last executing test programs: 4.492737889s ago: executing program 3 (id=112): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='127.0.0.1:/export\x00', &(0x7f0000000100), &(0x7f0000000300)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,proto=udp,mountproto=udp,retry=0,timeo=5,retrans=1\x00') (async) recvfrom$inet(r0, &(0x7f0000000500)=""/32, 0x20, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000500)="00000000010000000000000000000000000000000000000001080000", 0x1c, 0x0, &(0x7f0000000600)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000b00)={0x0, 0x11e1a300}, 0x0) 3.488026834s ago: executing program 3 (id=124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syz_tun\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={@null, 0x0, 'syz_tun\x00'}) bind$x25(r2, &(0x7f0000000400), 0x12) connect$x25(r2, &(0x7f0000000500), 0x12) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100010f0f"], 0x5) sendto$x25(r2, &(0x7f0000000700)="1234567890", 0x5, 0x4, 0x0, 0x0) 3.272004209s ago: executing program 3 (id=128): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='0 \n\x00', 0x3) 3.072032695s ago: executing program 3 (id=131): pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) syz_clone(0x10000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r1, &(0x7f0000000300)={0x13, 0x65, 0xffff, 0x2000, 0x6, '9P2000'}, 0x13) write$P9_RATTACH(r1, &(0x7f0000000400)={0x13, 0x69, 0x1}, 0x13) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/foo\x00', 0x2, 0x0) 2.969849717s ago: executing program 3 (id=133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x605, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x605, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x605, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, '1234'}]}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, '5678'}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0x100}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000300)="12345678", 0x8, 0x0, &(0x7f0000000400)={0x2, 0x1234, @loopback}, 0x10) 2.674281724s ago: executing program 3 (id=136): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x6, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) capget(0x0, 0x0) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 2.259032575s ago: executing program 4 (id=142): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x777) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x6) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x801, 0x0, @empty}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='tcp 2049\x00', 0x9) 1.984807631s ago: executing program 1 (id=146): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}, @NHA_GATEWAY={0x8, 0x6, @ip4=@private=0xa010100}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}, @NHA_GATEWAY={0x8, 0x6, @ip4=@private=0xa010101}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @private=0xa010100}, @RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x30}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x12, &(0x7f0000000700)=@raw=[@generic={0xbf, 0x2, 0x1}, @generic={0xb7, 0x3}, @generic={0x7b, 0xa, 0x3, 0xffc0}, @generic={0x7b, 0xa, 0x3, 0xffc8}, @generic={0x7b, 0xa, 0x3, 0xffd0}, @generic={0x7b, 0xa, 0x3, 0xffd8}, @generic={0x7b, 0xa, 0x3, 0xffe0}, @generic={0x7b, 0xa, 0x3, 0xffe8}, @generic={0x7b, 0xa, 0x3, 0xfff0}, @generic={0x7b, 0xa, 0x3, 0xfff8}, @generic={0xbf, 0x1, 0x2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0xb7, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x0, 0x10, 0x0, &(0x7f0000000a00)="0123456789abcdef0123456789abcdef", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.968434242s ago: executing program 4 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='proc\x00', &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/sys/net/sctp/checksum_disable\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='1\x00', 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000a00)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r3, 0x5) syz_emit_ethernet(0x58, &(0x7f0000000b00)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x20, 0x84, 0x40, @remote, @local, {[], "4e234e230000000000000000c100001400000001c001000c0000000100000000"}}}}}, 0x0) 1.863978254s ago: executing program 2 (id=148): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newnexthop={0x34, 0x68, 0x601, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GATEWAY={0x14, 0x6, @ip4=@loopback}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv4_newroute={0x2c, 0x18, 0x601, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @rand_addr=0xac140000}, @RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x2c}}, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r1, &(0x7f0000000100)='\b\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x0, &(0x7f0000000200)={0x2, 0x0, @rand_addr=0xac140000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@delnexthop={0x20, 0x69, 0x1, 0x0, 0x0, {0x2}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1.740756787s ago: executing program 4 (id=149): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_clone(0x10f00, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000001000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000001000)=nil, 0x1000, 0x3) getsockopt(r0, 0x6, 0x1c, &(0x7f0000001200)=""/4, &(0x7f0000001100)=0x4) mprotect(&(0x7f0000001000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000001000)=nil, 0x1000, 0x3) getsockopt(r0, 0x6, 0x1c, &(0x7f0000001200)=""/4, &(0x7f0000001100)=0x4) 1.673558229s ago: executing program 1 (id=150): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f00000000c0)=@filename='proc\x00', &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='0', 0x1) 1.536008822s ago: executing program 1 (id=151): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) listen(r0, 0x5) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000010)={0x2, 0x1127, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) write(r1, &(0x7f0000000200)='hello', 0x5) write(r2, &(0x7f0000000200)='world', 0x5) 1.535864152s ago: executing program 4 (id=152): socket(0x8, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./proc\x00', &(0x7f0000001080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./proc/net/atm/vc\x00', 0x0, 0x0) read(r0, &(0x7f0000001100)=""/4096, 0x1000) 1.381374436s ago: executing program 4 (id=154): mount(&(0x7f0000000000)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='ceph\x00', 0x0, &(0x7f0000000300)='ms_mode=crc,mount_timeout=1\x00') 1.375348716s ago: executing program 0 (id=155): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv4/conf/all/accept_local\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 1.20737704s ago: executing program 4 (id=156): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8916, &(0x7f0000001400)={'veth0\x00', @ifru_addrs=@in={0x2, 0x0, @loopback}}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000001500)={'veth0\x00', @ifru_flags}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000001600)={'veth0\x00', @ifru_flags=0x1}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) nanosleep(&(0x7f0000001700)={0x0, 0x5f5e100}, 0x0) 1.20717242s ago: executing program 2 (id=157): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@delsa={0x0, 0x11, 0x1, 0x0, 0x0, {@in=@rand_addr=0x64010100, 0x1234, 0x2, 0x32}}, 0x24}}, 0x0) 1.20689039s ago: executing program 0 (id=158): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @loopback, 0x1}, 0xc) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @loopback, 0x1, 0x1, [@loopback]}, 0x18) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, 0x1}, 0xc) nanosleep(&(0x7f0000000200)={0x0, 0xbebc200}, 0x0) 955.925156ms ago: executing program 2 (id=159): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x3) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x1, 0x0, 0x12}, 0x10) listen(r0, 0x5) syz_emit_ethernet(0x13, &(0x7f0000000200)={@local, @remote, @void, {@llc={0x4, {@llc={0x12, 0x12, 'o\x00\x00'}}}}}, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000300)={@local, @remote, @void, {@llc={0x4, {@llc={0x12, 0x12, "0108"}}}}}, 0x0) 830.92341ms ago: executing program 0 (id=160): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r0, 0xa) 768.483551ms ago: executing program 2 (id=161): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='0', 0x1) 492.073078ms ago: executing program 1 (id=162): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 491.913308ms ago: executing program 0 (id=163): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000001100)=0x40) 424.566129ms ago: executing program 2 (id=164): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_LINK={0x8, 0x5, 0x1}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}]}, 0x58}}, 0x0) 341.412131ms ago: executing program 1 (id=165): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000180), 0x0) 252.022394ms ago: executing program 0 (id=166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syz_tun\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={@null, 0x0, 'syz_tun\x00'}) bind$x25(r2, &(0x7f0000000400), 0x12) connect$x25(r2, &(0x7f0000000500), 0x12) sendto$x25(r2, &(0x7f0000000600)="1234567890", 0x5, 0x4, 0x0, 0x0) 183.926665ms ago: executing program 2 (id=167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c0002800500010006000000060002003039000006000300001500000c0005800800010066747000080004000000012c"], 0x5c}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000300)={0x2, 0x1500, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000400)={0x2, 0x3930, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000500)={0x2, 0x1500, @loopback}, 0x10) 153.449626ms ago: executing program 1 (id=168): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/write_ports\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='2049\n\x00', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1\n\x00', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000340)='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='port=2049,proto=tcp,clientaddr=127.0.0.1\x00']) 0s ago: executing program 0 (id=169): r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='addr\x00', &(0x7f0000000080)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='proto\x00', &(0x7f0000000100)='tcp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/test\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.242' (ED25519) to the list of known hosts. syzkaller login: [ 76.457505][ T4261] cgroup: Unknown subsys name 'net' [ 76.589550][ T4261] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.157461][ T4261] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 80.031284][ T4283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.039713][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.048527][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.056743][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.064046][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.071300][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.079049][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.086250][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.093313][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.102234][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.109395][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.117190][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.124564][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.131619][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.139060][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.140244][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.153820][ T4290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.184823][ T4291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.198712][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.206262][ T49] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.213552][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.222304][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.230433][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.237906][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.304691][ T4291] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.312899][ T4291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.320594][ T4291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.328543][ T4291] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.336579][ T4291] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 80.344085][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.589296][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 80.652794][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 80.783555][ T4285] chnl_net:caif_netlink_parms(): no params data found [ 80.813250][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 80.883152][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.891226][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.899447][ T4275] device bridge_slave_0 entered promiscuous mode [ 80.933014][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.944844][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.953113][ T4275] device bridge_slave_1 entered promiscuous mode [ 80.977370][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.992132][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.000243][ T4273] device bridge_slave_0 entered promiscuous mode [ 81.031102][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.038778][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.046834][ T4273] device bridge_slave_1 entered promiscuous mode [ 81.068480][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.076202][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.084424][ T4285] device bridge_slave_0 entered promiscuous mode [ 81.112231][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.121629][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.130021][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.138837][ T4285] device bridge_slave_1 entered promiscuous mode [ 81.146308][ T4288] chnl_net:caif_netlink_parms(): no params data found [ 81.170636][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.182289][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.212624][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.220102][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.228411][ T4274] device bridge_slave_0 entered promiscuous mode [ 81.238332][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.278276][ T4285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.288395][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.296517][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.304949][ T4274] device bridge_slave_1 entered promiscuous mode [ 81.339201][ T4285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.351244][ T4273] team0: Port device team_slave_0 added [ 81.367662][ T4275] team0: Port device team_slave_0 added [ 81.377310][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.394616][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.411375][ T4273] team0: Port device team_slave_1 added [ 81.418321][ T4275] team0: Port device team_slave_1 added [ 81.457859][ T4285] team0: Port device team_slave_0 added [ 81.472386][ T4285] team0: Port device team_slave_1 added [ 81.509065][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.516060][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.542223][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.561257][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.568372][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.594591][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.608791][ T4274] team0: Port device team_slave_0 added [ 81.623773][ T4288] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.630890][ T4288] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.638992][ T4288] device bridge_slave_0 entered promiscuous mode [ 81.647249][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.657982][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.684337][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.708097][ T4274] team0: Port device team_slave_1 added [ 81.715452][ T4288] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.722565][ T4288] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.731042][ T4288] device bridge_slave_1 entered promiscuous mode [ 81.738665][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.746140][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.772444][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.784246][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.791197][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.817254][ T4285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.858255][ T4288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.868077][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.878864][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.905152][ T4285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.937979][ T4288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.952660][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.959929][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.986259][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.008946][ T4275] device hsr_slave_0 entered promiscuous mode [ 82.016082][ T4275] device hsr_slave_1 entered promiscuous mode [ 82.038396][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.045627][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.072087][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.127100][ T4273] device hsr_slave_0 entered promiscuous mode [ 82.134480][ T4273] device hsr_slave_1 entered promiscuous mode [ 82.141363][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.149297][ T4273] Cannot create hsr debugfs directory [ 82.157443][ T4288] team0: Port device team_slave_0 added [ 82.168021][ T4285] device hsr_slave_0 entered promiscuous mode [ 82.179036][ T4285] device hsr_slave_1 entered promiscuous mode [ 82.185781][ T4285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.193361][ T4285] Cannot create hsr debugfs directory [ 82.220067][ T4288] team0: Port device team_slave_1 added [ 82.226473][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 82.226801][ T4291] Bluetooth: hci1: command 0x0409 tx timeout [ 82.303824][ T4291] Bluetooth: hci2: command 0x0409 tx timeout [ 82.313947][ T4291] Bluetooth: hci3: command 0x0409 tx timeout [ 82.333441][ T4274] device hsr_slave_0 entered promiscuous mode [ 82.341088][ T4274] device hsr_slave_1 entered promiscuous mode [ 82.348219][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.356363][ T4274] Cannot create hsr debugfs directory [ 82.373350][ T4288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.381343][ T4288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.384368][ T4291] Bluetooth: hci4: command 0x0409 tx timeout [ 82.416073][ T4288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.458363][ T4288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.469303][ T4288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.495423][ T4288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.653875][ T4288] device hsr_slave_0 entered promiscuous mode [ 82.660546][ T4288] device hsr_slave_1 entered promiscuous mode [ 82.669011][ T4288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.677506][ T4288] Cannot create hsr debugfs directory [ 82.777879][ T4275] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.811869][ T4275] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.831681][ T4275] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.853475][ T4275] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.916248][ T4273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.928871][ T4273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.942237][ T4273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.969366][ T4273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.011840][ T4285] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.045959][ T4285] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.064676][ T4285] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.091482][ T4285] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.107277][ T4274] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.131109][ T4274] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.143167][ T4274] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.175817][ T4274] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.235257][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.256456][ T4288] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.293797][ T4288] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.302405][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.316446][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.332998][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.345158][ T4288] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.366047][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.384397][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.393286][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.406371][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.413811][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.429802][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.440599][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.449451][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.456619][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.472188][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.482828][ T4288] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.502027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.526037][ T4285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.553541][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.565192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.572908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.584342][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.597764][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.610054][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.619608][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.626730][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.638504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.647261][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.668458][ T4285] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.683098][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.694492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.702249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.715252][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.722899][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.731693][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.758360][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.769344][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.778861][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.786046][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.794520][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.803228][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.812162][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.819314][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.830203][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.838850][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.850416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.858726][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.882068][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.892028][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.902841][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.913513][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.922610][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.929766][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.944956][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.967624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.980564][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.992118][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.031785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.042301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.060655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.071672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.087239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.100888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.112746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.128520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.139256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.160080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.172512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.181609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.193086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.209359][ T4273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.220588][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.241144][ T4288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.255473][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.265877][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.278419][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.287836][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.296567][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.305347][ T4291] Bluetooth: hci1: command 0x041b tx timeout [ 84.311382][ T4291] Bluetooth: hci0: command 0x041b tx timeout [ 84.320155][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.328928][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.346506][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.370098][ T4288] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.381996][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.389795][ T4291] Bluetooth: hci3: command 0x041b tx timeout [ 84.396459][ T4286] Bluetooth: hci2: command 0x041b tx timeout [ 84.403577][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.412811][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.420771][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.431293][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.465088][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 84.475982][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.492867][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.530072][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.537238][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.590846][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.615821][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.631530][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.638712][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.680093][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.688341][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.749317][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.766620][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.784504][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.791732][ T4335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.824087][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.833058][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.849092][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.859151][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.866321][ T4335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.881381][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.890572][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.937208][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.958424][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.977330][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.986601][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.996516][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.006334][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.015406][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.024370][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.033050][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.045114][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.054833][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.094271][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.110632][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.122993][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.145242][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.160098][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.175467][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.187669][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.196477][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.205824][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.214653][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.222144][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.234351][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.245074][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.268995][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.283252][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.322444][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.411615][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.424965][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.436914][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.459109][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.467885][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.490464][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.513482][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.557243][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.567683][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.585246][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.604189][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.629076][ T4275] device veth0_vlan entered promiscuous mode [ 85.643306][ T4273] device veth0_vlan entered promiscuous mode [ 85.652736][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.669900][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.699811][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.714443][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.753626][ T4275] device veth1_vlan entered promiscuous mode [ 85.767702][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.789456][ T4273] device veth1_vlan entered promiscuous mode [ 85.869305][ T4275] device veth0_macvtap entered promiscuous mode [ 85.883985][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.914904][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.934690][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.957016][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.975012][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.998754][ T4275] device veth1_macvtap entered promiscuous mode [ 86.016440][ T4273] device veth0_macvtap entered promiscuous mode [ 86.045895][ T4273] device veth1_macvtap entered promiscuous mode [ 86.053337][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.071641][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.087926][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.098411][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.109562][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.125514][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.132887][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.148241][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.178884][ T4288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.201025][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.228857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.258466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.272908][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.286417][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.298627][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.312514][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.324430][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.333290][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.343487][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.352488][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.374373][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.383237][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.384838][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 86.398384][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 86.406539][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.424475][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.433411][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.455022][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.464535][ T4286] Bluetooth: hci2: command 0x040f tx timeout [ 86.470585][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 86.481336][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.499378][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.510912][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.544893][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 86.567621][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.577024][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.675952][ T4275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.692235][ T4275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.702326][ T4275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.718680][ T4275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.739829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.751576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.776208][ T4288] device veth0_vlan entered promiscuous mode [ 86.832703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.841950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.852359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.861538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.877188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.885483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.893345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.901931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.914339][ T4288] device veth1_vlan entered promiscuous mode [ 86.935573][ T4274] device veth0_vlan entered promiscuous mode [ 86.972704][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.022119][ T4274] device veth1_vlan entered promiscuous mode [ 87.047283][ T4288] device veth0_macvtap entered promiscuous mode [ 87.063799][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.088888][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.100007][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.112343][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.121672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.130942][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.181017][ T4288] device veth1_macvtap entered promiscuous mode [ 87.212966][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.243773][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.255325][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.266539][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.279128][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.287600][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.297312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.305838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.315347][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.330777][ T4285] device veth0_vlan entered promiscuous mode [ 87.358998][ T4274] device veth0_macvtap entered promiscuous mode [ 87.364697][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.373124][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.387497][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.398229][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.408365][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.419311][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.435603][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.442920][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.452979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.467484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.477863][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.491522][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.503302][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.519530][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.535851][ T4274] device veth1_macvtap entered promiscuous mode [ 87.555270][ T4288] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.568643][ T4288] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.578362][ T4288] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.588308][ T4288] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.617539][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.626893][ T4335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.643115][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.652000][ T4335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.666619][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.678418][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.686836][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.707911][ T4285] device veth1_vlan entered promiscuous mode [ 87.735941][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.757699][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.774786][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.795524][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.809403][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.823474][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.841503][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.859541][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.889453][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.906773][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.916325][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.929664][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.940891][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.951899][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.963332][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.976144][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.987643][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.999259][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.011659][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.032643][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.048082][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.056608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.076007][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.138065][ T4274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.150984][ T4274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.159989][ T4274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.180651][ T4274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.208229][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.218191][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.262506][ T4285] device veth0_macvtap entered promiscuous mode [ 88.295873][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.312369][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.331423][ T4285] device veth1_macvtap entered promiscuous mode [ 88.340809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.350076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.367004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.425343][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.435187][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.442425][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.447424][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.464206][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 88.464245][ T4286] Bluetooth: hci1: command 0x0419 tx timeout [ 88.502666][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.521008][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.531503][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.545753][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.555628][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 88.555682][ T4286] Bluetooth: hci2: command 0x0419 tx timeout [ 88.568264][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.583113][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.589124][ T4373] Zero length message leads to an empty skb [ 88.600544][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.618761][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.626296][ T4291] Bluetooth: hci4: command 0x0419 tx timeout [ 88.643306][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.652819][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.669879][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.685058][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.695914][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.709774][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.719844][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.730484][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.740405][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.751274][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.786469][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.814873][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.831888][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.890630][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.902338][ T4285] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.917948][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.925642][ T4285] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.964471][ T4285] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.973241][ T4285] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.003625][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.075025][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.082944][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.139353][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.327003][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.350627][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.379493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.453010][ T4385] tipc: Started in network mode [ 89.458177][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.473978][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.483139][ T4385] tipc: Node identity 1000001, cluster identity 4711 [ 89.499012][ T4385] tipc: Node number set to 16777217 [ 89.529934][ T4388] tipc: Enabling of bearer rejected, failed to enable media [ 89.645891][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.945975][ T4399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'. [ 90.088638][ T4400] svc: failed to register lockdv1 RPC service (errno 111). [ 90.114105][ T4400] lockd_up: makesock failed, error=-111 [ 90.634578][ T4429] loop1: detected capacity change from 0 to 64 [ 91.249289][ T4320] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.473761][ T4320] usb 1-1: Using ep0 maxpacket: 16 [ 91.484727][ T4320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.531321][ T4320] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 91.574017][ T4320] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 91.603417][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.635929][ T4320] usb 1-1: config 0 descriptor?? [ 91.745924][ T22] cfg80211: failed to load regulatory.db [ 91.761673][ T4464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 91.771995][ T4464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 91.868033][ T4320] usbhid 1-1:0.0: can't add hid device: -71 [ 91.877445][ T4320] usbhid: probe of 1-1:0.0 failed with error -71 [ 91.891780][ T4320] usb 1-1: USB disconnect, device number 2 [ 92.016285][ T4471] tipc: Started in network mode [ 92.021336][ T4471] tipc: Node identity d2a27a3600b1, cluster identity 4711 [ 92.036434][ T4471] tipc: Enabled bearer , priority 0 [ 92.047988][ T4473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.44'. [ 92.126100][ T4470] tipc: Disabling bearer [ 92.957673][ T4508] ip_tables: iptables: counters copy to user failed while replacing table [ 93.156420][ T4512] svc: failed to register nfsdv3 RPC service (errno 111). [ 93.192511][ T4512] svc: failed to register nfsaclv3 RPC service (errno 111). [ 93.413749][ T4521] netlink: 76 bytes leftover after parsing attributes in process `syz.2.64'. [ 93.593383][ T4534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'. [ 94.080013][ T4552] svc: failed to register lockdv1 RPC service (errno 111). [ 94.393956][ T4320] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 94.595025][ T4320] usb 4-1: not running at top speed; connect to a high speed hub [ 94.604168][ T4320] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 94.615590][ T4320] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 94.631519][ T4320] usb 4-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 94.640991][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.649353][ T4320] usb 4-1: Product: syz [ 94.653880][ T4320] usb 4-1: Manufacturer: syz [ 94.658628][ T4320] usb 4-1: SerialNumber: syz [ 94.667885][ T4555] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 94.676047][ T4555] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 95.397480][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 95.420308][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 95.954277][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 96.065972][ T4329] rpcbind: server 127.0.0.1 not responding, timed out [ 96.194406][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 96.222029][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 96.262208][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 96.330392][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 96.395218][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 96.461429][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 96.493554][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 96.525433][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 96.562847][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 96.618429][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 96.650688][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 96.707653][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 96.730566][ T4613] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.747846][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 96.769958][ T4619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'. [ 96.794103][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 96.827055][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 96.860504][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 96.898912][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 96.935798][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 96.966868][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 97.003939][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 97.026917][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 97.050074][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 97.065683][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 97.077099][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 97.089993][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 97.126551][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 97.176825][ T4320] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 97.252097][ T4320] ax88179_178a 4-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.3-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, f2:e4:bc:91:a0:07 [ 97.323155][ T4320] usb 4-1: USB disconnect, device number 2 [ 97.358023][ T4320] ax88179_178a 4-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.3-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 97.705300][ T4637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.109'. [ 97.761160][ T4640] netlink: 68 bytes leftover after parsing attributes in process `syz.4.109'. [ 97.814397][ T4637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.109'. [ 97.834430][ T4637] netlink: 'syz.4.109': attribute type 1 has an invalid length. [ 98.331373][ T4655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'. [ 98.886724][ T4671] netlink: 32 bytes leftover after parsing attributes in process `syz.4.123'. [ 99.584792][ T54] rpcbind: server 127.0.0.1 not responding, timed out [ 99.737641][ T4697] netlink: 'syz.0.125': attribute type 2 has an invalid length. [ 100.352153][ T4720] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 100.630705][ T4725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 100.656134][ T4725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'. [ 101.624964][ T4748] infiniband syz0: set active [ 101.636468][ T4748] infiniband syz0: added veth0 [ 101.773017][ T4748] RDS/IB: syz0: added [ 101.797852][ T4748] smc: adding ib device syz0 with port count 1 [ 101.851037][ T4748] smc: ib device syz0 port 1 has pnetid [ 102.450099][ T4773] svc: failed to register nfsdv3 RPC service (errno 111). [ 102.482046][ T4773] svc: failed to register nfsaclv3 RPC service (errno 111). [ 102.555884][ T4773] ================================================================== [ 102.564012][ T4773] BUG: KASAN: use-after-free in nfsd_svc+0x996/0xab0 [ 102.570741][ T4773] Read of size 4 at addr ffff888055c83c54 by task syz.1.168/4773 [ 102.578480][ T4773] [ 102.580853][ T4773] CPU: 0 PID: 4773 Comm: syz.1.168 Not tainted syzkaller #0 [ 102.588263][ T4773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 102.598358][ T4773] Call Trace: [ 102.601666][ T4773] [ 102.604630][ T4773] dump_stack_lvl+0x188/0x24e [ 102.609354][ T4773] ? __lock_acquire+0x7c40/0x7c40 [ 102.614435][ T4773] ? show_regs_print_info+0x12/0x12 [ 102.619680][ T4773] ? load_image+0x410/0x410 [ 102.624222][ T4773] ? __virt_addr_valid+0x467/0x540 [ 102.629383][ T4773] ? nfsd_svc+0x996/0xab0 [ 102.633753][ T4773] print_report+0xa8/0x210 [ 102.638215][ T4773] kasan_report+0x10b/0x140 [ 102.642768][ T4773] ? nfsd_svc+0x996/0xab0 [ 102.647165][ T4773] nfsd_svc+0x996/0xab0 [ 102.651370][ T4773] write_threads+0x2ea/0x350 [ 102.656008][ T4773] ? write_unlock_fs+0x1f0/0x1f0 [ 102.660988][ T4773] ? __might_fault+0xc2/0x120 [ 102.665704][ T4773] ? _copy_from_user+0x10b/0x170 [ 102.670684][ T4773] ? simple_transaction_get+0x119/0x140 [ 102.676276][ T4773] nfsctl_transaction_write+0x105/0x150 [ 102.681856][ T4773] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 102.687526][ T4773] vfs_write+0x2dc/0x9a0 [ 102.691843][ T4773] ? file_end_write+0x250/0x250 [ 102.696751][ T4773] ? __fget_files+0x28/0x460 [ 102.701393][ T4773] ? __fget_files+0x3fc/0x460 [ 102.706160][ T4773] ? __fdget_pos+0x2ae/0x360 [ 102.710814][ T4773] ? ksys_write+0x70/0x260 [ 102.715274][ T4773] ksys_write+0x14d/0x260 [ 102.719641][ T4773] ? __ia32_sys_read+0x80/0x80 [ 102.724450][ T4773] ? lockdep_hardirqs_on+0x94/0x140 [ 102.729685][ T4773] do_syscall_64+0x4c/0xa0 [ 102.734136][ T4773] ? clear_bhb_loop+0x60/0xb0 [ 102.738851][ T4773] ? clear_bhb_loop+0x60/0xb0 [ 102.743583][ T4773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.749526][ T4773] RIP: 0033:0x7f5e1879de99 [ 102.753992][ T4773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.773637][ T4773] RSP: 002b:00007f5e1965e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 102.782094][ T4773] RAX: ffffffffffffffda RBX: 00007f5e18a25fa0 RCX: 00007f5e1879de99 [ 102.790103][ T4773] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000003 [ 102.798098][ T4773] RBP: 00007f5e18833eaf R08: 0000000000000000 R09: 0000000000000000 [ 102.806099][ T4773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.814192][ T4773] R13: 00007f5e18a26038 R14: 00007f5e18a25fa0 R15: 00007ffd88c8b6c8 [ 102.822215][ T4773] [ 102.825264][ T4773] [ 102.827603][ T4773] Allocated by task 4773: [ 102.831947][ T4773] kasan_set_track+0x4b/0x70 [ 102.836594][ T4773] __kasan_kmalloc+0x8e/0xa0 [ 102.841236][ T4773] __svc_create+0x60/0x9d0 [ 102.845693][ T4773] svc_create_pooled+0x71f/0x8c0 [ 102.850665][ T4773] nfsd_create_serv+0x2f9/0x700 [ 102.855555][ T4773] nfsd_svc+0x17f/0xab0 [ 102.859747][ T4773] write_threads+0x2ea/0x350 [ 102.864384][ T4773] nfsctl_transaction_write+0x105/0x150 [ 102.869971][ T4773] vfs_write+0x2dc/0x9a0 [ 102.874269][ T4773] ksys_write+0x14d/0x260 [ 102.878644][ T4773] do_syscall_64+0x4c/0xa0 [ 102.883104][ T4773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.889038][ T4773] [ 102.891396][ T4773] Freed by task 4773: [ 102.895406][ T4773] kasan_set_track+0x4b/0x70 [ 102.900046][ T4773] kasan_save_free_info+0x27/0x40 [ 102.905105][ T4773] ____kasan_slab_free+0x126/0x1f0 [ 102.910268][ T4773] slab_free_freelist_hook+0x133/0x1b0 [ 102.915762][ T4773] __kmem_cache_free+0xb6/0x200 [ 102.920638][ T4773] nfsd_svc+0x75e/0xab0 [ 102.924825][ T4773] write_threads+0x2ea/0x350 [ 102.929467][ T4773] nfsctl_transaction_write+0x105/0x150 [ 102.935081][ T4773] vfs_write+0x2dc/0x9a0 [ 102.939369][ T4773] ksys_write+0x14d/0x260 [ 102.943760][ T4773] do_syscall_64+0x4c/0xa0 [ 102.948228][ T4773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.954170][ T4773] [ 102.956522][ T4773] The buggy address belongs to the object at ffff888055c83c00 [ 102.956522][ T4773] which belongs to the cache kmalloc-512 of size 512 [ 102.970600][ T4773] The buggy address is located 84 bytes inside of [ 102.970600][ T4773] 512-byte region [ffff888055c83c00, ffff888055c83e00) [ 102.983824][ T4773] [ 102.986170][ T4773] The buggy address belongs to the physical page: [ 102.992619][ T4773] page:ffffea0001572000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55c80 [ 103.002799][ T4773] head:ffffea0001572000 order:2 compound_mapcount:0 compound_pincount:0 [ 103.011153][ T4773] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 103.019181][ T4773] raw: 00fff00000010200 ffffea0001655000 dead000000000002 ffff888017441c80 [ 103.027815][ T4773] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 103.036418][ T4773] page dumped because: kasan: bad access detected [ 103.042861][ T4773] page_owner tracks the page as allocated [ 103.048592][ T4773] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4323, tgid 4323 (kworker/0:5), ts 83996542799, free_ts 83989228498 [ 103.069296][ T4773] post_alloc_hook+0x173/0x1a0 [ 103.074102][ T4773] get_page_from_freelist+0x206b/0x2180 [ 103.079778][ T4773] __alloc_pages+0x1ec/0x4f0 [ 103.084423][ T4773] alloc_slab_page+0x5d/0x180 [ 103.089137][ T4773] new_slab+0x87/0x2d0 [ 103.093248][ T4773] ___slab_alloc+0xbc5/0x1240 [ 103.097973][ T4773] __kmem_cache_alloc_node+0x126/0x270 [ 103.103477][ T4773] __kmalloc_node_track_caller+0xa0/0x240 [ 103.109245][ T4773] __alloc_skb+0x226/0x7d0 [ 103.113697][ T4773] fdb_notify+0xa6/0x160 [ 103.117980][ T4773] br_fdb_update+0x409/0x5f0 [ 103.122606][ T4773] br_handle_frame_finish+0x622/0x1500 [ 103.128111][ T4773] br_nf_hook_thresh+0x3c9/0x4a0 [ 103.133086][ T4773] br_nf_pre_routing_finish_ipv6+0x9e3/0xd20 [ 103.139098][ T4773] br_nf_pre_routing_ipv6+0x349/0x6a0 [ 103.144517][ T4773] br_handle_frame+0x1162/0x13b0 [ 103.149491][ T4773] page last free stack trace: [ 103.154217][ T4773] free_unref_page_prepare+0x8e5/0x9e0 [ 103.159720][ T4773] free_unref_page+0x2e/0x3f0 [ 103.164461][ T4773] __stack_depot_save+0x44d/0x480 [ 103.169526][ T4773] kasan_set_track+0x60/0x70 [ 103.174177][ T4773] kasan_save_free_info+0x27/0x40 [ 103.179253][ T4773] ____kasan_slab_free+0x126/0x1f0 [ 103.184421][ T4773] slab_free_freelist_hook+0x133/0x1b0 [ 103.189919][ T4773] kmem_cache_free+0xf7/0x2a0 [ 103.194637][ T4773] netlink_broadcast+0xffd/0x10f0 [ 103.199721][ T4773] nlmsg_notify+0xe3/0x1a0 [ 103.204182][ T4773] netdev_state_change+0xfa/0x170 [ 103.209256][ T4773] hsr_check_carrier_and_operstate+0x544/0x6b0 [ 103.215450][ T4773] hsr_netdev_notify+0x377/0xaf0 [ 103.220436][ T4773] raw_notifier_call_chain+0xcb/0x160 [ 103.225838][ T4773] __dev_notify_flags+0x1a7/0x310 [ 103.230897][ T4773] dev_change_flags+0xda/0x1a0 [ 103.235700][ T4773] [ 103.238035][ T4773] Memory state around the buggy address: [ 103.243716][ T4773] ffff888055c83b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 103.251803][ T4773] ffff888055c83b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 103.259900][ T4773] >ffff888055c83c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.267980][ T4773] ^ [ 103.274693][ T4773] ffff888055c83c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.282821][ T4773] ffff888055c83d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.290900][ T4773] ================================================================== [ 103.363887][ T4773] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 103.371137][ T4773] CPU: 1 PID: 4773 Comm: syz.1.168 Not tainted syzkaller #0 [ 103.378449][ T4773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 103.388530][ T4773] Call Trace: [ 103.391835][ T4773] [ 103.394814][ T4773] dump_stack_lvl+0x188/0x24e [ 103.399544][ T4773] ? memcpy+0x3c/0x60 [ 103.403588][ T4773] ? show_regs_print_info+0x12/0x12 [ 103.408835][ T4773] ? load_image+0x410/0x410 [ 103.413402][ T4773] panic+0x2d3/0x710 [ 103.417338][ T4773] ? bpf_jit_dump+0xd0/0xd0 [ 103.421888][ T4773] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 103.427912][ T4773] ? _raw_spin_unlock+0x40/0x40 [ 103.432799][ T4773] ? print_memory_metadata+0x314/0x400 [ 103.438298][ T4773] check_panic_on_warn+0x80/0xa0 [ 103.443279][ T4773] ? nfsd_svc+0x996/0xab0 [ 103.447641][ T4773] end_report+0x66/0x110 [ 103.451938][ T4773] kasan_report+0x118/0x140 [ 103.456505][ T4773] ? nfsd_svc+0x996/0xab0 [ 103.460884][ T4773] nfsd_svc+0x996/0xab0 [ 103.465092][ T4773] write_threads+0x2ea/0x350 [ 103.469728][ T4773] ? write_unlock_fs+0x1f0/0x1f0 [ 103.474735][ T4773] ? __might_fault+0xc2/0x120 [ 103.479448][ T4773] ? _copy_from_user+0x10b/0x170 [ 103.484425][ T4773] ? simple_transaction_get+0x119/0x140 [ 103.490029][ T4773] nfsctl_transaction_write+0x105/0x150 [ 103.495620][ T4773] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 103.501324][ T4773] vfs_write+0x2dc/0x9a0 [ 103.505622][ T4773] ? file_end_write+0x250/0x250 [ 103.510521][ T4773] ? __fget_files+0x28/0x460 [ 103.515151][ T4773] ? __fget_files+0x3fc/0x460 [ 103.519880][ T4773] ? __fdget_pos+0x2ae/0x360 [ 103.524520][ T4773] ? ksys_write+0x70/0x260 [ 103.528997][ T4773] ksys_write+0x14d/0x260 [ 103.533403][ T4773] ? __ia32_sys_read+0x80/0x80 [ 103.538216][ T4773] ? lockdep_hardirqs_on+0x94/0x140 [ 103.543451][ T4773] do_syscall_64+0x4c/0xa0 [ 103.547940][ T4773] ? clear_bhb_loop+0x60/0xb0 [ 103.552660][ T4773] ? clear_bhb_loop+0x60/0xb0 [ 103.557390][ T4773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.563325][ T4773] RIP: 0033:0x7f5e1879de99 [ 103.567769][ T4773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.587410][ T4773] RSP: 002b:00007f5e1965e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.595864][ T4773] RAX: ffffffffffffffda RBX: 00007f5e18a25fa0 RCX: 00007f5e1879de99 [ 103.603871][ T4773] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000003 [ 103.611876][ T4773] RBP: 00007f5e18833eaf R08: 0000000000000000 R09: 0000000000000000 [ 103.619880][ T4773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.627910][ T4773] R13: 00007f5e18a26038 R14: 00007f5e18a25fa0 R15: 00007ffd88c8b6c8 [ 103.635928][ T4773] [ 103.639533][ T4773] Kernel Offset: disabled [ 103.643868][ T4773] Rebooting in 86400 seconds..