last executing test programs: 4.327038015s ago: executing program 2 (id=3): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_procfs(0x0, 0x0) shutdown(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1ffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r4 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x4161, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) get_mempolicy(&(0x7f0000000000), 0x0, 0x7, &(0x7f0000bf7000/0x4000)=nil, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xfffffff9, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) 3.619462292s ago: executing program 2 (id=6): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00') setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7f, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) preadv(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x5fae, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) r4 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x0, 0x1d}, &(0x7f0000000340), &(0x7f0000000600), &(0x7f00000012c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={0x0, 0x2, 0xf}, 0x1) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11, 0x1000000}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 2.594183857s ago: executing program 2 (id=7): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x2, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000580), 0x0, 0x0, 0x1) 2.349720863s ago: executing program 2 (id=8): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_procfs(0x0, 0x0) shutdown(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1ffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r4 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x4161, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) get_mempolicy(&(0x7f0000000000), 0x0, 0x7, &(0x7f0000bf7000/0x4000)=nil, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 659.243433ms ago: executing program 1 (id=2): syz_emit_ethernet(0x3e, &(0x7f0000000240)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x7}, 0x20) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) r3 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x10000000) 557.157306ms ago: executing program 2 (id=9): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, &(0x7f0000000040)=[@enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18}, @wrmsr={0x65, 0x20, {0x854, 0xf}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xd9, 0x5, 0x8, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_load_code={0x12e, 0x5e, {0x1, "b9870100000f32430f221e263e670f01c548b801ff26a05c1ab7610f23d00f21f835200000080f23f8f3430f090f01d166b831018ee0460f070f00920f7a0000c4a1a173fe00"}}, @cpuid={0x64, 0x18, {0x36ca, 0x6}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x77, 0x80, 0x4, 0xb}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_load_code={0x12e, 0x70, {0x1, "66400f3880a08f300000c462fbf76500b9b80a00000f3266baf80cb862614b8aef66bafc0cec2e66430f3a0d7e0f7d410f01c8f3adc7442400c0000000c74424020a000000ff1c240f79b700000000660f388081c8930000"}}, @nested_load_syzos={0x136, 0x98, {0x1, 0x6, [@nested_vmlaunch={0x12f, 0x18, 0x3}, @wr_crn={0x67, 0x20, {0x8, 0x9}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x9, 0x1}}]}}, @wr_crn={0x67, 0x20, {0x8, 0xfffffffffffffffb}}, @nested_load_code={0x12e, 0x5d, {0x3, "48b8ca000000000000000f23c00f21f835000002000f23f82d043a4785470f01df450f2c8749f6000066470f3825e2c4a1f91010660fc7b2f16e937e2e450f01cb0f0947a5"}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x7, 0x3}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x77, 0x0, 0x7fff}}], 0x383}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000004c0)={[0x7, 0x1, 0x400, 0x3, 0x9a, 0x9531, 0xffffffffffffffff, 0xc, 0x9, 0xae, 0x6, 0x60, 0x9, 0x3, 0x3, 0x5], 0x25000, 0x20000}) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc8f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x20004000) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x1, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0xa, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x1000000004, 0x800000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0xffff, 0x7, 0xc0bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x13e, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) 462.633058ms ago: executing program 4 (id=5): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebd", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000ac0)="a19168e24152c670ecff4e0ee89533187a9206e8b223bed2e89af6709b054a05bafbd8bdb01fe87a3b63a17eff007ee93b40c121e355801159a45e36111175f8d8453960c864bdcf3826be3ffadaa7dba08508123324e0a45a93818ebf5c0fbac285cd0f399da8e4257170efbebf704e9c42cd6e193c280eac0e484d38db0e45923cc47acab1da2c1b47f999", 0x8c}, {&(0x7f0000000c80)="b8659518b69136c840de12f29e56372661ffc3250247a0a5b4d89fe71a1b9ced94b7b8948f88860d2b103e52888892ee3eb1e378638a70d7f47bf1d2df6b6fc368665f92a84b8b03a2ed4710b1f9b4b35b854ffc0ed7ba5e4bd0502b95e5e602b087f5ae9d22ba48614db6f84623ba247e94da8d20d86dfea4c5a23cf57da0471ab476d25bb5a252dde00c1c57140c", 0x8f}, {&(0x7f0000000dc0)="820b29dccf3af022d0ddfd370dd8dda2b3c897775aa4271e74", 0x19}], 0x3}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 389.88161ms ago: executing program 2 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\n\x00', 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10) listen(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='3\n\x00', 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r3, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10) write(r3, &(0x7f0000000400)="80000028123456780000000000000002000186a300000003000000000000000700"/44, 0x2c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 180.888155ms ago: executing program 1 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='-2 -3 -4\n\x00', 0x9) r1 = socket$inet(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) listen(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='4\n\x00', 0x2) write(r0, &(0x7f0000000380)='+3 +4\n\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000700)='\\x01000000 2147483647 0 0 0 krb5 \\x00000000ffffff7f00000000000000001100000000000000000000000000000000000000 root\n\x00', 0x61) r5 = socket$inet(0x2, 0x1, 0x6) connect$inet(r5, &(0x7f0000000800)={0x2, 0x0, @empty}, 0x10) write(r5, &(0x7f0000000900)="123456780000000000000002000186a300000003000000000000000600000018000000010000000200000000000000010000000401000000000000060000001c040400ffffffffff00"/92, 0x54) nanosleep(&(0x7f0000000a00)={0x0, 0x5f5e100}, 0x0) 145.462776ms ago: executing program 0 (id=1): socket$inet_icmp(0x2, 0x2, 0x1) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 0s ago: executing program 0 (id=12): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_procfs(0x0, 0x0) shutdown(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1ffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r4 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x4161, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) get_mempolicy(&(0x7f0000000000), 0x0, 0x7, &(0x7f0000bf7000/0x4000)=nil, 0x5) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xfffffff9, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.79' (ED25519) to the list of known hosts. syzkaller login: [ 62.846322][ T4174] cgroup: Unknown subsys name 'net' [ 62.999070][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.498189][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.991877][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 66.091809][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.099589][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.109432][ T4193] device bridge_slave_0 entered promiscuous mode [ 66.118241][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 66.134693][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 66.149537][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.156871][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.165359][ T4193] device bridge_slave_1 entered promiscuous mode [ 66.173379][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 66.188257][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 66.254817][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.282406][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.350827][ T4193] team0: Port device team_slave_0 added [ 66.359056][ T4193] team0: Port device team_slave_1 added [ 66.426890][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.435029][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.444221][ T4187] device bridge_slave_0 entered promiscuous mode [ 66.451910][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.459361][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.467814][ T4195] device bridge_slave_0 entered promiscuous mode [ 66.488927][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.496263][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.522366][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.534530][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.541634][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.550433][ T4187] device bridge_slave_1 entered promiscuous mode [ 66.558005][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.565242][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.573956][ T4195] device bridge_slave_1 entered promiscuous mode [ 66.581849][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.589088][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.597747][ T4196] device bridge_slave_0 entered promiscuous mode [ 66.611838][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.619007][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.645069][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.677218][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.684610][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.692854][ T4196] device bridge_slave_1 entered promiscuous mode [ 66.699993][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.707829][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.716157][ T4188] device bridge_slave_0 entered promiscuous mode [ 66.737332][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.753458][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.760577][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.768782][ T4188] device bridge_slave_1 entered promiscuous mode [ 66.785339][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.796591][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.822828][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.834381][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.852259][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.870624][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.899784][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.925493][ T4187] team0: Port device team_slave_0 added [ 66.934729][ T4195] team0: Port device team_slave_0 added [ 66.942801][ T4187] team0: Port device team_slave_1 added [ 66.959806][ T4193] device hsr_slave_0 entered promiscuous mode [ 66.967535][ T4193] device hsr_slave_1 entered promiscuous mode [ 67.008881][ T4195] team0: Port device team_slave_1 added [ 67.037550][ T4188] team0: Port device team_slave_0 added [ 67.061340][ T4196] team0: Port device team_slave_0 added [ 67.073781][ T4196] team0: Port device team_slave_1 added [ 67.081460][ T4188] team0: Port device team_slave_1 added [ 67.088289][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.097475][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.124040][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.136142][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.144352][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.170587][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.186104][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.193219][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.219443][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.249506][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.256813][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.282995][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.313489][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.320489][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.346637][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.372034][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.379246][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.405536][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.417967][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.425053][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.451643][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.480037][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.487807][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.514130][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.546827][ T4195] device hsr_slave_0 entered promiscuous mode [ 67.555051][ T4195] device hsr_slave_1 entered promiscuous mode [ 67.562345][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.570662][ T4195] Cannot create hsr debugfs directory [ 67.606121][ T4187] device hsr_slave_0 entered promiscuous mode [ 67.613418][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 67.620137][ T4187] device hsr_slave_1 entered promiscuous mode [ 67.620606][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 67.632993][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.640858][ T4187] Cannot create hsr debugfs directory [ 67.665413][ T4196] device hsr_slave_0 entered promiscuous mode [ 67.672319][ T4196] device hsr_slave_1 entered promiscuous mode [ 67.679589][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.687683][ T4196] Cannot create hsr debugfs directory [ 67.693333][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 67.702776][ T4176] Bluetooth: hci3: command 0x0409 tx timeout [ 67.709036][ T4176] Bluetooth: hci1: command 0x0409 tx timeout [ 67.722175][ T4188] device hsr_slave_0 entered promiscuous mode [ 67.731421][ T4188] device hsr_slave_1 entered promiscuous mode [ 67.738512][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.746495][ T4188] Cannot create hsr debugfs directory [ 68.055841][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.078131][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.093607][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.103327][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.155285][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.170469][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.189161][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.206621][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.245394][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.271397][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.292079][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.305804][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.363738][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.378314][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.389528][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.400664][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.481043][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.491622][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.507659][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.536779][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.548868][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.558192][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.569532][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.581063][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.590353][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.599494][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.614563][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.635983][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.645332][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.655457][ T4214] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.662832][ T4214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.671801][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.692281][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.714981][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.722055][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.733043][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.742089][ T4214] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.749559][ T4214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.760365][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.769644][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.778959][ T4214] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.786112][ T4214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.794591][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.805781][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.838661][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.847632][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.857744][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.868938][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.877774][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.887746][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.899755][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.910543][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.920842][ T4214] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.928013][ T4214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.944894][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.973042][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.983597][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.998640][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.026983][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.036385][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.045590][ T4214] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.052816][ T4214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.060929][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.070230][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.079601][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.088722][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.098743][ T4214] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.106275][ T4214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.117482][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.126951][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.143668][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.171858][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.181834][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.195585][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.237811][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.256793][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.271515][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.281587][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.294516][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.303705][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.312321][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.321174][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.331294][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.340338][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.349350][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.361366][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.378045][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.411283][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.427645][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.434843][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.448198][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.464020][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.472061][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.481061][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.491510][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.500545][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.509886][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.519767][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.533855][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.543381][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.569068][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.583688][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.592053][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.605838][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.619450][ T614] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.627001][ T614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.635832][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.644849][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.684666][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.698462][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.704118][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 69.714828][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.722292][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 69.724346][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.738137][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.747518][ T614] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.754821][ T614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.764234][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.773809][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.783110][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 69.789723][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 69.794480][ T614] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.803362][ T614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.811509][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 69.821917][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.831581][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.846818][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.859883][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.871992][ T614] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.879276][ T614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.888359][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.917048][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.934077][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.951062][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.962324][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.979191][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.989799][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.009967][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.019760][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.029365][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.054186][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.100684][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.111463][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.122338][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.131569][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.140868][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.157591][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.166934][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.180295][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.190937][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.217469][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.232158][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.240911][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.249759][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.258859][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.267645][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.275742][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.284416][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.307566][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.316694][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.331352][ T4195] device veth0_vlan entered promiscuous mode [ 70.347493][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.362264][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.374772][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.393695][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.404686][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.412276][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.428656][ T4195] device veth1_vlan entered promiscuous mode [ 70.446282][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.509175][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.549451][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.558333][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.578430][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.627393][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.660966][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.673958][ T4195] device veth0_macvtap entered promiscuous mode [ 70.691628][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.720315][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.741020][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.756783][ T4195] device veth1_macvtap entered promiscuous mode [ 70.776298][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.789924][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.799471][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.813746][ T4187] device veth0_vlan entered promiscuous mode [ 70.834325][ T4187] device veth1_vlan entered promiscuous mode [ 70.861796][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.871028][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.880266][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.889286][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.899450][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.908773][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.926696][ T4193] device veth0_vlan entered promiscuous mode [ 70.941791][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.951968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.961016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.970833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.980816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.990244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.001142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.009567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.032329][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.042061][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.054580][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.065007][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.074283][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.086456][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.095545][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.104385][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.111902][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.123410][ T4193] device veth1_vlan entered promiscuous mode [ 71.158471][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.187185][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.196586][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.239060][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.250878][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.261274][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.272973][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.281602][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.291881][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.302199][ T4193] device veth0_macvtap entered promiscuous mode [ 71.322178][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.333061][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.341397][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.367396][ T4187] device veth0_macvtap entered promiscuous mode [ 71.383498][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.390136][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.415491][ T4188] device veth0_vlan entered promiscuous mode [ 71.434435][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.444851][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.455013][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.464046][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.473595][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.488714][ T4193] device veth1_macvtap entered promiscuous mode [ 71.513053][ T4187] device veth1_macvtap entered promiscuous mode [ 71.525642][ T4188] device veth1_vlan entered promiscuous mode [ 71.570893][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.584004][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.596447][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.607261][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.618468][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.629541][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.640265][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.651889][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.664853][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.675769][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.687262][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.706193][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.715381][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.724029][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.732175][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.740793][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.749909][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.760558][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.769909][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.780148][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.783652][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 71.791758][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.802590][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 71.811139][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.821909][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.832879][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.844128][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.854488][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 71.860961][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 71.868784][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.876376][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 71.886455][ T614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.906628][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.916131][ T614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.917258][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.935751][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.944948][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.956521][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.966330][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.975580][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.985112][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.994020][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.007100][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.016974][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.027486][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.036884][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.049655][ T4196] device veth0_vlan entered promiscuous mode [ 72.067242][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.078324][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.111828][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.123755][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.150922][ T4188] device veth0_macvtap entered promiscuous mode [ 72.166245][ T4196] device veth1_vlan entered promiscuous mode [ 72.189819][ T614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.206241][ T4188] device veth1_macvtap entered promiscuous mode [ 72.210125][ T614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.237880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.251416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.260366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.273522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.281649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.347920][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.360361][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.371215][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.381851][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.391745][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.403840][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.418730][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.442927][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.456888][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.468556][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.478037][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.489976][ T614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.499905][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.507685][ T614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.511527][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.529064][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.539623][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.549534][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.560717][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.575376][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.592386][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.605267][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.615943][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.624996][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.642126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.651364][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.663362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.684461][ T4196] device veth0_macvtap entered promiscuous mode [ 73.121155][ T4266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.154474][ T4266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.356319][ T4196] device veth1_macvtap entered promiscuous mode [ 73.371336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.393368][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.408909][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.446638][ T4213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.490024][ T4213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.601882][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.623645][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.636853][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.686031][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.725155][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.767551][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.805988][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.844641][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.904184][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.085279][ T4232] Bluetooth: hci0: command 0x0419 tx timeout [ 74.095673][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.138403][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.190519][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.228946][ T4266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.325713][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.344338][ T4266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.392890][ T4232] Bluetooth: hci2: command 0x0419 tx timeout [ 74.399069][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 74.405473][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 74.411588][ T4232] Bluetooth: hci4: command 0x0419 tx timeout [ 74.429057][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.545067][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.590559][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.624315][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.713375][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.755902][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.777978][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.852491][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 74.872455][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 74.882451][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 74.902491][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 74.912464][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 74.922460][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 74.932456][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 74.942455][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 74.962500][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 74.972473][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 75.692452][ C1] sched: RT throttling activated [ 75.713759][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.746257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.829790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.851953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.065524][ T4214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.272931][ T4214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.274510][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.398079][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.413635][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.429438][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.500064][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.658312][ T614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.671746][ T614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.687922][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.832331][ T614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.850677][ T614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.867366][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.905528][ T614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.936419][ T614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.947279][ T4295] svc: failed to register nfsdv3 RPC service (errno 111). [ 76.961240][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.977951][ T4295] svc: failed to register nfsaclv3 RPC service (errno 111). [ 77.092866][ T4297] ================================================================== [ 77.101284][ T4297] BUG: KASAN: use-after-free in nfsd_create_serv+0x11b/0x700 [ 77.108732][ T4297] Write of size 4 at addr ffff88802007f050 by task syz.2.10/4297 [ 77.116498][ T4297] [ 77.118900][ T4297] CPU: 0 PID: 4297 Comm: syz.2.10 Not tainted syzkaller #0 [ 77.126249][ T4297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 77.136369][ T4297] Call Trace: [ 77.139696][ T4297] [ 77.142669][ T4297] dump_stack_lvl+0x188/0x250 [ 77.147405][ T4297] ? show_regs_print_info+0x20/0x20 [ 77.152769][ T4297] ? _printk+0xda/0x130 [ 77.157114][ T4297] ? nfsd_create_serv+0x11b/0x700 [ 77.162202][ T4297] ? load_image+0x410/0x410 [ 77.166877][ T4297] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 77.172409][ T4297] print_address_description+0x60/0x2d0 [ 77.178066][ T4297] ? nfsd_create_serv+0x11b/0x700 [ 77.183256][ T4297] kasan_report+0xdf/0x130 [ 77.187855][ T4297] ? nfsd_create_serv+0x11b/0x700 [ 77.193039][ T4297] kasan_check_range+0x235/0x290 [ 77.198177][ T4297] nfsd_create_serv+0x11b/0x700 [ 77.203101][ T4297] ? _parse_integer_limit+0x195/0x1d0 [ 77.208528][ T4297] ? nfsd+0x2d0/0x2d0 [ 77.212915][ T4297] ? simple_strntoull+0x10e/0x180 [ 77.218514][ T4297] ? simple_strtoull+0x30/0x30 [ 77.223332][ T4297] ? qword_get+0x5a5/0x640 [ 77.227811][ T4297] write_ports+0x526/0xb80 [ 77.232283][ T4297] ? write_versions+0xbb0/0xbb0 [ 77.237254][ T4297] ? __might_fault+0xb3/0x110 [ 77.241986][ T4297] ? _copy_from_user+0x111/0x170 [ 77.247070][ T4297] ? simple_transaction_get+0x119/0x140 [ 77.252691][ T4297] nfsctl_transaction_write+0x105/0x150 [ 77.258295][ T4297] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 77.264071][ T4297] vfs_write+0x304/0xd70 [ 77.268397][ T4297] ? file_end_write+0x250/0x250 [ 77.273325][ T4297] ? mutex_lock_nested+0x17/0x20 [ 77.278432][ T4297] ? __fdget_pos+0x2bf/0x370 [ 77.283081][ T4297] ? ksys_write+0x70/0x260 [ 77.287559][ T4297] ksys_write+0x153/0x260 [ 77.291950][ T4297] ? __ia32_sys_read+0x80/0x80 [ 77.296763][ T4297] ? lockdep_hardirqs_on+0x94/0x140 [ 77.302009][ T4297] do_syscall_64+0x4c/0xa0 [ 77.306486][ T4297] ? clear_bhb_loop+0x30/0x80 [ 77.311215][ T4297] ? clear_bhb_loop+0x30/0x80 [ 77.316498][ T4297] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.322544][ T4297] RIP: 0033:0x7f63095e2e99 [ 77.327122][ T4297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.346941][ T4297] RSP: 002b:00007f630781a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.355432][ T4297] RAX: ffffffffffffffda RBX: 00007f630986b090 RCX: 00007f63095e2e99 [ 77.363465][ T4297] RDX: 0000000000000002 RSI: 0000200000000300 RDI: 0000000000000005 [ 77.371479][ T4297] RBP: 00007f6309678eaf R08: 0000000000000000 R09: 0000000000000000 [ 77.379941][ T4297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.387959][ T4297] R13: 00007f630986b128 R14: 00007f630986b090 R15: 00007fff79340538 [ 77.396000][ T4297] [ 77.399075][ T4297] [ 77.401789][ T4297] Allocated by task 4295: [ 77.406256][ T4297] __kasan_kmalloc+0xaf/0xe0 [ 77.410900][ T4297] __svc_create+0x60/0x9d0 [ 77.415371][ T4297] svc_create_pooled+0x62f/0x810 [ 77.420468][ T4297] nfsd_create_serv+0x2f9/0x700 [ 77.425368][ T4297] nfsd_svc+0x132/0x9e0 [ 77.429626][ T4297] write_threads+0x2ea/0x350 [ 77.434304][ T4297] nfsctl_transaction_write+0x105/0x150 [ 77.439904][ T4297] vfs_write+0x304/0xd70 [ 77.444196][ T4297] ksys_write+0x153/0x260 [ 77.448616][ T4297] do_syscall_64+0x4c/0xa0 [ 77.453089][ T4297] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.459033][ T4297] [ 77.461400][ T4297] Freed by task 4295: [ 77.465415][ T4297] kasan_set_track+0x4b/0x70 [ 77.470072][ T4297] kasan_set_free_info+0x1f/0x40 [ 77.475072][ T4297] ____kasan_slab_free+0xd5/0x110 [ 77.480153][ T4297] slab_free_freelist_hook+0xec/0x170 [ 77.485574][ T4297] kfree+0xef/0x2a0 [ 77.489440][ T4297] nfsd_svc+0x7cf/0x9e0 [ 77.493637][ T4297] write_threads+0x2ea/0x350 [ 77.498275][ T4297] nfsctl_transaction_write+0x105/0x150 [ 77.503873][ T4297] vfs_write+0x304/0xd70 [ 77.508300][ T4297] ksys_write+0x153/0x260 [ 77.512936][ T4297] do_syscall_64+0x4c/0xa0 [ 77.517445][ T4297] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.523407][ T4297] [ 77.525771][ T4297] The buggy address belongs to the object at ffff88802007f000 [ 77.525771][ T4297] which belongs to the cache kmalloc-512 of size 512 [ 77.539915][ T4297] The buggy address is located 80 bytes inside of [ 77.539915][ T4297] 512-byte region [ffff88802007f000, ffff88802007f200) [ 77.553324][ T4297] The buggy address belongs to the page: [ 77.559047][ T4297] page:ffffea0000801f00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2007c [ 77.569416][ T4297] head:ffffea0000801f00 order:2 compound_mapcount:0 compound_pincount:0 [ 77.577789][ T4297] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 77.585921][ T4297] raw: 00fff00000010200 0000000000000000 0000000a00000001 ffff888016c41c80 [ 77.594553][ T4297] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 77.603187][ T4297] page dumped because: kasan: bad access detected [ 77.610388][ T4297] page_owner tracks the page as allocated [ 77.616186][ T4297] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 936, ts 8920144417, free_ts 0 [ 77.634300][ T4297] get_page_from_freelist+0x24f6/0x2670 [ 77.639950][ T4297] __alloc_pages+0x1ee/0x480 [ 77.644594][ T4297] new_slab+0xc0/0x4b0 [ 77.648928][ T4297] ___slab_alloc+0x807/0xdd0 [ 77.653657][ T4297] kmem_cache_alloc_trace+0xf9/0x290 [ 77.659249][ T4297] alloc_bprm+0x56/0x690 [ 77.663734][ T4297] kernel_execve+0x49/0x8e0 [ 77.668491][ T4297] call_usermodehelper_exec_async+0x207/0x350 [ 77.674611][ T4297] ret_from_fork+0x1f/0x30 [ 77.679086][ T4297] page_owner free stack trace missing [ 77.684551][ T4297] [ 77.687149][ T4297] Memory state around the buggy address: [ 77.692926][ T4297] ffff88802007ef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 77.701036][ T4297] ffff88802007ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 77.709235][ T4297] >ffff88802007f000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.717703][ T4297] ^ [ 77.724539][ T4297] ffff88802007f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.732654][ T4297] ffff88802007f100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.740755][ T4297] ================================================================== [ 77.748943][ T4297] Disabling lock debugging due to kernel taint [ 77.783269][ T4297] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 77.790529][ T4297] CPU: 1 PID: 4297 Comm: syz.2.10 Tainted: G B syzkaller #0 [ 77.799168][ T4297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 77.809268][ T4297] Call Trace: [ 77.812580][ T4297] [ 77.815516][ T4297] dump_stack_lvl+0x188/0x250 [ 77.820209][ T4297] ? show_regs_print_info+0x20/0x20 [ 77.825700][ T4297] ? load_image+0x410/0x410 [ 77.830349][ T4297] panic+0x2f8/0x850 [ 77.834268][ T4297] ? asm_sysvec_call_function_single+0x16/0x20 [ 77.840449][ T4297] ? bpf_jit_dump+0xd0/0xd0 [ 77.844988][ T4297] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 77.850981][ T4297] ? _raw_spin_unlock+0x40/0x40 [ 77.855896][ T4297] ? nfsd_create_serv+0x11b/0x700 [ 77.860937][ T4297] check_panic_on_warn+0x80/0xa0 [ 77.865907][ T4297] ? nfsd_create_serv+0x11b/0x700 [ 77.870939][ T4297] end_report+0x6d/0xf0 [ 77.875101][ T4297] kasan_report+0x102/0x130 [ 77.879611][ T4297] ? nfsd_create_serv+0x11b/0x700 [ 77.884647][ T4297] kasan_check_range+0x235/0x290 [ 77.889596][ T4297] nfsd_create_serv+0x11b/0x700 [ 77.894456][ T4297] ? _parse_integer_limit+0x195/0x1d0 [ 77.899836][ T4297] ? nfsd+0x2d0/0x2d0 [ 77.903841][ T4297] ? simple_strntoull+0x10e/0x180 [ 77.908904][ T4297] ? simple_strtoull+0x30/0x30 [ 77.913707][ T4297] ? qword_get+0x5a5/0x640 [ 77.918143][ T4297] write_ports+0x526/0xb80 [ 77.922587][ T4297] ? write_versions+0xbb0/0xbb0 [ 77.927450][ T4297] ? __might_fault+0xb3/0x110 [ 77.932138][ T4297] ? _copy_from_user+0x111/0x170 [ 77.937224][ T4297] ? simple_transaction_get+0x119/0x140 [ 77.942822][ T4297] nfsctl_transaction_write+0x105/0x150 [ 77.948957][ T4297] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 77.954802][ T4297] vfs_write+0x304/0xd70 [ 77.959088][ T4297] ? file_end_write+0x250/0x250 [ 77.964034][ T4297] ? mutex_lock_nested+0x17/0x20 [ 77.968977][ T4297] ? __fdget_pos+0x2bf/0x370 [ 77.973573][ T4297] ? ksys_write+0x70/0x260 [ 77.978402][ T4297] ksys_write+0x153/0x260 [ 77.982747][ T4297] ? __ia32_sys_read+0x80/0x80 [ 77.987626][ T4297] ? lockdep_hardirqs_on+0x94/0x140 [ 77.992978][ T4297] do_syscall_64+0x4c/0xa0 [ 77.997407][ T4297] ? clear_bhb_loop+0x30/0x80 [ 78.002340][ T4297] ? clear_bhb_loop+0x30/0x80 [ 78.007074][ T4297] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.013025][ T4297] RIP: 0033:0x7f63095e2e99 [ 78.017524][ T4297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.037389][ T4297] RSP: 002b:00007f630781a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 78.047874][ T4297] RAX: ffffffffffffffda RBX: 00007f630986b090 RCX: 00007f63095e2e99 [ 78.058912][ T4297] RDX: 0000000000000002 RSI: 0000200000000300 RDI: 0000000000000005 [ 78.066898][ T4297] RBP: 00007f6309678eaf R08: 0000000000000000 R09: 0000000000000000 [ 78.074924][ T4297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.083029][ T4297] R13: 00007f630986b128 R14: 00007f630986b090 R15: 00007fff79340538 [ 78.091018][ T4297] [ 78.094366][ T4297] Kernel Offset: disabled [ 78.098715][ T4297] Rebooting in 86400 seconds..