last executing test programs: 1.605966151s ago: executing program 3 (id=4): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_open_dev$usbfs(0x0, 0xf, 0x240000) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@fwd={0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x2, 0x2}]}]}, {0x0, [0x5f, 0x4f]}}, 0x0, 0x40, 0x0, 0xa}, 0x28) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000814000780080012400000000505001500090000000500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a69702c6d616300"], 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a000000050001000700ff01000000000000ac75d749b3a47836a7edce6f7a3f6ed82c38a14736ab557b6011da34bffab0482edfd435fa0f3d02a2e10627e2df4c6aec11"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) 684.005003ms ago: executing program 3 (id=6): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) 643.721854ms ago: executing program 0 (id=1): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 553.656777ms ago: executing program 2 (id=3): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x808400, &(0x7f00000000c0)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@acl}]}, 0x1, 0x45f, &(0x7f0000000340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) msgget$private(0x0, 0x3ac) 506.934188ms ago: executing program 3 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='nfsd 127.0.0.1 2147483647 localhost', 0x23) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='localhost 1 \\x00000000 2147483647 /tmp\n', 0x27) close(r1) close(0xffffffffffffffff) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='1\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f00000004c0)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.0,clientaddr=127.0.0.1\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x42, 0x1ff) write(r3, &(0x7f00000005c0)='hello\n', 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000640)='0\n', 0x2) close(r4) 0s ago: executing program 0 (id=8): socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000140)=0x4, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts. [ 62.257265][ T4172] cgroup: Unknown subsys name 'net' [ 62.398175][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.969234][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.457322][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 65.599660][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 65.646262][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 65.679762][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.687595][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.696910][ T4187] device bridge_slave_0 entered promiscuous mode [ 65.719676][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 65.748893][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.756204][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.765288][ T4187] device bridge_slave_1 entered promiscuous mode [ 65.829171][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.838717][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 65.867271][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.921839][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.929130][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.937270][ T4189] device bridge_slave_0 entered promiscuous mode [ 65.968001][ T4187] team0: Port device team_slave_0 added [ 65.984470][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.992662][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.000762][ T4189] device bridge_slave_1 entered promiscuous mode [ 66.008329][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.015694][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.023954][ T4190] device bridge_slave_0 entered promiscuous mode [ 66.033432][ T4187] team0: Port device team_slave_1 added [ 66.048377][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.055600][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.064031][ T4188] device bridge_slave_0 entered promiscuous mode [ 66.084632][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.091975][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.100156][ T4188] device bridge_slave_1 entered promiscuous mode [ 66.107544][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.114738][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.122912][ T4190] device bridge_slave_1 entered promiscuous mode [ 66.170862][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.189981][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.200709][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.211144][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.218138][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.245031][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.264060][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.271208][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.297178][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.308959][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.316360][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.325251][ T4186] device bridge_slave_0 entered promiscuous mode [ 66.336332][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.354523][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.369794][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.379623][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.387563][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.396000][ T4186] device bridge_slave_1 entered promiscuous mode [ 66.469671][ T4188] team0: Port device team_slave_0 added [ 66.485483][ T4190] team0: Port device team_slave_0 added [ 66.494193][ T4190] team0: Port device team_slave_1 added [ 66.509110][ T4189] team0: Port device team_slave_0 added [ 66.521504][ T4187] device hsr_slave_0 entered promiscuous mode [ 66.529110][ T4187] device hsr_slave_1 entered promiscuous mode [ 66.538181][ T4188] team0: Port device team_slave_1 added [ 66.546786][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.565138][ T4189] team0: Port device team_slave_1 added [ 66.580216][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.622821][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.629840][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.657216][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.670085][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.677558][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.703937][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.732485][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.739938][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.766227][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.778318][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.785895][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.812111][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.827115][ T4186] team0: Port device team_slave_0 added [ 66.844277][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.854659][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.885304][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.905468][ T4186] team0: Port device team_slave_1 added [ 66.923849][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.930851][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.957605][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.003277][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.010310][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.037315][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.056640][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.064819][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.091175][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.133407][ T4188] device hsr_slave_0 entered promiscuous mode [ 67.140734][ T4188] device hsr_slave_1 entered promiscuous mode [ 67.148056][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.156147][ T4188] Cannot create hsr debugfs directory [ 67.170235][ T4190] device hsr_slave_0 entered promiscuous mode [ 67.177684][ T4190] device hsr_slave_1 entered promiscuous mode [ 67.184876][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.192862][ T4190] Cannot create hsr debugfs directory [ 67.206807][ T4189] device hsr_slave_0 entered promiscuous mode [ 67.213869][ T4189] device hsr_slave_1 entered promiscuous mode [ 67.220521][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.228580][ T4189] Cannot create hsr debugfs directory [ 67.233789][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 67.234672][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 67.243441][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 67.255023][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 67.273829][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 67.332400][ T4186] device hsr_slave_0 entered promiscuous mode [ 67.339239][ T4186] device hsr_slave_1 entered promiscuous mode [ 67.349775][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.357664][ T4186] Cannot create hsr debugfs directory [ 67.667668][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.684779][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.694670][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.705344][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.758340][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.773298][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.785571][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.795881][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.878995][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.915075][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.936450][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.949647][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.960556][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.974703][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.995784][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.013336][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.023748][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.075257][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.084641][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.095216][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.120602][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.150400][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.160847][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.172348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.183518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.193975][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.201406][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.212567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.224588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.233327][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.240402][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.248824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.265455][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.278325][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.306880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.316019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.327891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.340122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.381200][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.389415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.400591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.409748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.419558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.429263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.438212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.449538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.463628][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.472972][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.504971][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.514790][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.527410][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.537786][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.545202][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.556854][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.566600][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.575901][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.583047][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.591505][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.642719][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.696687][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.712359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.740740][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.752524][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.774379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.786701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.797840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.807051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.816315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.826160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.836565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.845618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.854882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.863525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.898461][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.913327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.933601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.952598][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.983094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.997769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.021776][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.028896][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.043399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.053723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.063485][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.071030][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.079507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.088434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.097137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.118210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.128607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.142789][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.155625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.172965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.194278][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.205994][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.251778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.263546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.273150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.300181][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.308041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.312080][ T2856] Bluetooth: hci2: command 0x041b tx timeout [ 69.322641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.331543][ T2856] Bluetooth: hci3: command 0x041b tx timeout [ 69.337671][ T2856] Bluetooth: hci0: command 0x041b tx timeout [ 69.338246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.353207][ T2856] Bluetooth: hci1: command 0x041b tx timeout [ 69.358975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.368710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.371543][ T2856] Bluetooth: hci4: command 0x041b tx timeout [ 69.380281][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.393238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.401370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.414123][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.430789][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.463709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.473501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.482256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.491905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.500773][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.508049][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.517112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.526542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.535525][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.542888][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.550741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.562310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.570648][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.581923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.589634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.599204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.608165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.616435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.636389][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.648342][ T4187] device veth0_vlan entered promiscuous mode [ 69.682640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.694593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.705557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.716738][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.723878][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.738931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.748313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.763363][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.770492][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.778766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.788340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.826473][ T4187] device veth1_vlan entered promiscuous mode [ 69.839736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.851665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.868071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.879466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.892405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.919770][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.933546][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.961527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.969651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.984132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.994149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.003825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.014169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.023363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.032933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.041906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.050376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.062516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.072861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.081823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.090313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.099011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.142902][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.157034][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.167810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.178361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.187654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.196867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.205672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.215109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.224312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.233697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.243864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.252387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.277122][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.287692][ T4188] device veth0_vlan entered promiscuous mode [ 70.303391][ T4187] device veth0_macvtap entered promiscuous mode [ 70.336929][ T4188] device veth1_vlan entered promiscuous mode [ 70.351100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.359452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.376461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.388222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.407527][ T4187] device veth1_macvtap entered promiscuous mode [ 70.451181][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.469542][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.494071][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.511287][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.520136][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.530972][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.542352][ T4190] device veth0_vlan entered promiscuous mode [ 70.571505][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.587731][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.599009][ T4188] device veth0_macvtap entered promiscuous mode [ 70.622959][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.633623][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.648509][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.657032][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.674751][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.683972][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.696363][ T4188] device veth1_macvtap entered promiscuous mode [ 70.707762][ T4190] device veth1_vlan entered promiscuous mode [ 70.720648][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.733208][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.744883][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.754819][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.804762][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.818216][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.828940][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.839947][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.849893][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.863079][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.871260][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.900651][ T4190] device veth0_macvtap entered promiscuous mode [ 70.923410][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.935203][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.946620][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.955110][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.969408][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.978515][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.987764][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.023556][ T4190] device veth1_macvtap entered promiscuous mode [ 71.032091][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.040262][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.050383][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.060953][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.085458][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.105633][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.119278][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.153254][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.186012][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.220331][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.232253][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.242766][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.253595][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.266265][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.277471][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.290229][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.301717][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.310453][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.332158][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.347732][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.356846][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.372466][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.388008][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.392166][ T4243] Bluetooth: hci1: command 0x040f tx timeout [ 71.402403][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.412898][ T4186] device veth0_vlan entered promiscuous mode [ 71.420454][ T4243] Bluetooth: hci0: command 0x040f tx timeout [ 71.432940][ T4243] Bluetooth: hci3: command 0x040f tx timeout [ 71.439109][ T4243] Bluetooth: hci2: command 0x040f tx timeout [ 71.471989][ T4256] Bluetooth: hci4: command 0x040f tx timeout [ 71.478979][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.489038][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.501235][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.510795][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.525391][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.536253][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.548525][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.564870][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.571683][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.588053][ T4186] device veth1_vlan entered promiscuous mode [ 71.595255][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.604086][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.612566][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.622222][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.637913][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.654496][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.664935][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.677927][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.772525][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.786054][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.803430][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.814850][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.826902][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.872878][ T4186] device veth0_macvtap entered promiscuous mode [ 71.915042][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.935005][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.945273][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.955074][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.964563][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.973361][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.981954][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.992300][ T4186] device veth1_macvtap entered promiscuous mode [ 72.023137][ T4264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.041023][ T4189] device veth0_vlan entered promiscuous mode [ 72.064644][ T4264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.087035][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.114547][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.127391][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.139754][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.152279][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.166967][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.194484][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.204745][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.230468][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.242305][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.254717][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.274223][ T1270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.285077][ T1270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.335534][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.369287][ T4189] device veth1_vlan entered promiscuous mode [ 72.435527][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.448542][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.459506][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.473458][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.493921][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.508692][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.525495][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.583732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.599383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.614914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.630273][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.640770][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.665349][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.714921][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.753128][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.756936][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.782464][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.784770][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.804801][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.854927][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.911304][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.002702][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.041927][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.060302][ T4189] device veth0_macvtap entered promiscuous mode [ 73.083288][ T4270] FAULT_INJECTION: forcing a failure. [ 73.083288][ T4270] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 73.128779][ T4189] device veth1_macvtap entered promiscuous mode [ 73.177468][ T4270] CPU: 1 PID: 4270 Comm: syz.0.1 Not tainted syzkaller #0 [ 73.184662][ T4270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.194916][ T4270] Call Trace: [ 73.198236][ T4270] [ 73.201230][ T4270] dump_stack_lvl+0x188/0x250 [ 73.205970][ T4270] ? show_regs_print_info+0x20/0x20 [ 73.211222][ T4270] ? load_image+0x410/0x410 [ 73.215782][ T4270] ? __lock_acquire+0x7d40/0x7d40 [ 73.220862][ T4270] should_fail+0x383/0x4b0 [ 73.225329][ T4270] _copy_from_iter+0x234/0x1160 [ 73.230332][ T4270] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 73.235764][ T4270] ? __virt_addr_valid+0x3c6/0x470 [ 73.240922][ T4270] ? __phys_addr_symbol+0x2b/0x70 [ 73.245993][ T4270] ? __check_object_size+0x30c/0x410 [ 73.251336][ T4270] tipc_msg_build+0x3dc/0xde0 [ 73.256077][ T4270] ? verify_lock_unused+0x140/0x140 [ 73.261335][ T4270] __tipc_sendstream+0x8f7/0x1280 [ 73.266439][ T4270] ? tsk_advance_rx_queue+0x310/0x310 [ 73.271864][ T4270] ? wait_woken+0x1b0/0x1b0 [ 73.276420][ T4270] ? _local_bh_enable+0xa0/0xa0 [ 73.281373][ T4270] tipc_sendstream+0x51/0x70 [ 73.286014][ T4270] ? tipc_getsockopt+0x520/0x520 [ 73.291004][ T4270] ____sys_sendmsg+0x5be/0x8f0 [ 73.295831][ T4270] ? __sys_sendmsg_sock+0x30/0x30 [ 73.301029][ T4270] ? import_iovec+0x6f/0xa0 [ 73.305596][ T4270] ___sys_sendmsg+0x236/0x2e0 [ 73.310518][ T4270] ? __sys_sendmsg+0x290/0x290 [ 73.315381][ T4270] __se_sys_sendmsg+0x1b7/0x2a0 [ 73.320288][ T4270] ? __x64_sys_sendmsg+0x80/0x80 [ 73.325281][ T4270] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 73.331535][ T4270] ? lockdep_hardirqs_on+0x94/0x140 [ 73.336797][ T4270] do_syscall_64+0x4c/0xa0 [ 73.341268][ T4270] ? clear_bhb_loop+0x30/0x80 [ 73.345998][ T4270] ? clear_bhb_loop+0x30/0x80 [ 73.350743][ T4270] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.356701][ T4270] RIP: 0033:0x7efd99b1e159 [ 73.361222][ T4270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.380881][ T4270] RSP: 002b:00007efd97d76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.389347][ T4270] RAX: ffffffffffffffda RBX: 00007efd99da5fa0 RCX: 00007efd99b1e159 [ 73.397377][ T4270] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 73.405398][ T4270] RBP: 00007efd99bb506b R08: 0000000000000000 R09: 0000000000000000 [ 73.413411][ T4270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.421423][ T4270] R13: 00007efd99da6038 R14: 00007efd99da5fa0 R15: 00007ffdcdade428 [ 73.429462][ T4270] [ 73.438103][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.449871][ T4274] loop2: detected capacity change from 0 to 512 [ 73.467830][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.478419][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 73.484663][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.496427][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 73.502854][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 73.509545][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.520074][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 73.526761][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.538059][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.551907][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.563176][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 73.569989][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.588529][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.603366][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.630848][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.649403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.685785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.717116][ T4276] svc: failed to register nfsdv3 RPC service (errno 111). [ 73.725337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.742487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.778036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.794167][ T4276] svc: failed to register nfsaclv3 RPC service (errno 111). [ 73.824046][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.871094][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.907938][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.922272][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.966821][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.988816][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.030954][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.042720][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.055353][ T4274] EXT4-fs (loop2): Test dummy encryption mode enabled [ 74.066167][ T4274] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 74.077605][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.091541][ T4274] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.119693][ T4274] EXT4-fs (loop2): SIPHASH is not a valid default hash value [ 74.138765][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.152531][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.168701][ T4279] ================================================================== [ 74.177057][ T4279] BUG: KASAN: use-after-free in nfsd_create_serv+0x11b/0x700 [ 74.184711][ T4279] Write of size 4 at addr ffff88805e9a1050 by task syz.3.7/4279 [ 74.192389][ T4279] [ 74.194857][ T4279] CPU: 1 PID: 4279 Comm: syz.3.7 Not tainted syzkaller #0 [ 74.202297][ T4279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.212409][ T4279] Call Trace: [ 74.215736][ T4279] [ 74.218703][ T4279] dump_stack_lvl+0x188/0x250 [ 74.223446][ T4279] ? show_regs_print_info+0x20/0x20 [ 74.228713][ T4279] ? _printk+0xda/0x130 [ 74.232921][ T4279] ? nfsd_create_serv+0x11b/0x700 [ 74.238110][ T4279] ? load_image+0x410/0x410 [ 74.242672][ T4279] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 74.248195][ T4279] print_address_description+0x60/0x2d0 [ 74.253801][ T4279] ? nfsd_create_serv+0x11b/0x700 [ 74.258869][ T4279] kasan_report+0xdf/0x130 [ 74.263337][ T4279] ? nfsd_create_serv+0x11b/0x700 [ 74.268425][ T4279] kasan_check_range+0x235/0x290 [ 74.273424][ T4279] nfsd_create_serv+0x11b/0x700 [ 74.278330][ T4279] ? nfsd+0x2d0/0x2d0 [ 74.282366][ T4279] ? nfsd_svc+0x60/0x9e0 [ 74.286658][ T4279] ? mutex_lock_io_nested+0x60/0x60 [ 74.291902][ T4279] ? _parse_integer_limit+0x195/0x1d0 [ 74.297345][ T4279] nfsd_svc+0x132/0x9e0 [ 74.302159][ T4279] ? qword_get+0x5a5/0x640 [ 74.306645][ T4279] write_threads+0x2ea/0x350 [ 74.311352][ T4279] ? write_unlock_fs+0x1f0/0x1f0 [ 74.316436][ T4279] ? __might_fault+0xb3/0x110 [ 74.321163][ T4279] ? _copy_from_user+0x111/0x170 [ 74.326256][ T4279] ? simple_transaction_get+0x119/0x140 [ 74.331850][ T4279] nfsctl_transaction_write+0x105/0x150 [ 74.337623][ T4279] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 74.343311][ T4279] vfs_write+0x304/0xd70 [ 74.347966][ T4279] ? file_end_write+0x250/0x250 [ 74.352969][ T4279] ? mutex_lock_nested+0x17/0x20 [ 74.357951][ T4279] ? __fdget_pos+0x2bf/0x370 [ 74.362597][ T4279] ? ksys_write+0x70/0x260 [ 74.367161][ T4279] ksys_write+0x153/0x260 [ 74.371890][ T4279] ? __ia32_sys_read+0x80/0x80 [ 74.376709][ T4279] ? lockdep_hardirqs_on+0x94/0x140 [ 74.382062][ T4279] do_syscall_64+0x4c/0xa0 [ 74.386525][ T4279] ? clear_bhb_loop+0x30/0x80 [ 74.391265][ T4279] ? clear_bhb_loop+0x30/0x80 [ 74.395987][ T4279] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.402004][ T4279] RIP: 0033:0x7f4d904c8159 [ 74.407238][ T4279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.426889][ T4279] RSP: 002b:00007f4d8e6de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 74.435445][ T4279] RAX: ffffffffffffffda RBX: 00007f4d90750180 RCX: 00007f4d904c8159 [ 74.443520][ T4279] RDX: 0000000000000002 RSI: 0000200000000640 RDI: 0000000000000005 [ 74.451655][ T4279] RBP: 00007f4d9055f06b R08: 0000000000000000 R09: 0000000000000000 [ 74.459665][ T4279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.467936][ T4279] R13: 00007f4d90750218 R14: 00007f4d90750180 R15: 00007fffe19b2ce8 [ 74.475976][ T4279] [ 74.479030][ T4279] [ 74.481380][ T4279] Allocated by task 4276: [ 74.485748][ T4279] __kasan_kmalloc+0xaf/0xe0 [ 74.490392][ T4279] __svc_create+0x60/0x9d0 [ 74.495203][ T4279] svc_create_pooled+0x62f/0x810 [ 74.500197][ T4279] nfsd_create_serv+0x2f9/0x700 [ 74.505183][ T4279] nfsd_svc+0x132/0x9e0 [ 74.509481][ T4279] write_threads+0x2ea/0x350 [ 74.514147][ T4279] nfsctl_transaction_write+0x105/0x150 [ 74.519735][ T4279] vfs_write+0x304/0xd70 [ 74.524048][ T4279] ksys_write+0x153/0x260 [ 74.528423][ T4279] do_syscall_64+0x4c/0xa0 [ 74.533142][ T4279] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.539080][ T4279] [ 74.541435][ T4279] Freed by task 4276: [ 74.545631][ T4279] kasan_set_track+0x4b/0x70 [ 74.551064][ T4279] kasan_set_free_info+0x1f/0x40 [ 74.556599][ T4279] ____kasan_slab_free+0xd5/0x110 [ 74.561675][ T4279] slab_free_freelist_hook+0xec/0x170 [ 74.567189][ T4279] kfree+0xef/0x2a0 [ 74.571042][ T4279] nfsd_svc+0x7cf/0x9e0 [ 74.575246][ T4279] write_threads+0x2ea/0x350 [ 74.580001][ T4279] nfsctl_transaction_write+0x105/0x150 [ 74.585680][ T4279] vfs_write+0x304/0xd70 [ 74.590168][ T4279] ksys_write+0x153/0x260 [ 74.594742][ T4279] do_syscall_64+0x4c/0xa0 [ 74.599405][ T4279] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.605606][ T4279] [ 74.607960][ T4279] The buggy address belongs to the object at ffff88805e9a1000 [ 74.607960][ T4279] which belongs to the cache kmalloc-512 of size 512 [ 74.622766][ T4279] The buggy address is located 80 bytes inside of [ 74.622766][ T4279] 512-byte region [ffff88805e9a1000, ffff88805e9a1200) [ 74.636790][ T4279] The buggy address belongs to the page: [ 74.642572][ T4279] page:ffffea00017a6800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5e9a0 [ 74.652775][ T4279] head:ffffea00017a6800 order:2 compound_mapcount:0 compound_pincount:0 [ 74.662371][ T4279] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 74.670433][ T4279] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888016c41c80 [ 74.679069][ T4279] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 74.687863][ T4279] page dumped because: kasan: bad access detected [ 74.694334][ T4279] page_owner tracks the page as allocated [ 74.700090][ T4279] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 4268, ts 73496510556, free_ts 25424865093 [ 74.719292][ T4279] get_page_from_freelist+0x24f6/0x2670 [ 74.725084][ T4279] __alloc_pages+0x1ee/0x480 [ 74.729817][ T4279] new_slab+0xc0/0x4b0 [ 74.733936][ T4279] ___slab_alloc+0x807/0xdd0 [ 74.738670][ T4279] kmem_cache_alloc_trace+0xf9/0x290 [ 74.744007][ T4279] batadv_forw_packet_alloc+0x174/0x360 [ 74.749627][ T4279] batadv_iv_ogm_queue_add+0x86a/0xdb0 [ 74.755157][ T4279] batadv_iv_ogm_schedule+0x81f/0x1000 [ 74.760671][ T4279] batadv_iv_send_outstanding_bat_ogm_packet+0x6e9/0x800 [ 74.768144][ T4279] process_one_work+0x867/0xff0 [ 74.773057][ T4279] worker_thread+0xad7/0x12a0 [ 74.777793][ T4279] kthread+0x42e/0x520 [ 74.782032][ T4279] ret_from_fork+0x1f/0x30 [ 74.787308][ T4279] page last free stack trace: [ 74.792139][ T4279] free_unref_page_prepare+0x637/0x6c0 [ 74.797987][ T4279] free_unref_page+0x8f/0x2a0 [ 74.803049][ T4279] free_contig_range+0x96/0xf0 [ 74.807951][ T4279] destroy_args+0xef/0xa00 [ 74.812594][ T4279] debug_vm_pgtable+0x321/0x380 [ 74.817840][ T4279] do_one_initcall+0x272/0x730 [ 74.822659][ T4279] do_initcall_level+0x13d/0x1f0 [ 74.827735][ T4279] do_initcalls+0x4b/0x90 [ 74.832220][ T4279] kernel_init_freeable+0x3d5/0x560 [ 74.837476][ T4279] kernel_init+0x19/0x1b0 [ 74.841955][ T4279] ret_from_fork+0x1f/0x30 [ 74.847277][ T4279] [ 74.849771][ T4279] Memory state around the buggy address: [ 74.855456][ T4279] ffff88805e9a0f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 74.863569][ T4279] ffff88805e9a0f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 74.871678][ T4279] >ffff88805e9a1000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 74.879778][ T4279] ^ [ 74.886641][ T4279] ffff88805e9a1080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 74.895011][ T4279] ffff88805e9a1100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 74.903238][ T4279] ================================================================== [ 74.911337][ T4279] Disabling lock debugging due to kernel taint [ 74.924992][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.931188][ T4279] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 74.941013][ T4279] CPU: 1 PID: 4279 Comm: syz.3.7 Tainted: G B syzkaller #0 [ 74.949595][ T4279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.959704][ T4279] Call Trace: [ 74.963047][ T4279] [ 74.966018][ T4279] dump_stack_lvl+0x188/0x250 [ 74.970752][ T4279] ? show_regs_print_info+0x20/0x20 [ 74.976004][ T4279] ? load_image+0x410/0x410 [ 74.980585][ T4279] panic+0x2f8/0x850 [ 74.980787][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.984526][ T4279] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 74.984556][ T4279] ? bpf_jit_dump+0xd0/0xd0 [ 74.984576][ T4279] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 74.984598][ T4279] ? _raw_spin_unlock+0x40/0x40 [ 74.984617][ T4279] ? nfsd_create_serv+0x11b/0x700 [ 74.984636][ T4279] check_panic_on_warn+0x80/0xa0 [ 75.025141][ T4279] ? nfsd_create_serv+0x11b/0x700 [ 75.030242][ T4279] end_report+0x6d/0xf0 [ 75.030500][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.034441][ T4279] kasan_report+0x102/0x130 [ 75.034465][ T4279] ? nfsd_create_serv+0x11b/0x700 [ 75.034488][ T4279] kasan_check_range+0x235/0x290 [ 75.034515][ T4279] nfsd_create_serv+0x11b/0x700 [ 75.034535][ T4279] ? nfsd+0x2d0/0x2d0 [ 75.034553][ T4279] ? nfsd_svc+0x60/0x9e0 [ 75.034573][ T4279] ? mutex_lock_io_nested+0x60/0x60 [ 75.053473][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.057761][ T4279] ? _parse_integer_limit+0x195/0x1d0 [ 75.057814][ T4279] nfsd_svc+0x132/0x9e0 [ 75.095441][ T4279] ? qword_get+0x5a5/0x640 [ 75.099912][ T4279] write_threads+0x2ea/0x350 [ 75.104564][ T4279] ? write_unlock_fs+0x1f0/0x1f0 [ 75.109557][ T4279] ? __might_fault+0xb3/0x110 [ 75.114292][ T4279] ? _copy_from_user+0x111/0x170 [ 75.119285][ T4279] ? simple_transaction_get+0x119/0x140 [ 75.124906][ T4279] nfsctl_transaction_write+0x105/0x150 [ 75.130507][ T4279] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 75.136227][ T4279] vfs_write+0x304/0xd70 [ 75.140618][ T4279] ? file_end_write+0x250/0x250 [ 75.145537][ T4279] ? mutex_lock_nested+0x17/0x20 [ 75.150537][ T4279] ? __fdget_pos+0x2bf/0x370 [ 75.156298][ T4279] ? ksys_write+0x70/0x260 [ 75.163352][ T4279] ksys_write+0x153/0x260 [ 75.168167][ T4279] ? __ia32_sys_read+0x80/0x80 [ 75.173263][ T4279] ? lockdep_hardirqs_on+0x94/0x140 [ 75.178526][ T4279] do_syscall_64+0x4c/0xa0 [ 75.183095][ T4279] ? clear_bhb_loop+0x30/0x80 [ 75.187820][ T4279] ? clear_bhb_loop+0x30/0x80 [ 75.193047][ T4279] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.198993][ T4279] RIP: 0033:0x7f4d904c8159 [ 75.203481][ T4279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.223132][ T4279] RSP: 002b:00007f4d8e6de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.231803][ T4279] RAX: ffffffffffffffda RBX: 00007f4d90750180 RCX: 00007f4d904c8159 [ 75.240049][ T4279] RDX: 0000000000000002 RSI: 0000200000000640 RDI: 0000000000000005 [ 75.248187][ T4279] RBP: 00007f4d9055f06b R08: 0000000000000000 R09: 0000000000000000 [ 75.256369][ T4279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.264393][ T4279] R13: 00007f4d90750218 R14: 00007f4d90750180 R15: 00007fffe19b2ce8 [ 75.272427][ T4279] [ 75.275858][ T4279] Kernel Offset: disabled [ 75.280212][ T4279] Rebooting in 86400 seconds..