last executing test programs: 1.695191867s ago: executing program 3 (id=4): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0x0, 0x2, 0x0, 0x0, 0x0, {0x2}, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0x2c}}, 0x0) 1.686043347s ago: executing program 0 (id=13): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000013000500010000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000024001a80200004801c000180080001000100000008000200", @ANYRES32=r1, @ANYBLOB="08000300", @ANYRES32=r2], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="5400000013000500020000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000034001a80300004802c000680080001000100000008000200e8030000080003000300000008000400a08601000800050000000000"], 0x54}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 1.640048678s ago: executing program 1 (id=14): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x1234, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200), 0x4) setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "1234567800", "123456781234567800", "123400", "0000000000000001"}, 0x28) close(r0) 1.516668431s ago: executing program 3 (id=15): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x300, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffc00}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffa, 0x2, 0x10000000, 0x8, 0x3}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r4, &(0x7f0000000800)="12345678", 0x8, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 1.482659222s ago: executing program 2 (id=17): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendto(r0, &(0x7f0000000200)='\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0) 1.428281174s ago: executing program 4 (id=5): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x5c, 0x10, 0x605, 0x1, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}]}, 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a00)={'veth0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b00)={'veth1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'veth0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000400)={'veth1\x00', 0x1}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, r2}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000600)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r3}) nanosleep(&(0x7f0000000900)={0x1, 0x1dcd6500}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000700)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r5, &(0x7f0000000800)={0xa, 0x4001, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 1.411985414s ago: executing program 0 (id=18): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x1000, 0x1, 0x800, 0x2}, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) munmap(&(0x7f0000000000/0x1000)=nil, 0x1000) 1.192654069s ago: executing program 2 (id=19): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000110), 0xc, &(0x7f0000000120)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000018000500010000000000000001010000000000000c00010064756d6d793000000800020000000000"], 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000110), 0xc, &(0x7f0000000120)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000019000500010000000000000001010000000000000c00010064756d6d793000000800020000000000"], 0x24}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000410), 0xc, &(0x7f0000000420)={&(0x7f0000000500)=ANY=[@ANYBLOB="800000001b000500020000000000000001010000"], 0x80}}, 0x0) 1.16350152s ago: executing program 0 (id=20): r0 = syz_init_net_socket$ax25(0xffffffffffffffff, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000000)={'dummy0\x00', @ifru_flags}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000000)={'dummy0\x00', @ifru_flags=0x1}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x6000}, 0x14) sendto$packet(r0, &(0x7f0000000200)="0002002f", 0x4, 0x0, &(0x7f0000000300)={0x11, 0x6000}, 0x14) 1.104863591s ago: executing program 1 (id=21): r0 = socket(0x2, 0x2, 0x0) setsockopt(r0, 0x0, 0x40, &(0x7f0000000100)="01020304", 0x4) sendto$inet(r0, &(0x7f0000000800)='hello\x00', 0x5, 0x0, &(0x7f0000000900)={0x2, 0x1234, @loopback}, 0x10) 1.024436473s ago: executing program 2 (id=22): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="1800", @ANYBLOB="07012bbd700000000000", @ANYBLOB="01010000000000000800", @ANYBLOB="01006470300008000200", @ANYBLOB='\x00\x00\x00\x00\b\x00\b\x000\x00', @ANYBLOB='\x00\x00\x00\x00'], 0x30}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="1900", @ANYBLOB="07012bad700000000000", @ANYBLOB="01010000030000000900", @ANYBLOB="03006772653000000000", @ANYBLOB="08000200030000000800", @ANYBLOB="050000000000"], 0x34}}, 0x0) 1.024329573s ago: executing program 0 (id=23): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000), 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x115c, @loopback}, 0x10) accept(r1, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x40, 0x6, 0x0, @loopback, @loopback}, {{0x115c, 0x115c, 0x1, 0x1, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}, 0x0) 972.968925ms ago: executing program 1 (id=24): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @local}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{}, {0x3e8}]}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@local, @local}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@local, @local}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x0}}}}, 0x200) sendto$inet(r0, &(0x7f0000000100)="1234", 0x4, 0x0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) 917.102946ms ago: executing program 3 (id=25): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0\x00', 0x1}, 0x14) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x6, @remote, 0x5000, 0x0, 'rr\x00', 0x0, 0x0, 0xffffffff}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000200)={{0x6, @remote, 0x5000, 0x0, 'rr\x00', 0x0, 0x0, 0xffffffff}, {@remote, 0x5000, 0x0, 0x1}}, 0x44) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000040)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x1, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x40, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @remote}, {{0x1234, 0x5000, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1000}, {"00112233445566778899"}}}}}}, 0x0) 872.704148ms ago: executing program 0 (id=26): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x501, 0x0, 0x0, {{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x6c}, {@in6=@remote, 0x1234, 0x6c}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'ip6_vti0\x00'}) syz_emit_ethernet(0x0, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x0, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x6c, 0x0, @remote, @local, [], "12340000"}}}}}}}, 0x0) 872.462088ms ago: executing program 2 (id=27): unshare(0x40000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x8, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x38}}, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000340)='2\x00', 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000380)={'lo\x00', 0x1}) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e20, @empty}, 0x10) listen(r3, 0x5) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10) accept4(r3, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000600)='hello\x00', 0x5) 796.858919ms ago: executing program 1 (id=28): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000a00010000000000000000000000000014000000000a010000000000000000000a0000000900010073797a30000000003c000000030a010000000000000000000a0000000700010073797a30000000000700020073797a3000000000200004000800010000000000080002000000000040000000060a010000000000000000000a0000000700010073797a30000000000700020073797a300000000024000400200001001c0001000700010063740000100002000800020001000000140000000b000100"/212], 0xa8}}, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000300)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x18, 0x2c, 0x40, @local, @mcast2, {[], "3b000001000000640000000000000000"}}}}}, 0x0) 723.645352ms ago: executing program 0 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x2080, @loopback}, 0x10) listen(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='3\n', 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r3, &(0x7f0000000200)={0x2, 0x2080, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000300), 0x4) setsockopt$inet_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000400)=@gcm_128={{0x303}, '12345678', '1234567812345678', '1234', '00000000'}, 0x28) setsockopt$inet_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000400)=@gcm_128={{0x303}, '12345678', '1234567812345678', '1234', '00000000'}, 0x28) sendto(r3, &(0x7f0000000600)="15030300020100", 0x7, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) 692.114112ms ago: executing program 3 (id=30): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private0, 0x40, 0x1}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000050)={@private0, 0x40, 0x2}) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private0}, 0x1c) listen(r1, 0x5) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @private0}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private0}, 0x1c) close(0xffffffffffffffff) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @private0, @private0, {[], {{0x4e22, 0x4e23, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1000, 0x0, 0x0, {[@nop, @nop, @timestamp={0x8, 0xa, 0x7fffffff}]}}}}}}}}, 0x0) 604.411604ms ago: executing program 1 (id=31): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f0000000100)='ABCD', 0x4, 0x0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) close(r0) close(r1) 435.110869ms ago: executing program 4 (id=32): syz_emit_ethernet(0x0, 0x0, 0x0) 358.53251ms ago: executing program 2 (id=33): mmap(&(0x7f0000000000/0x100000)=nil, 0x100000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x100000, 0x800}, 0x20) 335.314501ms ago: executing program 3 (id=34): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x24, 0x10, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f0002006f76735f7061636b65740000"]}, 0x24}}, 0x0) recvfrom(r0, &(0x7f0000000400)=""/1024, 0x400, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x68, 0x24, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c0002000600060008000000100003000c001a0004000100"]}, 0x68}}, 0x0) 172.721245ms ago: executing program 4 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0x48}}, 0x0) 172.516265ms ago: executing program 1 (id=36): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000040)='2\x00', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x0, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x0, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x8, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x2c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x0, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x8, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x2c}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) listen(r3, 0x5) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) accept4(r3, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x1}, 0x0) 96.373997ms ago: executing program 3 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='1\n\x00', 0x2) 0s ago: executing program 2 (id=38): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001400010300000000000000002c000000000000001a00"/36], 0x24}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.234' (ED25519) to the list of known hosts. [ 62.844029][ T4178] cgroup: Unknown subsys name 'net' [ 62.954108][ T4178] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.418718][ T4178] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.829367][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 65.893091][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 65.963903][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 66.009409][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 66.020114][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.027403][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.036015][ T4199] device bridge_slave_0 entered promiscuous mode [ 66.050285][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.057392][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.066031][ T4199] device bridge_slave_1 entered promiscuous mode [ 66.120283][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.127692][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.136007][ T4190] device bridge_slave_0 entered promiscuous mode [ 66.148991][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.164867][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.181559][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.193821][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.202086][ T4190] device bridge_slave_1 entered promiscuous mode [ 66.255708][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.275054][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.286565][ T4199] team0: Port device team_slave_0 added [ 66.298930][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 66.321992][ T4199] team0: Port device team_slave_1 added [ 66.328204][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.335591][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.343428][ T4196] device bridge_slave_0 entered promiscuous mode [ 66.383196][ T4190] team0: Port device team_slave_0 added [ 66.389689][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.397589][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.405831][ T4196] device bridge_slave_1 entered promiscuous mode [ 66.434361][ T4190] team0: Port device team_slave_1 added [ 66.447050][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.454137][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.462386][ T4194] device bridge_slave_0 entered promiscuous mode [ 66.476197][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.483234][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.509760][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.541682][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.548941][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.557120][ T4194] device bridge_slave_1 entered promiscuous mode [ 66.569083][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.576351][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.602509][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.620794][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.632475][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.643052][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.650316][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.676832][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.719572][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.726970][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.753231][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.772088][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.779930][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.788021][ T4195] device bridge_slave_0 entered promiscuous mode [ 66.803544][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.810742][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.819514][ T4195] device bridge_slave_1 entered promiscuous mode [ 66.846635][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.871536][ T4196] team0: Port device team_slave_0 added [ 66.879500][ T4196] team0: Port device team_slave_1 added [ 66.899755][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.914879][ T4199] device hsr_slave_0 entered promiscuous mode [ 66.921658][ T4199] device hsr_slave_1 entered promiscuous mode [ 66.937369][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.944372][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.970942][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.008134][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.017889][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.024955][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.051032][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.085596][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.111226][ T4195] team0: Port device team_slave_0 added [ 67.119806][ T4194] team0: Port device team_slave_0 added [ 67.134056][ T4194] team0: Port device team_slave_1 added [ 67.143086][ T4190] device hsr_slave_0 entered promiscuous mode [ 67.150142][ T4190] device hsr_slave_1 entered promiscuous mode [ 67.157296][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.165558][ T4190] Cannot create hsr debugfs directory [ 67.172751][ T4195] team0: Port device team_slave_1 added [ 67.223709][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.231776][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.258279][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.273667][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.280824][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.306809][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.326115][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.333295][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.359362][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.375696][ T4196] device hsr_slave_0 entered promiscuous mode [ 67.382577][ T4196] device hsr_slave_1 entered promiscuous mode [ 67.389347][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.397048][ T4196] Cannot create hsr debugfs directory [ 67.422265][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.429404][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.456788][ T4231] Bluetooth: hci0: command 0x0409 tx timeout [ 67.463592][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.582184][ T4194] device hsr_slave_0 entered promiscuous mode [ 67.589160][ T4194] device hsr_slave_1 entered promiscuous mode [ 67.595924][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.603515][ T4194] Cannot create hsr debugfs directory [ 67.614895][ T4198] Bluetooth: hci1: command 0x0409 tx timeout [ 67.624889][ T4231] Bluetooth: hci4: command 0x0409 tx timeout [ 67.631065][ T4231] Bluetooth: hci3: command 0x0409 tx timeout [ 67.631455][ T4198] Bluetooth: hci2: command 0x0409 tx timeout [ 67.674650][ T4195] device hsr_slave_0 entered promiscuous mode [ 67.681962][ T4195] device hsr_slave_1 entered promiscuous mode [ 67.689251][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.697126][ T4195] Cannot create hsr debugfs directory [ 67.889540][ T4199] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.908051][ T4199] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.918234][ T4199] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.933769][ T4199] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.989852][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.002293][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.025357][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.041166][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.097860][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.111482][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.122321][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.141224][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.150412][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.190726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.201650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.227727][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.244927][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.258196][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.277489][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.287005][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.296948][ T3057] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.304173][ T3057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.314254][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.348514][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.358954][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.377311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.388535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.397813][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.405128][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.441600][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.456294][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.476479][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.486779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.498357][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.507921][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.521412][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.545101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.555787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.564925][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.596326][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.605050][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.612903][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.622331][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.631863][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.641219][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.659031][ T4199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.672395][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.687387][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.694535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.708190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.726937][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.771794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.781017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.790111][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.797249][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.806663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.815845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.824552][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.831625][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.839602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.851414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.862727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.892370][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.911694][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.920275][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.928551][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.939794][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.949707][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.959181][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.968099][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.975225][ T339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.985388][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.993558][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.028931][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.038798][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.049344][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.058535][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.067393][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.076205][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.099538][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.111715][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.136406][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.144090][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.156137][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.163588][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.173715][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.183220][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.190380][ T339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.220596][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.231185][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.246426][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.255179][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.263126][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.273000][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.285887][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.300147][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.312657][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.325325][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.346176][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.366338][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.383491][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.392892][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.409597][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.419209][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.428036][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.437274][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.447641][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.499567][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.509306][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.520803][ T3057] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.527915][ T3057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.535399][ T1335] Bluetooth: hci0: command 0x041b tx timeout [ 69.542890][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.551970][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.560670][ T3057] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.567760][ T3057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.576303][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.585541][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.594256][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.603244][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.612525][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.622522][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.633461][ T3057] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.640619][ T3057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.649105][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.658223][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.666847][ T3057] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.673922][ T3057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.681778][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.691191][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.699417][ T1335] Bluetooth: hci3: command 0x041b tx timeout [ 69.705750][ T1335] Bluetooth: hci2: command 0x041b tx timeout [ 69.712920][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.720716][ T1335] Bluetooth: hci4: command 0x041b tx timeout [ 69.727620][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.735320][ T1335] Bluetooth: hci1: command 0x041b tx timeout [ 69.791828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.804678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.813441][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.822911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.832024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.840879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.849000][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.859939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.873565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.882402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.891102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.900105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.909476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.918318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.927000][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.937339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.947009][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.955472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.968234][ T4199] device veth0_vlan entered promiscuous mode [ 69.987635][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.997087][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.007982][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.017696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.026915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.049226][ T4199] device veth1_vlan entered promiscuous mode [ 70.068013][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.090277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.111396][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.130923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.176755][ T4199] device veth0_macvtap entered promiscuous mode [ 70.209349][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.221578][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.243149][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.258512][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.276468][ T4199] device veth1_macvtap entered promiscuous mode [ 70.292308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.302889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.318112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.345125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.352638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.391719][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.416445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.443211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.458600][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.477210][ T4190] device veth0_vlan entered promiscuous mode [ 70.485127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.496486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.508630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.520044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.537750][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.566411][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.573640][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.583908][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.594145][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.602031][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.610288][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.619315][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.637150][ T4190] device veth1_vlan entered promiscuous mode [ 70.647506][ T4199] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.657806][ T4199] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.670100][ T4199] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.679171][ T4199] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.703344][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.769617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.791793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.807284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.817465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.832174][ T4190] device veth0_macvtap entered promiscuous mode [ 70.870891][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.882037][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.891688][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.901398][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.914848][ T4190] device veth1_macvtap entered promiscuous mode [ 70.940201][ T4194] device veth0_vlan entered promiscuous mode [ 70.972059][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.992036][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.001828][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.011064][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.019933][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.028441][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.038444][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.047410][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.056990][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.065183][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.073208][ T4195] device veth0_vlan entered promiscuous mode [ 71.087026][ T4195] device veth1_vlan entered promiscuous mode [ 71.103808][ T3057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.114308][ T3057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.149236][ T4194] device veth1_vlan entered promiscuous mode [ 71.157695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.181309][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.190145][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.202701][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.213968][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.230764][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.239474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.253394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.262510][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.270762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.279666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.298984][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.305683][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.316314][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.335873][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.350131][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.370522][ T4196] device veth0_vlan entered promiscuous mode [ 71.402328][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.412018][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.428938][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.438166][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.451064][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.460828][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.469889][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.478460][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.497539][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.506335][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.518496][ T4195] device veth0_macvtap entered promiscuous mode [ 71.536120][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.552370][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.569175][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.578497][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.610974][ T4194] device veth0_macvtap entered promiscuous mode [ 71.617888][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 71.627625][ T4195] device veth1_macvtap entered promiscuous mode [ 71.650440][ T4194] device veth1_macvtap entered promiscuous mode [ 71.667386][ T4196] device veth1_vlan entered promiscuous mode [ 71.745043][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.764354][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.774568][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.778383][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 71.790689][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.801478][ T4233] Bluetooth: hci4: command 0x040f tx timeout [ 71.807633][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.817496][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.828455][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.838595][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 71.844731][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.855756][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 71.863506][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.873766][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.885512][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.896898][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.909156][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.923911][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.936731][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.948693][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.960295][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.975415][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.990135][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.000599][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.011602][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.022208][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.034133][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.046050][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.053508][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.070682][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.079552][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.088469][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.098209][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.106882][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.116084][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.125168][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.133995][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.143572][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.152945][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.162172][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.171547][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.182755][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.215513][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.227243][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.237237][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.246192][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.278825][ T4196] device veth0_macvtap entered promiscuous mode [ 72.300158][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.326095][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.342372][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.351255][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.383699][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.400805][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.413080][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.433013][ T4196] device veth1_macvtap entered promiscuous mode [ 72.445894][ T339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.453796][ T339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.471039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.480064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.533703][ T4274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 72.549331][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.560826][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.571422][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.583120][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.593036][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.603902][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.613954][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.627839][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.639603][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.667051][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.675817][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.712178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.721529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.730561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.744358][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.755678][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.765645][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.776471][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.788019][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.798575][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.808839][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.819863][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.831231][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.862884][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.873404][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.912928][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.959142][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.959812][ T4276] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.968250][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.001007][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.025442][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.036849][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.068499][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.119472][ T339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.144821][ T339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.194777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.260878][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.270142][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.275449][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.293827][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.326758][ T4281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.337198][ T4281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.356474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.375384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.385701][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.463676][ T4253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.484431][ T4253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.493110][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.616022][ T4291] netlink: 'syz.2.3': attribute type 3 has an invalid length. [ 73.694673][ T1335] Bluetooth: hci0: command 0x0419 tx timeout [ 73.835943][ T4302] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17'. [ 73.856225][ T1335] Bluetooth: hci4: command 0x0419 tx timeout [ 73.863548][ T1335] Bluetooth: hci1: command 0x0419 tx timeout [ 73.910227][ T4302] Zero length message leads to an empty skb [ 73.922253][ T4298] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.937504][ T4198] Bluetooth: hci3: command 0x0419 tx timeout [ 73.960497][ T4198] Bluetooth: hci2: command 0x0419 tx timeout [ 74.434805][ T4328] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 74.491194][ T4329] netlink: 'syz.2.27': attribute type 1 has an invalid length. [ 74.587155][ T4329] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 74.831832][ T4336] svc: failed to register nfsdv3 RPC service (errno 111). [ 74.917575][ T4336] svc: failed to register nfsaclv3 RPC service (errno 111). [ 75.020859][ T4353] netlink: 84 bytes leftover after parsing attributes in process `syz.3.34'. [ 75.240384][ T4342] ================================================================== [ 75.248735][ T4342] BUG: KASAN: use-after-free in nfsd_create_serv+0x11b/0x700 [ 75.256205][ T4342] Write of size 4 at addr ffff88805ed39c50 by task syz.0.29/4342 [ 75.263966][ T4342] [ 75.266339][ T4342] CPU: 1 PID: 4342 Comm: syz.0.29 Not tainted syzkaller #0 [ 75.273572][ T4342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.283675][ T4342] Call Trace: [ 75.286991][ T4342] [ 75.289949][ T4342] dump_stack_lvl+0x188/0x250 [ 75.294680][ T4342] ? show_regs_print_info+0x20/0x20 [ 75.300795][ T4342] ? _printk+0xda/0x130 [ 75.304995][ T4342] ? nfsd_create_serv+0x11b/0x700 [ 75.310272][ T4342] ? load_image+0x410/0x410 [ 75.314822][ T4342] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 75.320338][ T4342] print_address_description+0x60/0x2d0 [ 75.325923][ T4342] ? nfsd_create_serv+0x11b/0x700 [ 75.330986][ T4342] kasan_report+0xdf/0x130 [ 75.335472][ T4342] ? nfsd_create_serv+0x11b/0x700 [ 75.340887][ T4342] kasan_check_range+0x235/0x290 [ 75.345902][ T4342] nfsd_create_serv+0x11b/0x700 [ 75.350822][ T4342] ? _parse_integer_limit+0x195/0x1d0 [ 75.356236][ T4342] ? nfsd+0x2d0/0x2d0 [ 75.360269][ T4342] ? simple_strntoull+0x10e/0x180 [ 75.365334][ T4342] ? simple_strtoull+0x30/0x30 [ 75.370170][ T4342] ? qword_get+0x5a5/0x640 [ 75.374625][ T4342] write_ports+0x526/0xb80 [ 75.379079][ T4342] ? write_versions+0xbb0/0xbb0 [ 75.383999][ T4342] ? __might_fault+0xb3/0x110 [ 75.388711][ T4342] ? _copy_from_user+0x111/0x170 [ 75.393689][ T4342] ? simple_transaction_get+0x119/0x140 [ 75.399282][ T4342] nfsctl_transaction_write+0x105/0x150 [ 75.404866][ T4342] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 75.410529][ T4342] vfs_write+0x304/0xd70 [ 75.414815][ T4342] ? file_end_write+0x250/0x250 [ 75.419832][ T4342] ? mutex_lock_nested+0x17/0x20 [ 75.424809][ T4342] ? __fdget_pos+0x2bf/0x370 [ 75.429437][ T4342] ? ksys_write+0x70/0x260 [ 75.433942][ T4342] ksys_write+0x153/0x260 [ 75.438314][ T4342] ? __ia32_sys_read+0x80/0x80 [ 75.443121][ T4342] ? lockdep_hardirqs_on+0x94/0x140 [ 75.448365][ T4342] do_syscall_64+0x4c/0xa0 [ 75.452817][ T4342] ? clear_bhb_loop+0x30/0x80 [ 75.457530][ T4342] ? clear_bhb_loop+0x30/0x80 [ 75.462269][ T4342] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.468223][ T4342] RIP: 0033:0x7fd6a39e7019 [ 75.472685][ T4342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.492328][ T4342] RSP: 002b:00007fd6a1c1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.500880][ T4342] RAX: ffffffffffffffda RBX: 00007fd6a3c6f090 RCX: 00007fd6a39e7019 [ 75.508897][ T4342] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000004 [ 75.516904][ T4342] RBP: 00007fd6a3a7e00c R08: 0000000000000000 R09: 0000000000000000 [ 75.524908][ T4342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.532905][ T4342] R13: 00007fd6a3c6f128 R14: 00007fd6a3c6f090 R15: 00007fff85395f68 [ 75.540934][ T4342] [ 75.544012][ T4342] [ 75.546366][ T4342] Allocated by task 4336: [ 75.550717][ T4342] __kasan_kmalloc+0xaf/0xe0 [ 75.555355][ T4342] __svc_create+0x60/0x9d0 [ 75.559806][ T4342] svc_create_pooled+0x62f/0x810 [ 75.564782][ T4342] nfsd_create_serv+0x2f9/0x700 [ 75.569675][ T4342] nfsd_svc+0x132/0x9e0 [ 75.573866][ T4342] write_threads+0x2ea/0x350 [ 75.578494][ T4342] nfsctl_transaction_write+0x105/0x150 [ 75.584076][ T4342] vfs_write+0x304/0xd70 [ 75.588354][ T4342] ksys_write+0x153/0x260 [ 75.592712][ T4342] do_syscall_64+0x4c/0xa0 [ 75.597157][ T4342] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.603088][ T4342] [ 75.605435][ T4342] Freed by task 4336: [ 75.609445][ T4342] kasan_set_track+0x4b/0x70 [ 75.614070][ T4342] kasan_set_free_info+0x1f/0x40 [ 75.619039][ T4342] ____kasan_slab_free+0xd5/0x110 [ 75.624097][ T4342] slab_free_freelist_hook+0xec/0x170 [ 75.629499][ T4342] kfree+0xef/0x2a0 [ 75.633341][ T4342] nfsd_svc+0x7cf/0x9e0 [ 75.637529][ T4342] write_threads+0x2ea/0x350 [ 75.642152][ T4342] nfsctl_transaction_write+0x105/0x150 [ 75.647732][ T4342] vfs_write+0x304/0xd70 [ 75.652002][ T4342] ksys_write+0x153/0x260 [ 75.656360][ T4342] do_syscall_64+0x4c/0xa0 [ 75.660803][ T4342] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.666728][ T4342] [ 75.669075][ T4342] The buggy address belongs to the object at ffff88805ed39c00 [ 75.669075][ T4342] which belongs to the cache kmalloc-512 of size 512 [ 75.683152][ T4342] The buggy address is located 80 bytes inside of [ 75.683152][ T4342] 512-byte region [ffff88805ed39c00, ffff88805ed39e00) [ 75.696383][ T4342] The buggy address belongs to the page: [ 75.702048][ T4342] page:ffffea00017b4e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5ed38 [ 75.712240][ T4342] head:ffffea00017b4e00 order:2 compound_mapcount:0 compound_pincount:0 [ 75.720601][ T4342] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 75.728641][ T4342] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888016c41c80 [ 75.737257][ T4342] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 75.745859][ T4342] page dumped because: kasan: bad access detected [ 75.752305][ T4342] page_owner tracks the page as allocated [ 75.758037][ T4342] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4327, ts 74653933391, free_ts 74650462016 [ 75.778567][ T4342] get_page_from_freelist+0x24f6/0x2670 [ 75.784162][ T4342] __alloc_pages+0x1ee/0x480 [ 75.788796][ T4342] new_slab+0xc0/0x4b0 [ 75.792891][ T4342] ___slab_alloc+0x807/0xdd0 [ 75.797512][ T4342] __kmalloc_node_track_caller+0x13d/0x3a0 [ 75.803372][ T4342] __alloc_skb+0x22c/0x750 [ 75.807910][ T4342] inet_netconf_notify_devconf+0x16f/0x230 [ 75.813774][ T4342] __devinet_sysctl_register+0x319/0x380 [ 75.819443][ T4342] devinet_sysctl_register+0x17c/0x1f0 [ 75.824936][ T4342] inetdev_init+0x28c/0x4d0 [ 75.829471][ T4342] inetdev_event+0x26f/0x1350 [ 75.834172][ T4342] raw_notifier_call_chain+0xcb/0x160 [ 75.839576][ T4342] register_netdevice+0x12a8/0x1720 [ 75.844805][ T4342] register_netdev+0x37/0x50 [ 75.849515][ T4342] ip6gre_init_net+0x21f/0x2f0 [ 75.854306][ T4342] ops_init+0x360/0x5f0 [ 75.858497][ T4342] page last free stack trace: [ 75.863202][ T4342] free_unref_page_prepare+0x637/0x6c0 [ 75.868694][ T4342] free_unref_page+0x8f/0x2a0 [ 75.873405][ T4342] stack_depot_save+0x42f/0x460 [ 75.878281][ T4342] kasan_set_track+0x62/0x70 [ 75.882900][ T4342] kasan_set_free_info+0x1f/0x40 [ 75.887868][ T4342] ____kasan_slab_free+0xd5/0x110 [ 75.892924][ T4342] slab_free_freelist_hook+0xec/0x170 [ 75.898324][ T4342] kmem_cache_free+0x8f/0x210 [ 75.903026][ T4342] tcp_data_queue+0x19b2/0x5770 [ 75.907904][ T4342] tcp_rcv_state_process+0x27d9/0x41e0 [ 75.913422][ T4342] tcp_child_process+0x35d/0xa40 [ 75.918391][ T4342] tcp_v4_do_rcv+0x5e9/0x9b0 [ 75.923021][ T4342] tcp_v4_rcv+0x24f5/0x2c80 [ 75.927554][ T4342] ip_protocol_deliver_rcu+0x38c/0x740 [ 75.933048][ T4342] ip_local_deliver_finish+0x1d8/0x320 [ 75.938539][ T4342] NF_HOOK+0x303/0x390 [ 75.942640][ T4342] [ 75.944982][ T4342] Memory state around the buggy address: [ 75.950642][ T4342] ffff88805ed39b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.958732][ T4342] ffff88805ed39b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.966824][ T4342] >ffff88805ed39c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.974908][ T4342] ^ [ 75.981603][ T4342] ffff88805ed39c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.989695][ T4342] ffff88805ed39d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.997778][ T4342] ================================================================== [ 76.005856][ T4342] Disabling lock debugging due to kernel taint [ 76.123781][ T4342] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 76.131074][ T4342] CPU: 1 PID: 4342 Comm: syz.0.29 Tainted: G B syzkaller #0 [ 76.139687][ T4342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.149767][ T4342] Call Trace: [ 76.153067][ T4342] [ 76.156019][ T4342] dump_stack_lvl+0x188/0x250 [ 76.160741][ T4342] ? show_regs_print_info+0x20/0x20 [ 76.165989][ T4342] ? load_image+0x410/0x410 [ 76.170574][ T4342] panic+0x2f8/0x850 [ 76.174506][ T4342] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 76.180695][ T4342] ? bpf_jit_dump+0xd0/0xd0 [ 76.185233][ T4342] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 76.191242][ T4342] ? _raw_spin_unlock+0x40/0x40 [ 76.196118][ T4342] ? nfsd_create_serv+0x11b/0x700 [ 76.201173][ T4342] check_panic_on_warn+0x80/0xa0 [ 76.206148][ T4342] ? nfsd_create_serv+0x11b/0x700 [ 76.211214][ T4342] end_report+0x6d/0xf0 [ 76.215408][ T4342] kasan_report+0x102/0x130 [ 76.219978][ T4342] ? nfsd_create_serv+0x11b/0x700 [ 76.225039][ T4342] kasan_check_range+0x235/0x290 [ 76.230038][ T4342] nfsd_create_serv+0x11b/0x700 [ 76.234945][ T4342] ? _parse_integer_limit+0x195/0x1d0 [ 76.240345][ T4342] ? nfsd+0x2d0/0x2d0 [ 76.244453][ T4342] ? simple_strntoull+0x10e/0x180 [ 76.249535][ T4342] ? simple_strtoull+0x30/0x30 [ 76.254350][ T4342] ? qword_get+0x5a5/0x640 [ 76.258796][ T4342] write_ports+0x526/0xb80 [ 76.263281][ T4342] ? write_versions+0xbb0/0xbb0 [ 76.268169][ T4342] ? __might_fault+0xb3/0x110 [ 76.272985][ T4342] ? _copy_from_user+0x111/0x170 [ 76.277965][ T4342] ? simple_transaction_get+0x119/0x140 [ 76.283542][ T4342] nfsctl_transaction_write+0x105/0x150 [ 76.289124][ T4342] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 76.294805][ T4342] vfs_write+0x304/0xd70 [ 76.299093][ T4342] ? file_end_write+0x250/0x250 [ 76.303992][ T4342] ? mutex_lock_nested+0x17/0x20 [ 76.308960][ T4342] ? __fdget_pos+0x2bf/0x370 [ 76.313576][ T4342] ? ksys_write+0x70/0x260 [ 76.318029][ T4342] ksys_write+0x153/0x260 [ 76.322394][ T4342] ? __ia32_sys_read+0x80/0x80 [ 76.327197][ T4342] ? lockdep_hardirqs_on+0x94/0x140 [ 76.332432][ T4342] do_syscall_64+0x4c/0xa0 [ 76.336881][ T4342] ? clear_bhb_loop+0x30/0x80 [ 76.341620][ T4342] ? clear_bhb_loop+0x30/0x80 [ 76.346335][ T4342] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.352270][ T4342] RIP: 0033:0x7fd6a39e7019 [ 76.356720][ T4342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.376362][ T4342] RSP: 002b:00007fd6a1c1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 76.384816][ T4342] RAX: ffffffffffffffda RBX: 00007fd6a3c6f090 RCX: 00007fd6a39e7019 [ 76.392866][ T4342] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000004 [ 76.400874][ T4342] RBP: 00007fd6a3a7e00c R08: 0000000000000000 R09: 0000000000000000 [ 76.408868][ T4342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.416866][ T4342] R13: 00007fd6a3c6f128 R14: 00007fd6a3c6f090 R15: 00007fff85395f68 [ 76.424879][ T4342] [ 76.428237][ T4342] Kernel Offset: disabled [ 76.432587][ T4342] Rebooting in 86400 seconds..