last executing test programs: 1.794589409s ago: executing program 3 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8005}, 0x4804) 1.267363402s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) 1.266018722s ago: executing program 3 (id=11): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8005}, 0x4804) 913.787188ms ago: executing program 2 (id=6): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xb, 0xffff}, {0x300, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x1a}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="03031b003000320006006300000000442f"], 0x76) 913.283118ms ago: executing program 3 (id=7): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_LOCK(r0, 0x6405) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000b80)={0xc000003, 0x0, 0x0, 0x0, 0x4}) 827.654267ms ago: executing program 1 (id=2): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) 796.00949ms ago: executing program 0 (id=1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000005c40), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000005c80)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000005cc0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000005d00)={@void, @void, @eth={@broadcast, @random="c222a5fe422d", @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x67, 0x0, 0x7, 0x32, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}}, 0x2a) 745.451015ms ago: executing program 3 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/console\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 663.944293ms ago: executing program 3 (id=9): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x29}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}}, 0x20044080) write(0xffffffffffffffff, &(0x7f0000000340)="000008004500001c123400004011e5c8ac141401ac14140204d204d200080000", 0x20) 571.324753ms ago: executing program 0 (id=10): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) pread64(r0, &(0x7f00000002c0)=""/208, 0xd0, 0x8d35) 381.981822ms ago: executing program 0 (id=12): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000240)=""/208, 0xd0, 0x8d35) 260.040244ms ago: executing program 2 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='tcp 2', 0x5) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) 231.175267ms ago: executing program 1 (id=14): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8005}, 0x4804) 179.036922ms ago: executing program 0 (id=15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x4}}, './file0\x00'}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="64640f01c8d0b9020066b80500000066b9000000000f01d90f9dd50f59f2360f380589c200b823000f00d8660f3880910030ba6100ed3e0f01c5", 0x3a}], 0x1, 0x35, 0x0, 0x0) 178.854972ms ago: executing program 3 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./debug\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000e2793f10d10501200028000000010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/ttyUSB0\x00', 0x6200, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 82.787782ms ago: executing program 1 (id=17): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_LOCK(r0, 0x6405) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000b80)={0xc000003, 0x0, 0x0, 0x0, 0x4}) 0s ago: executing program 1 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/console\x00', 0x1, 0x0) write(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts. [ 66.443806][ T5769] cgroup: Unknown subsys name 'net' [ 66.581696][ T5769] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.938232][ T5769] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.416531][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.425167][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.434770][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.443561][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.455051][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.462659][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.489548][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.509842][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.517605][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.525755][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.538290][ T5781] (null): rxe_set_mtu: Set mtu to 1024 [ 69.545125][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.564203][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.566045][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.586359][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.596570][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.598827][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.607801][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.625624][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.633604][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.642049][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.644740][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.657701][ T5793] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.665362][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.666491][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.672603][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.681597][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.687587][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.786607][ T5785] (null): rxe_set_mtu: Set mtu to 1024 [ 69.792685][ T5785] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 69.801616][ T5784] (null): rxe_set_mtu: Set mtu to 1024 [ 69.815516][ T5786] (null): rxe_set_mtu: Set mtu to 1024 [ 69.821257][ T5786] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 69.827885][ T5784] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 69.859013][ T5781] infiniband rxe0: set active [ 69.864700][ T5781] infiniband rxe0: added rxe_eth0 [ 69.875196][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.916853][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.986127][ T5781] RDS/IB: rxe0: added [ 69.995365][ T5781] smc: adding ib device rxe0 with port count 1 [ 70.001696][ T5781] smc: ib device rxe0 port 1 has pnetid [ 70.025482][ T5771] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.113705][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.321224][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 70.389935][ T5786] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.500830][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.509233][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.524883][ T5785] bridge_slave_0: entered allmulticast mode [ 70.548473][ T5785] bridge_slave_0: entered promiscuous mode [ 70.561936][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.569188][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.576615][ T5785] bridge_slave_1: entered allmulticast mode [ 70.583901][ T5785] bridge_slave_1: entered promiscuous mode [ 70.636620][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.659513][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.696188][ T5785] team0: Port device team_slave_0 added [ 70.704132][ T5785] team0: Port device team_slave_1 added [ 70.710684][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.791599][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.803534][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.831077][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.847918][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.855251][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.882177][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.000419][ T5785] hsr_slave_0: entered promiscuous mode [ 71.006682][ T5785] hsr_slave_1: entered promiscuous mode [ 71.132860][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 71.151188][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 71.352729][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.360248][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.369389][ T5784] bridge_slave_0: entered allmulticast mode [ 71.376204][ T5784] bridge_slave_0: entered promiscuous mode [ 71.397891][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.414373][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.423619][ T5786] bridge_slave_0: entered allmulticast mode [ 71.430429][ T5786] bridge_slave_0: entered promiscuous mode [ 71.443110][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.454153][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.461696][ T5784] bridge_slave_1: entered allmulticast mode [ 71.468488][ T5784] bridge_slave_1: entered promiscuous mode [ 71.481135][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.488219][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.502248][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 71.513626][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.522653][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.530242][ T5786] bridge_slave_1: entered allmulticast mode [ 71.537554][ T5786] bridge_slave_1: entered promiscuous mode [ 71.556199][ T5793] Bluetooth: hci0: command tx timeout [ 71.596048][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.607655][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.620063][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.645617][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.721775][ T5784] team0: Port device team_slave_0 added [ 71.730722][ T5786] team0: Port device team_slave_0 added [ 71.756273][ T5784] team0: Port device team_slave_1 added [ 71.763525][ T5786] team0: Port device team_slave_1 added [ 71.771203][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.783432][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.791046][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.794711][ T52] Bluetooth: hci1: command tx timeout [ 71.798488][ T5781] bridge_slave_0: entered allmulticast mode [ 71.803700][ T5783] Bluetooth: hci2: command tx timeout [ 71.810949][ T5781] bridge_slave_0: entered promiscuous mode [ 71.815390][ T5793] Bluetooth: hci3: command tx timeout [ 71.823743][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.833978][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.841238][ T5781] bridge_slave_1: entered allmulticast mode [ 71.848247][ T5781] bridge_slave_1: entered promiscuous mode [ 71.869693][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.881405][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.923247][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.933134][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.940514][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.967427][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.980728][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.994275][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.004965][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.011914][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.037849][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.051410][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.058442][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.084934][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.096711][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.103663][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.130927][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.182827][ T5781] team0: Port device team_slave_0 added [ 72.206934][ T5784] hsr_slave_0: entered promiscuous mode [ 72.213182][ T5784] hsr_slave_1: entered promiscuous mode [ 72.220010][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.227888][ T5784] Cannot create hsr debugfs directory [ 72.243752][ T5781] team0: Port device team_slave_1 added [ 72.274537][ T5786] hsr_slave_0: entered promiscuous mode [ 72.280774][ T5786] hsr_slave_1: entered promiscuous mode [ 72.287216][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.295213][ T5786] Cannot create hsr debugfs directory [ 72.332140][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.339541][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.366030][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.382797][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.390036][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.416105][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.562041][ T5781] hsr_slave_0: entered promiscuous mode [ 72.569057][ T5781] hsr_slave_1: entered promiscuous mode [ 72.575402][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.582964][ T5781] Cannot create hsr debugfs directory [ 72.788524][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.799303][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.813203][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.822925][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.894345][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.905454][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.947641][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.958845][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.985363][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.005717][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.033917][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.043004][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.052392][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.063603][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.105786][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.113114][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.123174][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.130303][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.240914][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.320572][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.369092][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.393161][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.421293][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.439342][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.467077][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.474187][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.516200][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.523281][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.537236][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.544340][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.570071][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.586334][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.593470][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.632210][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.639334][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.646858][ T5783] Bluetooth: hci0: command tx timeout [ 73.677513][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.691443][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.698555][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.876365][ T5783] Bluetooth: hci3: command tx timeout [ 73.876423][ T52] Bluetooth: hci2: command tx timeout [ 73.887535][ T5793] Bluetooth: hci1: command tx timeout [ 73.897036][ T5785] veth0_vlan: entered promiscuous mode [ 73.950653][ T5785] veth1_vlan: entered promiscuous mode [ 74.051834][ T5785] veth0_macvtap: entered promiscuous mode [ 74.085305][ T5785] veth1_macvtap: entered promiscuous mode [ 74.133957][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.156685][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.202808][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.227408][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.237097][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.247862][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.256868][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.290381][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.314146][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.370232][ T5786] veth0_vlan: entered promiscuous mode [ 74.405195][ T5786] veth1_vlan: entered promiscuous mode [ 74.482933][ T5781] veth0_vlan: entered promiscuous mode [ 74.495304][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.503278][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.533443][ T5786] veth0_macvtap: entered promiscuous mode [ 74.548547][ T5784] veth0_vlan: entered promiscuous mode [ 74.560140][ T5781] veth1_vlan: entered promiscuous mode [ 74.568871][ T5786] veth1_macvtap: entered promiscuous mode [ 74.608893][ T5784] veth1_vlan: entered promiscuous mode [ 74.620081][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.620507][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.634440][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.641291][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.658567][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.670798][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.681769][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.694114][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.705297][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.714007][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.723344][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.733075][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.778514][ T5781] veth0_macvtap: entered promiscuous mode [ 74.820632][ T5785] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.854323][ T5784] veth0_macvtap: entered promiscuous mode [ 74.867597][ T5781] veth1_macvtap: entered promiscuous mode [ 74.892408][ T5784] veth1_macvtap: entered promiscuous mode [ 74.971885][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.985192][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.995693][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.006179][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.017664][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.041085][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.043962][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.067074][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.076707][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.084446][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.099469][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.111286][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.126685][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.137601][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.149751][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.161310][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.171235][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.181762][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.192746][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.213819][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.223457][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.232350][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.242060][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.252886][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.265655][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.275559][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.286013][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.296006][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.306779][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.318830][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.348213][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.356342][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.368948][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.379260][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.388118][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.398742][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.572243][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.581477][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.675266][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.715535][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.717208][ T52] Bluetooth: hci0: command tx timeout [ 75.763352][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.789813][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.804109][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.815551][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.955231][ T52] Bluetooth: hci1: command tx timeout [ 75.960687][ T52] Bluetooth: hci2: command tx timeout [ 75.965542][ T5793] Bluetooth: hci3: command tx timeout [ 76.665915][ T5908] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.712713][ T5905] ------------[ cut here ]------------ [ 76.718901][ T5905] SVC: permsocks remain for nfsd [ 76.736338][ T5905] WARNING: CPU: 1 PID: 5905 at net/sunrpc/svc.c:645 svc_destroy+0x2ed/0x390 [ 76.745407][ T5905] Modules linked in: [ 76.749374][ T5905] CPU: 1 PID: 5905 Comm: syz.2.13 Not tainted syzkaller #0 [ 76.757701][ T5905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 76.767858][ T5905] RIP: 0010:svc_destroy+0x2ed/0x390 [ 76.773096][ T5905] Code: 24 49 83 c7 20 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 42 82 2d f8 49 8b 37 48 c7 c7 e0 11 fa 8b e8 e3 2a 9e f7 <0f> 0b e9 78 fd ff ff e8 b7 7c d4 f7 c6 05 9c ee c4 05 01 4c 89 e0 [ 76.792857][ T5905] RSP: 0018:ffffc9000510fae0 EFLAGS: 00010246 [ 76.799083][ T5905] RAX: 2439cb044d4c5a00 RBX: ffff88802d94e450 RCX: 0000000000080000 [ 76.807845][ T5905] RDX: ffffc9000d2ab000 RSI: 0000000000035501 RDI: 0000000000035502 [ 76.807882][ T5905] RBP: ffffc9000510fcb8 R08: ffff8880b8c28c53 R09: 1ffff1101718518a [ 76.807898][ T5905] R10: dffffc0000000000 R11: ffffed101718518b R12: ffff88802d94e400 [ 76.807915][ T5905] R13: dffffc0000000000 R14: ffff88802d94e450 R15: ffffffff8e3e1cc0 [ 76.807929][ T5905] FS: 00007f9d8e3e36c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 76.807959][ T5905] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.807975][ T5905] CR2: 00007fc677df7ff8 CR3: 000000005bb6a000 CR4: 00000000003526e0 [ 76.807993][ T5905] Call Trace: [ 76.808002][ T5905] [ 76.808018][ T5905] write_ports+0xb99/0xfa0 [ 76.808051][ T5905] ? write_versions+0xe00/0xe00 [ 76.808079][ T5905] ? __lock_acquire+0x7eb0/0x7eb0 [ 76.808104][ T5905] ? __virt_addr_valid+0x10c/0x380 [ 76.808128][ T5905] ? __virt_addr_valid+0x10c/0x380 [ 76.808154][ T5905] ? __might_fault+0xaa/0x120 [ 76.808176][ T5905] ? __might_fault+0xc6/0x120 [ 76.808196][ T5905] ? __might_fault+0xaa/0x120 [ 76.808224][ T5905] ? simple_transaction_get+0x11d/0x140 [ 76.808248][ T5905] nfsctl_transaction_write+0x10c/0x150 [ 76.808273][ T5905] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 76.808299][ T5905] vfs_write+0x299/0x9a0 [ 76.808333][ T5905] ? file_end_write+0x250/0x250 [ 76.808362][ T5905] ? __fget_files+0x28/0x460 [ 76.808389][ T5905] ? __fget_files+0x3fc/0x460 [ 76.808425][ T5905] ? __fdget_pos+0x2a3/0x330 [ 76.808447][ T5905] ? ksys_write+0x74/0x260 [ 76.808476][ T5905] ksys_write+0x151/0x260 [ 76.808506][ T5905] ? __ia32_sys_read+0x90/0x90 [ 76.808537][ T5905] ? lockdep_hardirqs_on+0x98/0x150 [ 76.808570][ T5905] do_syscall_64+0x55/0xb0 [ 76.808592][ T5905] ? clear_bhb_loop+0x40/0x90 [ 76.808617][ T5905] ? clear_bhb_loop+0x40/0x90 [ 76.808643][ T5905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 76.808668][ T5905] RIP: 0033:0x7f9d8d59f559 [ 76.808702][ T5905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.808719][ T5905] RSP: 002b:00007f9d8e3e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 76.808743][ T5905] RAX: ffffffffffffffda RBX: 00007f9d8d825fa0 RCX: 00007f9d8d59f559 [ 76.808758][ T5905] RDX: 0000000000000005 RSI: 0000200000000180 RDI: 0000000000000003 [ 76.808773][ T5905] RBP: 00007f9d8d636b20 R08: 0000000000000000 R09: 0000000000000000 [ 76.808787][ T5905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.808801][ T5905] R13: 00007f9d8d826038 R14: 00007f9d8d825fa0 R15: 00007ffc83b1e838 [ 76.808834][ T5905] [ 76.808849][ T5905] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 76.808858][ T5905] CPU: 1 PID: 5905 Comm: syz.2.13 Not tainted syzkaller #0 [ 76.808877][ T5905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 76.808887][ T5905] Call Trace: [ 76.808893][ T5905] [ 76.808900][ T5905] dump_stack_lvl+0x18c/0x250 [ 76.808926][ T5905] ? show_regs_print_info+0x20/0x20 [ 76.808957][ T5905] ? load_image+0x420/0x420 [ 76.808991][ T5905] panic+0x2ca/0x720 [ 76.809014][ T5905] ? bpf_jit_dump+0xd0/0xd0 [ 76.809049][ T5905] __warn+0x2e0/0x470 [ 76.809064][ T5905] ? svc_destroy+0x2ed/0x390 [ 76.809085][ T5905] ? svc_destroy+0x2ed/0x390 [ 76.809103][ T5905] report_bug+0x2be/0x4f0 [ 76.809125][ T5905] ? svc_destroy+0x2ed/0x390 [ 76.809143][ T5905] ? svc_destroy+0x2ed/0x390 [ 76.809160][ T5905] ? svc_destroy+0x2ef/0x390 [ 76.809177][ T5905] handle_bug+0xcf/0x120 [ 76.809200][ T5905] exc_invalid_op+0x1a/0x50 [ 76.809222][ T5905] asm_exc_invalid_op+0x1a/0x20 [ 76.809243][ T5905] RIP: 0010:svc_destroy+0x2ed/0x390 [ 76.809262][ T5905] Code: 24 49 83 c7 20 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 42 82 2d f8 49 8b 37 48 c7 c7 e0 11 fa 8b e8 e3 2a 9e f7 <0f> 0b e9 78 fd ff ff e8 b7 7c d4 f7 c6 05 9c ee c4 05 01 4c 89 e0 [ 76.809276][ T5905] RSP: 0018:ffffc9000510fae0 EFLAGS: 00010246 [ 76.809292][ T5905] RAX: 2439cb044d4c5a00 RBX: ffff88802d94e450 RCX: 0000000000080000 [ 76.809305][ T5905] RDX: ffffc9000d2ab000 RSI: 0000000000035501 RDI: 0000000000035502 [ 76.809317][ T5905] RBP: ffffc9000510fcb8 R08: ffff8880b8c28c53 R09: 1ffff1101718518a [ 76.809331][ T5905] R10: dffffc0000000000 R11: ffffed101718518b R12: ffff88802d94e400 [ 76.809343][ T5905] R13: dffffc0000000000 R14: ffff88802d94e450 R15: ffffffff8e3e1cc0 [ 76.809382][ T5905] write_ports+0xb99/0xfa0 [ 76.809408][ T5905] ? write_versions+0xe00/0xe00 [ 76.809434][ T5905] ? __lock_acquire+0x7eb0/0x7eb0 [ 76.809456][ T5905] ? __virt_addr_valid+0x10c/0x380 [ 76.809478][ T5905] ? __virt_addr_valid+0x10c/0x380 [ 76.809500][ T5905] ? __might_fault+0xaa/0x120 [ 76.809520][ T5905] ? __might_fault+0xc6/0x120 [ 76.809537][ T5905] ? __might_fault+0xaa/0x120 [ 76.809562][ T5905] ? simple_transaction_get+0x11d/0x140 [ 76.809585][ T5905] nfsctl_transaction_write+0x10c/0x150 [ 76.809608][ T5905] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 76.809632][ T5905] vfs_write+0x299/0x9a0 [ 76.809663][ T5905] ? file_end_write+0x250/0x250 [ 76.809690][ T5905] ? __fget_files+0x28/0x460 [ 76.809715][ T5905] ? __fget_files+0x3fc/0x460 [ 76.809748][ T5905] ? __fdget_pos+0x2a3/0x330 [ 76.809770][ T5905] ? ksys_write+0x74/0x260 [ 76.809797][ T5905] ksys_write+0x151/0x260 [ 76.809823][ T5905] ? __ia32_sys_read+0x90/0x90 [ 76.809849][ T5905] ? lockdep_hardirqs_on+0x98/0x150 [ 76.809877][ T5905] do_syscall_64+0x55/0xb0 [ 76.809896][ T5905] ? clear_bhb_loop+0x40/0x90 [ 76.809917][ T5905] ? clear_bhb_loop+0x40/0x90 [ 76.809950][ T5905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 76.809971][ T5905] RIP: 0033:0x7f9d8d59f559 [ 76.809984][ T5905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.809997][ T5905] RSP: 002b:00007f9d8e3e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 76.810015][ T5905] RAX: ffffffffffffffda RBX: 00007f9d8d825fa0 RCX: 00007f9d8d59f559 [ 76.810029][ T5905] RDX: 0000000000000005 RSI: 0000200000000180 RDI: 0000000000000003 [ 76.810039][ T5905] RBP: 00007f9d8d636b20 R08: 0000000000000000 R09: 0000000000000000 [ 76.810048][ T5905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.810057][ T5905] R13: 00007f9d8d826038 R14: 00007f9d8d825fa0 R15: 00007ffc83b1e838 [ 76.810081][ T5905] [ 76.810359][ T5905] Kernel Offset: disabled