last executing test programs: 7.173571924s ago: executing program 0 (id=650): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000740)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000008c0)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r3, 0x5452, &(0x7f0000000900)=0xffffffffffffffff) sendto$inet6(r3, &(0x7f0000000940)="8b", 0x34000, 0x0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) socket$kcm(0x10, 0x2, 0x0) 5.647179262s ago: executing program 0 (id=656): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./cifs\x00', 0x1ff) mount(&(0x7f0000000480)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f00000004c0)='./cifs\x00', &(0x7f0000000500)='cifs\x00', 0x0, &(0x7f0000000540)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,,ass=root,vers=2.1,nodfs\x00') 5.612643252s ago: executing program 2 (id=657): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000740)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000008c0)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r3, 0x5452, &(0x7f0000000900)=0xffffffffffffffff) sendto$inet6(r3, &(0x7f0000000940)="8b", 0x34000, 0x0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400), 0x50) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000840)={0x3, &(0x7f0000000880)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r6, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000480)=""/240, 0xf0}, {&(0x7f0000000580)=""/96, 0x60}, {&(0x7f0000000680)=""/77, 0x4d}, {&(0x7f0000000e80)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) 4.140756168s ago: executing program 0 (id=660): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000740)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000008c0)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r3, 0x5452, &(0x7f0000000900)=0xffffffffffffffff) sendto$inet6(r3, &(0x7f0000000940)="8b", 0x34000, 0x0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400), 0x50) socket$packet(0x11, 0x2, 0x300) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r5, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000480)=""/240, 0xf0}, {&(0x7f0000000580)=""/96, 0x60}, {&(0x7f0000000680)=""/77, 0x4d}, {&(0x7f0000000e80)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) 3.64364602s ago: executing program 2 (id=663): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="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", 0x343}, {&(0x7f0000000100)="05437c98b91bfe4d908657b5fc913814bde2bbeac2104eaea966c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d72906dd409d39ff6dd3d985d4e075543805ff919f42e8f4f5e46485f1bff1b7993a762c419d8e1c70235d3c9a", 0x69}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x20004080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 3.643197791s ago: executing program 3 (id=664): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x400000e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000880)={0x0, 0xfffffffe, 0x800, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3.598464902s ago: executing program 2 (id=666): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000740)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000008c0)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r3, 0x5452, &(0x7f0000000900)=0xffffffffffffffff) sendto$inet6(r3, &(0x7f0000000940)="8b", 0x34000, 0x0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) socket$kcm(0x10, 0x2, 0x0) 3.013407826s ago: executing program 0 (id=668): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x68, 0x14, 0xf0b, 0x80000, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0xfffe}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x2, 0x1, 0x8, 0x2800, 0x2, 0xc, 0x1ff}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048814}, 0x20000040) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x10000, &(0x7f0000000180)={[{@nobh}, {@auto_da_alloc}, {@bsdgroups}]}, 0x3, 0x4d1, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000880), 0x318, 0x0) recvmmsg(r1, &(0x7f00000008c0), 0x10106, 0x2, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/diskstats\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000980)=[{&(0x7f00000009c0)=""/221, 0xdd}], 0x1, 0x804, 0x0) 2.571148357s ago: executing program 3 (id=670): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./cifs\x00', 0x1ff) mount(&(0x7f0000000480)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f00000004c0)='./cifs\x00', &(0x7f0000000500)='cifs\x00', 0x0, &(0x7f0000000540)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,,ass=root,vers=2.1,nodfs\x00') 2.560820037s ago: executing program 1 (id=671): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='1', 0x1) 2.560342977s ago: executing program 2 (id=672): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x14b442, 0x82) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, 0x0) close(0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/swaps\x00', 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) sched_setaffinity(0x0, 0x42, &(0x7f0000000400)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000440)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000540), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) pread64(r2, &(0x7f00000026c0)=""/4096, 0x1000, 0x60e7) read$FUSE(r2, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000005700)={0x0, 0x50}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000005d00)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000005d40)={r6, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000005e00)=0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000018000105000000000000000002200000fe04000100000000080001000a000001080004000100000006001500050000002400168020000100010000000002040000000000fc000000000000000000000000000001"], 0x58}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000019000100000000000000000002200000fe04000100000000080001000a000001080004000100000006001500050000002400168020000100010000000002040000000000fc00"/86], 0x58}}, 0x0) 2.515820058s ago: executing program 3 (id=673): syz_usb_connect$uac2(0x3, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x80) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) mount(0x0, 0x0, 0x0, 0x2208004, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 2.514087668s ago: executing program 4 (id=674): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xefd, &(0x7f00000003c0)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, 0x0, &(0x7f0000000480), &(0x7f00000004c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./nfsd\x00', &(0x7f0000000600)='nfsd\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd/filehandle\x00', 0x2, 0x0) write(r4, &(0x7f0000000680)='mydomain / 64\n', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x80) write(r5, &(0x7f00000007c0)='mydomain / 64\n', 0xe) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000840)={'syzkaller0\x00', 0x10}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x8c2) 1.954076122s ago: executing program 1 (id=675): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='1', 0x1) 1.699793698s ago: executing program 1 (id=676): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="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", 0x343}, {&(0x7f0000000100)="05437c98b91bfe4d908657b5fc913814bde2bbeac2104eaea966c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d72906dd409d39ff6dd3d985d4e075543805ff919f42e8f4f5e46485f1bff1b7993a762c419d8e1c70235d3c9a", 0x69}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x20004080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 1.662721009s ago: executing program 1 (id=677): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000180)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000280)='proc\x00', 0x804040, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0xfffffee2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file5\x00', 0x86c0, 0x101) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x105, 0x5000003a, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000380)='./file7/file0\x00', 0x0) symlinkat(&(0x7f00000003c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file7/file0\x00', 0x0) timer_create(0x1, 0x0, &(0x7f00000004c0)=0x0) timer_settime(r3, 0x1, &(0x7f00000005c0)={{0x77359400}, {0x77359400}}, 0x0) 1.62979093s ago: executing program 3 (id=678): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000180)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000280)='proc\x00', 0x804040, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0xfffffee2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file5\x00', 0x86c0, 0x101) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x105, 0x5000003a, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000380)='./file7/file0\x00', 0x0) symlinkat(&(0x7f00000003c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file7/file0\x00', 0x0) timer_create(0x1, 0x0, &(0x7f00000004c0)=0x0) timer_settime(r3, 0x1, &(0x7f00000005c0)={{0x77359400}, {0x77359400}}, 0x0) 1.535958662s ago: executing program 3 (id=679): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000740)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000008c0)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) shutdown(r3, 0x1) 1.532801592s ago: executing program 1 (id=680): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='1', 0x1) 1.531761982s ago: executing program 4 (id=681): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x400000e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000880)={0x0, 0xfffffffe, 0x800, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.432889505s ago: executing program 0 (id=682): mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./nfsd\x00', &(0x7f0000000600)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, &(0x7f0000000680), 0x0) 1.425498495s ago: executing program 2 (id=683): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000740)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000008c0)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r3, 0x5452, &(0x7f0000000900)=0xffffffffffffffff) sendto$inet6(r3, &(0x7f0000000940)="8b", 0x34000, 0x0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) socket$kcm(0x10, 0x2, 0x0) 1.393075835s ago: executing program 4 (id=684): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./cifs\x00', 0x1ff) mount(&(0x7f0000000480)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f00000004c0)='./cifs\x00', &(0x7f0000000500)='cifs\x00', 0x0, &(0x7f0000000540)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,,ass=root,vers=2.1,nodfs\x00') 1.381545076s ago: executing program 0 (id=685): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xefd, &(0x7f00000003c0)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, 0x0, &(0x7f0000000480), &(0x7f00000004c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./nfsd\x00', &(0x7f0000000600)='nfsd\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd/filehandle\x00', 0x2, 0x0) write(r4, &(0x7f0000000680)='mydomain / 64\n', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x80) write(r5, &(0x7f00000007c0)='mydomain / 64\n', 0xe) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000840)={'syzkaller0\x00', 0x10}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x8c2) 1.078052483s ago: executing program 4 (id=686): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='1', 0x1) 498.526397ms ago: executing program 3 (id=687): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='1', 0x1) 497.378177ms ago: executing program 1 (id=697): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000740)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000940)="8b", 0x34000, 0x0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) 431.948499ms ago: executing program 4 (id=688): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="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", 0x343}, {&(0x7f0000000100)="05437c98b91bfe4d908657b5fc913814bde2bbeac2104eaea966c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d72906dd409d39ff6dd3d985d4e075543805ff919f42e8f4f5e46485f1bff1b7993a762c419d8e1c70235d3c9a", 0x69}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x20004080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 382.80688ms ago: executing program 4 (id=689): syz_usb_connect$uac2(0x3, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x80) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) mount(0x0, 0x0, 0x0, 0x2208004, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 0s ago: executing program 2 (id=690): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000180)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000280)='proc\x00', 0x804040, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0xfffffee2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file5\x00', 0x86c0, 0x101) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x105, 0x5000003a, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000380)='./file7/file0\x00', 0x0) symlinkat(&(0x7f00000003c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file7/file0\x00', 0x0) timer_create(0x1, 0x0, &(0x7f00000004c0)=0x0) timer_settime(r3, 0x1, &(0x7f00000005c0)={{0x77359400}, {0x77359400}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.146' (ED25519) to the list of known hosts. syzkaller login: [ 28.884215][ T4316] cgroup: Unknown subsys name 'net' [ 29.100496][ T4316] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.385634][ T4316] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.158960][ T4340] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.161380][ T4340] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.163212][ T4340] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.164865][ T4340] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.166470][ T4340] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.168932][ T4341] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.170557][ T4341] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.172010][ T4341] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.173449][ T4341] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.175245][ T4341] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.176754][ T4341] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.178709][ T4341] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.180543][ T4344] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.180710][ T4341] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.183211][ T4344] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.183578][ T4341] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.185208][ T4344] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.186046][ T4341] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.188181][ T4344] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.189650][ T4341] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.190838][ T4344] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.193012][ T4341] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.193449][ T4344] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.194409][ T4341] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.196245][ T4344] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.197103][ T4341] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.217882][ T4341] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.222089][ T4339] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.224175][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.228827][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.236988][ T4329] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.239489][ T4329] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.241199][ T4329] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.249143][ T4330] rdma_rxe: rxe_register_device failed with error -23 [ 30.250745][ T4330] rdma_rxe: failed to add rxe_eth0 [ 30.253256][ T4331] rdma_rxe: rxe_register_device failed with error -23 [ 30.254556][ T4331] rdma_rxe: failed to add rxe_eth0 [ 30.262441][ T4328] rdma_rxe: rxe_register_device failed with error -23 [ 30.263866][ T4328] rdma_rxe: failed to add rxe_eth0 [ 30.318072][ T4329] infiniband rxe0: set active [ 30.319454][ T4329] infiniband rxe0: added rxe_eth0 [ 30.328385][ T4329] RDS/IB: rxe0: added [ 30.329520][ T4329] smc: adding ib device rxe0 with port count 1 [ 30.330877][ T4329] smc: ib device rxe0 port 1 has pnetid [ 30.336276][ T112] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.339576][ T3901] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.347923][ T4329] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.395450][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 30.414206][ T4342] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.434470][ T4329] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.453343][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.455000][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.456784][ T4331] device bridge_slave_0 entered promiscuous mode [ 30.460779][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.462405][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.464389][ T4331] device bridge_slave_1 entered promiscuous mode [ 30.467064][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 30.481670][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 30.498186][ T4329] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.524049][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.542545][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.570924][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.573711][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.575620][ T4330] device bridge_slave_0 entered promiscuous mode [ 30.577417][ T4329] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.581659][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.582957][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.584896][ T4328] device bridge_slave_0 entered promiscuous mode [ 30.599263][ T4331] team0: Port device team_slave_0 added [ 30.601664][ T4331] team0: Port device team_slave_1 added [ 30.607045][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.609343][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.614472][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.617298][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.619257][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.621179][ T4328] device bridge_slave_1 entered promiscuous mode [ 30.622914][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.625317][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.627034][ T4330] device bridge_slave_1 entered promiscuous mode [ 30.631264][ T4342] chnl_net:caif_netlink_parms(): no params data found [ 30.650426][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.651857][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.657078][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.667198][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.682052][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.687835][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.695857][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.699875][ T4342] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.701354][ T4342] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.703092][ T4342] device bridge_slave_0 entered promiscuous mode [ 30.707892][ T3994] infiniband rxe0: set active [ 30.709598][ T14] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.748941][ T4331] device hsr_slave_0 entered promiscuous mode [ 30.767837][ T4331] device hsr_slave_1 entered promiscuous mode [ 30.813741][ T4342] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.815294][ T4342] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.817171][ T4342] device bridge_slave_1 entered promiscuous mode [ 30.820154][ T4328] team0: Port device team_slave_0 added [ 30.823082][ T4328] team0: Port device team_slave_1 added [ 30.828846][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.830431][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.836278][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.849821][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.851336][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.856493][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.860250][ T4330] team0: Port device team_slave_0 added [ 30.866129][ T4342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.868798][ T4342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.875281][ T4342] team0: Port device team_slave_0 added [ 30.877135][ T4342] team0: Port device team_slave_1 added [ 30.882382][ T4330] team0: Port device team_slave_1 added [ 30.929807][ T4328] device hsr_slave_0 entered promiscuous mode [ 30.977992][ T4328] device hsr_slave_1 entered promiscuous mode [ 31.017725][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.019355][ T4328] Cannot create hsr debugfs directory [ 31.021959][ T4342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.023274][ T4342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.030345][ T4342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.035337][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.036655][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.042608][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.046480][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 31.054937][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.056352][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.062413][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.066593][ T4342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.068523][ T4342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.073293][ T4342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.158934][ T4342] device hsr_slave_0 entered promiscuous mode [ 31.197830][ T4342] device hsr_slave_1 entered promiscuous mode [ 31.247742][ T4342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.249432][ T4342] Cannot create hsr debugfs directory [ 31.301043][ T4330] device hsr_slave_0 entered promiscuous mode [ 31.347816][ T4330] device hsr_slave_1 entered promiscuous mode [ 31.387672][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.389307][ T4330] Cannot create hsr debugfs directory [ 31.398130][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.399547][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.401343][ T4329] device bridge_slave_0 entered promiscuous mode [ 31.403885][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.405291][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.407097][ T4329] device bridge_slave_1 entered promiscuous mode [ 31.433003][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.439552][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.469217][ T4329] team0: Port device team_slave_0 added [ 31.471173][ T4329] team0: Port device team_slave_1 added [ 31.495293][ T4331] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.531491][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.532894][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.541685][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.546380][ T4331] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.588767][ T4331] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.633908][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.637216][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.643031][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.646897][ T4331] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.690033][ T4328] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.728823][ T4328] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.774333][ T4328] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.829103][ T4328] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.918818][ T4329] device hsr_slave_0 entered promiscuous mode [ 31.958855][ T4329] device hsr_slave_1 entered promiscuous mode [ 32.007937][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.009610][ T4329] Cannot create hsr debugfs directory [ 32.041875][ T4342] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.088496][ T4342] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.129471][ T4342] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.174871][ T4342] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.244283][ T4330] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.258278][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 32.259612][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 32.260866][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 32.262098][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 32.269271][ T4330] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.299584][ T4330] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.327731][ T4340] Bluetooth: hci4: command 0x0409 tx timeout [ 32.339443][ T4330] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.403975][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.412481][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.419065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.421397][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.423574][ T4329] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.450002][ T4329] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.495147][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.497115][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.499644][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.501085][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.502948][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.510350][ T4329] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.541818][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.543841][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.545594][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.547443][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.549295][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.553646][ T4329] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.593254][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.597507][ T4342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.605688][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.607398][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.611307][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.615397][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.620393][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.621990][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.623962][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.625755][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.627623][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.633070][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.634751][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.641520][ T4331] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.643645][ T4331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.647107][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.649759][ T4342] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.652948][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.654948][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.656967][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.659370][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.661284][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.664765][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.666580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.672173][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.674373][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.676582][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.681880][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.683239][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.685742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.688037][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.689918][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.691325][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.693116][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.694831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.699232][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.700951][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.702854][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.704342][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.706096][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.718487][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.720313][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.722109][ T1604] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.723577][ T1604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.725337][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.727332][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.731892][ T1604] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.733282][ T1604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.734836][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.736945][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.750369][ T4328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.752284][ T4328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.757391][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.759998][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.761888][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.763971][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.765785][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.768798][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.770687][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.772501][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.774358][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.776094][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.778065][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.779966][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.781831][ T1604] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.783371][ T1604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.791777][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.793553][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.795116][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.797148][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.799475][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.801570][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.803589][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.822995][ T4330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.825115][ T4330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.834268][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.836834][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.839890][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.841496][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.842963][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.844964][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.846971][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.851380][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.853309][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.855289][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.857161][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.859927][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.861790][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.863725][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.872400][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.874502][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.876408][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.885412][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.887442][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.892846][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.901142][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.908881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.910944][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.931014][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.933210][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.934915][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.936554][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.941243][ T4331] device veth0_vlan entered promiscuous mode [ 32.946325][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.948079][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.953179][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.957506][ T4331] device veth1_vlan entered promiscuous mode [ 32.961424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.963314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.964988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.967520][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.973415][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.975531][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.977325][ T4424] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.979014][ T4424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.981651][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.992718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.994556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.996291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.998660][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.000187][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.009836][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.013682][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.015267][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.024509][ T4342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.031972][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.033634][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.035175][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.037324][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.043990][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.053086][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.055117][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.062774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.067748][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.069944][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.072217][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.074641][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.076509][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.087131][ T4331] device veth0_macvtap entered promiscuous mode [ 33.092549][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.094244][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.096094][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.103506][ T4331] device veth1_macvtap entered promiscuous mode [ 33.105440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.107144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.111060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.113224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.115626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.117502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.121672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.124255][ T4328] device veth0_vlan entered promiscuous mode [ 33.131495][ T4329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.133713][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.140142][ T4330] device veth0_vlan entered promiscuous mode [ 33.145361][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.147406][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.149932][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.151798][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.153519][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.155246][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.160368][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.162481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.164384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.171565][ T4330] device veth1_vlan entered promiscuous mode [ 33.176454][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.178529][ T4328] device veth1_vlan entered promiscuous mode [ 33.182393][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.184243][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.186046][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.191602][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.197164][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.200343][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.207328][ T4330] device veth0_macvtap entered promiscuous mode [ 33.211669][ T4331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.213278][ T4331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.214952][ T4331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.216726][ T4331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.223488][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.225343][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.227098][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.229202][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.238358][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.241880][ T4330] device veth1_macvtap entered promiscuous mode [ 33.262295][ T4342] device veth0_vlan entered promiscuous mode [ 33.266009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.268157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.269997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.271780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.274144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.292417][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.295114][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.296934][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.300436][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.301886][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.303569][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.305742][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.309698][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.313370][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.315423][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.318673][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.320808][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.322775][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.324656][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.327304][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.330386][ T4328] device veth0_macvtap entered promiscuous mode [ 33.332873][ T4342] device veth1_vlan entered promiscuous mode [ 33.344896][ T4328] device veth1_macvtap entered promiscuous mode [ 33.349600][ T4330] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.351427][ T4330] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.353206][ T4330] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.354995][ T4330] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.366454][ T4342] device veth0_macvtap entered promiscuous mode [ 33.373506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.375511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.377008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.380025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.382327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.384432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.386327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.388571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.390427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.396553][ T4342] device veth1_macvtap entered promiscuous mode [ 33.432631][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.434765][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.436639][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.439764][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.442385][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.444661][ T4424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.446133][ T4424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.451750][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.453677][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.455346][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.457270][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.459896][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.461757][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.463745][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.465599][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.469098][ T4329] device veth0_vlan entered promiscuous mode [ 33.473758][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.475913][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.481125][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.483429][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.486203][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.488689][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.490734][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.492698][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.494723][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.496573][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.499591][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.502136][ T4342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.505485][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.507405][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.510157][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.512117][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.514266][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.516457][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.521168][ T4342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.525618][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.532440][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.534363][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.536235][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.540235][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.541930][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.546351][ T4328] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.548753][ T4328] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.550586][ T4328] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.552578][ T4328] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.560759][ T1604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.561950][ T4342] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.562449][ T1604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.564020][ T4342] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.567264][ T4342] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.570763][ T4342] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.575020][ T4329] device veth1_vlan entered promiscuous mode [ 33.576425][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.578167][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.585244][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.587236][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.589804][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.591571][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.599627][ T4329] device veth0_macvtap entered promiscuous mode [ 33.623995][ T4329] device veth1_macvtap entered promiscuous mode [ 33.651996][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.653606][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.655434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.657387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.659599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.669163][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.670851][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.672503][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.692520][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.694599][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.696606][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.702399][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.704503][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.706887][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.712900][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.715040][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.722726][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.727523][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.729888][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.735974][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.737728][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.739348][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.740966][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.742552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.745902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.756164][ T4442] md: personality for level is not loaded! [ 33.757131][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.759763][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.761351][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.764483][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.766769][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.774536][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.776478][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.779641][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.781652][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.783753][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.785877][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.791245][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.794376][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.796195][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.806204][ T4329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.810670][ T4329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.812578][ T4329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.814961][ T4329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.882806][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.095440][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.124731][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.265421][ T1604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.267196][ T1604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.292371][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.344721][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 34.346132][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 34.347310][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 34.348050][ T4340] Bluetooth: hci1: command 0x041b tx timeout [ 34.408652][ T4340] Bluetooth: hci4: command 0x041b tx timeout [ 34.609453][ T4477] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(10) [ 34.811731][ T4475] jffs2: notice: (4475) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 35.254657][ T4488] md: personality for level is not loaded! [ 35.353069][ T4490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.371049][ T4490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.691062][ T4501] loop3: detected capacity change from 0 to 32768 [ 35.709778][ T4501] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.20 (4501) [ 35.750411][ T4501] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 35.753035][ T4501] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 35.766567][ T4501] BTRFS info (device loop3): use zlib compression, level 3 [ 35.772177][ T4501] BTRFS info (device loop3): using free space tree [ 36.286371][ T4501] BTRFS info (device loop3): enabling ssd optimizations [ 36.352272][ T4328] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 36.408025][ T4340] Bluetooth: hci1: command 0x040f tx timeout [ 36.417904][ T4340] Bluetooth: hci3: command 0x040f tx timeout [ 36.418118][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 36.420509][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 36.488411][ T4340] Bluetooth: hci4: command 0x040f tx timeout [ 36.720284][ T4563] jffs2: notice: (4563) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 37.027865][ T4575] md: personality for level is not loaded! [ 37.881407][ T4597] jffs2: notice: (4597) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 38.488670][ T4340] Bluetooth: hci3: command 0x0419 tx timeout [ 38.489738][ T4339] Bluetooth: hci2: command 0x0419 tx timeout [ 38.491809][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 38.493210][ T4345] Bluetooth: hci0: command 0x0419 tx timeout [ 38.879300][ T4341] Bluetooth: hci4: command 0x0419 tx timeout [ 42.353309][ T4550] rxe_eth0 speed is unknown, defaulting to 1000 [ 43.713013][ T4711] sched: RT throttling activated [ 44.918114][ T4760] jffs2: notice: (4760) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 46.416877][ T4795] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(10) [ 46.650304][ T4799] Zero length message leads to an empty skb [ 46.990877][ T4823] jffs2: notice: (4823) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 50.026100][ T4873] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(10) [ 51.307998][ T4890] jffs2: notice: (4890) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 52.636262][ T4930] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(10) [ 54.095727][ T4962] jffs2: notice: (4962) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 54.648461][ T4974] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(10) [ 55.443053][ T4999] jffs2: notice: (4999) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 58.551544][ T5047] jffs2: notice: (5047) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 63.415339][ T5132] jffs2: notice: (5132) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 64.893488][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.895168][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.060869][ T5187] jffs2: notice: (5187) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 67.732410][ T5216] md: could not open device unknown-block(1,5). [ 67.789016][ T5216] md: pers->run() failed ... [ 68.888147][ T5239] jffs2: notice: (5239) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 69.612336][ T24] cfg80211: failed to load regulatory.db [ 83.077061][ T5456] loop1: detected capacity change from 0 to 32768 [ 83.106448][ T5456] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.302 (5456) [ 83.135779][ T5456] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 83.147288][ T5456] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 83.152025][ T5456] BTRFS info (device loop1): using free space tree [ 83.186239][ T5456] BTRFS info (device loop1): enabling ssd optimizations [ 83.233449][ T4329] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 83.317114][ T5471] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop1 scanned by udevd (5471) [ 83.866565][ T5510] CIFS: Attempting to mount \\127.0.0.1\share [ 83.870756][ T5510] CIFS: VFS: Error connecting to socket. Aborting operation. [ 83.879067][ T5510] CIFS: VFS: cifs_mount failed w/return code = -111 [ 85.783309][ T5531] loop4: detected capacity change from 0 to 32768 [ 85.786719][ T5531] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 85.860674][ T5471] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 88.860639][ T5585] loop3: detected capacity change from 0 to 32768 [ 88.881294][ T5585] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 89.006115][ T5471] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 89.824355][ T5621] CIFS: Attempting to mount \\127.0.0.1\share [ 89.827388][ T5621] CIFS: VFS: Error connecting to socket. Aborting operation. [ 89.832038][ T5621] CIFS: VFS: cifs_mount failed w/return code = -111 [ 92.079210][ T5664] jffs2: notice: (5664) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 92.519913][ T5676] CIFS: Attempting to mount \\127.0.0.1\share [ 92.522145][ T5676] CIFS: VFS: Error connecting to socket. Aborting operation. [ 92.523725][ T5676] CIFS: VFS: cifs_mount failed w/return code = -111 [ 94.335930][ T5717] jffs2: notice: (5717) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 98.492731][ T5767] jffs2: notice: (5767) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 101.828243][ T5822] loop3: detected capacity change from 0 to 512 [ 101.832709][ T5822] EXT4-fs: Ignoring removed nobh option [ 101.891195][ T5822] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.411: invalid indirect mapped block 256 (level 2) [ 101.894974][ T5822] EXT4-fs (loop3): 2 truncates cleaned up [ 101.896383][ T5822] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 102.839632][ T5828] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 102.845564][ T5838] jffs2: notice: (5838) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 103.337061][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 103.379126][ T5851] FAULT_INJECTION: forcing a failure. [ 103.379126][ T5851] name failslab, interval 1, probability 0, space 0, times 1 [ 103.390468][ T5851] CPU: 1 PID: 5851 Comm: syz.3.416 Not tainted syzkaller #0 [ 103.391908][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 103.394007][ T5851] Call trace: [ 103.394693][ T5851] dump_backtrace+0x1c4/0x1f0 [ 103.395706][ T5851] show_stack+0x2c/0x3c [ 103.396587][ T5851] __dump_stack+0x30/0x40 [ 103.397557][ T5851] dump_stack_lvl+0xf4/0x15c [ 103.398682][ T5851] dump_stack+0x1c/0x5c [ 103.399668][ T5851] should_fail_ex+0x3cc/0x524 [ 103.400729][ T5851] __should_failslab+0xc0/0x11c [ 103.401738][ T5851] should_failslab+0x10/0x28 [ 103.402709][ T5851] __kmem_cache_alloc_node+0x7c/0x318 [ 103.403850][ T5851] kmalloc_trace+0x48/0x94 [ 103.404779][ T5851] snd_seq_port_connect+0x7c/0x3a0 [ 103.405838][ T5851] snd_seq_ioctl_subscribe_port+0x270/0x650 [ 103.407105][ T5851] snd_seq_kernel_client_ctl+0x5a8/0x618 [ 103.408288][ T5851] snd_seq_oss_midi_open+0x33c/0x5fc [ 103.409407][ T5851] snd_seq_oss_midi_open_all+0x84/0xec [ 103.410577][ T5851] snd_seq_oss_open+0x7a0/0xca4 [ 103.411628][ T5851] odev_open+0x84/0xbc [ 103.412511][ T5851] soundcore_open+0x2f8/0x47c [ 103.413483][ T5851] chrdev_open+0x3d0/0x51c [ 103.414420][ T5851] do_dentry_open+0x738/0xf8c [ 103.415401][ T5851] vfs_open+0x7c/0x90 [ 103.416240][ T5851] path_openat+0x1fc0/0x27a0 [ 103.417211][ T5851] do_filp_open+0x198/0x38c [ 103.418150][ T5851] do_sys_openat2+0x134/0x3fc [ 103.419127][ T5851] __arm64_sys_openat+0x11c/0x150 [ 103.420185][ T5851] invoke_syscall+0x98/0x290 [ 103.421148][ T5851] el0_svc_common+0x13c/0x258 [ 103.422152][ T5851] do_el0_svc+0x5c/0x134 [ 103.423003][ T5851] el0_svc+0x58/0x12c [ 103.423786][ T5851] el0t_64_sync_handler+0x84/0xf0 [ 103.424836][ T5851] el0t_64_sync+0x18c/0x190 [ 119.750522][ T6056] jffs2: notice: (6056) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 121.535817][ T6080] jffs2: notice: (6080) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 123.282821][ T6099] device syzkaller0 entered promiscuous mode [ 123.288263][ T6099] tipc: Started in network mode [ 123.289443][ T6099] tipc: Node identity 5a279ae8b67b, cluster identity 4711 [ 123.290933][ T6099] tipc: Enabled bearer , priority 0 [ 123.434375][ T6100] tipc: Resetting bearer [ 123.464971][ T6112] jffs2: notice: (6112) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 123.921528][ T6100] tipc: Disabling bearer [ 124.324059][ T6128] jffs2: notice: (6128) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 125.342798][ T6138] jffs2: notice: (6138) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 126.757435][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.758840][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.608500][ T6159] device syzkaller0 entered promiscuous mode [ 127.616715][ T6159] tipc: Started in network mode [ 127.618090][ T6159] tipc: Node identity ae42c045f9d3, cluster identity 4711 [ 127.620684][ T6159] tipc: Enabled bearer , priority 0 [ 127.623460][ T6158] tipc: Resetting bearer [ 127.745809][ T6158] tipc: Disabling bearer [ 128.719134][ T5492] tipc: Node number set to 1469169733 [ 130.282866][ T6201] jffs2: notice: (6201) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 130.811800][ T6212] device syzkaller0 entered promiscuous mode [ 137.175670][ T6285] device syzkaller0 entered promiscuous mode [ 137.188037][ T6291] CIFS: Attempting to mount \\127.0.0.1\share [ 137.536268][ T6292] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x20 [ 137.582576][ T6291] CIFS: VFS: cifs_mount failed w/return code = -112 [ 142.473813][ T6350] jffs2: notice: (6350) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 146.392376][ T6395] jffs2: notice: (6395) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 153.607967][ T4340] Bluetooth: hci0: command 0x0406 tx timeout [ 153.607988][ T4341] Bluetooth: hci3: command 0x0406 tx timeout [ 153.608003][ T4345] Bluetooth: hci2: command 0x0406 tx timeout [ 153.611948][ T4345] Bluetooth: hci1: command 0x0406 tx timeout [ 153.611966][ T4341] Bluetooth: hci4: command 0x0406 tx timeout [ 153.901260][ T6497] CIFS: Attempting to mount \\127.0.0.1\share [ 153.973628][ T6500] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x20 [ 154.853867][ T6497] CIFS: VFS: cifs_mount failed w/return code = -112 [ 158.793838][ T6566] CIFS: Attempting to mount \\127.0.0.1\share [ 159.998879][ T6566] CIFS: VFS: cifs_mount failed w/return code = -512 [ 160.154115][ T6583] CIFS: Attempting to mount \\127.0.0.1\share [ 161.218455][ T6583] CIFS: VFS: cifs_mount failed w/return code = -512 [ 161.225731][ T6582] CIFS: Attempting to mount \\127.0.0.1\share [ 161.267191][ T6597] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x20 [ 161.282765][ T6582] CIFS: VFS: cifs_mount failed w/return code = -112 [ 162.476779][ T6622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.478781][ T6622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.876469][ T6632] device syzkaller0 entered promiscuous mode [ 162.885721][ T6632] tipc: Enabling of bearer rejected, failed to enable media [ 163.543229][ T6647] CIFS: Attempting to mount \\127.0.0.1\share [ 165.748971][ T6647] CIFS: VFS: cifs_mount failed w/return code = -512 [ 169.061128][ T6718] CIFS: Attempting to mount \\127.0.0.1\share [ 170.512698][ T6720] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x50 [ 170.522388][ T6718] CIFS: VFS: cifs_mount failed w/return code = -112 [ 170.525024][ T6723] CIFS: Attempting to mount \\127.0.0.1\share [ 170.527465][ T6723] CIFS: VFS: Error connecting to socket. Aborting operation. [ 170.530300][ T6723] CIFS: VFS: cifs_mount failed w/return code = -4 [ 171.068408][ T6750] jffs2: notice: (6750) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 171.852423][ T6765] loop0: detected capacity change from 0 to 512 [ 172.090799][ T6765] EXT4-fs: Ignoring removed nobh option [ 172.121473][ T6771] CIFS: Attempting to mount \\127.0.0.1\share [ 172.123869][ T6771] CIFS: VFS: Error connecting to socket. Aborting operation. [ 172.126077][ T6771] CIFS: VFS: cifs_mount failed w/return code = -111 [ 172.141077][ T6765] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.668: invalid indirect mapped block 256 (level 2) [ 172.144427][ T6765] EXT4-fs (loop0): 2 truncates cleaned up [ 172.145712][ T6765] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 172.177071][ T6775] FAULT_INJECTION: forcing a failure. [ 172.177071][ T6775] name failslab, interval 1, probability 0, space 0, times 0 [ 172.177105][ T6775] CPU: 1 PID: 6775 Comm: syz.3.673 Not tainted syzkaller #0 [ 172.177115][ T6775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 172.177121][ T6775] Call trace: [ 172.177123][ T6775] dump_backtrace+0x1c4/0x1f0 [ 172.177135][ T6775] show_stack+0x2c/0x3c [ 172.177140][ T6775] __dump_stack+0x30/0x40 [ 172.177151][ T6775] dump_stack_lvl+0xf4/0x15c [ 172.177159][ T6775] dump_stack+0x1c/0x5c [ 172.177166][ T6775] should_fail_ex+0x3cc/0x524 [ 172.177176][ T6775] __should_failslab+0xc0/0x11c [ 172.177185][ T6775] should_failslab+0x10/0x28 [ 172.177193][ T6775] kmem_cache_alloc+0x88/0x310 [ 172.177201][ T6775] __kernfs_new_node+0xec/0x5fc [ 172.177207][ T6775] kernfs_new_node+0x120/0x230 [ 172.177212][ T6775] kernfs_create_link+0x98/0x1e4 [ 172.177218][ T6775] sysfs_do_create_link_sd+0x8c/0x120 [ 172.177226][ T6775] sysfs_create_link+0x74/0x94 [ 172.177233][ T6775] device_add+0x57c/0xe4c [ 172.177242][ T6775] device_create_groups_vargs+0x1fc/0x298 [ 172.177251][ T6775] device_create+0xf4/0x148 [ 172.177259][ T6775] vcs_make_sysfs+0x44/0xa0 [ 172.177266][ T6775] vc_allocate+0x52c/0x63c [ 172.177273][ T6775] con_install+0xa0/0x5cc [ 172.177282][ T6775] tty_init_dev+0xb4/0x3f4 [ 172.177290][ T6775] tty_open+0x6dc/0xb5c [ 172.177299][ T6775] chrdev_open+0x3d0/0x51c [ 172.177307][ T6775] do_dentry_open+0x738/0xf8c [ 172.177311][ T6775] vfs_open+0x7c/0x90 [ 172.177315][ T6775] path_openat+0x1fc0/0x27a0 [ 172.177322][ T6775] do_filp_open+0x198/0x38c [ 172.177329][ T6775] do_sys_openat2+0x134/0x3fc [ 172.177333][ T6775] __arm64_sys_openat+0x11c/0x150 [ 172.177338][ T6775] invoke_syscall+0x98/0x290 [ 172.177347][ T6775] el0_svc_common+0x13c/0x258 [ 172.177356][ T6775] do_el0_svc+0x5c/0x134 [ 172.177364][ T6775] el0_svc+0x58/0x12c [ 172.177371][ T6775] el0t_64_sync_handler+0x84/0xf0 [ 172.177379][ T6775] el0t_64_sync+0x18c/0x190 [ 172.247377][ T6781] svc: failed to register nfsdv3 RPC service (errno 111). [ 172.252212][ T6781] svc: failed to register nfsaclv3 RPC service (errno 111). [ 172.818881][ T6790] svc: failed to register nfsdv3 RPC service (errno 111). [ 172.821056][ T6790] svc: failed to register nfsaclv3 RPC service (errno 111). [ 173.049198][ T6794] jffs2: notice: (6794) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 173.225283][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 173.259184][ T6803] svc: failed to register nfsdv3 RPC service (errno 111). [ 173.261408][ T6803] svc: failed to register nfsaclv3 RPC service (errno 111). [ 173.304116][ T6810] CIFS: Attempting to mount \\127.0.0.1\share [ 173.593391][ T6810] CIFS: VFS: Error connecting to socket. Aborting operation. [ 173.595175][ T6810] CIFS: VFS: cifs_mount failed w/return code = -111 [ 173.720104][ T6814] svc: failed to register nfsdv3 RPC service (errno 111). [ 173.724837][ T6814] svc: failed to register nfsaclv3 RPC service (errno 111). [ 174.292286][ T6827] svc: failed to register nfsdv3 RPC service (errno 111). [ 174.294374][ T6827] svc: failed to register nfsaclv3 RPC service (errno 111). [ 174.638040][ T6829] FAULT_INJECTION: forcing a failure. [ 174.638040][ T6829] name failslab, interval 1, probability 0, space 0, times 0 [ 174.638060][ T6829] CPU: 0 PID: 6829 Comm: syz.4.689 Not tainted syzkaller #0 [ 174.638070][ T6829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 174.638076][ T6829] Call trace: [ 174.638079][ T6829] dump_backtrace+0x1c4/0x1f0 [ 174.638091][ T6829] show_stack+0x2c/0x3c [ 174.638097][ T6829] __dump_stack+0x30/0x40 [ 174.638107][ T6829] dump_stack_lvl+0xf4/0x15c [ 174.638115][ T6829] dump_stack+0x1c/0x5c [ 174.638122][ T6829] should_fail_ex+0x3cc/0x524 [ 174.638132][ T6829] __should_failslab+0xc0/0x11c [ 174.638141][ T6829] should_failslab+0x10/0x28 [ 174.638149][ T6829] kmem_cache_alloc+0x88/0x310 [ 174.638157][ T6829] __kernfs_new_node+0xec/0x5fc [ 174.638163][ T6829] kernfs_new_node+0x120/0x230 [ 174.638168][ T6829] kernfs_create_link+0x98/0x1e4 [ 174.638175][ T6829] sysfs_do_create_link_sd+0x8c/0x120 [ 174.638182][ T6829] sysfs_create_link+0x74/0x94 [ 174.638189][ T6829] device_add+0x57c/0xe4c [ 174.638198][ T6829] device_create_groups_vargs+0x1fc/0x298 [ 174.638207][ T6829] device_create+0xf4/0x148 [ 174.638215][ T6829] vcs_make_sysfs+0x44/0xa0 [ 174.638221][ T6829] vc_allocate+0x52c/0x63c [ 174.638229][ T6829] con_install+0xa0/0x5cc [ 174.638238][ T6829] tty_init_dev+0xb4/0x3f4 [ 174.638246][ T6829] tty_open+0x6dc/0xb5c [ 174.638255][ T6829] chrdev_open+0x3d0/0x51c [ 174.638263][ T6829] do_dentry_open+0x738/0xf8c [ 174.638268][ T6829] vfs_open+0x7c/0x90 [ 174.638272][ T6829] path_openat+0x1fc0/0x27a0 [ 174.638279][ T6829] do_filp_open+0x198/0x38c [ 174.638285][ T6829] do_sys_openat2+0x134/0x3fc [ 174.638290][ T6829] __arm64_sys_openat+0x11c/0x150 [ 174.638295][ T6829] invoke_syscall+0x98/0x290 [ 174.638304][ T6829] el0_svc_common+0x13c/0x258 [ 174.638313][ T6829] do_el0_svc+0x5c/0x134 [ 174.638321][ T6829] el0_svc+0x58/0x12c [ 174.638329][ T6829] el0t_64_sync_handler+0x84/0xf0 [ 174.638337][ T6829] el0t_64_sync+0x18c/0x190 [ 174.657945][ T6827] ================================================================== [ 174.688773][ T6827] BUG: KASAN: use-after-free in nfsd_svc+0x818/0x948 [ 174.688797][ T6827] Read of size 4 at addr ffff0000f53c5854 by task syz.3.687/6827 [ 174.688804][ T6827] [ 174.688808][ T6827] CPU: 1 PID: 6827 Comm: syz.3.687 Not tainted syzkaller #0 [ 174.688814][ T6827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 174.688819][ T6827] Call trace: [ 174.688821][ T6827] dump_backtrace+0x1c4/0x1f0 [ 174.688827][ T6827] show_stack+0x2c/0x3c [ 174.688832][ T6827] __dump_stack+0x30/0x40 [ 174.688840][ T6827] dump_stack_lvl+0xf4/0x15c [ 174.688847][ T6827] print_address_description+0x88/0x218 [ 174.688855][ T6827] print_report+0x50/0x68 [ 174.688862][ T6827] kasan_report+0xa8/0xfc [ 174.688868][ T6827] __asan_report_load4_noabort+0x2c/0x38 [ 174.688875][ T6827] nfsd_svc+0x818/0x948 [ 174.688883][ T6827] write_threads+0x2b4/0x310 [ 174.688888][ T6827] nfsctl_transaction_write+0x114/0x164 [ 174.688893][ T6827] vfs_write+0x2a8/0x7c8 [ 174.688899][ T6827] ksys_write+0x12c/0x228 [ 174.688904][ T6827] __arm64_sys_write+0x7c/0x90 [ 174.688909][ T6827] invoke_syscall+0x98/0x290 [ 174.688918][ T6827] el0_svc_common+0x13c/0x258 [ 174.688927][ T6827] do_el0_svc+0x5c/0x134 [ 174.688935][ T6827] el0_svc+0x58/0x12c [ 174.688942][ T6827] el0t_64_sync_handler+0x84/0xf0 [ 174.688950][ T6827] el0t_64_sync+0x18c/0x190 [ 174.688955][ T6827] [ 174.688957][ T6827] Allocated by task 6827: [ 174.688960][ T6827] kasan_set_track+0x4c/0x80 [ 174.688966][ T6827] kasan_save_alloc_info+0x24/0x30 [ 174.688972][ T6827] __kasan_kmalloc+0xa0/0xb8 [ 174.688977][ T6827] kmalloc_trace+0x7c/0x94 [ 174.688984][ T6827] __svc_create+0x80/0x89c [ 174.688990][ T6827] svc_create_pooled+0x648/0x7d8 [ 174.688995][ T6827] nfsd_create_serv+0x284/0x6a4 [ 174.689003][ T6827] nfsd_svc+0x168/0x948 [ 174.689011][ T6827] write_threads+0x2b4/0x310 [ 174.689016][ T6827] nfsctl_transaction_write+0x114/0x164 [ 174.689020][ T6827] vfs_write+0x2a8/0x7c8 [ 174.689025][ T6827] ksys_write+0x12c/0x228 [ 174.689031][ T6827] __arm64_sys_write+0x7c/0x90 [ 174.689036][ T6827] invoke_syscall+0x98/0x290 [ 174.689044][ T6827] el0_svc_common+0x13c/0x258 [ 174.689052][ T6827] do_el0_svc+0x5c/0x134 [ 174.689061][ T6827] el0_svc+0x58/0x12c [ 174.689068][ T6827] el0t_64_sync_handler+0x84/0xf0 [ 174.689075][ T6827] el0t_64_sync+0x18c/0x190 [ 174.689080][ T6827] [ 174.689081][ T6827] Freed by task 6827: [ 174.689084][ T6827] kasan_set_track+0x4c/0x80 [ 174.689089][ T6827] kasan_save_free_info+0x38/0x5c [ 174.689095][ T6827] ____kasan_slab_free+0x148/0x1b0 [ 174.689100][ T6827] __kasan_slab_free+0x18/0x28 [ 174.689105][ T6827] slab_free_freelist_hook+0x16c/0x1e8 [ 174.689113][ T6827] __kmem_cache_free+0xbc/0x21c [ 174.689121][ T6827] kfree+0xd0/0x1a8 [ 174.689126][ T6827] svc_destroy+0x144/0x184 [ 174.689131][ T6827] nfsd_svc+0x63c/0x948 [ 174.689139][ T6827] write_threads+0x2b4/0x310 [ 174.689144][ T6827] nfsctl_transaction_write+0x114/0x164 [ 174.689148][ T6827] vfs_write+0x2a8/0x7c8 [ 174.689153][ T6827] ksys_write+0x12c/0x228 [ 174.689158][ T6827] __arm64_sys_write+0x7c/0x90 [ 174.689164][ T6827] invoke_syscall+0x98/0x290 [ 174.689172][ T6827] el0_svc_common+0x13c/0x258 [ 174.689180][ T6827] do_el0_svc+0x5c/0x134 [ 174.689188][ T6827] el0_svc+0x58/0x12c [ 174.689195][ T6827] el0t_64_sync_handler+0x84/0xf0 [ 174.689203][ T6827] el0t_64_sync+0x18c/0x190 [ 174.689208][ T6827] [ 174.689209][ T6827] Last potentially related work creation: [ 174.689211][ T6827] kasan_save_stack+0x40/0x70 [ 174.689216][ T6827] __kasan_record_aux_stack+0xc0/0xdc [ 174.689222][ T6827] kasan_record_aux_stack_noalloc+0x14/0x20 [ 174.689229][ T6827] insert_work+0x64/0x37c [ 174.689234][ T6827] __queue_work+0xd00/0x1280 [ 174.689243][ T6827] delayed_work_timer_fn+0x74/0x94 [ 174.689251][ T6827] call_timer_fn+0x1b8/0x96c [ 174.689260][ T6827] __run_timers+0x4d0/0x6d8 [ 174.689268][ T6827] run_timer_softirq+0x7c/0x114 [ 174.689275][ T6827] handle_softirqs+0x318/0xc90 [ 174.689281][ T6827] run_ksoftirqd+0x7c/0x2ac [ 174.689287][ T6827] smpboot_thread_fn+0x4e8/0x960 [ 174.689295][ T6827] kthread+0x254/0x2e0 [ 174.689303][ T6827] ret_from_fork+0x10/0x20 [ 174.689309][ T6827] [ 174.689310][ T6827] Second to last potentially related work creation: [ 174.689312][ T6827] kasan_save_stack+0x40/0x70 [ 174.689317][ T6827] __kasan_record_aux_stack+0xc0/0xdc [ 174.689323][ T6827] kasan_record_aux_stack_noalloc+0x14/0x20 [ 174.689329][ T6827] kvfree_call_rcu+0xb4/0x6f0 [ 174.689337][ T6827] drop_sysctl_table+0x278/0x3c4 [ 174.689345][ T6827] drop_sysctl_table+0x298/0x3c4 [ 174.689353][ T6827] unregister_sysctl_table+0x90/0x134 [ 174.689360][ T6827] unregister_net_sysctl_table+0x20/0x30 [ 174.689367][ T6827] neigh_sysctl_unregister+0x78/0x9c [ 174.689377][ T6827] addrconf_ifdown+0x1330/0x1630 [ 174.689383][ T6827] addrconf_notify+0x344/0xc98 [ 174.689388][ T6827] raw_notifier_call_chain+0xd8/0x168 [ 174.689394][ T6827] unregister_netdevice_many_notify+0xf18/0x1900 [ 174.689400][ T6827] unregister_netdevice_queue+0x2bc/0x310 [ 174.689406][ T6827] __tun_detach+0x55c/0x129c [ 174.689413][ T6827] tun_chr_close+0x118/0x1f4 [ 174.689419][ T6827] __fput+0x1b4/0x7b0 [ 174.689424][ T6827] ____fput+0x20/0x30 [ 174.689430][ T6827] task_work_run+0x1f4/0x280 [ 174.689437][ T6827] do_notify_resume+0x20f8/0x2c84 [ 174.689446][ T6827] el0_svc+0x9c/0x12c [ 174.689453][ T6827] el0t_64_sync_handler+0x84/0xf0 [ 174.689461][ T6827] el0t_64_sync+0x18c/0x190 [ 174.689465][ T6827] [ 174.689466][ T6827] The buggy address belongs to the object at ffff0000f53c5800 [ 174.689466][ T6827] which belongs to the cache kmalloc-512 of size 512 [ 174.689471][ T6827] The buggy address is located 84 bytes inside of [ 174.689471][ T6827] 512-byte region [ffff0000f53c5800, ffff0000f53c5a00) [ 174.689477][ T6827] [ 174.689479][ T6827] The buggy address belongs to the physical page: [ 174.689482][ T6827] page:00000000bed764ba refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1353c4 [ 174.689489][ T6827] head:00000000bed764ba order:2 compound_mapcount:0 compound_pincount:0 [ 174.689493][ T6827] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 174.689504][ T6827] raw: 05ffc00000010200 0000000000000000 dead000000000001 ffff0000c0002600 [ 174.689509][ T6827] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 174.689512][ T6827] page dumped because: kasan: bad access detected [ 174.689515][ T6827] [ 174.689516][ T6827] Memory state around the buggy address: [ 174.689519][ T6827] ffff0000f53c5700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 174.689523][ T6827] ffff0000f53c5780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 174.689527][ T6827] >ffff0000f53c5800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.689530][ T6827] ^ [ 174.689533][ T6827] ffff0000f53c5880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.689537][ T6827] ffff0000f53c5900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.689540][ T6827] ================================================================== [ 174.695552][ T6834] jffs2: notice: (6834) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 174.728513][ T6827] Disabling lock debugging due to kernel taint [ 174.768839][ T6827] Unable to handle kernel paging request at virtual address ecae0d2e4ee4040b [ 174.850320][ T6827] KASAN: maybe wild-memory-access in range [0x6574697277202058-0x657469727720205f] [ 174.853625][ T6827] Mem abort info: [ 174.854419][ T6827] ESR = 0x0000000096000004 [ 174.855538][ T6827] EC = 0x25: DABT (current EL), IL = 32 bits [ 174.857066][ T6827] SET = 0, FnV = 0 [ 174.858593][ T6827] EA = 0, S1PTW = 0 [ 174.859559][ T6827] FSC = 0x04: level 0 translation fault [ 174.860877][ T6827] Data abort info: [ 174.861670][ T6827] ISV = 0, ISS = 0x00000004 [ 174.862766][ T6827] CM = 0, WnR = 0 [ 174.863591][ T6827] [ecae0d2e4ee4040b] address between user and kernel address ranges [ 174.865397][ T6827] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP [ 174.866907][ T6827] Modules linked in: [ 174.867688][ T6827] CPU: 0 PID: 6827 Comm: syz.3.687 Tainted: G B syzkaller #0 [ 174.869553][ T6827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 174.871475][ T6827] pstate: 02400005 (nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 174.873119][ T6827] pc : svc_unregister+0x110/0x624 [ 174.874142][ T6827] lr : svc_unregister+0x104/0x624 [ 174.875164][ T6827] sp : ffff800022ef7820 [ 174.876043][ T6827] x29: ffff800022ef7850 x28: dfff800000000000 x27: ffff0000f5617018 [ 174.877662][ T6827] x26: ffff0000d9b41c40 x25: 657469727720205d x24: 0000000000000000 [ 174.879375][ T6827] x23: ffff0000f5617014 x22: 1fffe0001eac2e02 x21: ffff0000f5617000 [ 174.881061][ T6827] x20: 1fffe0001eac2e03 x19: 0000000000000000 x18: 1fffe00033c1c97e [ 174.882763][ T6827] x17: ffff80001641d000 x16: ffff800008043a58 x15: 0000000040000000 [ 174.884445][ T6827] x14: 0000000000000001 x13: 1fffe0001a956000 x12: 0000000000080000 [ 174.886014][ T6827] x11: ff00800010f3d998 x10: 0000000000000002 x9 : ffff80001d6b7910 [ 174.887749][ T6827] x8 : 0cae8d2e4ee4040b x7 : 0000000000000000 x6 : ffff800010f81714 [ 174.889445][ T6827] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800010f3d9d4 [ 174.891155][ T6827] x2 : 0000000000000000 x1 : 0000000000000008 x0 : 0000000000000000 [ 174.892847][ T6827] Call trace: [ 174.893530][ T6827] svc_unregister+0x110/0x624 [ 174.894512][ T6827] svc_rpcb_cleanup+0x28/0x40 [ 174.895519][ T6827] nfsd_last_thread+0x114/0x2e4 [ 174.896530][ T6827] nfsd_svc+0x698/0x948 [ 174.897378][ T6827] write_threads+0x2b4/0x310 [ 174.898370][ T6827] nfsctl_transaction_write+0x114/0x164 [ 174.899567][ T6827] vfs_write+0x2a8/0x7c8 [ 174.900461][ T6827] ksys_write+0x12c/0x228 [ 174.901407][ T6827] __arm64_sys_write+0x7c/0x90 [ 174.902413][ T6827] invoke_syscall+0x98/0x290 [ 174.903336][ T6827] el0_svc_common+0x13c/0x258 [ 174.904290][ T6827] do_el0_svc+0x5c/0x134 [ 174.905160][ T6827] el0_svc+0x58/0x12c [ 174.905969][ T6827] el0t_64_sync_handler+0x84/0xf0 [ 174.907048][ T6827] el0t_64_sync+0x18c/0x190 [ 174.908023][ T6827] Code: 97c2d697 f9400379 8b190268 d343fd08 (387c6908) [ 174.909480][ T6827] ---[ end trace 0000000000000000 ]--- [ 175.113889][ T6827] Kernel panic - not syncing: Oops: Fatal exception [ 175.115195][ T6827] SMP: stopping secondary CPUs [ 175.116198][ T6827] Kernel Offset: disabled [ 175.117078][ T6827] CPU features: 0x0a0000,000f0097,a65bfea7 [ 175.118269][ T6827] Memory Limit: none [ 175.318900][ T6827] Rebooting in 86400 seconds..