last executing test programs: 1.125144007s ago: executing program 3 (id=4): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x457f05963b85b577, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x1, 0x23}, {0x2, 0x1}, {0x40, 0x5}, {0x2, 0x4}], "0517f607ad735de0"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 951.592275ms ago: executing program 3 (id=5): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x2000c884) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004dc0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 766.945353ms ago: executing program 3 (id=6): socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x7, @local, 0x6}, 0x1c) 378.368082ms ago: executing program 1 (id=2): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 151.050695ms ago: executing program 1 (id=7): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x82e}}}, 0x84) 132.598967ms ago: executing program 1 (id=8): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000003800)={0x28, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3ff}]}]}, 0x28}}, 0x4044080) 0s ago: executing program 1 (id=9): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x8000, @empty}, 0x1c) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.8' (ED25519) to the list of known hosts. [ 62.464135][ T5749] cgroup: Unknown subsys name 'net' [ 62.599775][ T5749] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.964855][ T5749] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.402910][ T5761] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.412522][ T5761] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.420587][ T5761] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.429358][ T5761] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.438072][ T5761] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.463619][ T5761] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.472735][ T5761] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.491466][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.493133][ T5761] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.507178][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.515195][ T5770] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.515672][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.522986][ T5761] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.537178][ T5770] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.546133][ T5081] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.546914][ T5770] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.593926][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.601948][ T5774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.610946][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.631760][ T5775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.638920][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.646936][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.650272][ T5774] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.662188][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.940504][ T5758] chnl_net:caif_netlink_parms(): no params data found [ 67.068060][ T5762] chnl_net:caif_netlink_parms(): no params data found [ 67.084043][ T5758] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.091160][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.098923][ T5758] bridge_slave_0: entered allmulticast mode [ 67.106275][ T5758] bridge_slave_0: entered promiscuous mode [ 67.119552][ T5758] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.126788][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.134217][ T5758] bridge_slave_1: entered allmulticast mode [ 67.140868][ T5758] bridge_slave_1: entered promiscuous mode [ 67.251418][ T5758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.266672][ T5758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.299854][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 67.358396][ T5758] team0: Port device team_slave_0 added [ 67.367393][ T5758] team0: Port device team_slave_1 added [ 67.406653][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 67.416610][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.423949][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.431108][ T5762] bridge_slave_0: entered allmulticast mode [ 67.437976][ T5762] bridge_slave_0: entered promiscuous mode [ 67.464447][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.471415][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.497411][ T5758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.509449][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.516839][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.524118][ T5762] bridge_slave_1: entered allmulticast mode [ 67.530750][ T5762] bridge_slave_1: entered promiscuous mode [ 67.546084][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.553875][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.580252][ T5758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.664251][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.694563][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.701707][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.709880][ T5763] bridge_slave_0: entered allmulticast mode [ 67.717036][ T5763] bridge_slave_0: entered promiscuous mode [ 67.726010][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.733511][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.740705][ T5763] bridge_slave_1: entered allmulticast mode [ 67.748432][ T5763] bridge_slave_1: entered promiscuous mode [ 67.777732][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.790565][ T5758] hsr_slave_0: entered promiscuous mode [ 67.797117][ T5758] hsr_slave_1: entered promiscuous mode [ 67.815774][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.822898][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.830901][ T5766] bridge_slave_0: entered allmulticast mode [ 67.837831][ T5766] bridge_slave_0: entered promiscuous mode [ 67.867679][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.875390][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.882586][ T5766] bridge_slave_1: entered allmulticast mode [ 67.891315][ T5766] bridge_slave_1: entered promiscuous mode [ 67.922535][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.962409][ T5762] team0: Port device team_slave_0 added [ 67.987015][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.999186][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.010254][ T5762] team0: Port device team_slave_1 added [ 68.040388][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.105024][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.112098][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.138138][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.159558][ T5763] team0: Port device team_slave_0 added [ 68.168171][ T5766] team0: Port device team_slave_0 added [ 68.174776][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.181732][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.208001][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.235941][ T5763] team0: Port device team_slave_1 added [ 68.247988][ T5766] team0: Port device team_slave_1 added [ 68.300678][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.307714][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.334552][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.346821][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.354272][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.380329][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.415955][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.423053][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.449053][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.460959][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.468523][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.495208][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.522396][ T5762] hsr_slave_0: entered promiscuous mode [ 68.528979][ T5762] hsr_slave_1: entered promiscuous mode [ 68.536573][ T5762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.545003][ T5762] Cannot create hsr debugfs directory [ 68.623809][ T5774] Bluetooth: hci1: command tx timeout [ 68.623821][ T5768] Bluetooth: hci0: command tx timeout [ 68.650258][ T5766] hsr_slave_0: entered promiscuous mode [ 68.657145][ T5766] hsr_slave_1: entered promiscuous mode [ 68.663345][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.670980][ T5766] Cannot create hsr debugfs directory [ 68.703404][ T5774] Bluetooth: hci3: command tx timeout [ 68.703875][ T5768] Bluetooth: hci2: command tx timeout [ 68.713678][ T5763] hsr_slave_0: entered promiscuous mode [ 68.721018][ T5763] hsr_slave_1: entered promiscuous mode [ 68.727976][ T5763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.735620][ T5763] Cannot create hsr debugfs directory [ 68.779102][ T5758] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.806539][ T5758] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.817697][ T5758] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.849488][ T5758] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.059612][ T5762] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.069849][ T5762] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.090370][ T5762] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.111294][ T5762] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.188222][ T5763] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.208488][ T5763] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.218427][ T5763] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.229671][ T5763] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.265852][ T5758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.316775][ T5766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.329098][ T5766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.351280][ T5766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.368845][ T5758] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.383835][ T5766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.400698][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.408021][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.446734][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.453899][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.518916][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.585957][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.610452][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.617631][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.655762][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.663097][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.702391][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.726817][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.762659][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.802149][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.831835][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.839040][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.869661][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.876877][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.889433][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.896572][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.916631][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.923779][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.977883][ T5758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.157645][ T5758] veth0_vlan: entered promiscuous mode [ 70.206686][ T5758] veth1_vlan: entered promiscuous mode [ 70.277400][ T5758] veth0_macvtap: entered promiscuous mode [ 70.315138][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.349574][ T5758] veth1_macvtap: entered promiscuous mode [ 70.396913][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.417064][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.442064][ T5758] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.456877][ T5758] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.466955][ T5758] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.475899][ T5758] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.534361][ T5762] veth0_vlan: entered promiscuous mode [ 70.550475][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.592717][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.604085][ T5762] veth1_vlan: entered promiscuous mode [ 70.670700][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.681628][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.708087][ T5774] Bluetooth: hci1: command tx timeout [ 70.714129][ T5768] Bluetooth: hci0: command tx timeout [ 70.739791][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.746726][ T5762] veth0_macvtap: entered promiscuous mode [ 70.756035][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.780442][ T5762] veth1_macvtap: entered promiscuous mode [ 70.787981][ T5768] Bluetooth: hci2: command tx timeout [ 70.793823][ T5774] Bluetooth: hci3: command tx timeout [ 70.841029][ T5766] veth0_vlan: entered promiscuous mode [ 70.868718][ T5766] veth1_vlan: entered promiscuous mode [ 70.877893][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.892216][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.905854][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.922727][ T5763] veth0_vlan: entered promiscuous mode [ 70.939201][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.950423][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.962765][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.981883][ T5762] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.990841][ T5762] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.000384][ T5762] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.010971][ T5762] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.029182][ T5763] veth1_vlan: entered promiscuous mode [ 71.081456][ T5766] veth0_macvtap: entered promiscuous mode [ 71.135269][ T5766] veth1_macvtap: entered promiscuous mode [ 71.222820][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.237963][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.275183][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.289862][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.301240][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.316587][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.333079][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.347839][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.358465][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.369341][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.379974][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.391483][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.415588][ T5766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.425111][ T5766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.433940][ T5766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.442758][ T5766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.466505][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.475218][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.489721][ T5763] veth0_macvtap: entered promiscuous mode [ 71.501525][ T5763] veth1_macvtap: entered promiscuous mode [ 71.589596][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.590806][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.603920][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.610785][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.626399][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.639642][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.660108][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.673729][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.685520][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.705817][ T5859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 71.714819][ T5859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 71.730247][ T5859] gretap0: entered promiscuous mode [ 71.739706][ T5859] gretap0: left promiscuous mode [ 71.754828][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.768290][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.780420][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.791607][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.804011][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.820942][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.846387][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.872184][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.904599][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.930824][ T5763] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.941893][ T5763] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.950689][ T5763] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.959836][ T5763] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.987149][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.003760][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.134721][ T5866] divide error: 0000 [#1] PREEMPT SMP KASAN [ 72.140684][ T5866] CPU: 1 PID: 5866 Comm: syz.1.9 Not tainted syzkaller #0 [ 72.147812][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.157890][ T5866] RIP: 0010:__tcp_select_window+0x7a3/0x1270 [ 72.163907][ T5866] Code: ff ff ff 44 89 e1 d3 e0 89 c1 f7 d1 41 01 ce 41 21 c6 e9 c5 00 00 00 e8 ab 9e 97 f8 e9 b8 00 00 00 e8 a1 9e 97 f8 44 89 f0 99 7c 24 2c 41 29 d6 48 bb 00 00 00 00 00 fc ff df e9 9c 00 00 00 [ 72.166342][ T5763] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 72.183597][ T5866] RSP: 0018:ffffc900049bfb00 EFLAGS: 00010287 [ 72.183619][ T5866] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 72.183629][ T5866] RDX: 0000000000000000 RSI: 0000000000000e73 RDI: 0000000000000e74 [ 72.183639][ T5866] RBP: ffffc900049bfbf0 R08: ffff8880314f0213 R09: 1ffff1100629e042 [ 72.183650][ T5866] R10: dffffc0000000000 R11: ffffed100629e043 R12: 0000000000000000 [ 72.183661][ T5866] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802d1496e8 [ 72.183669][ T5866] FS: 00007f4effee76c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 72.183682][ T5866] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.183692][ T5866] CR2: 0000200000000180 CR3: 000000002dfa4000 CR4: 00000000003506e0 [ 72.193000][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.197449][ T5866] Call Trace: [ 72.210173][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.213374][ T5866] [ 72.213387][ T5866] ? tcp_push_one+0x100/0x100 [ 72.213422][ T5866] __tcp_transmit_skb+0xb40/0x32a0 [ 72.291811][ T5866] ? __tcp_send_ack+0x5a0/0x5a0 [ 72.296665][ T5866] ? read_tsc+0x9/0x20 [ 72.300719][ T5866] ? ktime_get+0x24b/0x280 [ 72.305126][ T5866] tcp_send_active_reset+0x35e/0x6c0 [ 72.310410][ T5866] mptcp_do_fastclose+0x23a/0x310 [ 72.315424][ T5866] mptcp_disconnect+0x1fc/0x520 [ 72.320258][ T5866] inet_shutdown+0x1be/0x370 [ 72.324836][ T5866] __x64_sys_shutdown+0x174/0x1d0 [ 72.329847][ T5866] do_syscall_64+0x55/0xb0 [ 72.334253][ T5866] ? clear_bhb_loop+0x40/0x90 [ 72.338920][ T5866] ? clear_bhb_loop+0x40/0x90 [ 72.343587][ T5866] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.349466][ T5866] RIP: 0033:0x7f4efef8f749 [ 72.353875][ T5866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.373464][ T5866] RSP: 002b:00007f4effee7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 72.381861][ T5866] RAX: ffffffffffffffda RBX: 00007f4eff1e5fa0 RCX: 00007f4efef8f749 [ 72.389819][ T5866] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 72.397777][ T5866] RBP: 00007f4eff013f91 R08: 0000000000000000 R09: 0000000000000000 [ 72.405732][ T5866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.413692][ T5866] R13: 00007f4eff1e6038 R14: 00007f4eff1e5fa0 R15: 00007fff7bf4ea48 [ 72.421657][ T5866] [ 72.424672][ T5866] Modules linked in: [ 72.457309][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.465602][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.474266][ T5866] ---[ end trace 0000000000000000 ]--- [ 72.479847][ T5866] RIP: 0010:__tcp_select_window+0x7a3/0x1270 [ 72.486096][ T5866] Code: ff ff ff 44 89 e1 d3 e0 89 c1 f7 d1 41 01 ce 41 21 c6 e9 c5 00 00 00 e8 ab 9e 97 f8 e9 b8 00 00 00 e8 a1 9e 97 f8 44 89 f0 99 7c 24 2c 41 29 d6 48 bb 00 00 00 00 00 fc ff df e9 9c 00 00 00 [ 72.506864][ T5866] RSP: 0018:ffffc900049bfb00 EFLAGS: 00010287 [ 72.514503][ T5866] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 72.522587][ T5866] RDX: 0000000000000000 RSI: 0000000000000e73 RDI: 0000000000000e74 [ 72.530722][ T5866] RBP: ffffc900049bfbf0 R08: ffff8880314f0213 R09: 1ffff1100629e042 [ 72.539768][ T5866] R10: dffffc0000000000 R11: ffffed100629e043 R12: 0000000000000000 [ 72.549891][ T5866] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802d1496e8 [ 72.559202][ T5866] FS: 00007f4effee76c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 72.568559][ T5866] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.575311][ T5866] CR2: 0000200000000180 CR3: 000000002dfa4000 CR4: 00000000003506e0 [ 72.584053][ T5866] Kernel panic - not syncing: Fatal exception [ 72.590448][ T5866] Kernel Offset: disabled [ 72.594758][ T5866] Rebooting in 86400 seconds..