339] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 449.042295][ T4339] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 449.043924][ T4339] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 449.045373][ T4339] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 449.047201][ T4339] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 449.365686][ T4344] Bluetooth: hci11: command 0x0419 tx timeout [ 450.245750][ T4344] Bluetooth: hci12: command 0x040f tx timeout [ 450.565761][ T4344] Bluetooth: hci1: command 0x0406 tx timeout [ 450.565855][ T4339] Bluetooth: hci5: command 0x0406 tx timeout [ 451.045198][ T4339] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 451.048188][ T4339] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 451.049800][ T4339] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 451.052007][ T4339] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 451.053439][ T4339] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 451.054742][ T4339] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 451.125784][ T4345] Bluetooth: hci13: command 0x0409 tx timeout [ 452.325782][ T4345] Bluetooth: hci12: command 0x0419 tx timeout [ 453.125918][ T4345] Bluetooth: hci14: command 0x0409 tx timeout [ 453.205723][ T4345] Bluetooth: hci13: command 0x041b tx timeout [ 455.205757][ T4344] Bluetooth: hci14: command 0x041b tx timeout [ 455.285835][ T4345] Bluetooth: hci13: command 0x040f tx timeout [ 455.685852][ T4344] Bluetooth: hci7: command 0x0406 tx timeout [ 457.285761][ T4344] Bluetooth: hci14: command 0x040f tx timeout [ 457.365764][ T4345] Bluetooth: hci13: command 0x0419 tx timeout [ 459.365975][ T4345] Bluetooth: hci14: command 0x0419 tx timeout [ 467.100298][ T4345] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 467.103176][ T4345] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 467.104752][ T4345] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 467.106568][ T4345] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 467.108025][ T4345] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 467.109809][ T4345] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 469.125747][ T4344] Bluetooth: hci15: command 0x0409 tx timeout [ 471.045744][ T4339] Bluetooth: hci8: command 0x0406 tx timeout [ 471.205669][ T4339] Bluetooth: hci15: command 0x041b tx timeout [ 473.285694][ T4339] Bluetooth: hci15: command 0x040f tx timeout [ 475.365747][ T4339] Bluetooth: hci15: command 0x0419 tx timeout [ 478.575733][ T28] INFO: task kworker/1:2:114 blocked for more than 143 seconds. [ 478.577292][ T28] Not tainted syzkaller #0 [ 478.578179][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 478.579662][ T28] task:kworker/1:2 state:D stack:0 pid:114 ppid:2 flags:0x00000008 [ 478.581343][ T28] Workqueue: ipv6_addrconf addrconf_dad_work [ 478.582444][ T28] Call trace: [ 478.583062][ T28] __switch_to+0x2f4/0x550 [ 478.583878][ T28] __schedule+0xdb4/0x1a6c [ 478.584691][ T28] schedule+0xc4/0x170 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 478.585442][ T28] schedule_preempt_disabled+0x18/0x2c [ 478.614384][ T28] __mutex_lock_common+0xb20/0x1f3c [ 478.615367][ T28] mutex_lock_nested+0x38/0x44 [ 478.620511][ T28] rtnl_lock+0x20/0x2c [ 478.621219][ T28] addrconf_dad_work+0xc0/0x10a0 [ 478.622088][ T28] process_one_work+0x7e4/0x13bc [ 478.622939][ T28] worker_thread+0x8cc/0xfe8 [ 478.623728][ T28] kthread+0x254/0x2e0 [ 478.624440][ T28] ret_from_fork+0x10/0x20 [ 478.625200][ T28] INFO: task udevd:3938 blocked for more than 143 seconds. [ 478.626863][ T28] Not tainted syzkaller #0 [ 478.627698][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 478.629106][ T28] task:udevd state:D stack:0 pid:3938 ppid:1 flags:0x00000004 [ 478.630680][ T28] Call trace: [ 478.631243][ T28] __switch_to+0x2f4/0x550 [ 478.632000][ T28] __schedule+0xdb4/0x1a6c [ 478.632788][ T28] schedule+0xc4/0x170 [ 478.633594][ T28] schedule_preempt_disabled+0x18/0x2c [ 478.634635][ T28] __mutex_lock_common+0xb20/0x1f3c [ 478.635549][ T28] mutex_lock_nested+0x38/0x44 [ 478.636965][ T28] uevent_show+0x168/0x328 [ 478.637768][ T28] dev_attr_show+0x60/0xcc [ 478.638510][ T28] sysfs_kf_seq_show+0x2c8/0x434 [ 478.639300][ T28] kernfs_seq_show+0x150/0x200 [ 478.640072][ T28] seq_read_iter+0x3b8/0xc24 [ 478.640813][ T28] kernfs_fop_read_iter+0x13c/0x5d8 [ 478.641626][ T28] vfs_read+0x3cc/0x7b8 [ 478.642293][ T28] ksys_read+0x12c/0x228 [ 478.643077][ T28] __arm64_sys_read+0x7c/0x90 [ 478.643831][ T28] invoke_syscall+0x98/0x290 [ 478.644606][ T28] el0_svc_common+0x13c/0x258 [ 478.645355][ T28] do_el0_svc+0x5c/0x134 [ 478.646210][ T28] el0_svc+0x58/0x128 [ 478.647009][ T28] el0t_64_sync_handler+0x84/0xf0 [ 478.647843][ T28] el0t_64_sync+0x18c/0x190 [ 478.648601][ T28] INFO: task dhcpcd:3992 blocked for more than 143 seconds. [ 478.649801][ T28] Not tainted syzkaller #0 [ 478.650666][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 478.652156][ T28] task:dhcpcd state:D stack:0 pid:3992 ppid:1 flags:0x00000804 [ 478.653679][ T28] Call trace: [ 478.654224][ T28] __switch_to+0x2f4/0x550 [ 478.654954][ T28] __schedule+0xdb4/0x1a6c [ 478.655770][ T28] schedule+0xc4/0x170 [ 478.656471][ T28] schedule_preempt_disabled+0x18/0x2c [ 478.657344][ T28] __mutex_lock_common+0xb20/0x1f3c [ 478.658183][ T28] mutex_lock_nested+0x38/0x44 [ 478.658930][ T28] genl_rcv_msg+0xec/0x600 [ 478.659639][ T28] netlink_rcv_skb+0x220/0x3ec [ 478.660431][ T28] genl_rcv+0x38/0x50 [ 478.661087][ T28] netlink_unicast+0x5fc/0x80c [ 478.661907][ T28] netlink_sendmsg+0x6f0/0x9d8 [ 478.662659][ T28] ____sys_sendmsg+0x588/0x90c [ 478.663428][ T28] __sys_sendmsg+0x288/0x374 [ 478.664168][ T28] __arm64_sys_sendmsg+0x80/0x94 [ 478.664963][ T28] invoke_syscall+0x98/0x290 [ 478.665822][ T28] el0_svc_common+0x200/0x258 [ 478.666623][ T28] do_el0_svc+0x5c/0x134 [ 478.667359][ T28] el0_svc+0x58/0x128 [ 478.668062][ T28] el0t_64_sync_handler+0x84/0xf0 [ 478.668942][ T28] el0t_64_sync+0x18c/0x190 [ 478.669739][ T28] INFO: task kworker/0:6:4379 blocked for more than 143 seconds. [ 478.671028][ T28] Not tainted syzkaller #0 [ 478.671919][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 478.673442][ T28] task:kworker/0:6 state:D stack:0 pid:4379 ppid:2 flags:0x00000008 [ 478.674957][ T28] Workqueue: ipv6_addrconf addrconf_dad_work [ 478.676035][ T28] Call trace: [ 478.676571][ T28] __switch_to+0x2f4/0x550 [ 478.677293][ T28] __schedule+0xdb4/0x1a6c [ 478.678008][ T28] schedule+0xc4/0x170 [ 478.678688][ T28] schedule_preempt_disabled+0x18/0x2c [ 478.679580][ T28] __mutex_lock_common+0xb20/0x1f3c [ 478.680416][ T28] mutex_lock_nested+0x38/0x44 [ 478.681234][ T28] rtnl_lock+0x20/0x2c [ 478.681904][ T28] addrconf_dad_work+0xc0/0x10a0 [ 478.682716][ T28] process_one_work+0x7e4/0x13bc [ 478.683550][ T28] worker_thread+0x8cc/0xfe8 [ 478.684307][ T28] kthread+0x254/0x2e0 [ 478.684969][ T28] ret_from_fork+0x10/0x20 [ 478.685806][ T28] INFO: task kworker/u4:5:4414 blocked for more than 143 seconds. [ 478.687242][ T28] Not tainted syzkaller #0 [ 478.688108][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 478.689580][ T28] task:kworker/u4:5 state:D stack:0 pid:4414 ppid:2 flags:0x00000008 [ 478.691334][ T28] Workqueue: netns cleanup_net [ 478.692171][ T28] Call trace: [ 478.692747][ T28] __switch_to+0x2f4/0x550 [ 478.693496][ T28] __schedule+0xdb4/0x1a6c [ 478.694214][ T28] schedule+0xc4/0x170 [ 478.694874][ T28] schedule_preempt_disabled+0x18/0x2c [ 478.695859][ T28] __mutex_lock_common+0xb20/0x1f3c [ 478.696723][ T28] mutex_lock_nested+0x38/0x44 [ 478.697461][ T28] rtnl_lock+0x20/0x2c [ 478.698105][ T28] ip_tunnel_delete_nets+0xc8/0x334 [ 478.698909][ T28] erspan_exit_batch_net+0x30/0x40 [ 478.699725][ T28] cleanup_net+0x650/0xa90 [ 478.700885][ T28] process_one_work+0x7e4/0x13bc [ 478.701736][ T28] worker_thread+0x8cc/0xfe8 [ 478.702542][ T28] kthread+0x254/0x2e0 [ 478.703192][ T28] ret_from_fork+0x10/0x20 [ 478.703938][ T28] INFO: task kworker/u4:7:4537 blocked for more than 143 seconds. [ 478.705238][ T28] Not tainted syzkaller #0 [ 478.706421][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 478.707869][ T28] task:kworker/u4:7 state:D stack:0 pid:4537 ppid:2 flags:0x00000008 [ 478.709471][ T28] Workqueue: events_unbound linkwatch_event [ 478.710458][ T28] Call trace: [ 478.711013][ T28] __switch_to+0x2f4/0x550 [ 478.711659][ T28] __schedule+0xdb4/0x1a6c [ 478.712438][ T28] schedule+0xc4/0x170 [ 478.713120][ T28] schedule_preempt_disabled+0x18/0x2c [ 478.714045][ T28] __mutex_lock_common+0xb20/0x1f3c [ 478.714912][ T28] mutex_lock_nested+0x38/0x44 [ 478.715863][ T28] rtnl_lock+0x20/0x2c [ 478.716625][ T28] linkwatch_event+0x14/0x68 [ 478.717422][ T28] process_one_work+0x7e4/0x13bc [ 478.718217][ T28] worker_thread+0x8cc/0xfe8 [ 478.718988][ T28] kthread+0x254/0x2e0 [ 478.719714][ T28] ret_from_fork+0x10/0x20 [ 478.720488][ T28] INFO: task syz-executor:12384 blocked for more than 143 seconds. [ 478.721802][ T28] Not tainted syzkaller #0 [ 478.722626][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 478.724073][ T28] task:syz-executor state:D stack:0 pid:12384 ppid:1 flags:0x00000009 [ 478.725611][ T28] Call trace: [ 478.726695][ T28] __switch_to+0x2f4/0x550 [ 478.727487][ T28] __schedule+0xdb4/0x1a6c [ 478.728283][ T28] schedule+0xc4/0x170 [ 478.729024][ T28] schedule_preempt_disabled+0x18/0x2c [ 478.730006][ T28] __mutex_lock_common+0xb20/0x1f3c [ 478.730957][ T28] mutex_lock_nested+0x38/0x44 [ 478.731848][ T28] kernel_param_lock+0x34/0x44 [ 478.732729][ T28] ieee80211_init_rate_ctrl_alg+0x174/0x5a0 [ 478.733811][ T28] ieee80211_register_hw+0x1f3c/0x2fb4 [ 478.734774][ T28] mac80211_hwsim_new_radio+0x1f2c/0x409c [ 478.735855][ T28] hwsim_new_radio_nl+0x894/0xbec [ 478.736787][ T28] genl_family_rcv_msg_doit+0x210/0x308 [ 478.737781][ T28] genl_rcv_msg+0x424/0x600 [ 478.738571][ T28] netlink_rcv_skb+0x220/0x3ec [ 478.739422][ T28] genl_rcv+0x38/0x50 [ 478.740121][ T28] netlink_unicast+0x5fc/0x80c [ 478.740951][ T28] netlink_sendmsg+0x6f0/0x9d8 [ 478.741797][ T28] __sys_sendto+0x324/0x440 [ 478.742572][ T28] __arm64_sys_sendto+0xe4/0x104 [ 478.743425][ T28] invoke_syscall+0x98/0x290 [ 478.744188][ T28] el0_svc_common+0x13c/0x258 [ 478.744999][ T28] do_el0_svc+0x5c/0x134 [ 478.745791][ T28] el0_svc+0x58/0x128 [ 478.746469][ T28] el0t_64_sync_handler+0x84/0xf0 [ 478.747295][ T28] el0t_64_sync+0x18c/0x190 [ 478.748053][ T28] INFO: task syz-executor:12408 blocked for more than 143 seconds. [ 478.749301][ T28] Not tainted syzkaller #0 [ 478.750073][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 478.751436][ T28] task:syz-executor state:D stack:0 pid:12408 ppid:1 flags:0x00000001 [ 478.752949][ T28] Call trace: [ 478.753487][ T28] __switch_to+0x2f4/0x550 [ 478.754195][ T28] __schedule+0xdb4/0x1a6c [ 478.754914][ T28] schedule+0xc4/0x170 [ 478.755596][ T28] schedule_preempt_disabled+0x18/0x2c [ 478.756619][ T28] __mutex_lock_common+0xb20/0x1f3c [ 478.757499][ T28] mutex_lock_nested+0x38/0x44 [ 478.758290][ T28] rtnl_lock+0x20/0x2c [ 478.758951][ T28] nl80211_pre_doit+0x6c/0x748 [ 478.759732][ T28] genl_family_rcv_msg_doit+0x1c8/0x308 [ 478.760598][ T28] genl_rcv_msg+0x424/0x600 [ 478.761345][ T28] netlink_rcv_skb+0x220/0x3ec [ 478.762112][ T28] genl_rcv+0x38/0x50 [ 478.762774][ T28] netlink_unicast+0x5fc/0x80c [ 478.763559][ T28] netlink_sendmsg+0x6f0/0x9d8 [ 478.764348][ T28] __sys_sendto+0x324/0x440 [ 478.765128][ T28] __arm64_sys_sendto+0xe4/0x104 [ 478.766023][ T28] invoke_syscall+0x98/0x290 [ 478.766813][ T28] el0_svc_common+0x13c/0x258 [ 478.767624][ T28] do_el0_svc+0x5c/0x134 [ 478.768350][ T28] el0_svc+0x58/0x128 [ 478.769051][ T28] el0t_64_sync_handler+0x84/0xf0 [ 478.769899][ T28] el0t_64_sync+0x18c/0x190 [ 478.770674][ T28] INFO: task syz-executor:12585 blocked for more than 143 seconds. [ 478.771995][ T28] Not tainted syzkaller #0 [ 478.772800][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 478.774209][ T28] task:syz-executor state:D stack:0 pid:12585 ppid:1 flags:0x00000001 [ 478.775825][ T28] Call trace: [ 478.776402][ T28] __switch_to+0x2f4/0x550 [ 478.777148][ T28] __schedule+0xdb4/0x1a6c [ 478.777885][ T28] schedule+0xc4/0x170 [ 478.778575][ T28] schedule_preempt_disabled+0x18/0x2c [ 478.779480][ T28] __mutex_lock_common+0xb20/0x1f3c [ 478.780346][ T28] mutex_lock_nested+0x38/0x44 [ 478.781185][ T28] rtnl_lock+0x20/0x2c [ 478.781910][ T28] register_nexthop_notifier+0x90/0x1e0 [ 478.782897][ T28] nsim_fib_create+0x794/0x938 [ 478.783743][ T28] nsim_drv_probe+0x604/0x980 [ 478.784541][ T28] nsim_bus_probe+0x20/0x30 [ 478.785272][ T28] really_probe+0x3a0/0xac4 [ 478.786134][ T28] __driver_probe_device+0x1c8/0x368 [ 478.787026][ T28] driver_probe_device+0x78/0x324 [ 478.787886][ T28] __device_attach_driver+0x28c/0x4c0 [ 478.788959][ T28] bus_for_each_drv+0x154/0x1e4 [ 478.789895][ T28] __device_attach+0x2a4/0x3d8 [ 478.790714][ T28] device_initial_probe+0x24/0x34 [ 478.791559][ T28] bus_probe_device+0xbc/0x1c4 [ 478.792372][ T28] device_add+0x93c/0xe4c [ 478.793272][ T28] device_register+0x28/0x38 [ 478.794102][ T28] new_device_store+0x2dc/0x52c [ 478.794946][ T28] bus_attr_store+0x80/0xa4 [ 478.795801][ T28] sysfs_kf_write+0x1f8/0x274 [ 478.796641][ T28] kernfs_fop_write_iter+0x390/0x4b4 [ 478.797544][ T28] vfs_write+0x3c8/0x7c8 [ 478.798269][ T28] ksys_write+0x12c/0x228 [ 478.799015][ T28] __arm64_sys_write+0x7c/0x90 [ 478.799801][ T28] invoke_syscall+0x98/0x290 [ 478.800566][ T28] el0_svc_common+0x13c/0x258 [ 478.801350][ T28] do_el0_svc+0x5c/0x134 [ 478.802095][ T28] el0_svc+0x58/0x128 [ 478.803165][ T28] el0t_64_sync_handler+0x84/0xf0 [ 478.804058][ T28] el0t_64_sync+0x18c/0x190 [ 478.804880][ T28] INFO: task syz-executor:12672 blocked for more than 143 seconds. [ 478.806507][ T28] Not tainted syzkaller #0 [ 478.807419][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 478.808989][ T28] task:syz-executor state:D stack:0 pid:12672 ppid:1 flags:0x00000001 [ 478.810642][ T28] Call trace: [ 478.811251][ T28] __switch_to+0x2f4/0x550 [ 478.812015][ T28] __schedule+0xdb4/0x1a6c [ 478.812751][ T28] schedule+0xc4/0x170 [ 478.813462][ T28] schedule_preempt_disabled+0x18/0x2c [ 478.814428][ T28] __mutex_lock_common+0xb20/0x1f3c [ 478.815306][ T28] mutex_lock_nested+0x38/0x44 [ 478.816239][ T28] rtnetlink_rcv_msg+0x64c/0xcc4 [ 478.817069][ T28] netlink_rcv_skb+0x220/0x3ec [ 478.817893][ T28] rtnetlink_rcv+0x28/0x38 [ 478.818664][ T28] netlink_unicast+0x5fc/0x80c [ 478.819496][ T28] netlink_sendmsg+0x6f0/0x9d8 [ 478.820247][ T28] __sys_sendto+0x324/0x440 [ 478.820951][ T28] __arm64_sys_sendto+0xe4/0x104 [ 478.821803][ T28] invoke_syscall+0x98/0x290 [ 478.822535][ T28] el0_svc_common+0x13c/0x258 [ 478.823294][ T28] do_el0_svc+0x5c/0x134 [ 478.824025][ T28] el0_svc+0x58/0x128 [ 478.824653][ T28] el0t_64_sync_handler+0x84/0xf0 [ 478.825457][ T28] el0t_64_sync+0x18c/0x190 [ 478.826393][ T28] [ 478.826393][ T28] Showing all locks held in the system: [ 478.827772][ T28] 1 lock held by rcu_tasks_kthre/12: [ 478.828716][ T28] #0: ffff800015577db0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 [ 478.830524][ T28] 1 lock held by rcu_tasks_trace/13: [ 478.831434][ T28] #0: ffff8000155785d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 [ 478.833305][ T28] 1 lock held by khungtaskd/28: [ 478.834089][ T28] #0: ffff800015577440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 478.835710][ T28] 3 locks held by kworker/1:2/114: [ 478.836543][ T28] #0: ffff0000d457dd38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc [ 478.838373][ T28] #1: ffff800020787c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc [ 478.840540][ T28] #2: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 478.842079][ T28] 4 locks held by udevd/3938: [ 478.842877][ T28] #0: ffff0000f15cf790 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb4/0xc24 [ 478.844473][ T28] #1: ffff0000f4db7488 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x58/0x3b8 [ 478.846247][ T28] #2: ffff0000d075a1d8 (kn->active#4){++++}-{0:0}, at: kernfs_seq_start+0xa4/0x3b8 [ 478.847941][ T28] #3: ffff00017d6780e8 (&dev->mutex){....}-{3:3}, at: uevent_show+0x168/0x328 [ 478.849447][ T28] 2 locks held by dhcpcd/3992: [ 478.850242][ T28] #0: ffff800017a82770 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 478.851649][ T28] #1: ffff800017a82588 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0xec/0x600 [ 478.853242][ T28] 2 locks held by getty/4083: [ 478.854072][ T28] #0: ffff0000d71af098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 478.855844][ T28] #1: ffff80001fa232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2e8/0xfa8 [ 478.857592][ T28] 3 locks held by kworker/0:5/4377: [ 478.858496][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc [ 478.860348][ T28] #1: ffff800020e17c40 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc [ 478.862157][ T28] #2: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 478.863611][ T28] 3 locks held by kworker/0:6/4379: [ 478.864447][ T28] #0: ffff0000d457dd38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc [ 478.866375][ T28] #1: ffff800020ec7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc [ 478.868521][ T28] #2: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 478.869982][ T28] 4 locks held by kworker/u4:5/4414: [ 478.870911][ T28] #0: ffff0000c0845138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc [ 478.872702][ T28] #1: ffff800021007c40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc [ 478.874386][ T28] #2: ffff800017a19610 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x144/0xa90 [ 478.876133][ T28] #3: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 478.877669][ T28] 3 locks held by kworker/u4:6/4416: [ 478.878591][ T28] #0: ffff0000c002a138 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc [ 478.880661][ T28] #1: ffff800021027c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc [ 478.882579][ T28] #2: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 478.884036][ T28] 3 locks held by kworker/u4:7/4537: [ 478.884909][ T28] #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc [ 478.886903][ T28] #1: ffff8000213a7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc [ 478.888740][ T28] #2: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 478.890176][ T28] 1 lock held by syz.4.860/12128: [ 478.891038][ T28] #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 478.892549][ T28] 1 lock held by syz.2.874/12196: [ 478.893431][ T28] #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 478.894992][ T28] 1 lock held by syz.5.875/12202: [ 478.895881][ T28] #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 478.897262][ T28] 4 locks held by syz-executor/12384: [ 478.898156][ T28] #0: ffff800017a82770 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 478.899628][ T28] #1: ffff800017a82588 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0xec/0x600 [ 478.901153][ T28] #2: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 478.902632][ T28] #3: ffff80001542bc48 (param_lock){+.+.}-{3:3}, at: kernel_param_lock+0x34/0x44 [ 478.904275][ T28] 2 locks held by syz-executor/12408: [ 478.905579][ T28] #0: ffff800017a82770 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 478.907093][ T28] #1: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 478.908471][ T28] 7 locks held by syz-executor/12585: [ 478.909337][ T28] #0: ffff0000d8a5c460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 [ 478.910916][ T28] #1: ffff0001840fa888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1b8/0x4b4 [ 478.912645][ T28] #2: ffff0000cd540e88 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f8/0x4b4 [ 478.914415][ T28] #3: ffff800016dd0e28 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x138/0x52c [ 478.916649][ T28] #4: ffff00017d6780e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x88/0x3d8 [ 478.918209][ T28] #5: ffff00017d6792f8 (&devlink->lock_key#35){+.+.}-{3:3}, at: devl_lock+0x24/0x34 [ 478.919880][ T28] #6: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 478.921432][ T28] 1 lock held by syz-executor/12672: [ 478.922440][ T28] #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 [ 478.924288][ T28] 5 locks held by syz.9.915/12718: [ 478.925226][ T28] #0: ffff0000e6744368 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c [ 478.927127][ T28] #1: ffff0000dde8c460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 [ 478.928915][ T28] #2: ffff0000ceae3488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1b8/0x4b4 [ 478.930742][ T28] #3: ffff0000c36d5578 (kn->active#5){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f8/0x4b4 [ 478.932559][ T28] #4: ffff80001542bc48 (param_lock){+.+.}-{3:3}, at: param_attr_store+0xd4/0x2ac [ 478.934224][ T28] 1 lock held by syz-executor/12724: [ 478.935148][ T28] #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 [ 478.937141][ T28] 1 lock held by syz-executor/12731: [ 478.938081][ T28] #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 [ 478.939709][ T28] 1 lock held by syz-executor/12736: [ 478.940583][ T28] #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 [ 478.942192][ T28] 1 lock held by syz-executor/12741: [ 478.943143][ T28] #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 [ 478.944860][ T28] 1 lock held by syz-executor/12744: [ 478.945893][ T28] #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 [ 478.947692][ T28] 1 lock held by syz-executor/12747: [ 478.948674][ T28] #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 [ 478.950315][ T28] 1 lock held by syz-executor/12752: [ 478.951165][ T28] #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 [ 478.952742][ T28] 1 lock held by syz-executor/12757: [ 478.953614][ T28] #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 [ 478.955185][ T28] 1 lock held by syz-executor/12762: [ 478.956154][ T28] #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 [ 478.957789][ T28] 1 lock held by syz-executor/12765: [ 478.958716][ T28] #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 [ 478.960321][ T28] 1 lock held by syz-executor/12768: [ 478.961212][ T28] #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 [ 478.962952][ T28] [ 478.963387][ T28] ============================================= [ 478.963387][ T28] [ 478.964908][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 478.966203][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 478.967654][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 478.969659][ T28] Call trace: [ 478.970316][ T28] dump_backtrace+0x1c4/0x1f0 [ 478.971253][ T28] show_stack+0x2c/0x3c [ 478.972086][ T28] __dump_stack+0x30/0x40 [ 478.972905][ T28] dump_stack_lvl+0xf4/0x15c [ 478.973767][ T28] dump_stack+0x1c/0x5c [ 478.974545][ T28] panic+0x2f8/0x7ac [ 478.975250][ T28] hung_task_panic+0x0/0x2c [ 478.976085][ T28] kthread+0x254/0x2e0 [ 478.976842][ T28] ret_from_fork+0x10/0x20 [ 478.977673][ T28] SMP: stopping secondary CPUs [ 478.978556][ T28] Kernel Offset: disabled [ 478.979366][ T28] CPU features: 0x0a0000,000f0097,a65bfea7 [ 478.980440][ T28] Memory Limit: none [ 479.302600][ T28] Rebooting in 86400 seconds..