last executing test programs: 3.27097576s ago: executing program 1 (id=2): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000002030100000000000000000000000000080001000300020000000000"], 0x20}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000002030100000000000000000000000000080001000100020000000000"], 0x20}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000203010000000000000000000000000008000200ffff000002000000"], 0x20}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x88581, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00'}) 3.085098005s ago: executing program 0 (id=1): r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @empty}}, 0x24) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="00112233445566778899", 0xa}], 0x1, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "0102030405060708"}], 0x18, 0x4}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="00112233445566778899", 0xa}], 0x1, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "0102030405060708"}], 0x18}, 0x0) 2.789046622s ago: executing program 0 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}, @NHA_GATEWAY={0x8, 0x6, @ip4=@private=0xa010100}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}, @NHA_GATEWAY={0x8, 0x6, @ip4=@private=0xa010101}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @private=0xa010100}, @RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x30}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x18, &(0x7f0000000700)=@raw=[@generic={0xbf, 0x2, 0x1}, @generic={0xb7, 0x3}, @generic={0x7b, 0xa, 0x3, 0xffc0}, @generic={0x7b, 0xa, 0x3, 0xffc8}, @generic={0x7b, 0xa, 0x3, 0xffd0}, @generic={0x7b, 0xa, 0x3, 0xffd8}, @generic={0x7b, 0xa, 0x3, 0xffe0}, @generic={0x7b, 0xa, 0x3, 0xffe8}, @generic={0x7b, 0xa, 0x3, 0xfff0}, @generic={0x7b, 0xa, 0x3, 0xfff8}, @generic={0xb7, 0x3, 0x0, 0x0, 0x2}, @generic={0x7b, 0xa, 0x3, 0xffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x1}, @generic={0x63, 0xa, 0x3, 0xffc8}, @generic={0xb7, 0x3, 0x0, 0x0, 0xa010100}, @generic={0x63, 0xa, 0x3, 0xffcc}, @generic={0xbf, 0x1, 0x2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0xb7, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x0, 0x10, 0x0, &(0x7f0000000a00)="0123456789abcdef0123456789abcdef", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.425542991s ago: executing program 1 (id=7): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x48, r2, 0x5, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10) r5 = accept(r3, 0x0, 0x0) recvmsg(r5, &(0x7f00000002c0), 0x0) 2.326443333s ago: executing program 0 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10) listen(r2, 0x5) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e22, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10) r4 = accept(r2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e22, @local}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @loopback}}}, 0x84) nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) 1.664954769s ago: executing program 4 (id=5): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="000008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000080000005000500000001c001000811223344"], 0x40) 1.385937356s ago: executing program 0 (id=12): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x0, 0x10, 0x5, 0x0, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3c}, {@in6=@empty, 0x1234, 0x3c}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa}}, 0x90}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000300)="6000000000083c40000000000000000000000000000000100000000000000000000000000000000100000000", 0x2c, 0x0, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 1.250882949s ago: executing program 0 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./proc\x00', &(0x7f0000001080)='proc\x00', 0x0, 0x0) setns(0xc9, 0x0) socket(0x8, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./proc/self/net/atm/vc\x00', 0x0, 0x0) read(r0, &(0x7f0000001100)=""/4096, 0x1000) r1 = openat(0xffffffffffffff9c, &(0x7f0000002100)='./proc/self/net/atm/pvc\x00', 0x0, 0x0) read(r1, &(0x7f0000002140)=""/4096, 0x1000) 1.249838909s ago: executing program 4 (id=14): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000020)={0x2, 0x1f91, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180)='\x00\x00\x00\x00', &(0x7f00000001c0)=@udp=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000240)="01000000", &(0x7f0000000280)=@udp=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x6, &(0x7f0000000380)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x34}, @generic={0x95}], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@map=r2, r3, 0x26, 0x0, 0x0, @void, @value=0x0}, 0x30) connect$inet(r1, &(0x7f0000000060)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000440)='hello', 0x5, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/5, 0x5}], 0x1}, 0x0) 1.086567753s ago: executing program 2 (id=15): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "1000000000000000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, ' \x00\x00\x00\x00\x00\x00\x00'}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, '0\x00\x00\x00\x00\x00\x00\x00'}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, '@\x00\x00\x00\x00\x00\x00\x00'}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, 'P\x00\x00\x00\x00\x00\x00\x00'}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, '`\x00\x00\x00\x00\x00\x00\x00'}, {0x10, 0x110, 0xe}], 0x28}, 0x0) 1.086409523s ago: executing program 0 (id=16): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x1000001}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x38, r2, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x1, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) 1.066772294s ago: executing program 4 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x2}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syz_tun\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'syz_tun\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@null, 0x0, 'syz_tun\x00'}) bind$x25(r2, &(0x7f0000000500), 0x12) connect$x25(r2, &(0x7f0000000600), 0x12) sendto$x25(r2, &(0x7f0000000700)="1234567890", 0x5, 0x4, 0x0, 0x0) 980.294746ms ago: executing program 2 (id=18): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc\x00', 0x1ff) mount(&(0x7f0000001040)=@filename='none\x00', &(0x7f0000001080)='./proc\x00', &(0x7f00000010c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc/self/net/atm/vc\x00', 0x0, 0x0) read(r0, &(0x7f0000001140)=""/4096, 0x1000) 875.407779ms ago: executing program 4 (id=19): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r1, &(0x7f0000000100)=@in={0x2, 0x1f90, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000200)={0x2, 0x1f90, @loopback}, 0x10) accept(r1, 0x0, 0x0) 821.0692ms ago: executing program 2 (id=20): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syz_tun\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f00000000c0), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x805}, @void, @x25={0x0, 0x0, 0xb, '\x00\x00'}}, 0x9) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x805}, @void, @x25={0x0, 0x0, 0x1, '\x00'}}, 0x8) 588.696335ms ago: executing program 2 (id=22): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000200000020000000000a050000000000000000000a0000000900010073797a300000000040000000030a010100000000000000000a0000000900030073797a310000000014000480080001400000000008000240000000000900010073797a30000000006c000000060a010400000000000000000a0000000900010073797a30000000000900020073797a3100000000400004803c0001800b00010074617267657400002c0002800b0001005450524f58590000080002400000000114000300000000000000000000000000000000001400000011000100000000000000000002000000"], 0xf4}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x11) sendto$inet6(r1, &(0x7f0000000100)="12345678", 0x8, 0x0, &(0x7f0000000200)={0xa, 0x22b8, 0x0, @loopback}, 0x1c) 507.238237ms ago: executing program 2 (id=23): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x1}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r1, &(0x7f0000000200)=@in={0x2, 0x4e23, @dev={0xc0, 0xa8, 0x1, 0x1}}, 0x10) listen(r1, 0x5) write(r0, &(0x7f0000000300)="00000800450000540000400040840000c0a80102c0a8010110e24e230000000000000000010000380102030400010000000a000a00000000800200240102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20", 0x58) 450.249909ms ago: executing program 3 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1', 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10) accept(r2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}}}, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10) 367.391611ms ago: executing program 2 (id=25): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc, @remote}, 0x10) (async) syz_emit_ethernet(0x1a, &(0x7f0000000200)={@local, @remote, @void, {@llc={0x4, {@llc={0xc, 0xd, 's'}}}}}, 0x0) 277.514673ms ago: executing program 3 (id=26): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x0, 0x10, 0x1, 0x0, 0x0, {0x23}, [@generic="0800030000000000"]}}}, 0x0) 188.366285ms ago: executing program 3 (id=27): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0xca0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000000130a01030000000000000000020000000900010073797a30000000000800034000000007"], 0x28}}, 0x0) 87.444078ms ago: executing program 3 (id=28): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000800), 0x10, &(0x7f0000000100)={&(0x7f0000000150)=@ipv6_newroute={0x5c, 0x18, 0x5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0xfe, 0x4, 0x0, 0x1}, [@RTA_GATEWAY={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @RTA_OIF={0x8, 0x4, 0x1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x1234567890abcdef}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x1}}]}, 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000800), 0x10, &(0x7f0000000300)={&(0x7f0000000350)=@ipv6_getroute={0x30, 0x1a, 0x301, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0xfe, 0x4, 0x0, 0x1}, [@RTA_GATEWAY={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000800), 0x10, &(0x7f0000000500)={&(0x7f0000000550)=@ipv6_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) 71.601458ms ago: executing program 3 (id=29): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9c000000000101060000000000000000020000003000018014000180080001007f000001080002007f000001140002800500010006000000060002001500000006000300150000003000028014000180080001007f000001080002007f000001140002800500010006000000060002001500000006000300150000000c0005800800010066747000000000000800070000000e10"], 0x9c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x1500, @empty}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x1500, @loopback}, 0x10) accept(r1, 0x0, 0x0) sendto(r2, &(0x7f0000000300)='USER anonymous\r\n', 0x10, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ed) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)='inet 2049\n\x00', 0xa) write(r0, &(0x7f0000000700)='tcp 2049\n\x00', 0x9) write(r0, &(0x7f0000000800)='udp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000a00)='2\n\x00', 0x2) nanosleep(&(0x7f0000000b00)={0x0, 0x3b9aca00}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000c00)={0x2, 0x801, @loopback}, 0x10) sendto(r2, &(0x7f0000000d00)="000000010000000000000002000186a00000000200000001000000010000002000"/56, 0x38, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000e00)={0x0, 0x3b9aca00}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000001100)="1400000024000103010000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001400)="1400000024000103010000000000000002010000", 0x14}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.42' (ED25519) to the list of known hosts. syzkaller login: [ 65.573289][ T4176] cgroup: Unknown subsys name 'net' [ 65.705233][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.196070][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.633353][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 68.731520][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 68.793289][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 68.831955][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.841701][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.853549][ T4193] device bridge_slave_0 entered promiscuous mode [ 68.883744][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.891250][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.900622][ T4193] device bridge_slave_1 entered promiscuous mode [ 68.943469][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.953787][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 68.974241][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.001122][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.008488][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.016781][ T4192] device bridge_slave_0 entered promiscuous mode [ 69.032703][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 69.060812][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.068027][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.076444][ T4192] device bridge_slave_1 entered promiscuous mode [ 69.091508][ T4193] team0: Port device team_slave_0 added [ 69.132006][ T4193] team0: Port device team_slave_1 added [ 69.155045][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.162335][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.171365][ T4189] device bridge_slave_0 entered promiscuous mode [ 69.187555][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.203868][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.233513][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.241181][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.249580][ T4189] device bridge_slave_1 entered promiscuous mode [ 69.271240][ T4192] team0: Port device team_slave_0 added [ 69.299714][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.306747][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.333285][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.347528][ T4192] team0: Port device team_slave_1 added [ 69.376208][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.383982][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.410161][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.436583][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.449353][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.458834][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.465963][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.475306][ T4191] device bridge_slave_0 entered promiscuous mode [ 69.494879][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.502116][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.510761][ T4190] device bridge_slave_0 entered promiscuous mode [ 69.525400][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.533203][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.541782][ T4190] device bridge_slave_1 entered promiscuous mode [ 69.559904][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.567066][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.576555][ T4191] device bridge_slave_1 entered promiscuous mode [ 69.584634][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.591932][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.618416][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.631287][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.639628][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.666517][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.730838][ T4189] team0: Port device team_slave_0 added [ 69.739449][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.753865][ T4193] device hsr_slave_0 entered promiscuous mode [ 69.760987][ T4193] device hsr_slave_1 entered promiscuous mode [ 69.769982][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.781932][ T4189] team0: Port device team_slave_1 added [ 69.796616][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.819539][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.847620][ T4192] device hsr_slave_0 entered promiscuous mode [ 69.854686][ T4192] device hsr_slave_1 entered promiscuous mode [ 69.862178][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.872272][ T4192] Cannot create hsr debugfs directory [ 69.898604][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.905622][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.932062][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.950980][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.959262][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.985726][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.015413][ T4190] team0: Port device team_slave_0 added [ 70.040985][ T4191] team0: Port device team_slave_0 added [ 70.054008][ T4190] team0: Port device team_slave_1 added [ 70.079378][ T4191] team0: Port device team_slave_1 added [ 70.115600][ T4189] device hsr_slave_0 entered promiscuous mode [ 70.122643][ T4189] device hsr_slave_1 entered promiscuous mode [ 70.129662][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.137255][ T4189] Cannot create hsr debugfs directory [ 70.176481][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.183719][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.210095][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.225945][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.233804][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.260472][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.285410][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.292540][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.321542][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.337306][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.345161][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.351292][ T4178] Bluetooth: hci2: command 0x0409 tx timeout [ 70.371362][ T4202] Bluetooth: hci4: command 0x0409 tx timeout [ 70.373328][ T4202] Bluetooth: hci0: command 0x0409 tx timeout [ 70.389838][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.445574][ T4202] Bluetooth: hci1: command 0x0409 tx timeout [ 70.468517][ T4202] Bluetooth: hci3: command 0x0409 tx timeout [ 70.530365][ T4190] device hsr_slave_0 entered promiscuous mode [ 70.537546][ T4190] device hsr_slave_1 entered promiscuous mode [ 70.550323][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.557926][ T4190] Cannot create hsr debugfs directory [ 70.572859][ T4191] device hsr_slave_0 entered promiscuous mode [ 70.579685][ T4191] device hsr_slave_1 entered promiscuous mode [ 70.586618][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.595129][ T4191] Cannot create hsr debugfs directory [ 70.786157][ T4193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.821747][ T4193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.843047][ T4193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.856922][ T4193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.895548][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.906553][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.939392][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.950042][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.010843][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.022405][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.051902][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.090474][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.104083][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.129558][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.146363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.156063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.189587][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.203065][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.217241][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.224996][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.234464][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.270399][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.281017][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.290756][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.297998][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.308438][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.317854][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.327826][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.335035][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.345810][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.363672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.376711][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.385326][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.397538][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.404468][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.435394][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.451649][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.465310][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.475905][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.486563][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.496567][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.511081][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.535776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.545972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.556214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.566377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.577075][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.584241][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.593395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.602046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.610630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.619556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.628092][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.635249][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.643516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.653068][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.667971][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.680889][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.698945][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.711123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.723981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.732718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.742154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.777224][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.795435][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.844076][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.855735][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.877410][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.887627][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.909560][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.936887][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.946731][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.970721][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.980612][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.995331][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.035327][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.046971][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.087238][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.096563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.106710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.116146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.125556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.152465][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.172169][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.185720][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.195095][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.203849][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.213298][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.222873][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.230027][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.244720][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.270810][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.280040][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.289502][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.297977][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.305105][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.314483][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.324963][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.333712][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.340861][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.350622][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.360492][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.369162][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.376243][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.384463][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.393902][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.428731][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 72.429313][ T4202] Bluetooth: hci4: command 0x041b tx timeout [ 72.435111][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 72.449382][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.457552][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.466504][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.478865][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.487708][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.496807][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.506585][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.514994][ T4246] Bluetooth: hci3: command 0x041b tx timeout [ 72.522349][ T4246] Bluetooth: hci1: command 0x041b tx timeout [ 72.529398][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.539510][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.548178][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.555806][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.563500][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.584037][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.603303][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.612479][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.623216][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.632683][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.641823][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.651314][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.660853][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.669781][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.678399][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.696483][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.709926][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.721829][ T4193] device veth0_vlan entered promiscuous mode [ 72.741392][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.750019][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.758027][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.766389][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.777437][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.786450][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.796679][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.806058][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.815137][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.824094][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.834313][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.843129][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.850227][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.858470][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.867083][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.875938][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.885101][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.895068][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.902253][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.912931][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.921967][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.942992][ T4193] device veth1_vlan entered promiscuous mode [ 72.981277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.991176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.009229][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.026000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.049285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.063583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.113608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.122887][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.143008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.157981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.173929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.184113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.198016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.221464][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.288581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.297059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.321874][ T4189] device veth0_vlan entered promiscuous mode [ 73.344726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.354635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.364246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.374609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.388870][ T4193] device veth0_macvtap entered promiscuous mode [ 73.402838][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.412018][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.420158][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.430997][ T4189] device veth1_vlan entered promiscuous mode [ 73.451574][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.470752][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.492843][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.507859][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.516259][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.550019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.571779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.594367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.610673][ T4193] device veth1_macvtap entered promiscuous mode [ 73.650590][ T4189] device veth0_macvtap entered promiscuous mode [ 73.664758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.674795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.692169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.706616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.715856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.726724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.736198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.745122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.769990][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.780058][ T4191] device veth0_vlan entered promiscuous mode [ 73.811768][ T4189] device veth1_macvtap entered promiscuous mode [ 73.820475][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.836907][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.847151][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.862586][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.876797][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.888921][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.905462][ T4193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.915306][ T4193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.924937][ T4193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.935296][ T4193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.956167][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.967223][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.981802][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.990180][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.000053][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.010096][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.019302][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.034870][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.077669][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.091718][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.104496][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.123967][ T4191] device veth1_vlan entered promiscuous mode [ 74.153698][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.163169][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.173678][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.183043][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.194615][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.206522][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.215819][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.224990][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.288799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.297667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.324664][ T4190] device veth0_vlan entered promiscuous mode [ 74.342921][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.352914][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.362552][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.371979][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.382262][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.390711][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.399270][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.407215][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.441145][ T4192] device veth0_vlan entered promiscuous mode [ 74.462920][ T4190] device veth1_vlan entered promiscuous mode [ 74.488987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.503446][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.510204][ T4237] Bluetooth: hci4: command 0x040f tx timeout [ 74.518522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.528637][ T4237] Bluetooth: hci2: command 0x040f tx timeout [ 74.532812][ T4191] device veth0_macvtap entered promiscuous mode [ 74.547104][ T4237] Bluetooth: hci0: command 0x040f tx timeout [ 74.574479][ T4191] device veth1_macvtap entered promiscuous mode [ 74.581733][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.589017][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 74.596341][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.600730][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 74.610868][ T4192] device veth1_vlan entered promiscuous mode [ 74.665546][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.674842][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.686044][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.696386][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.704981][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.729451][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.741641][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.755876][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.758537][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.769093][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.784450][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.796391][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.818056][ T4190] device veth0_macvtap entered promiscuous mode [ 74.835360][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.845834][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.855361][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.865746][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.875736][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.885605][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.895740][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.911330][ T4190] device veth1_macvtap entered promiscuous mode [ 74.919047][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.926927][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.944070][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.961657][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.974674][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.986472][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.997471][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.018053][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.031223][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.058987][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.067741][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.082189][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.091506][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.100902][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.110432][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.120762][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.131318][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.147692][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.166389][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.177843][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.189109][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.199175][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.210175][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.222274][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.232647][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.242107][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.253212][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.279535][ T4192] device veth0_macvtap entered promiscuous mode [ 75.327039][ T4192] device veth1_macvtap entered promiscuous mode [ 75.338047][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.354155][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.365695][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.379019][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.393918][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.407533][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.420588][ T4271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 75.430832][ T4271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 75.431568][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.454338][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.464457][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.476932][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.489357][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.542649][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.580066][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.600652][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.613076][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.622936][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.633284][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.653006][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.664856][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.677271][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.695711][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.706224][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.717759][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.728694][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.740019][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.752847][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.776943][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.802528][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.824879][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.857070][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.875592][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.888458][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.905773][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.916571][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.931921][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.944126][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.956685][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.020143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.030665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.059625][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.075140][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.092186][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.102000][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.133291][ T4279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 76.166601][ T3080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.196805][ T3080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.212337][ T4279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 76.266025][ T4282] lo speed is unknown, defaulting to 1000 [ 76.302018][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.367622][ T3080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.373290][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.388911][ T4282] lo speed is unknown, defaulting to 1000 [ 76.398441][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.400974][ T3080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.440699][ T4282] lo speed is unknown, defaulting to 1000 [ 76.449311][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.470744][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.510551][ T1211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.544928][ T1211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.559926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.588877][ T4178] Bluetooth: hci0: command 0x0419 tx timeout [ 76.594557][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.599295][ T4178] Bluetooth: hci2: command 0x0419 tx timeout [ 76.627318][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.631839][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.664566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.681906][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.690735][ T4178] Bluetooth: hci4: command 0x0419 tx timeout [ 76.715930][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 76.722843][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 76.730989][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.782808][ T4295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 76.905798][ T4298] bridge0: mtu less than device minimum [ 77.035351][ T4306] netlink: 108 bytes leftover after parsing attributes in process `syz.2.10'. [ 77.108028][ T7] lo speed is unknown, defaulting to 1000 [ 77.106641][ T4282] infiniband syz0: set active [ 77.132745][ T4282] infiniband syz0: added lo [ 77.295144][ T4315] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.408914][ T4282] RDS/IB: syz0: added [ 77.436914][ T4282] smc: adding ib device syz0 with port count 1 [ 77.482664][ T4282] smc: ib device syz0 port 1 has pnetid [ 77.513202][ T21] lo speed is unknown, defaulting to 1000 [ 77.562939][ T4282] lo speed is unknown, defaulting to 1000 [ 77.642886][ T4331] tipc: Started in network mode [ 77.677522][ T4331] tipc: Node identity 1000001, cluster identity 4711 [ 77.699371][ T4331] tipc: Node number set to 16777217 [ 77.733192][ T4299] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 77.744915][ T4333] tipc: Enabled bearer , priority 1 [ 77.770172][ T4329] tipc: Resetting bearer [ 77.860782][ T4329] tipc: Disabling bearer [ 78.011530][ T4282] lo speed is unknown, defaulting to 1000 [ 78.170447][ T4282] lo speed is unknown, defaulting to 1000 [ 78.347213][ T4282] lo speed is unknown, defaulting to 1000 [ 78.385250][ T4359] Zero length message leads to an empty skb [ 78.547283][ T4365] netlink: 64 bytes leftover after parsing attributes in process `syz.3.29'. [ 78.557548][ T4365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 78.587221][ T4282] lo speed is unknown, defaulting to 1000 [ 78.720552][ T4367] ================================================================== [ 78.729370][ T4367] BUG: KASAN: use-after-free in nfsd_create_serv+0x11b/0x700 [ 78.736821][ T4367] Write of size 4 at addr ffff88807a3a3850 by task syz.3.30/4367 [ 78.744588][ T4367] [ 78.746972][ T4367] CPU: 1 PID: 4367 Comm: syz.3.30 Not tainted syzkaller #0 [ 78.754215][ T4367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 78.765061][ T4367] Call Trace: [ 78.768387][ T4367] [ 78.771369][ T4367] dump_stack_lvl+0x188/0x250 [ 78.776118][ T4367] ? show_regs_print_info+0x20/0x20 [ 78.781372][ T4367] ? _printk+0xda/0x130 [ 78.785573][ T4367] ? nfsd_create_serv+0x11b/0x700 [ 78.790673][ T4367] ? load_image+0x410/0x410 [ 78.795256][ T4367] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 78.800794][ T4367] print_address_description+0x60/0x2d0 [ 78.806416][ T4367] ? nfsd_create_serv+0x11b/0x700 [ 78.811490][ T4367] kasan_report+0xdf/0x130 [ 78.816144][ T4367] ? nfsd_create_serv+0x11b/0x700 [ 78.821214][ T4367] kasan_check_range+0x235/0x290 [ 78.821496][ T4339] rdma_rxe: rxe_register_device failed with error -23 [ 78.826206][ T4367] nfsd_create_serv+0x11b/0x700 [ 78.838213][ T4367] ? nfsd+0x2d0/0x2d0 [ 78.842249][ T4367] ? nfsd_svc+0x60/0x9e0 [ 78.846533][ T4367] ? rcu_lock_release+0x5/0x20 [ 78.851344][ T4367] ? mutex_lock_io_nested+0x60/0x60 [ 78.856695][ T4367] ? _parse_integer_limit+0x195/0x1d0 [ 78.862168][ T4367] nfsd_svc+0x132/0x9e0 [ 78.866373][ T4367] ? qword_get+0x5a5/0x640 [ 78.870851][ T4367] write_threads+0x2ea/0x350 [ 78.875494][ T4367] ? write_unlock_fs+0x1f0/0x1f0 [ 78.880500][ T4367] ? __might_fault+0xb3/0x110 [ 78.885325][ T4367] ? _copy_from_user+0x111/0x170 [ 78.890333][ T4367] ? simple_transaction_get+0x119/0x140 [ 78.895958][ T4367] nfsctl_transaction_write+0x105/0x150 [ 78.901825][ T4367] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 78.907512][ T4367] vfs_write+0x304/0xd70 [ 78.911823][ T4367] ? file_end_write+0x250/0x250 [ 78.916952][ T4367] ? mutex_lock_nested+0x17/0x20 [ 78.922002][ T4367] ? __fdget_pos+0x2bf/0x370 [ 78.926654][ T4367] ? ksys_write+0x70/0x260 [ 78.931135][ T4367] ksys_write+0x153/0x260 [ 78.935528][ T4367] ? __ia32_sys_read+0x80/0x80 [ 78.940384][ T4367] ? lockdep_hardirqs_on+0x94/0x140 [ 78.945651][ T4367] do_syscall_64+0x4c/0xa0 [ 78.950654][ T4367] ? clear_bhb_loop+0x30/0x80 [ 78.955380][ T4367] ? clear_bhb_loop+0x30/0x80 [ 78.960111][ T4367] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.966153][ T4367] RIP: 0033:0x7f2686e96e99 [ 78.970757][ T4367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.990517][ T4367] RSP: 002b:00007f26850ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 78.999220][ T4367] RAX: ffffffffffffffda RBX: 00007f268711efa0 RCX: 00007f2686e96e99 [ 79.007240][ T4367] RDX: 0000000000000002 RSI: 0000200000000a00 RDI: 0000000000000004 [ 79.015598][ T4367] RBP: 00007f2686f2ceaf R08: 0000000000000000 R09: 0000000000000000 [ 79.023650][ T4367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.027421][ T4339] rdma_rxe: failed to add lo [ 79.031923][ T4367] R13: 00007f268711f038 R14: 00007f268711efa0 R15: 00007ffc6018f4e8 [ 79.031967][ T4367] [ 79.031976][ T4367] [ 79.031982][ T4367] Allocated by task 4367: [ 79.031993][ T4367] __kasan_kmalloc+0xaf/0xe0 [ 79.032020][ T4367] __svc_create+0x60/0x9d0 [ 79.032040][ T4367] svc_create_pooled+0x62f/0x810 [ 79.032060][ T4367] nfsd_create_serv+0x2f9/0x700 [ 79.032078][ T4367] write_ports+0x560/0xb80 [ 79.032095][ T4367] nfsctl_transaction_write+0x105/0x150 [ 79.032114][ T4367] vfs_write+0x304/0xd70 [ 79.032131][ T4367] ksys_write+0x153/0x260 [ 79.032148][ T4367] do_syscall_64+0x4c/0xa0 [ 79.032167][ T4367] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.032188][ T4367] [ 79.032192][ T4367] Freed by task 4367: [ 79.032201][ T4367] kasan_set_track+0x4b/0x70 [ 79.032219][ T4367] kasan_set_free_info+0x1f/0x40 [ 79.032241][ T4367] ____kasan_slab_free+0xd5/0x110 [ 79.032260][ T4367] slab_free_freelist_hook+0xec/0x170 [ 79.032280][ T4367] kfree+0xef/0x2a0 [ 79.032297][ T4367] write_ports+0x924/0xb80 [ 79.032315][ T4367] nfsctl_transaction_write+0x105/0x150 [ 79.032335][ T4367] vfs_write+0x304/0xd70 [ 79.032352][ T4367] ksys_write+0x153/0x260 [ 79.032370][ T4367] do_syscall_64+0x4c/0xa0 [ 79.032388][ T4367] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.032409][ T4367] [ 79.032414][ T4367] The buggy address belongs to the object at ffff88807a3a3800 [ 79.032414][ T4367] which belongs to the cache kmalloc-512 of size 512 [ 79.032432][ T4367] The buggy address is located 80 bytes inside of [ 79.032432][ T4367] 512-byte region [ffff88807a3a3800, ffff88807a3a3a00) [ 79.032453][ T4367] The buggy address belongs to the page: [ 79.032474][ T4367] page:ffffea0001e8e800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807a3a0000 pfn:0x7a3a0 [ 79.032506][ T4367] head:ffffea0001e8e800 order:2 compound_mapcount:0 compound_pincount:0 [ 79.032523][ T4367] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 79.032556][ T4367] raw: 00fff00000010200 ffffea000090b608 ffffea0000afcb08 ffff888016c41c80 [ 79.032576][ T4367] raw: ffff88807a3a0000 000000000010000e 00000001ffffffff 0000000000000000 [ 79.032587][ T4367] page dumped because: kasan: bad access detected [ 79.032603][ T4367] page_owner tracks the page as allocated [ 79.032611][ T4367] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3562, ts 29639285022, free_ts 26021686498 [ 79.032643][ T4367] get_page_from_freelist+0x24f6/0x2670 [ 79.032669][ T4367] __alloc_pages+0x1ee/0x480 [ 79.032690][ T4367] new_slab+0xc0/0x4b0 [ 79.032708][ T4367] ___slab_alloc+0x807/0xdd0 [ 79.032726][ T4367] __kmalloc_node_track_caller+0x13d/0x3a0 [ 79.032746][ T4367] __alloc_skb+0x22c/0x750 [ 79.032764][ T4367] alloc_uevent_skb+0x7d/0x230 [ 79.032782][ T4367] kobject_uevent_net_broadcast+0x2e6/0x530 [ 79.032802][ T4367] kobject_uevent_env+0x550/0x890 [ 79.032826][ T4367] kobject_synth_uevent+0x457/0x940 [ 79.032848][ T4367] uevent_store+0x48/0x70 [ 79.032867][ T4367] kernfs_fop_write_iter+0x3a8/0x500 [ 79.032890][ T4367] vfs_write+0x748/0xd70 [ 79.032907][ T4367] ksys_write+0x153/0x260 [ 79.032923][ T4367] do_syscall_64+0x4c/0xa0 [ 79.032940][ T4367] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.356729][ T4367] page last free stack trace: [ 79.361437][ T4367] free_unref_page_prepare+0x637/0x6c0 [ 79.367130][ T4367] free_unref_page+0x8f/0x2a0 [ 79.371856][ T4367] free_contig_range+0x96/0xf0 [ 79.376671][ T4367] destroy_args+0xef/0xa00 [ 79.381290][ T4367] debug_vm_pgtable+0x321/0x380 [ 79.386226][ T4367] do_one_initcall+0x272/0x730 [ 79.391558][ T4367] do_initcall_level+0x13d/0x1f0 [ 79.396630][ T4367] do_initcalls+0x4b/0x90 [ 79.401001][ T4367] kernel_init_freeable+0x3d5/0x560 [ 79.406253][ T4367] kernel_init+0x19/0x1b0 [ 79.410819][ T4367] ret_from_fork+0x1f/0x30 [ 79.415294][ T4367] [ 79.417658][ T4367] Memory state around the buggy address: [ 79.423452][ T4367] ffff88807a3a3700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 79.431659][ T4367] ffff88807a3a3780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 79.439777][ T4367] >ffff88807a3a3800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.448231][ T4367] ^ [ 79.455070][ T4367] ffff88807a3a3880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.463208][ T4367] ffff88807a3a3900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.471495][ T4367] ================================================================== [ 79.479597][ T4367] Disabling lock debugging due to kernel taint [ 79.503031][ T4367] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 79.510392][ T4367] CPU: 0 PID: 4367 Comm: syz.3.30 Tainted: G B syzkaller #0 [ 79.519018][ T4367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 79.529108][ T4367] Call Trace: [ 79.532421][ T4367] [ 79.535875][ T4367] dump_stack_lvl+0x188/0x250 [ 79.540746][ T4367] ? show_regs_print_info+0x20/0x20 [ 79.546000][ T4367] ? load_image+0x410/0x410 [ 79.550595][ T4367] panic+0x2f8/0x850 [ 79.554537][ T4367] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 79.560743][ T4367] ? bpf_jit_dump+0xd0/0xd0 [ 79.565560][ T4367] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 79.571585][ T4367] ? _raw_spin_unlock+0x40/0x40 [ 79.577172][ T4367] ? nfsd_create_serv+0x11b/0x700 [ 79.582424][ T4367] check_panic_on_warn+0x80/0xa0 [ 79.587412][ T4367] ? nfsd_create_serv+0x11b/0x700 [ 79.592479][ T4367] end_report+0x6d/0xf0 [ 79.596676][ T4367] kasan_report+0x102/0x130 [ 79.601227][ T4367] ? nfsd_create_serv+0x11b/0x700 [ 79.606308][ T4367] kasan_check_range+0x235/0x290 [ 79.611720][ T4367] nfsd_create_serv+0x11b/0x700 [ 79.616956][ T4367] ? nfsd+0x2d0/0x2d0 [ 79.620969][ T4367] ? nfsd_svc+0x60/0x9e0 [ 79.625244][ T4367] ? rcu_lock_release+0x5/0x20 [ 79.630021][ T4367] ? mutex_lock_io_nested+0x60/0x60 [ 79.635358][ T4367] ? _parse_integer_limit+0x195/0x1d0 [ 79.640789][ T4367] nfsd_svc+0x132/0x9e0 [ 79.644988][ T4367] ? qword_get+0x5a5/0x640 [ 79.649565][ T4367] write_threads+0x2ea/0x350 [ 79.654305][ T4367] ? write_unlock_fs+0x1f0/0x1f0 [ 79.659297][ T4367] ? __might_fault+0xb3/0x110 [ 79.664022][ T4367] ? _copy_from_user+0x111/0x170 [ 79.669004][ T4367] ? simple_transaction_get+0x119/0x140 [ 79.674599][ T4367] nfsctl_transaction_write+0x105/0x150 [ 79.680194][ T4367] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 79.685866][ T4367] vfs_write+0x304/0xd70 [ 79.690159][ T4367] ? file_end_write+0x250/0x250 [ 79.695194][ T4367] ? mutex_lock_nested+0x17/0x20 [ 79.700449][ T4367] ? __fdget_pos+0x2bf/0x370 [ 79.705176][ T4367] ? ksys_write+0x70/0x260 [ 79.709725][ T4367] ksys_write+0x153/0x260 [ 79.714188][ T4367] ? __ia32_sys_read+0x80/0x80 [ 79.718994][ T4367] ? lockdep_hardirqs_on+0x94/0x140 [ 79.724235][ T4367] do_syscall_64+0x4c/0xa0 [ 79.728692][ T4367] ? clear_bhb_loop+0x30/0x80 [ 79.733414][ T4367] ? clear_bhb_loop+0x30/0x80 [ 79.738136][ T4367] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.744073][ T4367] RIP: 0033:0x7f2686e96e99 [ 79.748541][ T4367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.768193][ T4367] RSP: 002b:00007f26850ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 79.777041][ T4367] RAX: ffffffffffffffda RBX: 00007f268711efa0 RCX: 00007f2686e96e99 [ 79.785082][ T4367] RDX: 0000000000000002 RSI: 0000200000000a00 RDI: 0000000000000004 [ 79.793397][ T4367] RBP: 00007f2686f2ceaf R08: 0000000000000000 R09: 0000000000000000 [ 79.801398][ T4367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.809710][ T4367] R13: 00007f268711f038 R14: 00007f268711efa0 R15: 00007ffc6018f4e8 [ 79.817791][ T4367] [ 79.820927][ T4367] Kernel Offset: disabled [ 79.825280][ T4367] Rebooting in 86400 seconds..