last executing test programs: 2.065942717s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/ep_in/block1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/midi2.0/ep_out/block1\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r2, &(0x7f0000000440)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x0, 0x2) write$midi(r3, &(0x7f00000004c0)='hello', 0x5) 2.046254577s ago: executing program 0 (id=1): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x48, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, r2, 0x3e8}}, 0x50) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x6, 0xf, '\x00', 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120) 1.142482111s ago: executing program 3 (id=6): r0 = syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000005640), 0x0, 0x559e, &(0x7f0000005680)="$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") r1 = openat(r0, &(0x7f0000000080)='test\x00', 0x42, 0x1ff) write(r1, &(0x7f00000000c0)='A', 0x1) fsync(r1) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r3 = memfd_create(&(0x7f0000000140)='test2\x00', 0x0) sendfile(r3, r2, 0x0, 0x8000000) close(r0) umount2(&(0x7f0000005600)='./file0\x00', 0x0) r4 = syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f0000000340)='./loop1\x00', 0x61ff, 0x701) chmod(&(0x7f0000000340)='./loop1\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='./loop1\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f00000055c0)='btrfs\x00', 0x0, 0x0) 728.196371ms ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='tcp 2049\n\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f00000001c0)='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000100)={[{'clientaddr=127.0.0.1'}]}) 345.894671ms ago: executing program 4 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/delay_retrans\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000540)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='127.0.0.1:/\x00', &(0x7f0000000200)='./nfs_mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='addr=127.0.0.1,port=2049,vers=4.2,softerr,clientaddr=127.0.0.1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/clients/1/info\x00', 0x0, 0x0) read(r3, &(0x7f0000000400), 0x64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/clients/2/info\x00', 0x0, 0x0) read(r4, &(0x7f0000000400), 0x64) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/clients/3/info\x00', 0x0, 0x0) read(r5, &(0x7f0000000400), 0x64) 289.447423ms ago: executing program 1 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_nfsd\x00', 0x1ff) mount(&(0x7f0000000800)=@filename='nfsd\x00', &(0x7f0000000000)='./my_nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0xe, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./my_nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='2049\n\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='1\n\x00', 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r2, &(0x7f0000000600)=@in={0x2, 0x801, @local}, 0x10) sendto(r2, &(0x7f0000000700)="80000050123456780000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000006000000010000000461626364000000047465737400000000", 0x54, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r0, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) listen(r1, 0xa) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r2 = syz_io_uring_setup(0x10, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001100)=0x0, &(0x7f0000001108)=0x0, &(0x7f0000001110)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000001200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r1, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/1024, 0x400}], 0x1}}) syz_io_uring_submit(r3, r4, r5, &(0x7f0000001300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000900)="ff00"/1048, 0x418}], 0x1, &(0x7f0000000a00)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}}) io_uring_enter(r2, 0x2, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(&(0x7f0000000d00)=@cell={0x23, 'syz0:', 'syz0'}, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.114' (ED25519) to the list of known hosts. [ 76.991124][ T4258] cgroup: Unknown subsys name 'net' [ 77.139602][ T4258] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.679886][ T4258] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 80.189617][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.197368][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.205552][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.234111][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.239592][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.242905][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.250971][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.257934][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.270686][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.272685][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.279272][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.286892][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.293220][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.301084][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.309779][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.316290][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.323790][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.328943][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.336294][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.341821][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.350048][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.356810][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.364031][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.369073][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.376412][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.390255][ T4285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.426018][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.433835][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.450481][ T4285] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 80.482403][ T4287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.850742][ T4284] chnl_net:caif_netlink_parms(): no params data found [ 80.932435][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 81.050308][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 81.096887][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 81.126922][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.134830][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.143407][ T4284] device bridge_slave_0 entered promiscuous mode [ 81.153898][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 81.170170][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.178159][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.187103][ T4273] device bridge_slave_0 entered promiscuous mode [ 81.207725][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.215028][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.223643][ T4284] device bridge_slave_1 entered promiscuous mode [ 81.247539][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.254859][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.263403][ T4273] device bridge_slave_1 entered promiscuous mode [ 81.337507][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.352835][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.374344][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.381568][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.390196][ T4272] device bridge_slave_0 entered promiscuous mode [ 81.404339][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.415609][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.429021][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.436386][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.444682][ T4272] device bridge_slave_1 entered promiscuous mode [ 81.510078][ T4273] team0: Port device team_slave_0 added [ 81.525663][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.532926][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.540847][ T4271] device bridge_slave_0 entered promiscuous mode [ 81.559385][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.566760][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.576054][ T4271] device bridge_slave_1 entered promiscuous mode [ 81.600245][ T4284] team0: Port device team_slave_0 added [ 81.607849][ T4273] team0: Port device team_slave_1 added [ 81.623789][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.633521][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.640652][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.649591][ T4279] device bridge_slave_0 entered promiscuous mode [ 81.667502][ T4284] team0: Port device team_slave_1 added [ 81.681856][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.691633][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.698704][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.725166][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.740919][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.748585][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.756870][ T4279] device bridge_slave_1 entered promiscuous mode [ 81.773920][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.798769][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.808555][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.815798][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.841914][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.908027][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.918404][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.925942][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.952059][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.964919][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.972046][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.998109][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.012576][ T4272] team0: Port device team_slave_0 added [ 82.027824][ T4272] team0: Port device team_slave_1 added [ 82.036397][ T4271] team0: Port device team_slave_0 added [ 82.044708][ T4271] team0: Port device team_slave_1 added [ 82.052797][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.095015][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.102142][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.128244][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.147003][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.154891][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.181009][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.225171][ T4279] team0: Port device team_slave_0 added [ 82.244666][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.251827][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.278017][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.294832][ T4273] device hsr_slave_0 entered promiscuous mode [ 82.302088][ T4273] device hsr_slave_1 entered promiscuous mode [ 82.311108][ T4279] team0: Port device team_slave_1 added [ 82.336194][ T4284] device hsr_slave_0 entered promiscuous mode [ 82.343526][ T4284] device hsr_slave_1 entered promiscuous mode [ 82.350400][ T4284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.358782][ T4284] Cannot create hsr debugfs directory [ 82.365009][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.372585][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.398808][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.422534][ T4287] Bluetooth: hci2: command 0x0409 tx timeout [ 82.437492][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.444577][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.470871][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.491470][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.498614][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.503435][ T4287] Bluetooth: hci3: command 0x0409 tx timeout [ 82.525570][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 82.537668][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 82.546615][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.581887][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 82.602502][ T4272] device hsr_slave_0 entered promiscuous mode [ 82.609231][ T4272] device hsr_slave_1 entered promiscuous mode [ 82.616321][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.624067][ T4272] Cannot create hsr debugfs directory [ 82.633466][ T4271] device hsr_slave_0 entered promiscuous mode [ 82.641606][ T4271] device hsr_slave_1 entered promiscuous mode [ 82.650548][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.658260][ T4271] Cannot create hsr debugfs directory [ 82.793248][ T4279] device hsr_slave_0 entered promiscuous mode [ 82.800220][ T4279] device hsr_slave_1 entered promiscuous mode [ 82.807065][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.814821][ T4279] Cannot create hsr debugfs directory [ 83.090567][ T4284] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.117842][ T4284] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.134911][ T4284] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.149543][ T4284] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.194675][ T4273] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.210174][ T4273] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.228151][ T4273] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.244633][ T4273] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.279266][ T4272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.288581][ T4272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.299776][ T4272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.321560][ T4272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.390177][ T4271] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.428425][ T4271] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.459977][ T4271] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.473418][ T4271] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.521776][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.547906][ T4279] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.561574][ T4279] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.582304][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.596836][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.605479][ T4279] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.620586][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.649465][ T4279] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.674866][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.683845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.695340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.707363][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.714687][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.729585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.752760][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.761137][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.773067][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.786978][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.807128][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.819066][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.827839][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.835143][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.844007][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.854255][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.866252][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.876196][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.883395][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.896419][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.938380][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.950866][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.960071][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.969019][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.978968][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.987682][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.995744][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.003924][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.013240][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.021582][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.030931][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.040779][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.057867][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.067604][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.077133][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.084327][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.092252][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.115395][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.130701][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.146199][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.155808][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.167088][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.174297][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.187674][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.196863][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.206522][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.216058][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.224947][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.252378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.261057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.284563][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.291793][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.305412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.317680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.348699][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.377078][ T4272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.396520][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.418293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.442584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.454579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.470380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.480436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.497051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.505212][ T4287] Bluetooth: hci2: command 0x041b tx timeout [ 84.513555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.523013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.531606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.541168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.550168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.559045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.567990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.576101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.583490][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 84.583525][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 84.583586][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 84.616072][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.628406][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.662452][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 84.669439][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.688459][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.707972][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.732714][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.791080][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.849813][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.860938][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.875513][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.882703][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.909871][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.924679][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.940776][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.953177][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.969204][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.976402][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.992367][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.021160][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.058030][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.072711][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.123437][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.151032][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.164656][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.173939][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.184073][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.193315][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.202728][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.211350][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.218546][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.235279][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.243177][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.251036][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.267159][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.278069][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.285294][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.299303][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.315663][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.341274][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.350701][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.359628][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.369996][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.425252][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.437908][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.447079][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.457194][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.465376][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.474258][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.486994][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.509974][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.529112][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.555845][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.570440][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.581278][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.597760][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.639306][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.654932][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.667583][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.679007][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.694979][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.711486][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.755952][ T4284] device veth0_vlan entered promiscuous mode [ 85.768501][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.777294][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.789423][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.800083][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.812148][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.821029][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.840088][ T4284] device veth1_vlan entered promiscuous mode [ 85.887052][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.905660][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.917967][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.930075][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.960339][ T4272] device veth0_vlan entered promiscuous mode [ 86.010420][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.019709][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.043476][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.097564][ T4272] device veth1_vlan entered promiscuous mode [ 86.114757][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.125562][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.143292][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.162437][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.204328][ T4284] device veth0_macvtap entered promiscuous mode [ 86.243724][ T4284] device veth1_macvtap entered promiscuous mode [ 86.304629][ T4272] device veth0_macvtap entered promiscuous mode [ 86.329402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.345517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.358826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.369171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.402130][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.412878][ T4272] device veth1_macvtap entered promiscuous mode [ 86.437487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.463695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.473278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.493597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.529420][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.582676][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 86.589867][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.615635][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.630013][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.654191][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.663009][ T4287] Bluetooth: hci0: command 0x040f tx timeout [ 86.669054][ T4287] Bluetooth: hci1: command 0x040f tx timeout [ 86.675434][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 86.692597][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.701550][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.733857][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.742589][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 86.749752][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.757877][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.767436][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.778687][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.790568][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.802193][ T4284] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.811107][ T4284] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.851774][ T4284] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.860548][ T4284] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.874227][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.889075][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.908094][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.951452][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.972471][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.981247][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.994444][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.069287][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.083858][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.169274][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.184392][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.206419][ T4271] device veth0_vlan entered promiscuous mode [ 87.247863][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.267459][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.284862][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.296850][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.313535][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.371815][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.380706][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.394679][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.404081][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.415024][ T4273] device veth0_vlan entered promiscuous mode [ 87.428360][ T4271] device veth1_vlan entered promiscuous mode [ 87.452406][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.469263][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.477938][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.492137][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.501065][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.601327][ T4273] device veth1_vlan entered promiscuous mode [ 87.613638][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.623130][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.631339][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.640388][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.653517][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.661478][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.694063][ T4279] device veth0_vlan entered promiscuous mode [ 87.695568][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.708337][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.708369][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.737073][ T4271] device veth0_macvtap entered promiscuous mode [ 87.748074][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.764200][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.776079][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.785138][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.794454][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.804190][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.823457][ T4271] device veth1_macvtap entered promiscuous mode [ 87.856514][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.867480][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.893163][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.901046][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.916070][ T4279] device veth1_vlan entered promiscuous mode [ 87.935706][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.954195][ T4273] device veth0_macvtap entered promiscuous mode [ 87.961490][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.972176][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.980298][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.988968][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.999178][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.009659][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.018414][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.030573][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.045794][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.055925][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.066610][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.078891][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.089924][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.105775][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.116528][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.127289][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.142954][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.161594][ T4273] device veth1_macvtap entered promiscuous mode [ 88.182434][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.205368][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.214934][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.227350][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.236992][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.254178][ T4271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.269805][ T4271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.279087][ T4271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.288941][ T4271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.415391][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.438357][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.460145][ T26] audit: type=1800 audit(1785884035.372:2): pid=4360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="idVendor" dev="configfs" ino=33326 res=0 errno=0 [ 88.514986][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.524653][ T26] audit: type=1800 audit(1785884035.382:3): pid=4360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="idProduct" dev="configfs" ino=33327 res=0 errno=0 [ 88.556045][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.556897][ T4364] Config c/1 of g1 needs at least one function. [ 88.577953][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.591993][ T4364] udc dummy_udc.0: failed to start g1: -22 [ 88.597884][ T4364] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 88.602233][ T26] audit: type=1800 audit(1785884035.472:4): pid=4364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="UDC" dev="configfs" ino=33333 res=0 errno=0 [ 88.625822][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.635788][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.648704][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.662733][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 88.671029][ T4364] UDC core: g1: couldn't find an available UDC or it's busy [ 88.673878][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.694336][ T4362] lo speed is unknown, defaulting to 1000 [ 88.695291][ T4279] device veth0_macvtap entered promiscuous mode [ 88.730866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.742650][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 88.748731][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 88.748998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.756249][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 88.774925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.794348][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.805472][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.816369][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.824061][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 88.832548][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.843533][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.854386][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.868042][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.879354][ T4362] lo speed is unknown, defaulting to 1000 [ 88.890974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.904477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.917223][ T4273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.927517][ T4273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.937044][ T4273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.947343][ T4273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.959700][ T4362] lo speed is unknown, defaulting to 1000 [ 88.992258][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.000145][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.018002][ T4279] device veth1_macvtap entered promiscuous mode [ 89.032472][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.047376][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.124993][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.135944][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.152143][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.167342][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.179007][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.195044][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.206479][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.223039][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.236006][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.247118][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.279563][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.315533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.348374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.358177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.372452][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.389478][ T4362] infiniband syz1: set active [ 89.406709][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.412027][ T4362] infiniband syz1: added lo [ 89.427741][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.441707][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.452358][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.466763][ T4362] infiniband syz1: Couldn't create ib_mad QP1 [ 89.472145][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.483525][ T4362] infiniband syz1: Couldn't open port 1 [ 89.496812][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.508808][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.526354][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.571596][ T4334] lo speed is unknown, defaulting to 1000 [ 89.573366][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.600864][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.626025][ T4362] RDS/IB: syz1: added [ 89.660085][ T4279] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.664604][ T4362] smc: adding ib device syz1 with port count 1 [ 89.709625][ T4279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.715109][ T4362] smc: ib device syz1 port 1 has pnetid [ 89.729007][ T4279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.754878][ T4279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.803072][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.810989][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.825577][ T4318] lo speed is unknown, defaulting to 1000 [ 89.838124][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.852951][ T4362] lo speed is unknown, defaulting to 1000 [ 89.889528][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.924085][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.932146][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.063275][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.078572][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.117573][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.197800][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.225465][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.273459][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.330091][ T4362] lo speed is unknown, defaulting to 1000 [ 90.365828][ T4374] svc: failed to register lockdv1 RPC service (errno 111). [ 90.392630][ T4374] lockd_up: makesock failed, error=-111 [ 90.481339][ T4368] loop3: detected capacity change from 0 to 32768 [ 90.533858][ T4368] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 8 /dev/loop3 scanned by syz.3.6 (4368) [ 90.618272][ T4382] ================================================================== [ 90.626407][ T4382] BUG: KASAN: use-after-free in nfsd_create_serv+0x11b/0x700 [ 90.633820][ T4382] Write of size 4 at addr ffff888023695050 by task syz.1.7/4382 [ 90.641499][ T4382] [ 90.643868][ T4382] CPU: 1 PID: 4382 Comm: syz.1.7 Not tainted syzkaller #0 [ 90.651012][ T4382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.661118][ T4382] Call Trace: [ 90.664629][ T4382] [ 90.667587][ T4382] dump_stack_lvl+0x188/0x24e [ 90.672306][ T4382] ? read_lock_is_recursive+0x10/0x10 [ 90.677713][ T4382] ? show_regs_print_info+0x12/0x12 [ 90.682948][ T4382] ? load_image+0x410/0x410 [ 90.687484][ T4382] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 90.692973][ T4382] ? __virt_addr_valid+0x188/0x540 [ 90.698133][ T4382] ? __virt_addr_valid+0x467/0x540 [ 90.703282][ T4382] ? nfsd_create_serv+0x11b/0x700 [ 90.708340][ T4382] print_report+0xa8/0x210 [ 90.712801][ T4382] kasan_report+0x10b/0x140 [ 90.717368][ T4382] ? nfsd_create_serv+0x11b/0x700 [ 90.722430][ T4382] kasan_check_range+0x235/0x290 [ 90.727408][ T4382] nfsd_create_serv+0x11b/0x700 [ 90.732288][ T4382] ? nfsd+0x2d0/0x2d0 [ 90.736300][ T4382] ? nfsd_svc+0x61/0xab0 [ 90.740576][ T4382] ? mutex_lock_nested+0x10/0x10 [ 90.745555][ T4382] ? net_generic+0x1e/0x240 [ 90.750085][ T4382] ? net_generic+0x1e/0x240 [ 90.754621][ T4382] nfsd_svc+0x17f/0xab0 [ 90.758802][ T4382] ? qword_get+0x5a5/0x640 [ 90.763249][ T4382] write_threads+0x2ea/0x350 [ 90.767874][ T4382] ? write_unlock_fs+0x1f0/0x1f0 [ 90.772849][ T4382] ? __might_fault+0xc2/0x120 [ 90.777558][ T4382] ? _copy_from_user+0x10b/0x170 [ 90.782541][ T4382] ? simple_transaction_get+0x119/0x140 [ 90.788108][ T4382] nfsctl_transaction_write+0x105/0x150 [ 90.793685][ T4382] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 90.799350][ T4382] vfs_write+0x2dc/0x9a0 [ 90.803626][ T4382] ? file_end_write+0x250/0x250 [ 90.808508][ T4382] ? __fget_files+0x28/0x460 [ 90.813128][ T4382] ? __fget_files+0x3fc/0x460 [ 90.817835][ T4382] ? __fdget_pos+0x2ae/0x360 [ 90.822456][ T4382] ? ksys_write+0x70/0x260 [ 90.826904][ T4382] ksys_write+0x14d/0x260 [ 90.831269][ T4382] ? __ia32_sys_read+0x80/0x80 [ 90.836065][ T4382] ? lockdep_hardirqs_on+0x94/0x140 [ 90.841282][ T4382] do_syscall_64+0x4c/0xa0 [ 90.845727][ T4382] ? clear_bhb_loop+0x60/0xb0 [ 90.850444][ T4382] ? clear_bhb_loop+0x60/0xb0 [ 90.855147][ T4382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.861081][ T4382] RIP: 0033:0x7f711c19e019 [ 90.865526][ T4382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.885184][ T4382] RSP: 002b:00007f711cf8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 90.893623][ T4382] RAX: ffffffffffffffda RBX: 00007f711c426090 RCX: 00007f711c19e019 [ 90.901630][ T4382] RDX: 0000000000000002 RSI: 0000200000000500 RDI: 0000000000000004 [ 90.909622][ T4382] RBP: 00007f711c23500c R08: 0000000000000000 R09: 0000000000000000 [ 90.917613][ T4382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.925604][ T4382] R13: 00007f711c426128 R14: 00007f711c426090 R15: 00007ffe44fe7cf8 [ 90.933603][ T4382] [ 90.936646][ T4382] [ 90.938986][ T4382] Allocated by task 4379: [ 90.943334][ T4382] kasan_set_track+0x4b/0x70 [ 90.947966][ T4382] __kasan_kmalloc+0x8e/0xa0 [ 90.952602][ T4382] __svc_create+0x60/0x9d0 [ 90.957051][ T4382] svc_create_pooled+0x71f/0x8c0 [ 90.962025][ T4382] nfsd_create_serv+0x2f9/0x700 [ 90.966903][ T4382] write_ports+0x526/0xb80 [ 90.971350][ T4382] nfsctl_transaction_write+0x105/0x150 [ 90.976951][ T4382] vfs_write+0x2dc/0x9a0 [ 90.981231][ T4382] ksys_write+0x14d/0x260 [ 90.985595][ T4382] do_syscall_64+0x4c/0xa0 [ 90.990054][ T4382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.995976][ T4382] [ 90.998319][ T4382] Freed by task 4379: [ 91.002313][ T4382] kasan_set_track+0x4b/0x70 [ 91.006947][ T4382] kasan_save_free_info+0x27/0x40 [ 91.012001][ T4382] ____kasan_slab_free+0x126/0x1f0 [ 91.017161][ T4382] slab_free_freelist_hook+0x133/0x1b0 [ 91.022654][ T4382] __kmem_cache_free+0xb6/0x200 [ 91.027538][ T4382] write_ports+0x9ac/0xb80 [ 91.032011][ T4382] nfsctl_transaction_write+0x105/0x150 [ 91.037601][ T4382] vfs_write+0x2dc/0x9a0 [ 91.041874][ T4382] ksys_write+0x14d/0x260 [ 91.046234][ T4382] do_syscall_64+0x4c/0xa0 [ 91.050676][ T4382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.056611][ T4382] [ 91.058955][ T4382] The buggy address belongs to the object at ffff888023695000 [ 91.058955][ T4382] which belongs to the cache kmalloc-512 of size 512 [ 91.073033][ T4382] The buggy address is located 80 bytes inside of [ 91.073033][ T4382] 512-byte region [ffff888023695000, ffff888023695200) [ 91.086247][ T4382] [ 91.088688][ T4382] The buggy address belongs to the physical page: [ 91.095146][ T4382] page:ffffea00008da500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23694 [ 91.105370][ T4382] head:ffffea00008da500 order:2 compound_mapcount:0 compound_pincount:0 [ 91.113744][ T4382] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 91.121768][ T4382] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017441c80 [ 91.130391][ T4382] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 91.138994][ T4382] page dumped because: kasan: bad access detected [ 91.145442][ T4382] page_owner tracks the page as allocated [ 91.151174][ T4382] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4327, tgid 4327 (kworker/u4:6), ts 90562471853, free_ts 88364027442 [ 91.173441][ T4382] post_alloc_hook+0x173/0x1a0 [ 91.178251][ T4382] get_page_from_freelist+0x206b/0x2180 [ 91.183833][ T4382] __alloc_pages+0x1ec/0x4f0 [ 91.188450][ T4382] alloc_slab_page+0x5d/0x180 [ 91.193155][ T4382] new_slab+0x87/0x2d0 [ 91.197244][ T4382] ___slab_alloc+0xbc5/0x1240 [ 91.201947][ T4382] __kmem_cache_alloc_node+0x126/0x270 [ 91.207448][ T4382] __kmalloc_node_track_caller+0xa0/0x240 [ 91.213220][ T4382] __alloc_skb+0x226/0x7d0 [ 91.217669][ T4382] __ip_append_data+0x26d7/0x38d0 [ 91.222735][ T4382] ip_send_unicast_reply+0x981/0x1570 [ 91.228137][ T4382] tcp_v4_send_reset+0x14c3/0x23d0 [ 91.233287][ T4382] tcp_v4_rcv+0x2753/0x2e90 [ 91.237827][ T4382] ip_protocol_deliver_rcu+0x38c/0x740 [ 91.243312][ T4382] ip_local_deliver_finish+0x2c0/0x510 [ 91.248793][ T4382] NF_HOOK+0x329/0x3b0 [ 91.252887][ T4382] page last free stack trace: [ 91.257589][ T4382] free_unref_page_prepare+0x8e5/0x9e0 [ 91.263081][ T4382] free_unref_page+0x2e/0x3f0 [ 91.267790][ T4382] qlist_free_all+0x76/0xe0 [ 91.272320][ T4382] kasan_quarantine_reduce+0x144/0x160 [ 91.277807][ T4382] __kasan_slab_alloc+0x1e/0x80 [ 91.282696][ T4382] slab_post_alloc_hook+0x4b/0x490 [ 91.287829][ T4382] kmem_cache_alloc_lru+0x182/0x2e0 [ 91.293064][ T4382] __d_alloc+0x2e/0x6e0 [ 91.297256][ T4382] d_alloc_parallel+0xdc/0x1590 [ 91.302136][ T4382] __lookup_slow+0x134/0x3f0 [ 91.306745][ T4382] lookup_slow+0x53/0x70 [ 91.311005][ T4382] walk_component+0x2ad/0x3e0 [ 91.315716][ T4382] path_lookupat+0x148/0x420 [ 91.320328][ T4382] filename_lookup+0x229/0x580 [ 91.325112][ T4382] vfs_statx+0x10e/0x610 [ 91.329381][ T4382] __x64_sys_newfstatat+0x190/0x240 [ 91.334652][ T4382] [ 91.337000][ T4382] Memory state around the buggy address: [ 91.342647][ T4382] ffff888023694f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 91.350746][ T4382] ffff888023694f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 91.358841][ T4382] >ffff888023695000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.366932][ T4382] ^ [ 91.373628][ T4382] ffff888023695080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.381734][ T4382] ffff888023695100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.389812][ T4382] ================================================================== [ 91.571219][ T4362] lo speed is unknown, defaulting to 1000 [ 91.642524][ T4382] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 91.649795][ T4382] CPU: 0 PID: 4382 Comm: syz.1.7 Not tainted syzkaller #0 [ 91.656954][ T4382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.667058][ T4382] Call Trace: [ 91.670372][ T4382] [ 91.673426][ T4382] dump_stack_lvl+0x188/0x24e [ 91.678160][ T4382] ? memcpy+0x3c/0x60 [ 91.682182][ T4382] ? show_regs_print_info+0x12/0x12 [ 91.687423][ T4382] ? load_image+0x410/0x410 [ 91.691971][ T4382] panic+0x2d3/0x710 [ 91.695907][ T4382] ? bpf_jit_dump+0xd0/0xd0 [ 91.700452][ T4382] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 91.706483][ T4382] ? _raw_spin_unlock+0x40/0x40 [ 91.711378][ T4382] check_panic_on_warn+0x80/0xa0 [ 91.716349][ T4382] ? nfsd_create_serv+0x11b/0x700 [ 91.721416][ T4382] end_report+0x66/0x110 [ 91.725688][ T4382] kasan_report+0x118/0x140 [ 91.730222][ T4382] ? nfsd_create_serv+0x11b/0x700 [ 91.735373][ T4382] kasan_check_range+0x235/0x290 [ 91.740343][ T4382] nfsd_create_serv+0x11b/0x700 [ 91.745220][ T4382] ? nfsd+0x2d0/0x2d0 [ 91.749330][ T4382] ? nfsd_svc+0x61/0xab0 [ 91.753610][ T4382] ? mutex_lock_nested+0x10/0x10 [ 91.758591][ T4382] ? net_generic+0x1e/0x240 [ 91.763123][ T4382] ? net_generic+0x1e/0x240 [ 91.767672][ T4382] nfsd_svc+0x17f/0xab0 [ 91.771861][ T4382] ? qword_get+0x5a5/0x640 [ 91.776321][ T4382] write_threads+0x2ea/0x350 [ 91.780939][ T4382] ? write_unlock_fs+0x1f0/0x1f0 [ 91.785909][ T4382] ? __might_fault+0xc2/0x120 [ 91.790610][ T4382] ? _copy_from_user+0x10b/0x170 [ 91.795571][ T4382] ? simple_transaction_get+0x119/0x140 [ 91.801154][ T4382] nfsctl_transaction_write+0x105/0x150 [ 91.806727][ T4382] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 91.812395][ T4382] vfs_write+0x2dc/0x9a0 [ 91.816672][ T4382] ? file_end_write+0x250/0x250 [ 91.821567][ T4382] ? __fget_files+0x28/0x460 [ 91.826185][ T4382] ? __fget_files+0x3fc/0x460 [ 91.831241][ T4382] ? __fdget_pos+0x2ae/0x360 [ 91.835897][ T4382] ? ksys_write+0x70/0x260 [ 91.840362][ T4382] ksys_write+0x14d/0x260 [ 91.844731][ T4382] ? __ia32_sys_read+0x80/0x80 [ 91.849534][ T4382] ? lockdep_hardirqs_on+0x94/0x140 [ 91.854765][ T4382] do_syscall_64+0x4c/0xa0 [ 91.859243][ T4382] ? clear_bhb_loop+0x60/0xb0 [ 91.863953][ T4382] ? clear_bhb_loop+0x60/0xb0 [ 91.868744][ T4382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.874665][ T4382] RIP: 0033:0x7f711c19e019 [ 91.879101][ T4382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.898734][ T4382] RSP: 002b:00007f711cf8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 91.907264][ T4382] RAX: ffffffffffffffda RBX: 00007f711c426090 RCX: 00007f711c19e019 [ 91.915263][ T4382] RDX: 0000000000000002 RSI: 0000200000000500 RDI: 0000000000000004 [ 91.923259][ T4382] RBP: 00007f711c23500c R08: 0000000000000000 R09: 0000000000000000 [ 91.931254][ T4382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.939252][ T4382] R13: 00007f711c426128 R14: 00007f711c426090 R15: 00007ffe44fe7cf8 [ 91.947254][ T4382] [ 91.950442][ T4382] Kernel Offset: disabled [ 91.954779][ T4382] Rebooting in 86400 seconds..