last executing test programs: 5.756533238s ago: executing program 0 (id=22): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)=@newsa={0x170, 0x10, 0x5, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x1234, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x1, 0xa, 0x0, 0x0, 0x80}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "000102030405060708090a0b0c0d0e0f10111213"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x40, [0x0]}}]}, 0x170}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)=@newpolicy={0xfc, 0x13, 0x5, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x32}, 0xa, @in6=@loopback, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000400)="000102030405060708090a0b0c0d0e0f", 0x10, 0x0, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 5.66245446s ago: executing program 3 (id=23): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="10000000000a01000000000002000000", 0x10}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="14000000000a010601000000020000000800010074000000", 0x18}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="40000000000a01060100000002000000", 0x20}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="40000000000a01060100000002000000", 0x20}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="50000000000a01060100000002000000", 0x20}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="10000000010a01000500000002000000", 0x10}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x1a0b, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x1a0b, @loopback}, 0x10) accept(r1, 0x0, 0x0) sendto(r2, &(0x7f0000000800)="505249564d53472078203a2001444343204348415420636861742031363834333030392031303235010a", 0x2d, 0x0, 0x0, 0x0) 5.515508824s ago: executing program 0 (id=25): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @random="525400123456"}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @random="fe5400000001"}, 0x10) (async) syz_emit_ethernet(0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="fe5400000000fe540000000100040202"], 0x0) 5.402406097s ago: executing program 3 (id=26): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x0, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x0, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x0, 0x1e, 0x4}, @IFLA_NUM_RX_QUEUES={0x0, 0x1f, 0x4}, @IFLA_LINKINFO={0x0, 0x12, 0x0, 0x1, @veth={{}, {0x0, 0x2, 0x0, 0x1, @void}}}]}, 0x1}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{}, {0x0, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x0, 0x1, {0x2, [0x0, 0x1], 0x0, [0x2, 0x2], [0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x0, 0x2, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0x989680}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0x0, 0x3, 0x7fffffffffffffff}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x0, 0x5, 0x1}]}}]}, 0x1}}, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x1c9c380}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000400)=@delqdisc={0x0, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x1}}, 0x0) 5.164165773s ago: executing program 3 (id=28): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) bind(r1, &(0x7f0000000100)=@in={0x2, 0x0, @loopback}, 0x10) connect(r1, &(0x7f0000000200)=@in={0x2, 0x4e20, @loopback}, 0x10) accept(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300), 0x14) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000400)={0x0, 0x1, 0x1, 0x1}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x9c) nanosleep(&(0x7f0000000600)={0x0, 0x1dcd6500}, 0x0) 4.488747779s ago: executing program 0 (id=31): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:6789:/ \x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x6, 0x0, 0x0, 0x0) 4.171130387s ago: executing program 3 (id=34): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a0b, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='mon_addr\x00', &(0x7f0000000300)='127.0.0.1:6789\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000400)='ceph v027\x00'/152, 0x91) 3.562555512s ago: executing program 1 (id=42): r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @empty}}, 0x24) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="00112233", 0x4}], 0x1, &(0x7f0000000100)=[{0x10, 0x110, 0x1, "00112233"}], 0x10}, 0x0) 3.542078133s ago: executing program 2 (id=43): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newsa={0x174, 0x10, 0x5, 0x1, 0x0, {{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@remote, 0x1234, 0x32}, @in=@remote, {}, {}, {}, 0x0, 0x1, 0x2, 0x0, 0x0, 0x80}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @replay_esn_val={0x24, 0x17, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40, [0x0, 0x0]}}]}, 0x174}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newpolicy={0xfc, 0x13, 0x5, 0x2, 0x0, {{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x1234, 0x32}, 0x2, @in=@remote, 0x1}]}]}, 0xfc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000500)="12345678", 0x8, 0x0, &(0x7f0000000400)={0x2, 0x1234, @remote}, 0x10) 3.404582346s ago: executing program 1 (id=44): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000000), 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newsa={0x150, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x4d2, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x60, 0x14, {{'hmac(sha1)\x00'}, 0xa0, 0xa0, '01234567890123456789'}}]}, 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000100), 0x8) sendto$inet6(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0xa, 0x0, 0x0, @loopback}, 0x1c) 3.346488747s ago: executing program 0 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='udp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000300)="123456780000000000000002000186a30000000300000001000000010000001400"/60, 0x3c, 0x0, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='nfsd 127.0.0.1 9999999 domain\n', 0x1d) close(r3) 3.306219078s ago: executing program 2 (id=46): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="680000001800050602000000000000000a400000fe040001000000001400010020010db800a000000000000000000001080006000001000008000400010000000600150003000000200016800c000100", 0x52) 3.23642955s ago: executing program 1 (id=47): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in={0x2, 0x1f90, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r1, &(0x7f0000000040)=@in={0x2, 0x1f91, @loopback}, 0x10) connect(r1, &(0x7f0000000080)=@in={0x2, 0x1f90, @loopback}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000000000000080045000028000100004084389b7f0000017f0000011f911f9012345678000000000600000800000000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 3.110566973s ago: executing program 3 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) close(r3) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) write(r4, &(0x7f0000000500)='test', 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) write(r5, &(0x7f0000000500)='test', 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 3.086586974s ago: executing program 2 (id=50): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x0, 0x0, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x0, 0x0, 'bridge0\x00'}, @IFLA_LINKINFO={0x0, 0x0, 0x0, 0x0, @bridge={{0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x0, 0x0, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x0, 0x0, 'veth0\x00'}, @IFLA_LINKINFO={0x0, 0x0, 0x0, 0x0, @veth={{0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, @void}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@setlink={0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x0, 0x0, r1}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@setlink={0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@setlink={0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@setlink={0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x0, 0x0, 0x0, 0x0, @bridge={{0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, [@IFLA_BR_MCAST_SNOOPING={0x0, 0x0, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@RTM_NEWMDB={0x0, 0x54, 0x601, 0x0, 0x0, {0x7, r1}, [@MDBA_SET_ENTRY={0x0, 0x1, {r2, 0x1, 0x0, 0x0, {@ip4=@rand_addr=0x64010100, 0x800}}}]}}}, 0x0) 2.935667237s ago: executing program 1 (id=51): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e25, @loopback}}, 0x24) listen(r0, 0x4) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e25, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)='\x00\x00\x00\x00', 0x4}], 0x1, &(0x7f0000000500)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000700)="0000000100000001000000010000000100000001010400000001", 0x1c, 0x0, &(0x7f0000000800)={0x2, 0x4e25, @loopback}, 0x10) nanosleep(&(0x7f0000000900)={0x0, 0xbebc200}, 0x0) 2.825933971s ago: executing program 0 (id=52): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x0, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x0, 0x1, 0x2, 0x0, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x0, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x0, 0x3, 0x2, 0x0, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x0, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x0, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x0, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x0, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x64}]}]}, @NFT_MSG_NEWRULE={0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @masq={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x0, 0x1, 0x0}]}}}]}]}], {0x0, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xdc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10) write(r1, &(0x7f0000000400)="12345678", 0x8) 2.82581722s ago: executing program 2 (id=53): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000020)={&(0x7f0000000040)={0x20, 0x10, 0x1, 0x0, 0x0, {0x1}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 2.745333632s ago: executing program 2 (id=55): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000300), 0x20) read(r2, &(0x7f0000000700), 0x20) write(r3, &(0x7f0000000500)="000000020104", 0x6) read(r2, &(0x7f0000000310), 0x6) write(r3, &(0x7f0000000600)='reply\x00', 0x6) read(r2, &(0x7f000000031c), 0x6) sendto$inet(r0, &(0x7f0000000300), 0x22, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5000000}, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='world\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0200000000000000"}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000a00), &(0x7f0000000a20)=0x4) 2.666322594s ago: executing program 4 (id=56): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x20e6, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x20e6, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}], 0x1, &(0x7f0000000600)=[{0x0, 0x11, 0x67, "1000"}], 0x12}, 0x0) recvmsg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000900)=""/100, 0x64}], 0x1}, 0x0) 2.554503307s ago: executing program 1 (id=57): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./nfsd/portadd\x00', 0x1, 0x0) write(r0, &(0x7f0000000060)='2049\n\x00', 0x5) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000120)={0x2, 0x4e21, @loopback}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\x00', 0x1) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2.554141137s ago: executing program 2 (id=58): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='-2 -3 -4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='3\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) write(r4, &(0x7f0000000400)="80000028123456780000000000000002000186a300000003000000000000000700"/44, 0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 1.773345056s ago: executing program 4 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers\x00', 0x10000, 0x0) read(r0, &(0x7f0000000200), 0x1000) 1.709773158s ago: executing program 4 (id=60): pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r1, &(0x7f0000000300)={0x13, 0x65, 0xffff, 0x2000, 0x6, '9P2000'}, 0x13) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/foo\x00', 0x2, 0x0) 1.566600031s ago: executing program 4 (id=61): r0 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c) listen(r0, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x6) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local}, 0x1c) r2 = accept$inet6(r0, 0x0, 0x0) write(r1, &(0x7f0000000100)='hello', 0x5) write(r2, &(0x7f0000000140)='world', 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @local, @local, {[], {{0x4e22, 0x4e22, 0x1, 0x1, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) 726.469962ms ago: executing program 4 (id=62): r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='proto\x00', &(0x7f0000000180)='tcp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 644.987814ms ago: executing program 4 (id=63): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) 110.509497ms ago: executing program 3 (id=64): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10101}]}]}, 0x20}}, 0x0) 95.401768ms ago: executing program 0 (id=65): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="600000001800050400000000000000000a8000000000000000000000000000001400010020010db8000100000000000000000001080004000100000006001500030000002000160010000100010203040506070805000800010000000500070000000000", 0x60) write(r0, &(0x7f0000000100)="300000001a00010000000000000000000a80000000000000000000001400010020010db8000100000000000000000001", 0x30) 0s ago: executing program 1 (id=66): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2000000010000500000000000000000000000000020000000100000001000000", 0x20) write(r0, &(0x7f0000000100)="2c0000001400010000000000000000000a400000020000001400010020010db8000000000000000000000001", 0x2c) write(r0, &(0x7f0000000200)="600000001800050400000000000000000a8000000000000000000000000000001400010020010db800010000000000000000000108000400020000000600150003000000200016001000010001020304050607080500080001000000010000000500070000000000", 0x60) write(r0, &(0x7f0000000300)="240000001a00010300000000000000000a00"/36, 0x24) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. [ 71.471548][ T4258] cgroup: Unknown subsys name 'net' [ 71.605477][ T4258] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 72.877252][ T4258] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 74.183187][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.191944][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.201337][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.209328][ T4275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.218516][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.226836][ T4276] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.234696][ T4276] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.245369][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.255114][ T4286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.263308][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.270792][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.274528][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.278348][ T4286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.287494][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.295047][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.302443][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.310861][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.319544][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.327468][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.341387][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.348968][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.379905][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.380110][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.395849][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.403850][ T4286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.403857][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.420309][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.431708][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.440438][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.447905][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.828754][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 74.897044][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 74.935376][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 74.947519][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 75.006275][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.014231][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.022741][ T4279] device bridge_slave_0 entered promiscuous mode [ 75.056334][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.063705][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.073984][ T4279] device bridge_slave_1 entered promiscuous mode [ 75.097496][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 75.187608][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.197746][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.207612][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.215760][ T4277] device bridge_slave_0 entered promiscuous mode [ 75.230882][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.238325][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.249487][ T4271] device bridge_slave_0 entered promiscuous mode [ 75.258555][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.266579][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.275180][ T4278] device bridge_slave_0 entered promiscuous mode [ 75.285281][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.303778][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.312349][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.322659][ T4277] device bridge_slave_1 entered promiscuous mode [ 75.334172][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.341951][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.351091][ T4271] device bridge_slave_1 entered promiscuous mode [ 75.358593][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.368618][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.377413][ T4278] device bridge_slave_1 entered promiscuous mode [ 75.425051][ T4279] team0: Port device team_slave_0 added [ 75.457155][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.464696][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.473010][ T4270] device bridge_slave_0 entered promiscuous mode [ 75.490722][ T4279] team0: Port device team_slave_1 added [ 75.498408][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.514076][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.525620][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.535152][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.543230][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.551623][ T4270] device bridge_slave_1 entered promiscuous mode [ 75.565159][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.576276][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.587976][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.641120][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.649264][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.676820][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.699547][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.714399][ T4278] team0: Port device team_slave_0 added [ 75.720864][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.727834][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.755411][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.770060][ T4271] team0: Port device team_slave_0 added [ 75.778890][ T4277] team0: Port device team_slave_0 added [ 75.786239][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.797314][ T4278] team0: Port device team_slave_1 added [ 75.817533][ T4271] team0: Port device team_slave_1 added [ 75.834481][ T4277] team0: Port device team_slave_1 added [ 75.856827][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.867004][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.894820][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.930229][ T4270] team0: Port device team_slave_0 added [ 75.943344][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.953320][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.989369][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.016023][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.023447][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.051751][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.065777][ T4270] team0: Port device team_slave_1 added [ 76.085478][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.092742][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.120900][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.133377][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.141198][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.171318][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.196972][ T4279] device hsr_slave_0 entered promiscuous mode [ 76.205164][ T4279] device hsr_slave_1 entered promiscuous mode [ 76.220979][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.228240][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.258276][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.305924][ T4278] device hsr_slave_0 entered promiscuous mode [ 76.314267][ T4278] device hsr_slave_1 entered promiscuous mode [ 76.322444][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.330751][ T4278] Cannot create hsr debugfs directory [ 76.346272][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.354667][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.382391][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.428544][ T4277] device hsr_slave_0 entered promiscuous mode [ 76.435630][ T4277] device hsr_slave_1 entered promiscuous mode [ 76.440971][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 76.441963][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 76.448268][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 76.454369][ T49] Bluetooth: hci1: command 0x0409 tx timeout [ 76.468562][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.476620][ T4277] Cannot create hsr debugfs directory [ 76.484130][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.491355][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.517995][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.528881][ T49] Bluetooth: hci4: command 0x0409 tx timeout [ 76.568685][ T4271] device hsr_slave_0 entered promiscuous mode [ 76.575606][ T4271] device hsr_slave_1 entered promiscuous mode [ 76.582679][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.590779][ T4271] Cannot create hsr debugfs directory [ 76.721713][ T4270] device hsr_slave_0 entered promiscuous mode [ 76.728865][ T4270] device hsr_slave_1 entered promiscuous mode [ 76.736350][ T4270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.744359][ T4270] Cannot create hsr debugfs directory [ 76.956953][ T4279] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.966924][ T4279] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.996067][ T4279] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.035357][ T4279] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.066482][ T4278] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.078597][ T4278] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.098764][ T4278] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.108485][ T4278] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.189061][ T4271] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.211804][ T4271] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.225057][ T4271] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.251055][ T4271] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.344384][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.375329][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.386147][ T4270] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.398765][ T4270] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.435595][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.445793][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.461345][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.471687][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.482498][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.489989][ T4297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.499109][ T4270] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.510105][ T4270] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.521537][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.535753][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.557004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.571011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.583894][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.591251][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.601350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.632596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.645333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.655955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.667966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.676658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.685651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.704137][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.723983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.737081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.746762][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.754220][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.764909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.774619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.785005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.797813][ T4277] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.813333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.823130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.833418][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.841308][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.851440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.862502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.884213][ T4277] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.898234][ T4277] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.921454][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.933256][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.944274][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.955014][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.964176][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.976884][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.991513][ T4277] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.005279][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.024871][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.035596][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.054724][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.087622][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.098362][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.114526][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.126121][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.139204][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.154701][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.165385][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.176836][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.188337][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.217496][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.258613][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.281582][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.295758][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.303496][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.318690][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.330497][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.345491][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.353421][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.369264][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.420354][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.437042][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.456586][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.472005][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.492768][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.503839][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.512945][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.521351][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 78.521370][ T49] Bluetooth: hci3: command 0x041b tx timeout [ 78.527521][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 78.533646][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 78.541817][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.554623][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.580329][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.600350][ T49] Bluetooth: hci4: command 0x041b tx timeout [ 78.602289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.630960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.643404][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.656416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.666061][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.675361][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.685104][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.698827][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.720397][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.746345][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.757066][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.786189][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.795907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.807563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.816864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.825262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.833616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.842939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.868620][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.879095][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.888515][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.895973][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.907110][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.916859][ T4279] device veth0_vlan entered promiscuous mode [ 78.928383][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.942084][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.952528][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.960171][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.997531][ T4279] device veth1_vlan entered promiscuous mode [ 79.011463][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.023123][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.041182][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.056902][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.105589][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.122425][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.137130][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.148295][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.165733][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.177774][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.191298][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.199502][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.210741][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.229278][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.238199][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.266354][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.285679][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.298437][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.313293][ T4278] device veth0_vlan entered promiscuous mode [ 79.325612][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.343233][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.351909][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.371967][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.385558][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.393723][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.405035][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.424053][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.439024][ T4278] device veth1_vlan entered promiscuous mode [ 79.456108][ T4279] device veth0_macvtap entered promiscuous mode [ 79.465289][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.477256][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.486675][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.503725][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.515930][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.528325][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.544218][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.551850][ T4297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.561706][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.571171][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.580420][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.588323][ T4297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.597080][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.635583][ T4279] device veth1_macvtap entered promiscuous mode [ 79.655878][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.672347][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.685690][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.718063][ T4278] device veth0_macvtap entered promiscuous mode [ 79.747216][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.762372][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.792082][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.810595][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.831754][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.850546][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.864262][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.888510][ T4277] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.902948][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.930480][ T4278] device veth1_macvtap entered promiscuous mode [ 79.937914][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.947441][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.971512][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.991553][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.005496][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.015798][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.027376][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.043396][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.077335][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.096575][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.109459][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.124673][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.135732][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.148683][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.164080][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.175300][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.194183][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.206232][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.228008][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.246698][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.258780][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.270046][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.278909][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.289541][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.311520][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.321987][ T4279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.334763][ T4279] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.345582][ T4279] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.357466][ T4279] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.371707][ T4278] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.384543][ T4278] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.394009][ T4278] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.407375][ T4278] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.435931][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.444181][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.452668][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.462644][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.487907][ T4271] device veth0_vlan entered promiscuous mode [ 80.533591][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.547570][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.600106][ T49] Bluetooth: hci3: command 0x040f tx timeout [ 80.606171][ T49] Bluetooth: hci1: command 0x040f tx timeout [ 80.612734][ T4276] Bluetooth: hci0: command 0x040f tx timeout [ 80.618778][ T4276] Bluetooth: hci2: command 0x040f tx timeout [ 80.644971][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.657031][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.666150][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.675950][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.685058][ T49] Bluetooth: hci4: command 0x040f tx timeout [ 80.699338][ T4271] device veth1_vlan entered promiscuous mode [ 80.738432][ T4270] device veth0_vlan entered promiscuous mode [ 80.761808][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.770426][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.778996][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.788280][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.796467][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.817234][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.840766][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.856271][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.865289][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.887493][ T4270] device veth1_vlan entered promiscuous mode [ 80.917704][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.930134][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.964254][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.973074][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.981826][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.991477][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.001629][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.010579][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.018647][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.028146][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.061467][ T4271] device veth0_macvtap entered promiscuous mode [ 81.074788][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.084819][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.104202][ T4270] device veth0_macvtap entered promiscuous mode [ 81.121410][ T4271] device veth1_macvtap entered promiscuous mode [ 81.135192][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.144284][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.153450][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.166835][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.176200][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.197217][ T4270] device veth1_macvtap entered promiscuous mode [ 81.215583][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.226682][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.241854][ T4277] device veth0_vlan entered promiscuous mode [ 81.249104][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.264230][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.267805][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.284572][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.294582][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.306075][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.318800][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.333308][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.342298][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.351100][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.359476][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.368390][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.387735][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.388224][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.398989][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.419244][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.429674][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.430074][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.448923][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.462233][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.474248][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.485559][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.496059][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.506323][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.517246][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.536224][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.547041][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.571602][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.581609][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.591040][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.600796][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.612788][ T4270] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.622576][ T4270] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.634251][ T4270] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.645940][ T4270] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.660572][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.673192][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.683288][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.694211][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.704962][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.715539][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.729035][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.741863][ T4277] device veth1_vlan entered promiscuous mode [ 81.762660][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.771427][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.780688][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.798270][ T4271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.808829][ T4271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.847731][ T4271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.857480][ T4271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.957565][ T4357] tipc: Started in network mode [ 81.982345][ T4357] tipc: Node identity d271594f52ee, cluster identity 4711 [ 81.994394][ T4357] tipc: Enabled bearer , priority 0 [ 82.010546][ T4277] device veth0_macvtap entered promiscuous mode [ 82.035424][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.046280][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.055803][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.068615][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.107865][ T4356] tipc: Disabling bearer [ 82.137065][ T4277] device veth1_macvtap entered promiscuous mode [ 82.160698][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.194815][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.206203][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.230202][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.261498][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.279304][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.310156][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.321970][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.333248][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.349097][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.364814][ T4364] FAULT_INJECTION: forcing a failure. [ 82.364814][ T4364] name fail_futex, interval 1, probability 0, space 0, times 1 [ 82.366991][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.379604][ T4364] CPU: 0 PID: 4364 Comm: syz.1.7 Not tainted syzkaller #0 [ 82.391241][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.395555][ T4364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 82.414212][ T4364] Call Trace: [ 82.417495][ T4364] [ 82.420525][ T4364] dump_stack_lvl+0x188/0x24e [ 82.424087][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.425218][ T4364] ? lock_chain_count+0x20/0x20 [ 82.437442][ T4364] ? show_regs_print_info+0x12/0x12 [ 82.442890][ T4364] ? load_image+0x410/0x410 [ 82.447447][ T4364] should_fail_ex+0x390/0x4c0 [ 82.452225][ T4364] get_futex_key+0x1b1/0x1000 [ 82.457114][ T4364] ? futex_setup_timer+0xc0/0xc0 [ 82.462239][ T4364] futex_wake+0x123/0x4f0 [ 82.466966][ T4364] ? futex_wake_mark+0x150/0x150 [ 82.471924][ T4364] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 82.478174][ T4364] ? lockdep_hardirqs_on+0x94/0x140 [ 82.483381][ T4364] do_futex+0x2e2/0x320 [ 82.487672][ T4364] ? _copy_from_user+0x10b/0x170 [ 82.492645][ T4364] ? __ia32_sys_get_robust_list+0x100/0x100 [ 82.498758][ T4364] __se_sys_futex+0x381/0x410 [ 82.503566][ T4364] ? __x64_sys_futex+0xf0/0xf0 [ 82.508335][ T4364] ? __x64_sys_futex+0x1d/0xf0 [ 82.513283][ T4364] do_syscall_64+0x4c/0xa0 [ 82.517788][ T4364] ? clear_bhb_loop+0x60/0xb0 [ 82.522566][ T4364] ? clear_bhb_loop+0x60/0xb0 [ 82.527270][ T4364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 82.533264][ T4364] RIP: 0033:0x7f587cf9de99 [ 82.537712][ T4364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.557435][ T4364] RSP: 002b:00007ffe9b62aa58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 82.566401][ T4364] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f587cf9de99 [ 82.574574][ T4364] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f587d225fa8 [ 82.582551][ T4364] RBP: 0000000000001530 R08: 0000000000000008 R09: 0000000000000000 [ 82.590721][ T4364] R10: 00007f587d225fa0 R11: 0000000000000246 R12: 0000000000000000 [ 82.598874][ T4364] R13: 00007f587d225fac R14: 00007f587d225fa8 R15: 00007f587d225fa0 [ 82.606965][ T4364] [ 82.623463][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.634434][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.644493][ T4364] FAULT_INJECTION: forcing a failure. [ 82.644493][ T4364] name fail_futex, interval 1, probability 0, space 0, times 0 [ 82.670147][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.681413][ T49] Bluetooth: hci2: command 0x0419 tx timeout [ 82.685892][ T4364] CPU: 0 PID: 4364 Comm: syz.1.7 Not tainted syzkaller #0 [ 82.689416][ T49] Bluetooth: hci1: command 0x0419 tx timeout [ 82.695459][ T4364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 82.695477][ T4364] Call Trace: [ 82.695486][ T4364] [ 82.695493][ T4364] dump_stack_lvl+0x188/0x24e [ 82.695526][ T4364] ? show_regs_print_info+0x12/0x12 [ 82.701701][ T49] Bluetooth: hci0: command 0x0419 tx timeout [ 82.711740][ T4364] ? load_image+0x410/0x410 [ 82.711772][ T4364] ? do_futex+0x2e2/0x320 [ 82.711788][ T4364] ? _copy_from_user+0x10b/0x170 [ 82.711811][ T4364] ? __ia32_sys_get_robust_list+0x100/0x100 [ 82.716239][ T49] Bluetooth: hci3: command 0x0419 tx timeout [ 82.718284][ T4364] should_fail_ex+0x390/0x4c0 [ 82.718317][ T4364] __se_sys_futex+0x18b/0x410 [ 82.724914][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.728419][ T4364] ? __x64_sys_futex+0xf0/0xf0 [ 82.728451][ T4364] ? __x64_sys_futex+0x1d/0xf0 [ 82.728471][ T4364] do_syscall_64+0x4c/0xa0 [ 82.736945][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.739089][ T4364] ? clear_bhb_loop+0x60/0xb0 [ 82.739125][ T4364] ? clear_bhb_loop+0x60/0xb0 [ 82.745411][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.748545][ T4364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 82.748579][ T4364] RIP: 0033:0x7f587cf9de99 [ 82.748598][ T4364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.755515][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.761639][ T4364] RSP: 002b:00007ffe9b62aa58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 82.761666][ T4364] RAX: ffffffffffffffda RBX: 00000000000142ac RCX: 00007f587cf9de99 [ 82.761678][ T4364] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f587d225fac [ 82.761689][ T4364] RBP: 0000000000000032 R08: 0023b740913c9ecd R09: 0000000000000000 [ 82.761700][ T4364] R10: 00007ffe9b62ab60 R11: 0000000000000246 R12: 00007ffe9b62ab80 [ 82.761712][ T4364] R13: 00007f587d225fac R14: 00000000000142de R15: 00007ffe9b62ab60 [ 82.767344][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.771422][ T4364] [ 82.829120][ T4364] FAULT_INJECTION: forcing a failure. [ 82.829120][ T4364] name fail_futex, interval 1, probability 0, space 0, times 0 [ 82.841578][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.862560][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 82.876999][ T4364] CPU: 0 PID: 4364 Comm: syz.1.7 Not tainted syzkaller #0 [ 82.885401][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.891823][ T4364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 82.891837][ T4364] Call Trace: [ 82.891844][ T4364] [ 82.891852][ T4364] dump_stack_lvl+0x188/0x24e [ 82.891881][ T4364] ? debug_objects_fill_pool+0x87/0x780 [ 82.901842][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.908195][ T4364] ? show_regs_print_info+0x12/0x12 [ 82.932861][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.934372][ T4364] ? load_image+0x410/0x410 [ 82.937564][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.952015][ T4364] should_fail_ex+0x390/0x4c0 [ 82.952055][ T4364] get_futex_key+0x1b1/0x1000 [ 82.952079][ T4364] ? __lock_acquire+0x7c40/0x7c40 [ 82.952106][ T4364] ? futex_setup_timer+0xc0/0xc0 [ 82.985840][ T4364] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 82.985880][ T4364] ? lockdep_hardirqs_on+0x94/0x140 [ 82.985898][ T4364] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 82.985918][ T4364] futex_wait_setup+0xb8/0x270 [ 82.985939][ T4364] ? futex_wait_multiple+0x920/0x920 [ 82.985960][ T4364] ? ktime_add_safe+0x34/0x60 [ 82.985980][ T4364] futex_wait+0x1b8/0x5c0 [ 82.986002][ T4364] ? futex_wait_setup+0x270/0x270 [ 82.986021][ T4364] ? __remove_hrtimer+0x470/0x470 [ 82.986054][ T4364] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 82.986074][ T4364] ? lockdep_hardirqs_on+0x94/0x140 [ 82.986095][ T4364] do_futex+0x310/0x320 [ 82.986110][ T4364] ? _copy_from_user+0x10b/0x170 [ 82.986130][ T4364] ? __ia32_sys_get_robust_list+0x100/0x100 [ 82.986150][ T4364] ? ktime_get+0x247/0x270 [ 82.986167][ T4364] __se_sys_futex+0x381/0x410 [ 82.986188][ T4364] ? __x64_sys_futex+0xf0/0xf0 [ 82.986211][ T4364] ? __x64_sys_futex+0x1d/0xf0 [ 82.986229][ T4364] do_syscall_64+0x4c/0xa0 [ 82.986251][ T4364] ? clear_bhb_loop+0x60/0xb0 [ 82.986270][ T4364] ? clear_bhb_loop+0x60/0xb0 [ 82.986292][ T4364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 82.986314][ T4364] RIP: 0033:0x7f587cf9de99 [ 82.986332][ T4364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.986347][ T4364] RSP: 002b:00007ffe9b62aa58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 82.986368][ T4364] RAX: ffffffffffffffda RBX: 0000000000014365 RCX: 00007f587cf9de99 [ 82.986382][ T4364] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f587d225fac [ 82.986394][ T4364] RBP: 0000000000000032 R08: 002e71d58eff9db3 R09: 0000000000000000 [ 82.986406][ T4364] R10: 00007ffe9b62ab60 R11: 0000000000000246 R12: 00007ffe9b62ab80 [ 82.986418][ T4364] R13: 00007f587d225fac R14: 0000000000014397 R15: 00007ffe9b62ab60 [ 82.986444][ T4364] [ 83.224902][ T4364] FAULT_INJECTION: forcing a failure. [ 83.224902][ T4364] name failslab, interval 1, probability 0, space 0, times 1 [ 83.279270][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.283327][ T4364] CPU: 0 PID: 4364 Comm: syz.1.7 Not tainted syzkaller #0 [ 83.294863][ T4364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 83.305296][ T4364] Call Trace: [ 83.309115][ T4364] [ 83.310513][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.312243][ T4364] dump_stack_lvl+0x188/0x24e [ 83.325608][ T4364] ? show_regs_print_info+0x12/0x12 [ 83.329267][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.330818][ T4364] ? load_image+0x410/0x410 [ 83.330846][ T4364] ? __might_sleep+0xd0/0xd0 [ 83.330864][ T4364] ? __lock_acquire+0x7c40/0x7c40 [ 83.330889][ T4364] should_fail_ex+0x390/0x4c0 [ 83.330916][ T4364] should_failslab+0x5/0x20 [ 83.330932][ T4364] slab_pre_alloc_hook+0x59/0x300 [ 83.330953][ T4364] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 83.330979][ T4364] kmem_cache_alloc+0x56/0x2f0 [ 83.330996][ T4364] ? jbd2__journal_start+0x13c/0x5a0 [ 83.331021][ T4364] jbd2__journal_start+0x13c/0x5a0 [ 83.331040][ T4364] __ext4_journal_start_sb+0x187/0x3d0 [ 83.331064][ T4364] ext4_dirty_inode+0x8b/0x100 [ 83.331081][ T4364] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 83.331099][ T4364] __mark_inode_dirty+0x2e7/0xe80 [ 83.331127][ T4364] __file_update_time+0x21d/0x240 [ 83.331152][ T4364] file_update_time+0x2f3/0x370 [ 83.331173][ T4364] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 83.331196][ T4364] ? __file_remove_privs+0x5f0/0x5f0 [ 83.331225][ T4364] ext4_page_mkwrite+0x1a9/0x10d0 [ 83.331253][ T4364] ? ext4_change_inode_journal_flag+0x710/0x710 [ 83.348552][ T4277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.352937][ T4364] ? count_memcg_event_mm+0x8a/0x3c0 [ 83.352967][ T4364] ? put_page+0x270/0x270 [ 83.352987][ T4364] do_page_mkwrite+0x16b/0x5c0 [ 83.362795][ T4277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.367498][ T4364] handle_mm_fault+0x199c/0x3d40 [ 83.374285][ T4277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.379037][ T4364] ? mt_find+0x157/0x830 [ 83.494031][ T4364] ? numa_migrate_prep+0x250/0x250 [ 83.499359][ T4364] ? lock_chain_count+0x20/0x20 [ 83.504237][ T4364] ? ktime_get+0x247/0x270 [ 83.508857][ T4364] ? lock_mm_and_find_vma+0xae/0x2f0 [ 83.514532][ T4364] do_user_addr_fault+0x58e/0xb20 [ 83.519855][ T4364] exc_page_fault+0x60/0x100 [ 83.524769][ T4364] ? clear_bhb_loop+0x60/0xb0 [ 83.529668][ T4364] asm_exc_page_fault+0x22/0x30 [ 83.534638][ T4364] RIP: 0033:0x7f587ce72d52 [ 83.539060][ T4364] Code: 00 00 00 eb 39 0f 1f 00 be 08 00 00 00 48 89 df e8 13 8c fe ff 48 8b 53 40 48 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b [ 83.559054][ T4364] RSP: 002b:00007ffe9b62a950 EFLAGS: 00010202 [ 83.565675][ T4364] RAX: 0000000000007008 RBX: 00007f587dd55720 RCX: 0000000000000000 [ 83.573752][ T4364] RDX: 0000001b2fc1d000 RSI: 0000000000000008 RDI: 00007f587dd55720 [ 83.581731][ T4364] RBP: 0000000000000059 R08: 00007f587d210000 R09: 00007f587d226038 [ 83.589807][ T4364] R10: 0000000000000003 R11: 000000000000000a R12: ffffffff81e139ba [ 83.598137][ T4364] R13: 00007f587d226038 R14: 000000000000003f R15: ffffffffffff9000 [ 83.606730][ T4364] ? vfs_write+0x17a/0x9a0 [ 83.611282][ T4364] [ 83.647641][ T4277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.657019][ T4364] FAULT_INJECTION: forcing a failure. [ 83.657019][ T4364] name fail_futex, interval 1, probability 0, space 0, times 0 [ 83.670464][ T4364] CPU: 1 PID: 4364 Comm: syz.1.7 Not tainted syzkaller #0 [ 83.676333][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.677677][ T4364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 83.677689][ T4364] Call Trace: [ 83.677695][ T4364] [ 83.677702][ T4364] dump_stack_lvl+0x188/0x24e [ 83.692852][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.695930][ T4364] ? show_regs_print_info+0x12/0x12 [ 83.695963][ T4364] ? load_image+0x410/0x410 [ 83.695982][ T4364] ? do_futex+0x2e2/0x320 [ 83.695998][ T4364] ? _copy_from_user+0x10b/0x170 [ 83.696020][ T4364] ? __ia32_sys_get_robust_list+0x100/0x100 [ 83.696041][ T4364] should_fail_ex+0x390/0x4c0 [ 83.696067][ T4364] __se_sys_futex+0x18b/0x410 [ 83.696090][ T4364] ? __x64_sys_futex+0xf0/0xf0 [ 83.696112][ T4364] ? __x64_sys_futex+0x1d/0xf0 [ 83.703969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.707183][ T4364] do_syscall_64+0x4c/0xa0 [ 83.707215][ T4364] ? clear_bhb_loop+0x60/0xb0 [ 83.777290][ T4364] ? clear_bhb_loop+0x60/0xb0 [ 83.782263][ T4364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.788592][ T4364] RIP: 0033:0x7f587cf9de99 [ 83.793217][ T4364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.813550][ T4364] RSP: 002b:00007ffe9b62aa58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 83.823223][ T4364] RAX: ffffffffffffffda RBX: 00000000000146a1 RCX: 00007f587cf9de99 [ 83.831941][ T4364] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f587d225fac [ 83.840811][ T4364] RBP: 0000000000000032 R08: 00244fd704ad6df4 R09: 0000000000000000 [ 83.849948][ T4364] R10: 00007ffe9b62ab60 R11: 0000000000000246 R12: 00007ffe9b62ab80 [ 83.858646][ T4364] R13: 00007f587d225fac R14: 00000000000146d3 R15: 00007ffe9b62ab60 [ 83.867147][ T4364] [ 83.906982][ T4364] FAULT_INJECTION: forcing a failure. [ 83.906982][ T4364] name fail_futex, interval 1, probability 0, space 0, times 0 [ 83.979461][ T4297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.008387][ T4297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.049772][ T4364] CPU: 0 PID: 4364 Comm: syz.1.7 Not tainted syzkaller #0 [ 84.057125][ T4364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 84.067820][ T4364] Call Trace: [ 84.071179][ T4364] [ 84.074237][ T4364] dump_stack_lvl+0x188/0x24e [ 84.079398][ T4364] ? show_regs_print_info+0x12/0x12 [ 84.084812][ T4364] ? load_image+0x410/0x410 [ 84.089353][ T4364] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 84.095642][ T4364] should_fail_ex+0x390/0x4c0 [ 84.100382][ T4364] get_futex_key+0x1b1/0x1000 [ 84.105164][ T4364] ? fault_dirty_shared_page+0x25f/0x3c0 [ 84.110838][ T4364] ? __up_read+0x2b4/0x6b0 [ 84.115295][ T4364] ? futex_setup_timer+0xc0/0xc0 [ 84.120258][ T4364] futex_wake+0x123/0x4f0 [ 84.124704][ T4364] ? fault_dirty_shared_page+0x279/0x3c0 [ 84.130977][ T4364] ? futex_wake_mark+0x150/0x150 [ 84.136397][ T4364] ? handle_mm_fault+0x288d/0x3d40 [ 84.141857][ T4364] do_futex+0x2e2/0x320 [ 84.146145][ T4364] ? numa_migrate_prep+0x250/0x250 [ 84.151361][ T4364] ? __ia32_sys_get_robust_list+0x100/0x100 [ 84.157345][ T4364] __se_sys_futex+0x381/0x410 [ 84.162232][ T4364] ? __x64_sys_futex+0xf0/0xf0 [ 84.167444][ T4364] ? __x64_sys_futex+0x1d/0xf0 [ 84.172221][ T4364] do_syscall_64+0x4c/0xa0 [ 84.176809][ T4364] ? clear_bhb_loop+0x60/0xb0 [ 84.181587][ T4364] ? clear_bhb_loop+0x60/0xb0 [ 84.186288][ T4364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.192190][ T4364] RIP: 0033:0x7f587cf9de99 [ 84.196782][ T4364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.216456][ T4364] RSP: 002b:00007ffe9b62aa58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 84.224962][ T4364] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f587cf9de99 [ 84.233136][ T4364] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f587d225fa8 [ 84.241289][ T4364] RBP: 0000000000001ec6 R08: 0000000000000004 R09: 0000000000000000 [ 84.249286][ T4364] R10: 00007f587d225fa0 R11: 0000000000000246 R12: 0000000000000000 [ 84.257532][ T4364] R13: 00007f587d225fac R14: 00007f587d225fa8 R15: 00007f587d225fa0 [ 84.265821][ T4364] [ 84.285621][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.330551][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.349181][ T4364] FAULT_INJECTION: forcing a failure. [ 84.349181][ T4364] name fail_futex, interval 1, probability 0, space 0, times 0 [ 84.363485][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.394512][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.413740][ T4364] CPU: 0 PID: 4364 Comm: syz.1.7 Not tainted syzkaller #0 [ 84.420921][ T4364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 84.431080][ T4364] Call Trace: [ 84.434731][ T4364] [ 84.437847][ T4364] dump_stack_lvl+0x188/0x24e [ 84.442670][ T4364] ? debug_objects_fill_pool+0x87/0x780 [ 84.448332][ T4364] ? show_regs_print_info+0x12/0x12 [ 84.453652][ T4364] ? load_image+0x410/0x410 [ 84.458281][ T4364] should_fail_ex+0x390/0x4c0 [ 84.463265][ T4364] get_futex_key+0x1b1/0x1000 [ 84.468030][ T4364] ? __lock_acquire+0x7c40/0x7c40 [ 84.473357][ T4364] ? futex_setup_timer+0xc0/0xc0 [ 84.478425][ T4364] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 84.484537][ T4364] ? lockdep_hardirqs_on+0x94/0x140 [ 84.489953][ T4364] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 84.495968][ T4364] futex_wait_setup+0xb8/0x270 [ 84.500856][ T4364] ? futex_wait_multiple+0x920/0x920 [ 84.506344][ T4364] ? ktime_add_safe+0x34/0x60 [ 84.511397][ T4364] futex_wait+0x1b8/0x5c0 [ 84.515801][ T4364] ? futex_wait_setup+0x270/0x270 [ 84.521036][ T4364] ? __remove_hrtimer+0x470/0x470 [ 84.526498][ T4364] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 84.532855][ T4364] ? lockdep_hardirqs_on+0x94/0x140 [ 84.538168][ T4364] do_futex+0x310/0x320 [ 84.542344][ T4364] ? _copy_from_user+0x10b/0x170 [ 84.547526][ T4364] ? __ia32_sys_get_robust_list+0x100/0x100 [ 84.553517][ T4364] ? sched_clock_cpu+0x6e/0x260 [ 84.558373][ T4364] ? ktime_get+0x247/0x270 [ 84.562983][ T4364] __se_sys_futex+0x381/0x410 [ 84.567688][ T4364] ? __x64_sys_futex+0xf0/0xf0 [ 84.572470][ T4364] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 84.578619][ T4364] ? __x64_sys_futex+0x1d/0xf0 [ 84.583398][ T4364] do_syscall_64+0x4c/0xa0 [ 84.587906][ T4364] ? clear_bhb_loop+0x60/0xb0 [ 84.592777][ T4364] ? clear_bhb_loop+0x60/0xb0 [ 84.597522][ T4364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.603538][ T4364] RIP: 0033:0x7f587cf9de99 [ 84.608128][ T4364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.628123][ T4364] RSP: 002b:00007ffe9b62aa58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 84.636809][ T4364] RAX: ffffffffffffffda RBX: 0000000000014955 RCX: 00007f587cf9de99 [ 84.645396][ T4364] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f587d22609c [ 84.653465][ T4364] RBP: 0000000000000032 R08: 0011d59d7c18e9bb R09: 0000000000000000 [ 84.661796][ T4364] R10: 00007ffe9b62ab60 R11: 0000000000000246 R12: 00007ffe9b62ab80 [ 84.670152][ T4364] R13: 00007f587d22609c R14: 0000000000014987 R15: 00007ffe9b62ab60 [ 84.678319][ T4364] [ 84.693028][ T4376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.701297][ T4376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.714924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.791809][ T4364] FAULT_INJECTION: forcing a failure. [ 84.791809][ T4364] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 84.817378][ T4364] CPU: 1 PID: 4364 Comm: syz.1.7 Not tainted syzkaller #0 [ 84.824640][ T4364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 84.834890][ T4364] Call Trace: [ 84.838285][ T4364] [ 84.841327][ T4364] dump_stack_lvl+0x188/0x24e [ 84.846132][ T4364] ? show_regs_print_info+0x12/0x12 [ 84.851377][ T4364] ? load_image+0x410/0x410 [ 84.855926][ T4364] ? __lock_acquire+0x7c40/0x7c40 [ 84.861166][ T4364] should_fail_ex+0x390/0x4c0 [ 84.866059][ T4364] _copy_from_user+0x2c/0x170 [ 84.871044][ T4364] get_timespec64+0x93/0x1b0 [ 84.876480][ T4364] ? timespec64_add_safe+0x1f0/0x1f0 [ 84.882252][ T4364] ? ktime_get+0x247/0x270 [ 84.886811][ T4364] __se_sys_clock_nanosleep+0x1c3/0x3a0 [ 84.892403][ T4364] ? __x64_sys_clock_nanosleep+0xa0/0xa0 [ 84.898176][ T4364] ? lockdep_hardirqs_on+0x94/0x140 [ 84.903669][ T4364] do_syscall_64+0x4c/0xa0 [ 84.908211][ T4364] ? clear_bhb_loop+0x60/0xb0 [ 84.913108][ T4364] ? clear_bhb_loop+0x60/0xb0 [ 84.918345][ T4364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.924278][ T4364] RIP: 0033:0x7f587cf5e6ce [ 84.928940][ T4364] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 84.950402][ T4364] RSP: 002b:00007ffe9b62a9d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 84.959486][ T4364] RAX: ffffffffffffffda RBX: 000055558024f500 RCX: 00007f587cf5e6ce [ 84.968011][ T4364] RDX: 00007ffe9b62aa30 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.976364][ T4364] RBP: 00007f587d227da0 R08: 0000000000000000 R09: 0000000000000000 [ 84.984569][ T4364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000014b70 [ 84.992567][ T4364] R13: 00007f587d22609c R14: 0000000000014b3e R15: 00007f587d226090 [ 85.000788][ T4364] [ 85.015977][ T4375] sctp: failed to load transform for md5: -2 [ 85.183057][ T4401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 85.489863][ T126] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.660041][ T4377] NFSD: attempt to initialize umh client tracking in a container ignored. [ 85.670445][ T4377] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 85.679569][ T4377] NFSD: Unable to initialize client recovery tracking! (-22) [ 85.688201][ T4377] NFSD: starting 90-second grace period (net f00005f1) [ 85.700522][ T126] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 85.717306][ T126] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.729459][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 85.737644][ T126] usb 5-1: SerialNumber: syz [ 85.858810][ T4386] svc: failed to register nfsdv3 RPC service (errno 111). [ 85.872998][ T4386] svc: failed to register nfsaclv3 RPC service (errno 111). [ 85.975262][ T4406] svc: failed to register nfsdv3 RPC service (errno 111). [ 85.990092][ T4406] svc: failed to register nfsaclv3 RPC service (errno 111). [ 86.027474][ T4410] svc: failed to register nfsdv3 RPC service (errno 111). [ 86.036695][ T4410] svc: failed to register nfsaclv3 RPC service (errno 111). [ 86.116112][ T4420] svc: failed to register nfsdv3 RPC service (errno 111). [ 86.127086][ T4420] svc: failed to register nfsaclv3 RPC service (errno 111). [ 86.383859][ T4429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 86.426764][ T4429] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18'. [ 86.457590][ T126] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 86.464647][ T4429] netlink: 'syz.1.18': attribute type 1 has an invalid length. [ 86.841794][ T14] cfg80211: failed to load regulatory.db [ 86.918371][ T4446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.24'. [ 87.433089][ T4345] usb 5-1: USB disconnect, device number 2 [ 87.459466][ T4345] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 87.809992][ T4479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.30'. [ 87.857511][ T4479] netlink: 92 bytes leftover after parsing attributes in process `syz.2.30'. [ 88.062268][ T4317] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 88.088780][ T4317] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 88.360996][ T4317] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 88.417102][ T4499] netlink: 260 bytes leftover after parsing attributes in process `syz.2.36'. [ 88.537017][ T4504] xt_ecn: cannot match TCP bits for non-tcp packets [ 88.828362][ T4483] ceph: No mds server is up or the cluster is laggy [ 88.891983][ T4317] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 89.183875][ T4528] svc: failed to register lockdv1 RPC service (errno 111). [ 89.213518][ T4528] lockd_up: makesock failed, error=-111 [ 89.407693][ T4542] Zero length message leads to an empty skb [ 89.615348][ T4551] netlink: 16 bytes leftover after parsing attributes in process `syz.4.54'. [ 89.659731][ T4551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.54'. [ 90.660060][ T4541] NFSD: attempt to initialize umh client tracking in a container ignored. [ 90.671610][ T4541] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 90.683198][ T4541] NFSD: Unable to initialize client recovery tracking! (-22) [ 90.691325][ T4541] NFSD: starting 90-second grace period (net f00005f1) [ 91.772385][ T14] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 92.050699][ T4543] NFSD: attempt to initialize umh client tracking in a container ignored. [ 92.059883][ T4543] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 92.060213][ T4316] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 92.069161][ T4543] NFSD: Unable to initialize client recovery tracking! (-22) [ 92.084421][ T4543] NFSD: starting 90-second grace period (net f00005f1) [ 92.229890][ T4562] svc: failed to register nfsdv3 RPC service (errno 512). [ 92.238245][ T4562] svc: failed to register nfsaclv3 RPC service (errno 512). [ 92.316763][ T4586] netlink: 68 bytes leftover after parsing attributes in process `syz.0.65'. [ 92.362415][ T4565] ================================================================== [ 92.371879][ T4565] BUG: KASAN: use-after-free in nfsd_create_serv+0x11b/0x700 [ 92.379734][ T4565] Write of size 4 at addr ffff88801de7b050 by task syz.2.58/4565 [ 92.388714][ T4565] [ 92.391064][ T4565] CPU: 0 PID: 4565 Comm: syz.2.58 Not tainted syzkaller #0 [ 92.398644][ T4565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 92.408983][ T4565] Call Trace: [ 92.412367][ T4565] [ 92.415505][ T4565] dump_stack_lvl+0x188/0x24e [ 92.420311][ T4565] ? read_lock_is_recursive+0x10/0x10 [ 92.426709][ T4565] ? show_regs_print_info+0x12/0x12 [ 92.432695][ T4565] ? load_image+0x410/0x410 [ 92.437766][ T4565] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 92.443360][ T4565] ? __virt_addr_valid+0x188/0x540 [ 92.448954][ T4565] ? __virt_addr_valid+0x467/0x540 [ 92.454281][ T4565] ? nfsd_create_serv+0x11b/0x700 [ 92.459786][ T4565] print_report+0xa8/0x210 [ 92.464343][ T4565] kasan_report+0x10b/0x140 [ 92.469324][ T4565] ? nfsd_create_serv+0x11b/0x700 [ 92.474382][ T4565] kasan_check_range+0x235/0x290 [ 92.479414][ T4565] nfsd_create_serv+0x11b/0x700 [ 92.484985][ T4565] ? nfsd+0x2d0/0x2d0 [ 92.489491][ T4565] ? nfsd_svc+0x61/0xab0 [ 92.493778][ T4565] ? mutex_lock_nested+0x10/0x10 [ 92.498998][ T4565] ? net_generic+0x1e/0x240 [ 92.503505][ T4565] ? net_generic+0x1e/0x240 [ 92.508015][ T4565] nfsd_svc+0x17f/0xab0 [ 92.512175][ T4565] ? qword_get+0x5a5/0x640 [ 92.516743][ T4565] write_threads+0x2ea/0x350 [ 92.521660][ T4565] ? write_unlock_fs+0x1f0/0x1f0 [ 92.526698][ T4565] ? __might_fault+0xc2/0x120 [ 92.531563][ T4565] ? _copy_from_user+0x10b/0x170 [ 92.536819][ T4565] ? simple_transaction_get+0x119/0x140 [ 92.542742][ T4565] nfsctl_transaction_write+0x105/0x150 [ 92.548571][ T4565] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 92.554600][ T4565] vfs_write+0x2dc/0x9a0 [ 92.559041][ T4565] ? file_end_write+0x250/0x250 [ 92.563901][ T4565] ? __fget_files+0x28/0x460 [ 92.568695][ T4565] ? __fget_files+0x3fc/0x460 [ 92.573515][ T4565] ? __fdget_pos+0x2ae/0x360 [ 92.578371][ T4565] ? ksys_write+0x70/0x260 [ 92.582795][ T4565] ksys_write+0x14d/0x260 [ 92.587225][ T4565] ? __ia32_sys_read+0x80/0x80 [ 92.592079][ T4565] ? lockdep_hardirqs_on+0x94/0x140 [ 92.597469][ T4565] do_syscall_64+0x4c/0xa0 [ 92.602077][ T4565] ? clear_bhb_loop+0x60/0xb0 [ 92.606802][ T4565] ? clear_bhb_loop+0x60/0xb0 [ 92.612053][ T4565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.619759][ T4565] RIP: 0033:0x7f71deb9de99 [ 92.624449][ T4565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.646532][ T4565] RSP: 002b:00007f71df9f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 92.655651][ T4565] RAX: ffffffffffffffda RBX: 00007f71dee26180 RCX: 00007f71deb9de99 [ 92.664969][ T4565] RDX: 0000000000000002 RSI: 0000200000000100 RDI: 0000000000000006 [ 92.674101][ T4565] RBP: 00007f71dec33eaf R08: 0000000000000000 R09: 0000000000000000 [ 92.682203][ T4565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.690572][ T4565] R13: 00007f71dee26218 R14: 00007f71dee26180 R15: 00007ffc3bc7ea78 [ 92.699357][ T4565] [ 92.702401][ T4565] [ 92.704847][ T4565] Allocated by task 4563: [ 92.709268][ T4565] kasan_set_track+0x4b/0x70 [ 92.714212][ T4565] __kasan_kmalloc+0x8e/0xa0 [ 92.718891][ T4565] __svc_create+0x60/0x9d0 [ 92.723937][ T4565] svc_create_pooled+0x71f/0x8c0 [ 92.728926][ T4565] nfsd_create_serv+0x2f9/0x700 [ 92.733792][ T4565] write_ports+0x526/0xb80 [ 92.738205][ T4565] nfsctl_transaction_write+0x105/0x150 [ 92.743772][ T4565] vfs_write+0x2dc/0x9a0 [ 92.748302][ T4565] ksys_write+0x14d/0x260 [ 92.753422][ T4565] do_syscall_64+0x4c/0xa0 [ 92.758629][ T4565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.765237][ T4565] [ 92.767676][ T4565] Freed by task 4563: [ 92.772713][ T4565] kasan_set_track+0x4b/0x70 [ 92.777495][ T4565] kasan_save_free_info+0x27/0x40 [ 92.782920][ T4565] ____kasan_slab_free+0x126/0x1f0 [ 92.788400][ T4565] slab_free_freelist_hook+0x133/0x1b0 [ 92.794163][ T4565] __kmem_cache_free+0xb6/0x200 [ 92.799289][ T4565] write_ports+0x9ac/0xb80 [ 92.803717][ T4565] nfsctl_transaction_write+0x105/0x150 [ 92.809346][ T4565] vfs_write+0x2dc/0x9a0 [ 92.813674][ T4565] ksys_write+0x14d/0x260 [ 92.818007][ T4565] do_syscall_64+0x4c/0xa0 [ 92.822427][ T4565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.828691][ T4565] [ 92.831104][ T4565] The buggy address belongs to the object at ffff88801de7b000 [ 92.831104][ T4565] which belongs to the cache kmalloc-512 of size 512 [ 92.846431][ T4565] The buggy address is located 80 bytes inside of [ 92.846431][ T4565] 512-byte region [ffff88801de7b000, ffff88801de7b200) [ 92.860052][ T4565] [ 92.862722][ T4565] The buggy address belongs to the physical page: [ 92.869522][ T4565] page:ffffea0000779e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1de78 [ 92.880489][ T4565] head:ffffea0000779e00 order:2 compound_mapcount:0 compound_pincount:0 [ 92.889435][ T4565] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 92.897509][ T4565] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888017441c80 [ 92.906558][ T4565] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 92.916087][ T4565] page dumped because: kasan: bad access detected [ 92.922764][ T4565] page_owner tracks the page as allocated [ 92.928586][ T4565] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 4277, tgid 4277 (syz-executor), ts 82390898003, free_ts 80955106499 [ 92.950410][ T4565] post_alloc_hook+0x173/0x1a0 [ 92.955832][ T4565] get_page_from_freelist+0x206b/0x2180 [ 92.962175][ T4565] __alloc_pages+0x1ec/0x4f0 [ 92.966789][ T4565] alloc_slab_page+0x5d/0x180 [ 92.971563][ T4565] new_slab+0x87/0x2d0 [ 92.975633][ T4565] ___slab_alloc+0xbc5/0x1240 [ 92.980563][ T4565] __kmem_cache_alloc_node+0x126/0x270 [ 92.986196][ T4565] __kmalloc+0xa3/0x240 [ 92.990350][ T4565] fib6_info_alloc+0x2e/0xe0 [ 92.995029][ T4565] ip6_route_info_create+0x455/0x1220 [ 93.000933][ T4565] ip6_route_add+0x24/0x130 [ 93.005609][ T4565] addrconf_permanent_addr+0x6d0/0xa30 [ 93.011251][ T4565] addrconf_notify+0x988/0xf60 [ 93.016126][ T4565] raw_notifier_call_chain+0xcb/0x160 [ 93.021534][ T4565] __dev_notify_flags+0x1a7/0x310 [ 93.026680][ T4565] dev_change_flags+0xda/0x1a0 [ 93.031617][ T4565] page last free stack trace: [ 93.036375][ T4565] free_unref_page_prepare+0x8e5/0x9e0 [ 93.042538][ T4565] free_unref_page+0x2e/0x3f0 [ 93.047574][ T4565] qlist_free_all+0x76/0xe0 [ 93.052085][ T4565] kasan_quarantine_reduce+0x144/0x160 [ 93.058260][ T4565] __kasan_slab_alloc+0x1e/0x80 [ 93.063211][ T4565] slab_post_alloc_hook+0x4b/0x490 [ 93.068495][ T4565] __kmem_cache_alloc_node+0x19d/0x270 [ 93.074040][ T4565] kmalloc_trace+0x26/0xe0 [ 93.078457][ T4565] netdevice_event+0x325/0x900 [ 93.083574][ T4565] raw_notifier_call_chain+0xcb/0x160 [ 93.089146][ T4565] __dev_notify_flags+0x1a7/0x310 [ 93.094492][ T4565] dev_change_flags+0xda/0x1a0 [ 93.099363][ T4565] devinet_ioctl+0x84f/0x1bf0 [ 93.104324][ T4565] inet_ioctl+0x2fa/0x460 [ 93.109131][ T4565] sock_do_ioctl+0xfb/0x320 [ 93.113824][ T4565] sock_ioctl+0x48a/0x700 [ 93.118598][ T4565] [ 93.121198][ T4565] Memory state around the buggy address: [ 93.126844][ T4565] ffff88801de7af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 93.135265][ T4565] ffff88801de7af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 93.144065][ T4565] >ffff88801de7b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.153379][ T4565] ^ [ 93.160326][ T4565] ffff88801de7b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.169689][ T4565] ffff88801de7b100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.178804][ T4565] ================================================================== [ 93.198919][ T126] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 93.199741][ T4579] ceph: No mds server is up or the cluster is laggy [ 93.244856][ T4565] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 93.252973][ T4565] CPU: 1 PID: 4565 Comm: syz.2.58 Not tainted syzkaller #0 [ 93.261029][ T4565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 93.272009][ T4565] Call Trace: [ 93.275587][ T4565] [ 93.278905][ T4565] dump_stack_lvl+0x188/0x24e [ 93.285426][ T4565] ? memcpy+0x3c/0x60 [ 93.291302][ T4565] ? show_regs_print_info+0x12/0x12 [ 93.297838][ T4565] ? load_image+0x410/0x410 [ 93.304477][ T4565] panic+0x2d3/0x710 [ 93.308477][ T4565] ? bpf_jit_dump+0xd0/0xd0 [ 93.313036][ T4565] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 93.321097][ T4565] ? _raw_spin_unlock+0x40/0x40 [ 93.327835][ T4565] check_panic_on_warn+0x80/0xa0 [ 93.333006][ T4565] ? nfsd_create_serv+0x11b/0x700 [ 93.338345][ T4565] end_report+0x66/0x110 [ 93.342863][ T4565] kasan_report+0x118/0x140 [ 93.347698][ T4565] ? nfsd_create_serv+0x11b/0x700 [ 93.352932][ T4565] kasan_check_range+0x235/0x290 [ 93.358250][ T4565] nfsd_create_serv+0x11b/0x700 [ 93.363139][ T4565] ? nfsd+0x2d0/0x2d0 [ 93.367338][ T4565] ? nfsd_svc+0x61/0xab0 [ 93.371934][ T4565] ? mutex_lock_nested+0x10/0x10 [ 93.378109][ T4565] ? net_generic+0x1e/0x240 [ 93.383341][ T4565] ? net_generic+0x1e/0x240 [ 93.387955][ T4565] nfsd_svc+0x17f/0xab0 [ 93.392298][ T4565] ? qword_get+0x5a5/0x640 [ 93.396805][ T4565] write_threads+0x2ea/0x350 [ 93.401416][ T4565] ? write_unlock_fs+0x1f0/0x1f0 [ 93.406984][ T4565] ? __might_fault+0xc2/0x120 [ 93.411754][ T4565] ? _copy_from_user+0x10b/0x170 [ 93.416776][ T4565] ? simple_transaction_get+0x119/0x140 [ 93.422413][ T4565] nfsctl_transaction_write+0x105/0x150 [ 93.428254][ T4565] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 93.433885][ T4565] vfs_write+0x2dc/0x9a0 [ 93.438145][ T4565] ? file_end_write+0x250/0x250 [ 93.443188][ T4565] ? __fget_files+0x28/0x460 [ 93.447966][ T4565] ? __fget_files+0x3fc/0x460 [ 93.452646][ T4565] ? __fdget_pos+0x2ae/0x360 [ 93.457408][ T4565] ? ksys_write+0x70/0x260 [ 93.462090][ T4565] ksys_write+0x14d/0x260 [ 93.466704][ T4565] ? __ia32_sys_read+0x80/0x80 [ 93.471578][ T4565] ? lockdep_hardirqs_on+0x94/0x140 [ 93.476868][ T4565] do_syscall_64+0x4c/0xa0 [ 93.481372][ T4565] ? clear_bhb_loop+0x60/0xb0 [ 93.486159][ T4565] ? clear_bhb_loop+0x60/0xb0 [ 93.490837][ T4565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.496996][ T4565] RIP: 0033:0x7f71deb9de99 [ 93.501502][ T4565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.522024][ T4565] RSP: 002b:00007f71df9f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.530639][ T4565] RAX: ffffffffffffffda RBX: 00007f71dee26180 RCX: 00007f71deb9de99 [ 93.538729][ T4565] RDX: 0000000000000002 RSI: 0000200000000100 RDI: 0000000000000006 [ 93.546900][ T4565] RBP: 00007f71dec33eaf R08: 0000000000000000 R09: 0000000000000000 [ 93.554910][ T4565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.562991][ T4565] R13: 00007f71dee26218 R14: 00007f71dee26180 R15: 00007ffc3bc7ea78 [ 93.571241][ T4565] [ 93.574566][ T4565] Kernel Offset: disabled [ 93.578892][ T4565] Rebooting in 86400 seconds..