Split tunneling connections fail when VPN is connected and tailscale is running (Gentoo)

[itaiferber]

Is it a bug?

• I know this is an issue with the app, and contacting Mullvad support is not relevant.

I have checked if others have reported this already

• I have checked the issue tracker to see if others have reported similar issues.

Current Behavior

I recently set up Tailscale on my home network, and discovered that split tunneling connections fail when Mullvad is connected and Tailscale is up (possibly because the split connections are being diverted through the tailscale interface? I'm not sure):

$ doas tailscale up --accept-dns=false
$ mullvad status
Disconnected
    Visible location: <redacted>
$ /usr/bin/mullvad-exclude ping -c 1 google.com
PING google.com (142.250.68.206) 56(84) bytes of data.
64 bytes from pnlgaa-ax-in-f14.1e100.net (142.250.68.206): icmp_seq=1 ttl=117 time=12.5 ms

--- google.com ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 12.514/12.514/12.514/0.000 ms
$ mullvad connect
$ mullvad status
Connected
    Relay:                  us-nyc-wg-805
    Features:               Custom Dns, DAITA, LAN Sharing, Quantum Resistance
    Visible location:       USA, New York, NY. IPv4: <redacted>
$ ping -c 1 google.com
PING google.com (142.250.68.206) 56(84) bytes of data.
64 bytes from pnlgaa-ax-in-f14.1e100.net (142.250.68.206): icmp_seq=1 ttl=115 time=11.0 ms

--- google.com ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 10.966/10.966/10.966/0.000 ms
$ /usr/bin/mullvad-exclude ping -c 1 google.com
PING google.com (142.250.68.206) 56(84) bytes of data.
^C # hangs
--- google.com ping statistics ---
1 packets transmitted, 0 received, 100% packet loss, time 0ms
$ /usr/bin/mullvad-exclude curl -vvv google.com
/usr/bin/mullvad-exclude curl -vvv https://google.com
20:02:20.984015 [0-x] * [READ] client_reset, clear readers
20:02:20.999421 [0-0] * Host google.com:443 was resolved.
20:02:20.999497 [0-0] * IPv6: 2607:f8b0:4006:812::200e
20:02:20.999586 [0-0] * IPv4: 142.250.68.206
20:02:20.999655 [0-0] * [HTTPS-CONNECT] adding h2 via HTTPS-RR
20:02:20.999746 [0-0] * [HTTPS-CONNECT] adding h3 via HTTPS-RR
20:02:20.999846 [0-0] * [HTTPS-CONNECT] added
20:02:20.999913 [0-0] * [HTTPS-CONNECT] connect, init
20:02:20.999983 [0-0] * [HTTPS-CONNECT] set next attempt to start in 50ms
20:02:21.000076 [0-0] *   Trying [2607:f8b0:4006:812::200e]:443...
20:02:21.000191 [0-0] * Immediate connect fail for 2607:f8b0:4006:812::200e: Network is unreachable
20:02:21.000321 [0-0] *   Trying 142.250.68.206:443...
20:02:21.000414 [0-0] * [HTTPS-CONNECT] connect -> 0, done=0
20:02:21.000483 [0-0] * [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
20:02:21.000576 [0-0] * [HTTPS-CONNECT] adjust_pollset -> 0, 1 socks
20:02:21.050728 [0-0] * [HTTPS-CONNECT] soft timeout of 50ms reached, h2 has not seen any data, starting h3
20:02:21.050906 [0-0] * [HTTPS-CONNECT] connect, check h3
20:02:21.051005 [0-0] *   Trying [2607:f8b0:4006:812::200e]:443...
20:02:21.051095 [0-0] * Immediate connect fail for 2607:f8b0:4006:812::200e: Network is unreachable
20:02:21.051215 [0-0] *   Trying 142.250.68.206:443...
20:02:21.051727 [0-0] * [HTTP/3] egress, collect and send packets, quantum=12000
20:02:21.052060 [0-0] * [HTTP/3] egress, send collected 2 packets in 2400 bytes
20:02:21.052176 [0-0] * [HTTP/3] vquic_sendmsg(len=2400, gso=1200, calls=1) -> 0, sent=2400
20:02:21.052278 [0-0] * [HTTPS-CONNECT] connect -> 0, done=0
20:02:21.052349 [0-0] * [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
20:02:21.052445 [0-0] * [HTTPS-CONNECT] adjust_pollset -> 0, 2 socks
20:02:21.053596 [0-0] * [HTTPS-CONNECT] connect, check h3
20:02:21.053669 [0-0] * [HTTP/3] configuring OpenSSL's x509 trust store
20:02:21.053747 [0-0] * SSL Trust Anchors:
20:02:21.057541 [0-0] *   CAfile: /etc/ssl/certs/ca-certificates.crt
20:02:21.057622 [0-0] *   CApath: /etc/ssl/certs
20:02:21.057690 [0-0] * [HTTP/3] ingress, recvmmsg -> EAGAIN
20:02:21.057761 [0-0] * [HTTP/3] egress, collect and send packets, quantum=12000
20:02:21.057858 [0-0] * [HTTPS-CONNECT] connect -> 0, done=0
20:02:21.057928 [0-0] * [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
20:02:21.058025 [0-0] * [HTTPS-CONNECT] adjust_pollset -> 0, 2 socks
20:02:22.053141 [0-0] * [HTTPS-CONNECT] connect, check h3
20:02:22.053245 [0-0] * [HTTP/3] ingress, recvmmsg -> EAGAIN
20:02:22.053348 [0-0] * [HTTP/3] egress, collect and send packets, quantum=12000
20:02:22.053495 [0-0] * [HTTP/3] ingress, recvmmsg -> EAGAIN
20:02:22.053603 [0-0] * [HTTP/3] egress, collect and send packets, quantum=12000
20:02:22.053758 [0-0] * [HTTP/3] egress, send collected 2 packets in 2400 bytes
20:02:22.053935 [0-0] * [HTTP/3] vquic_sendmsg(len=2400, gso=1200, calls=1) -> 0, sent=2400
20:02:22.054047 [0-0] * [HTTPS-CONNECT] connect -> 0, done=0
20:02:22.054178 [0-0] * [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
20:02:22.054322 [0-0] * [HTTPS-CONNECT] adjust_pollset -> 0, 2 socks
20:02:22.055503 [0-0] * [HTTPS-CONNECT] connect, check h3
20:02:22.055577 [0-0] * [HTTP/3] ingress, recvmmsg -> EAGAIN
20:02:22.055645 [0-0] * [HTTP/3] egress, collect and send packets, quantum=12000
20:02:22.055743 [0-0] * [HTTPS-CONNECT] connect -> 0, done=0
20:02:22.055812 [0-0] * [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
20:02:22.055910 [0-0] * [HTTPS-CONNECT] adjust_pollset -> 0, 2 socks
20:02:22.985975 [0-0] * [HTTPS-CONNECT] connect, check h3
20:02:22.986061 [0-0] * [HTTP/3] ingress, recvmmsg -> EAGAIN
20:02:22.986145 [0-0] * [HTTP/3] egress, collect and send packets, quantum=12000
20:02:22.986263 [0-0] * [HTTPS-CONNECT] connect -> 0, done=0
20:02:22.986353 [0-0] * [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
20:02:22.986466 [0-0] * [HTTPS-CONNECT] adjust_pollset -> 0, 2 socks
20:02:23.987465 [0-0] * [HTTPS-CONNECT] connect, check h3
20:02:23.987558 [0-0] * [HTTP/3] ingress, recvmmsg -> EAGAIN
20:02:23.987639 [0-0] * [HTTP/3] egress, collect and send packets, quantum=12000
20:02:23.987776 [0-0] * [HTTPS-CONNECT] connect -> 0, done=0
20:02:23.987878 [0-0] * [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
20:02:23.988001 [0-0] * [HTTPS-CONNECT] adjust_pollset -> 0, 2 socks
20:02:24.052184 [0-0] * [HTTPS-CONNECT] connect, check h3
20:02:24.052245 [0-0] * [HTTP/3] ingress, recvmmsg -> EAGAIN
20:02:24.052310 [0-0] * [HTTP/3] egress, collect and send packets, quantum=12000
20:02:24.052402 [0-0] * [HTTP/3] ingress, recvmmsg -> EAGAIN
20:02:24.052468 [0-0] * [HTTP/3] egress, collect and send packets, quantum=12000
20:02:24.052571 [0-0] * [HTTP/3] egress, send collected 2 packets in 2400 bytes
20:02:24.052723 [0-0] * [HTTP/3] vquic_sendmsg(len=2400, gso=1200, calls=1) -> 0, sent=2400
20:02:24.052849 [0-0] * [HTTPS-CONNECT] connect -> 0, done=0
20:02:24.052914 [0-0] * [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
20:02:24.053012 [0-0] * [HTTPS-CONNECT] adjust_pollset -> 0, 2 socks
20:02:24.054143 [0-0] * [HTTPS-CONNECT] connect, check h3
20:02:24.054208 [0-0] * [HTTP/3] ingress, recvmmsg -> EAGAIN
20:02:24.054274 [0-0] * [HTTP/3] egress, collect and send packets, quantum=12000
20:02:24.054365 [0-0] * [HTTPS-CONNECT] connect -> 0, done=0
20:02:24.054434 [0-0] * [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
20:02:24.054529 [0-0] * [HTTPS-CONNECT] adjust_pollset -> 0, 2 socks
^C⏎ # loops forever
$ /usr/bin/mullvad-exclude curl -vvv https://itaiferber.net
20:04:21.256700 [0-x] * [READ] client_reset, clear readers
20:04:21.296024 [0-0] * Host itaiferber.net:443 was resolved.
20:04:21.296110 [0-0] * IPv6: (none)
20:04:21.296163 [0-0] * IPv4: 40.160.231.138
20:04:21.296227 [0-0] * [HTTPS-CONNECT] adding wanted h2
20:04:21.296314 [0-0] * [HTTPS-CONNECT] added
20:04:21.296387 [0-0] * [HTTPS-CONNECT] connect, init
20:04:21.296471 [0-0] *   Trying 40.160.231.138:443...
20:04:21.296568 [0-0] * [HTTPS-CONNECT] connect -> 0, done=0
20:04:21.296643 [0-0] * [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
20:04:21.296741 [0-0] * [HTTPS-CONNECT] adjust_pollset -> 0, 1 socks
20:04:22.297875 [0-0] * [HTTPS-CONNECT] connect -> 0, done=0
20:04:22.297969 [0-0] * [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
20:04:22.298096 [0-0] * [HTTPS-CONNECT] adjust_pollset -> 0, 1 socks
20:04:23.259194 [0-0] * [HTTPS-CONNECT] connect -> 0, done=0
20:04:23.259295 [0-0] * [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
20:04:23.259418 [0-0] * [HTTPS-CONNECT] adjust_pollset -> 0, 1 socks
20:04:24.260576 [0-0] * [HTTPS-CONNECT] connect -> 0, done=0
20:04:24.260669 [0-0] * [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
20:04:24.260852 [0-0] * [HTTPS-CONNECT] adjust_pollset -> 0, 1 socks
20:04:25.262010 [0-0] * [HTTPS-CONNECT] connect -> 0, done=0
20:04:25.262088 [0-0] * [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
20:04:25.262188 [0-0] * [HTTPS-CONNECT] adjust_pollset -> 0, 1 socks
20:04:26.263328 [0-0] * [HTTPS-CONNECT] connect -> 0, done=0
20:04:26.263425 [0-0] * [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
20:04:26.263551 [0-0] * [HTTPS-CONNECT] adjust_pollset -> 0, 1 socks
^C⏎ # loops forever
$ doas tailscale down
$ /usr/bin/mullvad-exclude ping -c 1 google.com
PING google.com (142.250.68.206) 56(84) bytes of data.
64 bytes from pnlgaa-ax-in-f14.1e100.net (142.250.68.206): icmp_seq=1 ttl=117 time=12.4 ms

--- google.com ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 12.407/12.407/12.407/0.000 ms

Expected Behavior

Split tunneling connections should succeed with both Mullvad and Tailscale running and connected.

Steps to Reproduce

1. Install both mullvadvpn-app and tailscale; on Gentoo, emerge net-vpn/mullvadvpn-app net-vpn/tailscale
2. Enable both Mullvad and Tailscale; on Gentoo with OpenRC, rc-service mullvad-daemon start && rc-service tailscale start
3. Log in to both Mullvad and Tailscale, and connect to both
4. Attempt to start a split tunneling connection

Failure Logs

System information:
id: 8cf968ee-7301-48de-9631-d6e93869affd
kernel: 6.18.29-gentoo-dist
mullvad-product-version: 2026.2
nm: 1.52.1
os: Linux Gentoo 2.18
wireguard: 1.0.0

====================
Log: /var/log/mullvad-vpn/wireguard.log
====================
[2026-05-13 20:00:42.610][wireguard-go][VERBOSE] Routine: encryption worker 5 - started
[2026-05-13 20:00:42.610][wireguard-go][VERBOSE] Routine: decryption worker 19 - started
[2026-05-13 20:00:42.610][wireguard-go][VERBOSE] Routine: decryption worker 26 - started
[2026-05-13 20:00:42.610][wireguard-go][VERBOSE] Routine: handshake worker 9 - started
[2026-05-13 20:00:42.610][wireguard-go][VERBOSE] Routine: encryption worker 26 - started
[2026-05-13 20:00:42.610][wireguard-go][VERBOSE] Routine: handshake worker 3 - started
[2026-05-13 20:00:42.610][wireguard-go][VERBOSE] Routine: decryption worker 2 - started
[2026-05-13 20:00:42.610][wireguard-go][VERBOSE] Routine: handshake worker 2 - started
[2026-05-13 20:00:42.610][wireguard-go][VERBOSE] Routine: event worker - started
[2026-05-13 20:00:42.610][wireguard-go][VERBOSE] Interface up requested
[2026-05-13 20:00:42.610][wireguard-go][VERBOSE] UDP bind has been updated
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: encryption worker 1 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: encryption worker 3 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: decryption worker 1 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: decryption worker 5 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: handshake worker 1 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: decryption worker 3 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: handshake worker 5 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: handshake worker 19 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: decryption worker 12 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: encryption worker 2 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: encryption worker 20 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: handshake worker 15 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: encryption worker 6 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: decryption worker 20 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: handshake worker 12 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: handshake worker 20 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: decryption worker 6 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: encryption worker 21 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: encryption worker 13 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: handshake worker 6 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: decryption worker 21 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: decryption worker 13 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: handshake worker 21 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: handshake worker 13 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: encryption worker 22 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: encryption worker 10 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: encryption worker 14 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: decryption worker 22 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: decryption worker 10 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] UAPI: Updating private key
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] UAPI: Updating listen port
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: decryption worker 14 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: handshake worker 22 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: handshake worker 10 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: handshake worker 14 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: encryption worker 23 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: decryption worker 9 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: encryption worker 11 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: decryption worker 23 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: encryption worker 15 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: handshake worker 23 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: decryption worker 11 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: decryption worker 8 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: encryption worker 4 - started
[2026-05-13 20:00:42.611][wireguard-go][VERBOSE] Routine: encryption worker 24 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: decryption worker 15 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: decryption worker 4 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: encryption worker 8 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: handshake worker 11 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: decryption worker 24 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: handshake worker 28 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: encryption worker 9 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: encryption worker 7 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: encryption worker 29 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: encryption worker 12 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: handshake worker 8 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: decryption worker 29 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: handshake worker 24 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: decryption worker 7 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: handshake worker 4 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: handshake worker 29 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: handshake worker 26 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: decryption worker 17 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: encryption worker 27 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: decryption worker 18 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: encryption worker 30 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: decryption worker 16 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: encryption worker 25 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: handshake worker 7 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: handshake worker 16 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: decryption worker 27 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: decryption worker 30 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: handshake worker 17 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: encryption worker 32 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: decryption worker 25 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: encryption worker 16 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: encryption worker 28 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: encryption worker 17 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: decryption worker 28 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: decryption worker 32 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: encryption worker 18 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: handshake worker 25 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: handshake worker 32 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: handshake worker 18 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: handshake worker 27 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: encryption worker 19 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: encryption worker 31 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: decryption worker 31 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: handshake worker 30 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: TUN reader - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: handshake worker 31 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: receive incoming v4 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: receive incoming v4 - stopped
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: receive incoming v6 - started
[2026-05-13 20:00:42.612][wireguard-go][VERBOSE] Routine: receive incoming v6 - stopped
[2026-05-13 20:00:42.613][wireguard-go][VERBOSE] UDP bind has been updated
[2026-05-13 20:00:42.613][wireguard-go][VERBOSE] UAPI: Updating fwmark
[2026-05-13 20:00:42.613][wireguard-go][VERBOSE] UAPI: Removing all peers
[2026-05-13 20:00:42.613][wireguard-go][VERBOSE] Routine: receive incoming v4 - started
[2026-05-13 20:00:42.613][wireguard-go][VERBOSE] peer(i97V…HrWY) - UAPI: Created
[2026-05-13 20:00:42.613][wireguard-go][VERBOSE] peer(i97V…HrWY) - UAPI: Updating endpoint
[2026-05-13 20:00:42.613][wireguard-go][VERBOSE] peer(i97V…HrWY) - UAPI: Removing all allowedips
[2026-05-13 20:00:42.613][wireguard-go][VERBOSE] peer(i97V…HrWY) - UAPI: Adding allowedip
[2026-05-13 20:00:42.613][wireguard-go][VERBOSE] peer(i97V…HrWY) - UAPI: Adding allowedip
[2026-05-13 20:00:42.613][wireguard-go][VERBOSE] peer(i97V…HrWY) - Starting
[2026-05-13 20:00:42.613][wireguard-go][VERBOSE] Interface state was Down, requested Up, now Up
[2026-05-13 20:00:42.613][wireguard-go][VERBOSE] Interface up requested
[2026-05-13 20:00:42.613][wireguard-go][VERBOSE] Routine: receive incoming v6 - started
[2026-05-13 20:00:42.613][wireguard-go][VERBOSE] peer(i97V…HrWY) - Routine: sequential sender - started
[2026-05-13 20:00:42.613][wireguard-go][VERBOSE] peer(i97V…HrWY) - Routine: sequential receiver - started
[2026-05-13 20:00:42.676][wireguard-go][VERBOSE] peer(i97V…HrWY) - Sending handshake initiation
[2026-05-13 20:00:42.691][wireguard-go][VERBOSE] peer(i97V…HrWY) - Received handshake response
[2026-05-13 20:00:42.835][wireguard-go][VERBOSE] UAPI: Updating private key
[2026-05-13 20:00:42.835][wireguard-go][VERBOSE] UAPI: Updating listen port
[2026-05-13 20:00:42.835][wireguard-go][VERBOSE] Routine: receive incoming v6 - stopped
[2026-05-13 20:00:42.836][wireguard-go][VERBOSE] Routine: receive incoming v4 - stopped
[2026-05-13 20:00:42.836][wireguard-go][VERBOSE] UDP bind has been updated
[2026-05-13 20:00:42.836][wireguard-go][VERBOSE] Routine: receive incoming v6 - started
[2026-05-13 20:00:42.836][wireguard-go][VERBOSE] Routine: receive incoming v4 - started
[2026-05-13 20:00:42.836][wireguard-go][VERBOSE] UAPI: Updating fwmark
[2026-05-13 20:00:42.836][wireguard-go][VERBOSE] UAPI: Removing all peers
[2026-05-13 20:00:42.836][wireguard-go][VERBOSE] peer(i97V…HrWY) - Stopping
[2026-05-13 20:00:42.836][wireguard-go][VERBOSE] peer(i97V…HrWY) - Routine: sequential receiver - stopped
[2026-05-13 20:00:42.836][wireguard-go][VERBOSE] peer(i97V…HrWY) - Routine: sequential sender - stopped
[2026-05-13 20:00:42.836][wireguard-go][VERBOSE] peer(i97V…HrWY) - UAPI: Created
[2026-05-13 20:00:42.836][wireguard-go][VERBOSE] peer(i97V…HrWY) - UAPI: Updating endpoint
[2026-05-13 20:00:42.836][wireguard-go][VERBOSE] peer(i97V…HrWY) - UAPI: Removing all allowedips
[2026-05-13 20:00:42.836][wireguard-go][VERBOSE] peer(i97V…HrWY) - UAPI: Updating preshared key
[2026-05-13 20:00:42.836][wireguard-go][VERBOSE] peer(i97V…HrWY) - UAPI: Adding allowedip
[2026-05-13 20:00:42.836][wireguard-go][VERBOSE] peer(i97V…HrWY) - UAPI: Adding allowedip
[2026-05-13 20:00:42.836][wireguard-go][VERBOSE] peer(i97V…HrWY) - Starting
[2026-05-13 20:00:42.836][wireguard-go][VERBOSE] peer(i97V…HrWY) - Routine: sequential sender - started
[2026-05-13 20:00:42.836][wireguard-go][VERBOSE] peer(i97V…HrWY) - Routine: sequential receiver - started
[2026-05-13 20:00:42.836][wireguard-go][VERBOSE] Enabling DAITA for peer: peer(i97V…HrWY)
[2026-05-13 20:00:42.836][wireguard-go][VERBOSE] MTU 1380
[2026-05-13 20:00:42.836][wireguard-go][VERBOSE] peer(i97V…HrWY) - Sending handshake initiation
[2026-05-13 20:00:42.846][wireguard-go][VERBOSE] peer(i97V…HrWY) - Received handshake response
[2026-05-13 20:02:43.005][wireguard-go][VERBOSE] peer(i97V…HrWY) - Sending handshake initiation
[2026-05-13 20:02:43.014][wireguard-go][VERBOSE] peer(i97V…HrWY) - Received handshake response
[2026-05-13 20:02:43.015][wireguard-go][VERBOSE] peer(i97V…HrWY) - Sending keepalive packet
[2026-05-13 20:04:43.505][wireguard-go][VERBOSE] peer(i97V…HrWY) - Sending handshake initiation
[2026-05-13 20:04:43.515][wireguard-go][VERBOSE] peer(i97V…HrWY) - Received handshake response
[2026-05-13 20:04:43.515][wireguard-go][VERBOSE] peer(i97V…HrWY) - Sending keepalive packet
[2026-05-13 20:06:43.945][wireguard-go][VERBOSE] peer(i97V…HrWY) - Sending handshake initiation
[2026-05-13 20:06:43.954][wireguard-go][VERBOSE] peer(i97V…HrWY) - Received handshake response
[2026-05-13 20:06:43.954][wireguard-go][VERBOSE] peer(i97V…HrWY) - Sending keepalive packet
[2026-05-13 20:08:43.964][wireguard-go][VERBOSE] peer(i97V…HrWY) - Sending handshake initiation
[2026-05-13 20:08:43.975][wireguard-go][VERBOSE] peer(i97V…HrWY) - Received handshake response
[2026-05-13 20:08:43.975][wireguard-go][VERBOSE] peer(i97V…HrWY) - Sending keepalive packet
[2026-05-13 20:10:44.911][wireguard-go][VERBOSE] peer(i97V…HrWY) - Sending handshake initiation
[2026-05-13 20:10:44.921][wireguard-go][VERBOSE] peer(i97V…HrWY) - Received handshake response
[2026-05-13 20:10:44.921][wireguard-go][VERBOSE] peer(i97V…HrWY) - Sending keepalive packet
[2026-05-13 20:12:44.961][wireguard-go][VERBOSE] peer(i97V…HrWY) - Sending handshake initiation
[2026-05-13 20:12:44.970][wireguard-go][VERBOSE] peer(i97V…HrWY) - Received handshake response
[2026-05-13 20:12:44.970][wireguard-go][VERBOSE] peer(i97V…HrWY) - Sending keepalive packet
[2026-05-13 20:14:45.147][wireguard-go][VERBOSE] peer(i97V…HrWY) - Sending handshake initiation
[2026-05-13 20:14:45.157][wireguard-go][VERBOSE] peer(i97V…HrWY) - Received handshake response
[2026-05-13 20:14:45.157][wireguard-go][VERBOSE] peer(i97V…HrWY) - Sending keepalive packet

====================
Log: /var/log/mullvad-vpn/openvpn.log
====================

====================
Log: /var/log/mullvad-vpn/daemon.old.log
====================
[2026-05-13 19:51:29.897][mullvad_daemon::version][INFO] Starting mullvad-daemon - 2025.14 2025-12-08
[2026-05-13 19:51:29.897][mullvad_daemon][INFO] Logging to /var/log/mullvad-vpn
[2026-05-13 19:51:29.897][mullvad_daemon::management_interface][INFO] Management interface listening on /var/run/mullvad-vpn
[2026-05-13 19:51:29.897][mullvad_daemon::settings][INFO] Loading settings from /etc/mullvad-vpn/settings.json
[2026-05-13 19:51:29.897][mullvad_daemon::settings][WARN] Error: Failed to load settings. Using defaults.
Caused by: Unable to parse settings file
Caused by: 15 is not a valid SettingsVersion at line 110 column 24
[2026-05-13 19:51:29.910][mullvad_relay_selector::relay_selector::parsed_relays][ERROR] Failed to load bundled relays: Failed to open relay cache file
[2026-05-13 19:51:29.910][mullvad_relay_selector::relay_selector][ERROR] Error: Unable to load cached and bundled relays
Caused by: Failure in serialization of the relay list
Caused by: missing field `udp2tcp_ports` at line 21038 column 3
[2026-05-13 19:51:29.910][mullvad_relay_selector::relay_selector][INFO] Initialized with 0 cached relays from 1969-12-31 19:00:00.000
[2026-05-13 19:51:29.910][mullvad_daemon::account_history][INFO] Opening account history file in /etc/mullvad-vpn/account-history.json
[2026-05-13 19:51:29.910][netlink_packet_route::link::buffer_tool][WARN] Specified IFLA_INET6_CONF NLA attribute holds more(most likely new kernel) data which is unknown to netlink-packet-route crate, expecting 236, got 240
[2026-05-13 19:51:29.910][netlink_packet_route::link::buffer_tool][WARN] Specified IFLA_INET6_CONF NLA attribute holds more(most likely new kernel) data which is unknown to netlink-packet-route crate, expecting 236, got 240
[2026-05-13 19:51:29.910][netlink_packet_route::link::buffer_tool][WARN] Specified IFLA_INET6_CONF NLA attribute holds more(most likely new kernel) data which is unknown to netlink-packet-route crate, expecting 236, got 240
[2026-05-13 19:51:29.911][netlink_packet_route::link::buffer_tool][WARN] Specified IFLA_INET6_CONF NLA attribute holds more(most likely new kernel) data which is unknown to netlink-packet-route crate, expecting 236, got 240
[2026-05-13 19:51:29.911][netlink_packet_route::link::buffer_tool][WARN] Specified IFLA_INET6_CONF NLA attribute holds more(most likely new kernel) data which is unknown to netlink-packet-route crate, expecting 236, got 240
[2026-05-13 19:51:29.911][netlink_packet_route::link::buffer_tool][WARN] Specified IFLA_INET6_CONF NLA attribute holds more(most likely new kernel) data which is unknown to netlink-packet-route crate, expecting 236, got 240
[2026-05-13 19:51:29.911][talpid_core::firewall][INFO] Applying firewall policy: Blocked. Blocking LAN. Allowing endpoint: [REDACTED]:443/TCP
[2026-05-13 19:51:29.967][mullvad_daemon::api][INFO] Initial offline state - online
[2026-05-13 19:51:29.973][mullvad_api::rest][ERROR] Error: HTTP request failed
Caused by: Legacy hyper error
Caused by: client error (Connect)
Caused by: failed to lookup address information: Temporary failure in name resolution
[2026-05-13 19:51:30.724][mullvad_api::rest][ERROR] Error: HTTP request failed
Caused by: Legacy hyper error
Caused by: client error (Connect)
Caused by: failed to lookup address information: Temporary failure in name resolution
[2026-05-13 19:51:31.726][mullvad_relay_selector::relay_selector::parsed_relays][INFO] Updated relay inventory has 578 relays
[2026-05-13 19:51:31.728][mullvad_daemon][INFO] should_update_default_country: false
[2026-05-13 19:51:32.450][mullvad_api::rest][ERROR] Error: HTTP request failed
Caused by: Legacy hyper error
Caused by: client error (Connect)
Caused by: failed to lookup address information: Temporary failure in name resolution
[2026-05-13 19:51:33.144][talpid_core::firewall][INFO] Applying firewall policy: Connecting to { [REDACTED]:32244/UDP }, Blocking LAN, interface: none. Allowing endpoint [REDACTED]:443/TCP
[2026-05-13 19:51:33.184][netlink_packet_route::link::buffer_tool][WARN] Specified IFLA_INET6_CONF NLA attribute holds more(most likely new kernel) data which is unknown to netlink-packet-route crate, expecting 236, got 240
[2026-05-13 19:51:33.184][netlink_packet_route::link::buffer_tool][WARN] Specified IFLA_INET6_CONF NLA attribute holds more(most likely new kernel) data which is unknown to netlink-packet-route crate, expecting 236, got 240
[2026-05-13 19:51:33.184][netlink_packet_route::link::buffer_tool][WARN] Specified IFLA_INET6_CONF NLA attribute holds more(most likely new kernel) data which is unknown to netlink-packet-route crate, expecting 236, got 240
[2026-05-13 19:51:33.184][netlink_packet_route::link::buffer_tool][WARN] Specified IFLA_INET6_CONF NLA attribute holds more(most likely new kernel) data which is unknown to netlink-packet-route crate, expecting 236, got 240
[2026-05-13 19:51:33.184][netlink_packet_route::link::buffer_tool][WARN] Specified IFLA_INET6_CONF NLA attribute holds more(most likely new kernel) data which is unknown to netlink-packet-route crate, expecting 236, got 240
[2026-05-13 19:51:33.184][netlink_packet_route::link::buffer_tool][WARN] Specified IFLA_INET6_CONF NLA attribute holds more(most likely new kernel) data which is unknown to netlink-packet-route crate, expecting 236, got 240
[2026-05-13 19:51:33.185][netlink_packet_route::link::buffer_tool][WARN] Specified IFLA_INET6_CONF NLA attribute holds more(most likely new kernel) data which is unknown to netlink-packet-route crate, expecting 236, got 240
[2026-05-13 19:51:33.352][talpid_core::firewall][INFO] Applying firewall policy: Connecting to { [REDACTED]:32244/UDP } over "wg0-mullvad" (ip: [REDACTED], v4 gw: [REDACTED], v6 gw: None, allowed in-tunnel traffic: [REDACTED]:1337/TCP), Blocking LAN. Allowing endpoint [REDACTED]:443/TCP
[2026-05-13 19:51:34.264][talpid_core::firewall][INFO] Applying firewall policy: Connecting to { [REDACTED]:32244/UDP } over "wg0-mullvad" (ip: [REDACTED], v4 gw: [REDACTED], v6 gw: None, allowed in-tunnel traffic: All), Blocking LAN. Allowing endpoint [REDACTED]:443/TCP
[2026-05-13 19:51:34.412][talpid_core::firewall][INFO] Applying firewall policy: Connected to { [REDACTED]:32244/UDP } over "wg0-mullvad" (ip: [REDACTED], v4 gw: [REDACTED], v6 gw: None), Blocking LAN
[2026-05-13 19:51:34.430][talpid_core::dns][INFO] Setting DNS servers: Tunnel DNS: {[REDACTED]} Non-tunnel DNS: {}
[2026-05-13 19:53:03.679][mullvad_daemon::shutdown][ERROR] Error: Failed to determine if host is shutting down, assuming it is shutting down
Caused by: Failed to read SystemState property
Caused by: The name org.freedesktop.systemd1 was not provided by any .service files
[2026-05-13 19:53:03.679][talpid_core::dns][INFO] Resetting DNS
[2026-05-13 19:53:03.774][netlink_packet_route::link::buffer_tool][WARN] Specified IFLA_INET6_CONF NLA attribute holds more(most likely new kernel) data which is unknown to netlink-packet-route crate, expecting 236, got 240
[2026-05-13 19:53:03.934][talpid_core::firewall][INFO] Resetting firewall policy
[2026-05-13 19:53:03.971][talpid_core::dns][INFO] Resetting DNS
[2026-05-13 19:53:03.971][talpid_core::tunnel_state_machine][INFO] Tunnel state machine shut down
[2026-05-13 19:53:04.032][mullvad_daemon][INFO] Mullvad daemon is quitting

====================
Log: /var/log/mullvad-vpn/daemon.log
====================
[2026-05-13 19:53:04.625] ERROR mullvad_daemon::relay_list::parsed_relays: Failed to load bundled relays: Failed to open relay cache file
[2026-05-13 19:53:04.625] ERROR mullvad_daemon::relay_list::parsed_relays: Failed to load cached relays: missing field `relays` at line 27483 column 1
[2026-05-13 19:53:04.625] ERROR mullvad_daemon: Failed to open relay cache file
[2026-05-13 19:59:40.817] ERROR mullvad_api::rest: Error: HTTP request failed
Caused by: Legacy hyper error
Caused by: client error (Connect)
Caused by: deadline has elapsed
[2026-05-13 19:59:40.817] ERROR mullvad_api::rest: Error: HTTP request failed
Caused by: Legacy hyper error
Caused by: client error (Connect)
Caused by: deadline has elapsed
[2026-05-13 19:59:40.817] ERROR mullvad_api::rest: Error: HTTP request failed
Caused by: Legacy hyper error
Caused by: client error (Connect)
Caused by: Connection refused (os error 111)
[2026-05-13 19:59:40.817] ERROR mullvad_api::rest: Error: HTTP request failed
Caused by: Legacy hyper error
Caused by: client error (Connect)
Caused by: Connection refused (os error 111)
[2026-05-13 19:59:40.817] ERROR mullvad_encrypted_dns_proxy::state: Failed to fetch a new proxy configuration: ResolutionError(ResolveError { kind: Proto(ProtoError { kind: Io(Os { code: 111, kind: ConnectionRefused, message: "Connection refused" }) }) })
[2026-05-13 19:59:45.818] ERROR mullvad_api::rest: Error: HTTP request failed
Caused by: Legacy hyper error
Caused by: client error (Connect)
Caused by: deadline has elapsed
[2026-05-13 19:59:45.818] ERROR mullvad_api::rest: Error: HTTP request failed
Caused by: Legacy hyper error
Caused by: client error (Connect)
Caused by: deadline has elapsed
[2026-05-13 19:59:50.819] ERROR mullvad_api::rest: Error: HTTP request failed
Caused by: Legacy hyper error
Caused by: client error (Connect)
Caused by: deadline has elapsed
[2026-05-13 19:59:50.819] ERROR mullvad_api::rest: Error: HTTP request failed
Caused by: Legacy hyper error
Caused by: client error (Connect)
Caused by: deadline has elapsed
[2026-05-13 19:59:50.819] ERROR mullvad_daemon::version::check: Failed to fetch version info: Failed to check the latest app version
[2026-05-13 19:59:50.819] ERROR mullvad_daemon::management_interface: Unable to get account data from API: Error: Legacy hyper error
Caused by: client error (Connect)
Caused by: deadline has elapsed
[2026-05-13 19:59:58.822] ERROR mullvad_daemon::management_interface: Unable to get account data from API: Error: Legacy hyper error
Caused by: client error (Connect)
Caused by: Network is unreachable (os error 101)

====================
Log: ~/.config/Mullvad VPN/logs/frontend-main.old.log
====================
[2026-05-13 19:51:44.540][verbose] Chromium sandbox is enabled
[2026-05-13 19:51:44.540][info] Running version 2025.14
[2026-05-13 19:51:44.618][info] Detected locale: en-US
[2026-05-13 19:51:44.693][info] Verified socket ownership
[2026-05-13 19:51:44.693][info] Connected to the daemon
[2026-05-13 19:51:44.752][info] Autoconnect the tunnel
[2026-05-13 19:51:45.154][info] Showing notification icon: "Update available. Install the latest app version to stay up to date"
[2026-05-13 19:51:47.893][info] Showing notification icon: "Update available. Install the latest app version to stay up to date","Update available. Install the latest app version to stay up to date"
[2026-05-13 19:53:03.985][verbose] GRPC Channel connectivity state changed to 0
[2026-05-13 19:53:04.031][info] Disconnected from the daemon
[2026-05-13 19:53:05.952][info] Cannot close the tunnel because there is no active connection to daemon.
[2026-05-13 19:53:05.952][info] before-quit received
[2026-05-13 19:53:05.953][info] Quit initiated

====================
Log: ~/.config/Mullvad VPN/logs/frontend-renderer.old.log
====================
[2026-05-13 19:51:44.955][info] setAccountExpiry(undefined) called at 2026-05-13T23:51:44.955Z
[2026-05-13 19:51:44.956][verbose] Tunnel state: connected
[2026-05-13 19:51:44.956][verbose] Initial: Wrong content height: 600, expected 568
[2026-05-13 19:51:44.997][verbose] Map canvas scale factor: 1.25, using: 2
[2026-05-13 19:51:45.145][info] setAccountExpiry(2026-10-27T12:25:08.000Z) called at 2026-05-13T23:51:45.145Z
[2026-05-13 19:51:45.165][info] Received new suggested upgrade: 2026.2
[2026-05-13 19:51:52.562][verbose] Tunnel state: connected
[2026-05-13 19:53:03.681][verbose] Tunnel state: disconnecting
[2026-05-13 19:53:03.984][verbose] Tunnel state: disconnected
[2026-05-13 19:53:04.032][info] Daemon is disconnected. Resetting UI state.

====================
Log: ~/.config/Mullvad VPN/logs/frontend-main.log
====================
[2026-05-13 19:53:07.672][verbose] Chromium sandbox is enabled
[2026-05-13 19:53:07.673][info] Running version 2026.2
[2026-05-13 19:53:07.765][info] Detected locale: en-US
[2026-05-13 19:53:07.850][info] Verified socket ownership
[2026-05-13 19:53:07.850][info] Connected to the daemon
[2026-05-13 19:53:07.907][info] Autoconnect the tunnel
[2026-05-13 19:59:50.821][warning] Failed to fetch account data. Retrying in 8000 ms
[2026-05-13 19:59:58.823][warning] Failed to fetch account data. Retrying in 16000 ms

====================
Log: ~/.config/Mullvad VPN/logs/frontend-renderer.log
====================
[2026-05-13 19:53:08.020][info] setAccountExpiry(undefined) called at 2026-05-13T23:53:08.020Z
[2026-05-13 19:53:08.020][verbose] Tunnel state: connecting
[2026-05-13 19:53:08.021][verbose] Initial: Wrong content height: 598, expected 568
[2026-05-13 19:53:08.061][verbose] Map canvas scale factor: 1, using: 1
[2026-05-13 19:53:08.193][info] setAccountExpiry(2026-10-27T12:25:08.000Z) called at 2026-05-13T23:53:08.193Z
[2026-05-13 19:53:09.351][verbose] Tunnel state: connected
[2026-05-13 19:53:09.989][verbose] Tunnel state: connected
[2026-05-13 19:53:10.690][verbose] Map canvas scale factor: 1.25, using: 2
[2026-05-13 19:53:16.087][verbose] Tunnel state: connected
[2026-05-13 19:53:24.005][verbose] Tunnel state: connected
[2026-05-13 19:53:32.590][verbose] Tunnel state: connecting
[2026-05-13 19:53:32.861][verbose] Tunnel state: connecting
[2026-05-13 19:53:34.113][verbose] Tunnel state: connected
[2026-05-13 19:53:34.626][verbose] Tunnel state: connected
[2026-05-13 19:53:39.584][verbose] Tunnel state: connecting
[2026-05-13 19:53:39.695][verbose] Tunnel state: connecting
[2026-05-13 19:53:41.035][verbose] Tunnel state: connected
[2026-05-13 19:53:41.547][verbose] Tunnel state: connected
[2026-05-13 19:53:43.102][verbose] Map canvas scale factor: 1.25, using: 2
[2026-05-13 19:53:48.431][verbose] Map canvas scale factor: 1.25, using: 2
[2026-05-13 19:53:48.607][verbose] Tunnel state: connecting
[2026-05-13 19:53:48.610][verbose] Tunnel state: connecting
[2026-05-13 19:53:49.129][verbose] Tunnel state: connected
[2026-05-13 19:53:49.541][verbose] Tunnel state: connected
[2026-05-13 19:54:21.399][info] setAccountExpiry(2026-10-27T12:25:08.000Z) called at 2026-05-13T23:54:21.399Z
[2026-05-13 19:58:43.415][verbose] Tunnel state: disconnecting
[2026-05-13 19:58:43.544][verbose] Tunnel state: disconnected
[2026-05-13 19:58:43.965][verbose] Tunnel state: disconnected
[2026-05-13 19:59:40.176][verbose] Tunnel state: connecting
[2026-05-13 19:59:40.221][verbose] Tunnel state: connecting
[2026-05-13 19:59:45.124][verbose] Tunnel state: disconnecting
[2026-05-13 19:59:45.130][verbose] Tunnel state: disconnecting
[2026-05-13 19:59:45.231][verbose] Tunnel state: disconnected
[2026-05-13 20:00:07.027][verbose] Tunnel state: disconnected
[2026-05-13 20:00:15.516][info] setAccountExpiry(2026-10-27T12:25:08.000Z) called at 2026-05-14T00:00:15.516Z
[2026-05-13 20:00:42.515][verbose] Tunnel state: connecting
[2026-05-13 20:00:42.935][verbose] Tunnel state: connected
[2026-05-13 20:00:43.308][verbose] Tunnel state: connected
[2026-05-13 20:01:22.087][info] setAccountExpiry(2026-10-27T12:25:08.000Z) called at 2026-05-14T00:01:22.087Z
[2026-05-13 20:02:46.194][info] setAccountExpiry(2026-10-27T12:25:08.000Z) called at 2026-05-14T00:02:46.194Z
[2026-05-13 20:04:35.122][info] setAccountExpiry(2026-10-27T12:25:08.000Z) called at 2026-05-14T00:04:35.122Z
[2026-05-13 20:05:35.759][info] setAccountExpiry(2026-10-27T12:25:08.000Z) called at 2026-05-14T00:05:35.759Z

Operating system version

Gentoo (w/ 6.18.29 dist-kernel, though happening on earlier kenels)

Mullvad VPN app version

2026.2, but reproduces identically on 2026.1, 2025.14, etc.

Additional Information

It doesn't appear that making any changes to my Mullvad settings has any effect on this (e.g., enabling/disabling DAITA, enabling/disabling custom DNS, enabling/disable local LAN connections, etc.). Lockdown mode is off.

I don't mind sharing the contents of /etc/mullvad-vpn/settings.json, but I'm not sure if any of the identifiers in there need to be redacted.

[qusaismael]

weird thing that this problem occurred with no update either from both of the packages...

it can be solved with workarounds for now, and I suspect that it is from Mullvad side instead of tailscale cuz it is more related to the mullvad-exclude command directly.

[lyderic]

I am on Arch Linux and I experience the same thing. I found this workaround that refers to this explanation. That is working for me. But ideally, it would be great if mullvad could include Tailscale IP range to what it considers a "LAN" (possibly as an option and/or environment variable).

[qusaismael]

thanks for the article link @lyderic , but the problem with it that it depends on nftables, which would break the firewall for any user that use another kind of firewall.

have you tried this easy solution instead? tell me if it works with you

PID=$(pgrep tailscaled)
mullvad split-tunnel add "$PID"

[lyderic]

@qusaismael Unfortunately mullvad split-tunnel add $(pgrep tailscaled) doesn't work for me :-(

I agree that the workaround based on nft is not universally applicable and even then, it's far from ideal: for me, the table has to be added manually and in a certain order. But I don't have anything else so far.

[hulthe]

@lyderic it sounds like you're talking about a different, probably unrelated issue (#6086)

[hulthe]

@itaiferber I have reproduced this bug. Not sure why, but being connected to mullvad and tailscale simultaneously will cause outgoing split-tunneled packets to be sent with the wrong source IP. Traffic is sent on the physical interface using the private mullvad tunnel IP, which is wrong.

[hulthe]

weird thing that this problem occurred with no update either from both of the packages...

it can be solved with workarounds for now, and I suspect that it is from Mullvad side instead of tailscale cuz it is more related to the mullvad-exclude command directly.

@qusaismael Do you have a workaround that allows you to use split tunneling with both mullvad and tailscale running? If so, please post it, as that could help us fix the issue quicker.

[qusaismael]

sadly no, I don't really have a fix for that wrong source IP issue. the best thing that I could have reached to is:

• if mullvad is running, then tailscale will run but with no actual benefit... all of the commands will be dropped by the receiver with no reply back &&&&& Mullvad-Exclude will work on the all needed apps which is the main issue here.
• if mullvad is not running, then tailscale will work automatically with all commands.

the temporary workaround I got to... is basically bypassing the routing conflict by pushing the connection through localhost (since mullvad doesn't block 127.0.0.1).

the main con of this workaround is that we still can't have both of them at a genuine connections level at the same time. it just patches the specific service you critically need.

I just expose port-redirection 2222 to 22 on the tailscale net for ssh... so at least we can have one working service anytime (it will work EVEN if mullvad is already RUNNING)

by running this command:

sudo tailscale serve --bg --tcp 2222 22

and from here, whenever I need to make a genuine connection between my devices remotely on tailscale, I just:

ssh user@mullvad-pc -p 2222 && mullvad disconnect

[nmccarty]

Also encountering this issue on NixOS 26.05. I have the previously mentioned nftables workaround already for other reasons, but that does not resolve the issue for me.

I also attempted forcing mullvad to use the userspace wireguard implementation via TALPID_FORCE_USERSPACE_WIREGUARD=1, to make sure it wasn't a kernel wireguard regression or the like, but no change

[marcelohildebrand]

I believe I am hitting the same issue on CachyOS.

Environment:

• OS: CachyOS
• Kernel / uname:
  Linux cachyos-desk 7.0.11-1-cachyos Add Allow LAN setting #1 SMP PREEMPT_DYNAMIC Wed, 03 Jun 2026 22:05:15 +0000 x86_64 GNU/Linux
• Mullvad app version: 2026.2
• Tailscale version: 1.98.4/Linux 7.0.11-1-cachyos
• Tailscale running
• Mullvad WireGuard tunnel
• LAN sharing enabled
• Custom DNS enabled: 94.140.14.14, 94.140.15.15
• rp_filter set to loose mode: net.ipv4.conf.all.rp_filter=2

Environment:

• OS: CachyOS
• Kernel: 7.0.11-1-cachyos
• Mullvad app: 2026.2
• Tailscale running
• Mullvad WireGuard tunnel
• LAN sharing enabled
• Custom DNS enabled: 94.140.14.14, 94.140.15.15
• rp_filter set to loose mode: net.ipv4.conf.all.rp_filter=2

Symptom:

• Normal Mullvad-tunneled traffic works.
• Direct WAN works when Mullvad is disconnected.
• mullvad-exclude places the process in net_cls:/mullvad-exclusions.
• ip route get 1.1.1.1 mark 0x6d6f6c65 routes correctly via my physical LAN interface.
• But split-tunneled apps have no internet; curl and ping time out.
  Additional diagnostics:
• Excluded packets hit Mullvad's cgroup match:
  meta cgroup 5087041 counter increments.
• Excluded packets receive Mullvad's packet mark:
  meta mark 0x6d6f6c65 counter increments.
• Excluded packets do NOT receive Mullvad's expected conntrack mark:
  ct mark 0x00000f41 counter stays at 0.
• Mullvad's output/NAT rules appear to rely on ct mark 0x00000f41, e.g.:
  ct mark 0x00000f41 accept
oif != "lo" ct mark 0x00000f41 masquerade
• Therefore the split-tunneled flow is packet-marked for routing, but not conntrack-marked for Mullvad's firewall/NAT path.

Temporary diagnostic workaround:

Adding temporary nft rules based on meta mark 0x6d6f6c65 made split tunneling work:

• excluded ping 1.1.1.1 succeeded
• excluded curl https://ifconfig.co/ip returned my real WAN IP
• excluded curl https://am.i.mullvad.net/json returned mullvad_exit_ip:false
• normal VPN traffic still used Mullvad
  Temporary rules used only for diagnosis:
  meta mark 0x6d6f6c65 accept
oifname "enp4s0" meta mark 0x6d6f6c65 masquerade
iifname "enp4s0" ct state established,related accept