last executing test programs: 8.706784157s ago: executing program 0 (id=1): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) shutdown(r2, 0x2) (async) close(r2) 7.669309994s ago: executing program 0 (id=6): r0 = socket$inet(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@in={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='3\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./exp\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000b00)='./proc\x00', &(0x7f0000000c00)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000e00)='* ./exp 10000 0 0 0\n\x00', 0x14) mount$nfs4(&(0x7f0000000f00)='127.0.0.1:./exp\x00', &(0x7f0000000a00)='./mnt\x00', &(0x7f0000001000), 0x0, &(0x7f0000001100)={[{'addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1', 0x31}]}) (async) openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/file0\x00', 0x0, 0x0) 7.525052218s ago: executing program 3 (id=4): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x40, 0x5, 0x2, "2bd8"}}) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syzkaller0\x00', &(0x7f0000000100)=@ethtool_eeprom={0xb, 0x0, 0x0, 0x10, '\x00'/16}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'syzkaller1\x00', &(0x7f0000000300)=@ethtool_eeprom={0xb, 0x0, 0x0, 0x10, '\x00'/16}}) 6.952286472s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='tcp 2049\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='udp 2049\x00', 0x9) close(r1) 6.919846213s ago: executing program 4 (id=5): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x8, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x33}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map=r2, r3, 0x26, 0x0, 0x0, @void, @value=0x0}, 0x30) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000380)='\x00\x00\x00\x00', &(0x7f00000003c0)=@udp=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)='hello\x00', 0x5}], 0x1}, 0x0) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/10, 0xa}], 0x1}, 0x0) 6.665462989s ago: executing program 4 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) close(r3) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x204e, @loopback}, 0x10) write(r4, &(0x7f0000000500)='test', 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x204e, @loopback}, 0x10) write(r5, &(0x7f0000000500)='test', 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 5.927358788s ago: executing program 0 (id=11): unshare(0x40000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x0, r1, 0x0, 0x1, 0x1, {0x18}, [@TIPC_NLA_NET={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}]}}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x0, r1, 0x0, 0x1, 0x1, {0x30}, [@TIPC_NLA_NODE={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, "000102030405060708090a0b0c0d0e0f"}, @TIPC_NLA_NODE_KEY={0x18, 0x4, {'gcm(aes)\x00', 0x8, "12345678"}}]}]}}}, 0x0) unshare(0x40000000) 5.920699498s ago: executing program 2 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='8\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='2049\n\x00', 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10) write(r2, &(0x7f0000000300)="80000028000000010000000000000002000186a30000000300"/44, 0x2c) 4.573740483s ago: executing program 3 (id=13): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x5, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_ACT={0x50, 0x1, [@m_sample={0x4c, 0x1, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x1, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8000, 0x3, 0x20000000, 0x1, 0x9}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}]}}}]}]}}]}, 0x90}}, 0x0) write(r0, &(0x7f0000000400)="000008004500001c00000000401176cc0a0000010a0000021234123400080000", 0x1e) 4.30623738s ago: executing program 3 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='-3 +4\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='tcp 2049\n\x00', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='2\n\x00', 0x3) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)="013030303030302032303030303030303030203020302030206b726235203120003030303030307f303030303030003030303030303030303030303030123030303030300030303030303030303030303030303030303030303030303030303030303020746573740a00", 0x6a) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000540)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000580)="80000074123456780000000000000002000186a00000000200000000000000060000003800000001000000010000000000000000000000000000000401000000000000010000000300000000000000000000001802010400"/104, 0x68) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) read(r4, &(0x7f0000000640)=""/256, 0x100) 3.198080868s ago: executing program 4 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='64\n\x00', 0x3) r3 = socket$inet(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 3.007100353s ago: executing program 0 (id=22): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000080), 0xc, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="1801000010000100000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000007f00000100000000000000000000000078563412320000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000280002006362632861657329000000000000000000000000000000000000000000000000000000000000000000000000080080000000000000000000180004000100123412347f00000100000000000000000000080022000a000000"], 0x118}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) 2.769691788s ago: executing program 0 (id=23): r0 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r0, 0x2) 2.730137449s ago: executing program 0 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)="013030303030302032303030303030303030203020302030206b726235200030303030303066666666666666663030303030303030303030303030303031323030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303020636c69656e740a", 0x8a) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10) write(r3, &(0x7f0000000500)="80000058000000010000000000000002000186a00000000300000000000000060000002400000001000000000000000100000002000000040100000000000006000000100000000000000000000000000000000018040402ff00"/108, 0x74) 997.775854ms ago: executing program 1 (id=33): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x2}}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000600)="00112233445566778899", 0xa, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) 983.590574ms ago: executing program 1 (id=34): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0x22, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="00112233445566778899aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 927.288066ms ago: executing program 1 (id=35): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x40, r2, 0x1, 0x0, 0x0, {0x0}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}]}]}, 0x40}}, 0x0) 829.955088ms ago: executing program 1 (id=36): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000080)={&(0x7f0000000000), 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4}]}, 0x18}}, 0x0) 804.106919ms ago: executing program 1 (id=37): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x14c, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x5c, 0x1, {{'hmac(sha1)\x00'}, 0xa0, "000102030405060708090a0b0c0d0e0f10111213"}}]}, 0x14c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000600)="1234567890", 0xa, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 735.008811ms ago: executing program 1 (id=38): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x1234, @private=0x1010101}}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000100)=0x2, 0x4) bind$rds(r1, &(0x7f0000000200)={0x2, 0x1234, @private=0x1010101}, 0x10) sendmsg$rds(r1, &(0x7f0000000300)={&(0x7f0000000400)={0x2, 0x1234, @private=0x2010101}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000600)=""/4, 0x8}], 0x1}, 0x0) nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) 0s ago: executing program 3 (id=39): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffd8}]}]}, @NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xb, 0x1, 'TPROXY\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x28, 0x3, "000000000000000000000000000000000000000000000000000000000000000012340000"}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0x100}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000200)="01020304", 0x4, 0x0, &(0x7f0000000300)={0xa, 0x1234, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts. [ 77.660498][ T4259] cgroup: Unknown subsys name 'net' [ 77.765106][ T4259] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.244950][ T4259] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 80.645222][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.653188][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.667711][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.677839][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.685201][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.686414][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.693928][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.700537][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.709231][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.716617][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.721389][ T4286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.727880][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.736313][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.742590][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.753522][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.755804][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.763732][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.770391][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.779112][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.787860][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.790984][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.802414][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.804680][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.811322][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.818343][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.827983][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 80.833290][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.870345][ T49] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.878801][ T4287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.907327][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.285069][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 81.369756][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 81.413314][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 81.432911][ T4284] chnl_net:caif_netlink_parms(): no params data found [ 81.551246][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.559729][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.568158][ T4272] device bridge_slave_0 entered promiscuous mode [ 81.576340][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 81.609457][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.616677][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.625272][ T4281] device bridge_slave_0 entered promiscuous mode [ 81.632724][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.643421][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.651387][ T4272] device bridge_slave_1 entered promiscuous mode [ 81.683395][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.690626][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.698712][ T4281] device bridge_slave_1 entered promiscuous mode [ 81.757039][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.764415][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.772893][ T4273] device bridge_slave_0 entered promiscuous mode [ 81.790761][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.808241][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.820463][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.829754][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.837032][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.845929][ T4273] device bridge_slave_1 entered promiscuous mode [ 81.854415][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.865808][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.873098][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.881050][ T4284] device bridge_slave_0 entered promiscuous mode [ 81.889688][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.896862][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.905088][ T4284] device bridge_slave_1 entered promiscuous mode [ 81.955649][ T4281] team0: Port device team_slave_0 added [ 81.970532][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.997546][ T4272] team0: Port device team_slave_0 added [ 82.014061][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.024400][ T4281] team0: Port device team_slave_1 added [ 82.039222][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.049757][ T4272] team0: Port device team_slave_1 added [ 82.066010][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.091277][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.098383][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.124696][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.139294][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.146432][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.155529][ T4271] device bridge_slave_0 entered promiscuous mode [ 82.192378][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.199504][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.225774][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.242461][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.250430][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.258748][ T4271] device bridge_slave_1 entered promiscuous mode [ 82.281161][ T4273] team0: Port device team_slave_0 added [ 82.290391][ T4284] team0: Port device team_slave_0 added [ 82.299132][ T4284] team0: Port device team_slave_1 added [ 82.326120][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.333446][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.359769][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.375832][ T4273] team0: Port device team_slave_1 added [ 82.382261][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.389402][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.415394][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.441933][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.448979][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.475075][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.487142][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.494170][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.520410][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.546753][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.566983][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.595362][ T4281] device hsr_slave_0 entered promiscuous mode [ 82.602309][ T4281] device hsr_slave_1 entered promiscuous mode [ 82.645884][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.656859][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.683376][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.697592][ T4271] team0: Port device team_slave_0 added [ 82.709378][ T4284] device hsr_slave_0 entered promiscuous mode [ 82.716766][ T4284] device hsr_slave_1 entered promiscuous mode [ 82.724016][ T4284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.735565][ T4284] Cannot create hsr debugfs directory [ 82.744566][ T4272] device hsr_slave_0 entered promiscuous mode [ 82.751518][ T4272] device hsr_slave_1 entered promiscuous mode [ 82.758520][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.766113][ T4272] Cannot create hsr debugfs directory [ 82.777329][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.784307][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.810619][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.824060][ T4271] team0: Port device team_slave_1 added [ 82.908119][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.915108][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.941604][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.967969][ T4288] Bluetooth: hci4: command 0x0409 tx timeout [ 82.974281][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 82.980551][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 82.980570][ T4287] Bluetooth: hci3: command 0x0409 tx timeout [ 82.986797][ T4286] Bluetooth: hci1: command 0x0409 tx timeout [ 83.011543][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.021394][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.047828][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.071636][ T4273] device hsr_slave_0 entered promiscuous mode [ 83.078549][ T4273] device hsr_slave_1 entered promiscuous mode [ 83.085307][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.093158][ T4273] Cannot create hsr debugfs directory [ 83.247661][ T4271] device hsr_slave_0 entered promiscuous mode [ 83.255189][ T4271] device hsr_slave_1 entered promiscuous mode [ 83.262244][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.270085][ T4271] Cannot create hsr debugfs directory [ 83.473210][ T4281] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.488919][ T4281] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.499899][ T4281] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.515494][ T4281] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.579175][ T4284] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.592973][ T4284] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.621921][ T4284] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.633885][ T4284] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.693503][ T4273] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.705660][ T4273] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.731466][ T4273] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.746884][ T4273] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.792764][ T4271] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.802086][ T4271] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.831464][ T4271] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.862053][ T4271] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.893376][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.932907][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.951382][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.965802][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.975223][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.984286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.995446][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.006183][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.013536][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.025123][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.035624][ T4272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.049035][ T4272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.060032][ T4272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.074806][ T4272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.093054][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.106881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.122402][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.129702][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.141964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.149883][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.165899][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.204258][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.224061][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.253186][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.262514][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.271705][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.278878][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.286815][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.295990][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.304871][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.312043][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.320352][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.342456][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.353173][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.363589][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.373278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.383046][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.415619][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.425902][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.435452][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.444716][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.454067][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.463231][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.473945][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.483489][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.492792][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.524366][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.534674][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.542980][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.562896][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.586621][ T4281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.603023][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.616999][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.626684][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.635653][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.644452][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.654445][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.664693][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.673527][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.680718][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.688911][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.697750][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.716212][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.734176][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.764917][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.778401][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.793144][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.802968][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.810146][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.826146][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.836816][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.908242][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.916661][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.934355][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.961614][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.973914][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.985362][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.995817][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.004642][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.013253][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.024181][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.036586][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.047153][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.047792][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 85.061641][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 85.068061][ T4280] Bluetooth: hci2: command 0x041b tx timeout [ 85.068080][ T4287] Bluetooth: hci0: command 0x041b tx timeout [ 85.074128][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 85.090546][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.146239][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.170330][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.179496][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.188769][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.195917][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.204427][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.213458][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.222496][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.229656][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.237597][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.247622][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.279302][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.299102][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.307411][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.318358][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.341485][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.351679][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.360904][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.368117][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.384425][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.404165][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.413358][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.435355][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.486784][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.501687][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.518914][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.527779][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.536242][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.553017][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.564692][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.571892][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.586574][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.596095][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.614720][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.640945][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.651237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.708090][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.723101][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.742726][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.773593][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.787999][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.798243][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.815331][ T4272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.832788][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.856633][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.869205][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.883161][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.893872][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.903989][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.913046][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.948581][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.967709][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.975217][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.043524][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.121850][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.152348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.231462][ T4284] device veth0_vlan entered promiscuous mode [ 86.256154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.273757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.316110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.324482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.363719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.393214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.409703][ T4284] device veth1_vlan entered promiscuous mode [ 86.483211][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.513268][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.529268][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.555660][ T4284] device veth0_macvtap entered promiscuous mode [ 86.593380][ T4284] device veth1_macvtap entered promiscuous mode [ 86.603757][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.621223][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.630410][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.650877][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.689061][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.711850][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.765455][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.776532][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.815316][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.823062][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.839196][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.850167][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.859176][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.902254][ T4273] device veth0_vlan entered promiscuous mode [ 86.919191][ T4284] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.933275][ T4284] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.943383][ T4284] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.994085][ T4284] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.025006][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.037737][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.045258][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.065882][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.092774][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.116152][ T4273] device veth1_vlan entered promiscuous mode [ 87.127571][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 87.132548][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 87.133637][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 87.140659][ T4287] Bluetooth: hci1: command 0x040f tx timeout [ 87.146787][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 87.163708][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.173459][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.181763][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.194128][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.204067][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.269741][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.285348][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.295723][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.305356][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.316277][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.335352][ T4271] device veth0_vlan entered promiscuous mode [ 87.387034][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.396674][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.414217][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.424948][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.455828][ T4271] device veth1_vlan entered promiscuous mode [ 87.492248][ T4273] device veth0_macvtap entered promiscuous mode [ 87.505542][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.517807][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.526518][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.543247][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.577750][ T4281] device veth0_vlan entered promiscuous mode [ 87.591336][ T4273] device veth1_macvtap entered promiscuous mode [ 87.607928][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.628141][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.636216][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.645959][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.661005][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.673542][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.709739][ T4349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.732079][ T4272] device veth0_vlan entered promiscuous mode [ 87.748178][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.758021][ T4349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.767852][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.781960][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.790379][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.799069][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.807085][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.815469][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.824559][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.866216][ T4281] device veth1_vlan entered promiscuous mode [ 87.886582][ T4272] device veth1_vlan entered promiscuous mode [ 87.898746][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.912543][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.924438][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.941530][ T4273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.950993][ T4273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.960644][ T4273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.970311][ T4273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.990652][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.999415][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.008688][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.017773][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.033191][ T4271] device veth0_macvtap entered promiscuous mode [ 88.044975][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.055377][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.064258][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.075340][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.083894][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.100375][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.109448][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.122439][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.148416][ T4271] device veth1_macvtap entered promiscuous mode [ 88.191014][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.205479][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.215732][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.226940][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.254033][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.281513][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.291111][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.302257][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.311618][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.322494][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.333050][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.342233][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.372803][ T4272] device veth0_macvtap entered promiscuous mode [ 88.394755][ T4272] device veth1_macvtap entered promiscuous mode [ 88.441162][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.466225][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.476418][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.488002][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.501990][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.513726][ T4271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.526325][ T4271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.535459][ T4271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.544652][ T4271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.558139][ T4281] device veth0_macvtap entered promiscuous mode [ 88.571428][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.585899][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.608108][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.618870][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.668742][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.683346][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.700896][ T4281] device veth1_macvtap entered promiscuous mode [ 88.716018][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.735293][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.748727][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.759788][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.772919][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.785846][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.801126][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.817969][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.828113][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.842149][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.875054][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.888143][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.899370][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.910884][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.921109][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.932370][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.944825][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.973901][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.985409][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.006822][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.019409][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.030484][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.041265][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.053457][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.064427][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.074355][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.084930][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.096847][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.107662][ T4272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.116421][ T4272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.117389][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.135652][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.143257][ T4272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.143330][ T4272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.166894][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.175176][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.184359][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.195473][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.207016][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.222904][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 89.229151][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 89.229171][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 89.235275][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 89.241711][ T4286] Bluetooth: hci4: command 0x0419 tx timeout [ 89.256714][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.269639][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.279810][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.290921][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.301163][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.311942][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.341074][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.368608][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.379111][ T4334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.387000][ T4334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.406388][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.457872][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.471372][ T4281] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.487434][ T4281] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.498435][ T4281] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.507429][ T4281] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.695677][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.720728][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.746381][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.756992][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.772086][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.794603][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.895346][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.920286][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.958272][ T4316] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.972546][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.986762][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.004737][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.022162][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.051968][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.061037][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.070586][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.181227][ T4316] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 90.207888][ T4316] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 90.243451][ T4316] usb 4-1: config 1 interface 0 has no altsetting 0 [ 90.266326][ T4316] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 90.279194][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.287319][ T4316] usb 4-1: Product: syz [ 90.291701][ T4316] usb 4-1: Manufacturer: syz [ 90.296336][ T4316] usb 4-1: SerialNumber: syz [ 90.315288][ T4372] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 90.336920][ T4372] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 90.807591][ T3598] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.867382][ T4370] NFSD: attempt to initialize umh client tracking in a container ignored. [ 90.876940][ T4370] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 90.885984][ T4370] NFSD: Unable to initialize client recovery tracking! (-22) [ 90.903274][ T4370] NFSD: starting 90-second grace period (net f00003d7) [ 91.003587][ T3598] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 91.024501][ T3598] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.034589][ T3598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 91.050328][ T3598] usb 2-1: SerialNumber: syz [ 91.685658][ T3598] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 91.769924][ T127] cfg80211: failed to load regulatory.db [ 91.898556][ T4316] (unnamed net_device) (uninitialized): Assigned a random MAC address: 2e:3e:cb:09:4f:1c [ 91.925922][ T4316] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 91.963226][ T4316] usb 4-1: USB disconnect, device number 2 [ 92.298143][ T4394] NFSD: attempt to initialize umh client tracking in a container ignored. [ 92.317612][ T4394] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 92.326517][ T4394] NFSD: Unable to initialize client recovery tracking! (-22) [ 92.337335][ T4394] NFSD: starting 90-second grace period (net f00004d8) [ 92.554742][ T4427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 92.567768][ T4427] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13'. [ 92.579939][ T4427] netlink: 'syz.3.13': attribute type 1 has an invalid length. [ 92.593916][ T4316] usb 2-1: USB disconnect, device number 2 [ 92.601967][ T4316] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 93.522652][ T4456] netlink: 56 bytes leftover after parsing attributes in process `syz.1.18'. [ 93.677431][ T4395] NFSD: attempt to initialize umh client tracking in a container ignored. [ 93.686188][ T4395] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 93.700409][ T4395] NFSD: Unable to initialize client recovery tracking! (-22) [ 93.708971][ T4395] NFSD: starting 90-second grace period (net f00004d8) [ 93.971873][ T4466] Zero length message leads to an empty skb [ 94.126177][ T4470] netlink: 40 bytes leftover after parsing attributes in process `syz.0.22'. [ 94.573810][ T4483] netlink: 28 bytes leftover after parsing attributes in process `syz.1.27'. [ 94.667497][ T4486] tipc: Started in network mode [ 94.672742][ T4486] tipc: Node identity 7f000001, cluster identity 4711 [ 94.681514][ T4486] tipc: New replicast peer: 127.0.0.1 [ 94.688389][ T4486] tipc: Enabled bearer , priority 10 [ 95.679370][ T4315] tipc: Node number set to 2130706433 [ 96.994017][ T4465] svc: failed to register nfsdv3 RPC service (errno 512). [ 97.016480][ T4465] svc: failed to register nfsaclv3 RPC service (errno 111). [ 97.116819][ T4465] ================================================================== [ 97.124955][ T4465] BUG: KASAN: use-after-free in nfsd_svc+0x996/0xab0 [ 97.131698][ T4465] Read of size 4 at addr ffff888056a48c54 by task syz.2.12/4465 [ 97.139363][ T4465] [ 97.141732][ T4465] CPU: 0 PID: 4465 Comm: syz.2.12 Not tainted syzkaller #0 [ 97.148934][ T4465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 97.159005][ T4465] Call Trace: [ 97.162305][ T4465] [ 97.165283][ T4465] dump_stack_lvl+0x188/0x24e [ 97.170002][ T4465] ? __lock_acquire+0x7c40/0x7c40 [ 97.175086][ T4465] ? show_regs_print_info+0x12/0x12 [ 97.180342][ T4465] ? load_image+0x410/0x410 [ 97.184897][ T4465] ? __virt_addr_valid+0x467/0x540 [ 97.190087][ T4465] ? nfsd_svc+0x996/0xab0 [ 97.194465][ T4465] print_report+0xa8/0x210 [ 97.198954][ T4465] kasan_report+0x10b/0x140 [ 97.203509][ T4465] ? nfsd_svc+0x996/0xab0 [ 97.207891][ T4465] nfsd_svc+0x996/0xab0 [ 97.212136][ T4465] write_threads+0x2ea/0x350 [ 97.216779][ T4465] ? write_unlock_fs+0x1f0/0x1f0 [ 97.221762][ T4465] ? __might_fault+0xc2/0x120 [ 97.226474][ T4465] ? _copy_from_user+0x10b/0x170 [ 97.231438][ T4465] ? simple_transaction_get+0x119/0x140 [ 97.237005][ T4465] nfsctl_transaction_write+0x105/0x150 [ 97.242587][ T4465] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 97.248246][ T4465] vfs_write+0x2dc/0x9a0 [ 97.252525][ T4465] ? file_end_write+0x250/0x250 [ 97.257404][ T4465] ? __fget_files+0x28/0x460 [ 97.262026][ T4465] ? __fget_files+0x3fc/0x460 [ 97.266759][ T4465] ? __fdget_pos+0x2ae/0x360 [ 97.271380][ T4465] ? ksys_write+0x70/0x260 [ 97.275847][ T4465] ksys_write+0x14d/0x260 [ 97.280246][ T4465] ? __ia32_sys_read+0x80/0x80 [ 97.285050][ T4465] ? lockdep_hardirqs_on+0x94/0x140 [ 97.290274][ T4465] do_syscall_64+0x4c/0xa0 [ 97.294722][ T4465] ? clear_bhb_loop+0x60/0xb0 [ 97.299430][ T4465] ? clear_bhb_loop+0x60/0xb0 [ 97.304133][ T4465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.310076][ T4465] RIP: 0033:0x7fbe8a39de99 [ 97.314517][ T4465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.334145][ T4465] RSP: 002b:00007fbe8b1f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 97.342584][ T4465] RAX: ffffffffffffffda RBX: 00007fbe8a625fa0 RCX: 00007fbe8a39de99 [ 97.350577][ T4465] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000003 [ 97.358566][ T4465] RBP: 00007fbe8a433eaf R08: 0000000000000000 R09: 0000000000000000 [ 97.366553][ T4465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.374541][ T4465] R13: 00007fbe8a626038 R14: 00007fbe8a625fa0 R15: 00007ffd9608db58 [ 97.382542][ T4465] [ 97.385580][ T4465] [ 97.387914][ T4465] Allocated by task 4465: [ 97.392253][ T4465] kasan_set_track+0x4b/0x70 [ 97.396879][ T4465] __kasan_kmalloc+0x8e/0xa0 [ 97.401501][ T4465] __svc_create+0x60/0x9d0 [ 97.405954][ T4465] svc_create_pooled+0x71f/0x8c0 [ 97.410925][ T4465] nfsd_create_serv+0x2f9/0x700 [ 97.415817][ T4465] nfsd_svc+0x17f/0xab0 [ 97.420005][ T4465] write_threads+0x2ea/0x350 [ 97.424631][ T4465] nfsctl_transaction_write+0x105/0x150 [ 97.430204][ T4465] vfs_write+0x2dc/0x9a0 [ 97.434483][ T4465] ksys_write+0x14d/0x260 [ 97.438843][ T4465] do_syscall_64+0x4c/0xa0 [ 97.443306][ T4465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.449250][ T4465] [ 97.451599][ T4465] Freed by task 4465: [ 97.455590][ T4465] kasan_set_track+0x4b/0x70 [ 97.460211][ T4465] kasan_save_free_info+0x27/0x40 [ 97.465268][ T4465] ____kasan_slab_free+0x126/0x1f0 [ 97.470425][ T4465] slab_free_freelist_hook+0x133/0x1b0 [ 97.475931][ T4465] __kmem_cache_free+0xb6/0x200 [ 97.480822][ T4465] nfsd_svc+0x75e/0xab0 [ 97.485004][ T4465] write_threads+0x2ea/0x350 [ 97.489623][ T4465] nfsctl_transaction_write+0x105/0x150 [ 97.495201][ T4465] vfs_write+0x2dc/0x9a0 [ 97.499478][ T4465] ksys_write+0x14d/0x260 [ 97.503842][ T4465] do_syscall_64+0x4c/0xa0 [ 97.508294][ T4465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.514250][ T4465] [ 97.516606][ T4465] The buggy address belongs to the object at ffff888056a48c00 [ 97.516606][ T4465] which belongs to the cache kmalloc-512 of size 512 [ 97.530695][ T4465] The buggy address is located 84 bytes inside of [ 97.530695][ T4465] 512-byte region [ffff888056a48c00, ffff888056a48e00) [ 97.543907][ T4465] [ 97.546255][ T4465] The buggy address belongs to the physical page: [ 97.552699][ T4465] page:ffffea00015a9200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56a48 [ 97.562875][ T4465] head:ffffea00015a9200 order:2 compound_mapcount:0 compound_pincount:0 [ 97.571217][ T4465] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 97.579236][ T4465] raw: 00fff00000010200 ffffea00015a9300 dead000000000002 ffff888017441c80 [ 97.587835][ T4465] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 97.596428][ T4465] page dumped because: kasan: bad access detected [ 97.602880][ T4465] page_owner tracks the page as allocated [ 97.608653][ T4465] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4281, tgid 4281 (syz-executor), ts 83010455106, free_ts 25384000353 [ 97.630042][ T4465] post_alloc_hook+0x173/0x1a0 [ 97.634901][ T4465] get_page_from_freelist+0x206b/0x2180 [ 97.640485][ T4465] __alloc_pages+0x1ec/0x4f0 [ 97.645118][ T4465] alloc_slab_page+0x5d/0x180 [ 97.649823][ T4465] new_slab+0x87/0x2d0 [ 97.653914][ T4465] ___slab_alloc+0xbc5/0x1240 [ 97.658611][ T4465] __kmem_cache_alloc_node+0x126/0x270 [ 97.664091][ T4465] __kmalloc_node_track_caller+0xa0/0x240 [ 97.669841][ T4465] __alloc_skb+0x226/0x7d0 [ 97.674284][ T4465] inet6_netconf_notify_devconf+0x10b/0x1d0 [ 97.680195][ T4465] __addrconf_sysctl_register+0x375/0x3e0 [ 97.685935][ T4465] addrconf_sysctl_register+0x15c/0x1b0 [ 97.691502][ T4465] ipv6_add_dev+0xbd4/0x1110 [ 97.696109][ T4465] addrconf_notify+0x634/0xf60 [ 97.700896][ T4465] raw_notifier_call_chain+0xcb/0x160 [ 97.706292][ T4465] register_netdevice+0x16a8/0x1b80 [ 97.711515][ T4465] page last free stack trace: [ 97.716207][ T4465] free_unref_page_prepare+0x8e5/0x9e0 [ 97.721700][ T4465] free_unref_page+0x2e/0x3f0 [ 97.726412][ T4465] free_contig_range+0x9d/0x150 [ 97.731281][ T4465] destroy_args+0xef/0xa0e [ 97.735741][ T4465] debug_vm_pgtable+0x33c/0x38e [ 97.740610][ T4465] do_one_initcall+0x257/0x800 [ 97.745413][ T4465] do_initcall_level+0x13d/0x1ed [ 97.750376][ T4465] do_initcalls+0x4b/0x8a [ 97.754737][ T4465] kernel_init_freeable+0x401/0x5ab [ 97.759987][ T4465] kernel_init+0x19/0x1b0 [ 97.764383][ T4465] ret_from_fork+0x1f/0x30 [ 97.768837][ T4465] [ 97.771183][ T4465] Memory state around the buggy address: [ 97.776826][ T4465] ffff888056a48b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 97.784905][ T4465] ffff888056a48b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 97.792982][ T4465] >ffff888056a48c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 97.801059][ T4465] ^ [ 97.807750][ T4465] ffff888056a48c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 97.815831][ T4465] ffff888056a48d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 97.823904][ T4465] ================================================================== [ 97.854149][ T4465] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 97.861399][ T4465] CPU: 0 PID: 4465 Comm: syz.2.12 Not tainted syzkaller #0 [ 97.868637][ T4465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 97.878737][ T4465] Call Trace: [ 97.882054][ T4465] [ 97.885024][ T4465] dump_stack_lvl+0x188/0x24e [ 97.889753][ T4465] ? memcpy+0x3c/0x60 [ 97.893871][ T4465] ? show_regs_print_info+0x12/0x12 [ 97.899123][ T4465] ? load_image+0x410/0x410 [ 97.903677][ T4465] panic+0x2d3/0x710 [ 97.907623][ T4465] ? bpf_jit_dump+0xd0/0xd0 [ 97.912174][ T4465] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 97.918200][ T4465] ? _raw_spin_unlock+0x40/0x40 [ 97.923097][ T4465] ? print_memory_metadata+0x314/0x400 [ 97.928602][ T4465] check_panic_on_warn+0x80/0xa0 [ 97.933585][ T4465] ? nfsd_svc+0x996/0xab0 [ 97.937956][ T4465] end_report+0x66/0x110 [ 97.942241][ T4465] kasan_report+0x118/0x140 [ 97.946790][ T4465] ? nfsd_svc+0x996/0xab0 [ 97.951165][ T4465] nfsd_svc+0x996/0xab0 [ 97.955366][ T4465] write_threads+0x2ea/0x350 [ 97.960027][ T4465] ? write_unlock_fs+0x1f0/0x1f0 [ 97.965016][ T4465] ? __might_fault+0xc2/0x120 [ 97.969749][ T4465] ? _copy_from_user+0x10b/0x170 [ 97.974734][ T4465] ? simple_transaction_get+0x119/0x140 [ 97.980357][ T4465] nfsctl_transaction_write+0x105/0x150 [ 97.985974][ T4465] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 97.991667][ T4465] vfs_write+0x2dc/0x9a0 [ 97.995980][ T4465] ? file_end_write+0x250/0x250 [ 98.000890][ T4465] ? __fget_files+0x28/0x460 [ 98.005538][ T4465] ? __fget_files+0x3fc/0x460 [ 98.010274][ T4465] ? __fdget_pos+0x2ae/0x360 [ 98.014914][ T4465] ? ksys_write+0x70/0x260 [ 98.019380][ T4465] ksys_write+0x14d/0x260 [ 98.023763][ T4465] ? __ia32_sys_read+0x80/0x80 [ 98.028595][ T4465] ? lockdep_hardirqs_on+0x94/0x140 [ 98.033840][ T4465] do_syscall_64+0x4c/0xa0 [ 98.038315][ T4465] ? clear_bhb_loop+0x60/0xb0 [ 98.043137][ T4465] ? clear_bhb_loop+0x60/0xb0 [ 98.047878][ T4465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.053837][ T4465] RIP: 0033:0x7fbe8a39de99 [ 98.058285][ T4465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.077917][ T4465] RSP: 002b:00007fbe8b1f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 98.086359][ T4465] RAX: ffffffffffffffda RBX: 00007fbe8a625fa0 RCX: 00007fbe8a39de99 [ 98.094352][ T4465] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000003 [ 98.102349][ T4465] RBP: 00007fbe8a433eaf R08: 0000000000000000 R09: 0000000000000000 [ 98.110350][ T4465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.118344][ T4465] R13: 00007fbe8a626038 R14: 00007fbe8a625fa0 R15: 00007ffd9608db58 [ 98.126344][ T4465] [ 98.129520][ T4465] Kernel Offset: disabled [ 98.133860][ T4465] Rebooting in 86400 seconds..