last executing test programs: 2.465884704s ago: executing program 3 (id=4): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.589540519s ago: executing program 3 (id=6): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x800, 0x3, 0xfffffffd}, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x4040811}, 0x0) 657.79412ms ago: executing program 3 (id=7): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x74) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x8000) 274.8016ms ago: executing program 0 (id=1): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f0000001a80)=0x7, 0x4) 0s ago: executing program 1 (id=2): r0 = syz_open_dev$hiddev(&(0x7f0000000340), 0x0, 0x801c0) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. [ 188.949234][ T5557] cgroup: Unknown subsys name 'net' [ 189.079794][ T5557] cgroup: Unknown subsys name 'cpuset' [ 189.097894][ T5557] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 195.511470][ T5557] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 200.293042][ T5578] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.303624][ T5578] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.313407][ T5578] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.349217][ T5578] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.360348][ T5583] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 200.374361][ T5578] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 200.405233][ T5588] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.414607][ T5583] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 200.417672][ T5588] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 200.432687][ T5588] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 200.442652][ T5588] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 200.443532][ T5582] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 200.461256][ T5588] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 200.470189][ T5588] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 200.484130][ T5591] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 200.498070][ T5591] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 200.507680][ T5591] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 200.522942][ T5591] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 200.533161][ T4875] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 200.543079][ T4875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 200.551140][ T5590] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 200.564598][ T5590] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 200.564873][ T4875] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 200.595933][ T5580] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 200.627518][ T5580] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 202.532278][ T5580] Bluetooth: hci0: command tx timeout [ 202.693317][ T5580] Bluetooth: hci3: command tx timeout [ 202.694090][ T5583] Bluetooth: hci1: command tx timeout [ 202.699569][ T5580] Bluetooth: hci4: command tx timeout [ 202.704995][ T48] Bluetooth: hci2: command tx timeout [ 204.060705][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.067387][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.610241][ T5583] Bluetooth: hci0: command tx timeout [ 204.771106][ T5583] Bluetooth: hci4: command tx timeout [ 204.776942][ T5590] Bluetooth: hci1: command tx timeout [ 204.782955][ T48] Bluetooth: hci3: command tx timeout [ 204.783842][ T5580] Bluetooth: hci2: command tx timeout [ 205.433502][ T5577] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.459145][ T5577] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.471775][ T5577] bridge_slave_0: entered allmulticast mode [ 205.482864][ T5577] bridge_slave_0: entered promiscuous mode [ 205.539047][ T5577] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.547440][ T5577] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.569033][ T5577] bridge_slave_1: entered allmulticast mode [ 205.589565][ T5577] bridge_slave_1: entered promiscuous mode [ 205.910810][ T5577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.048883][ T5577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.100873][ T5581] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.108901][ T5581] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.116733][ T5581] bridge_slave_0: entered allmulticast mode [ 206.128785][ T5581] bridge_slave_0: entered promiscuous mode [ 206.180918][ T5575] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.189354][ T5575] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.197103][ T5575] bridge_slave_0: entered allmulticast mode [ 206.206949][ T5575] bridge_slave_0: entered promiscuous mode [ 206.352871][ T5581] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.361516][ T5581] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.372143][ T5581] bridge_slave_1: entered allmulticast mode [ 206.388218][ T5581] bridge_slave_1: entered promiscuous mode [ 206.426724][ T5575] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.434653][ T5575] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.444221][ T5575] bridge_slave_1: entered allmulticast mode [ 206.453912][ T5575] bridge_slave_1: entered promiscuous mode [ 206.540252][ T5577] team0: Port device team_slave_0 added [ 206.585108][ T5576] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.593628][ T5576] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.601745][ T5576] bridge_slave_0: entered allmulticast mode [ 206.611244][ T5576] bridge_slave_0: entered promiscuous mode [ 206.662098][ T5577] team0: Port device team_slave_1 added [ 206.688860][ T5583] Bluetooth: hci0: command tx timeout [ 206.728102][ T5576] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.736141][ T5576] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.744140][ T5576] bridge_slave_1: entered allmulticast mode [ 206.752973][ T5576] bridge_slave_1: entered promiscuous mode [ 206.771788][ T5581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.820061][ T5575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.848735][ T5583] Bluetooth: hci4: command tx timeout [ 206.854627][ T48] Bluetooth: hci2: command tx timeout [ 206.856685][ T5580] Bluetooth: hci3: command tx timeout [ 206.860500][ T5590] Bluetooth: hci1: command tx timeout [ 206.919427][ T5581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.996897][ T5575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.007389][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.015938][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.023737][ T5585] bridge_slave_0: entered allmulticast mode [ 207.032993][ T5585] bridge_slave_0: entered promiscuous mode [ 207.099226][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.106739][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.133196][ T5577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.173236][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.181561][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.189386][ T5585] bridge_slave_1: entered allmulticast mode [ 207.198055][ T5585] bridge_slave_1: entered promiscuous mode [ 207.218230][ T5576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.236391][ T5581] team0: Port device team_slave_0 added [ 207.244985][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.252689][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.279198][ T5577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.364895][ T5576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.381598][ T5581] team0: Port device team_slave_1 added [ 207.414491][ T5575] team0: Port device team_slave_0 added [ 207.512954][ T5575] team0: Port device team_slave_1 added [ 207.527507][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.629761][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.647367][ T5576] team0: Port device team_slave_0 added [ 207.656414][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.663657][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.689971][ T5581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.794579][ T5576] team0: Port device team_slave_1 added [ 207.803016][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.810792][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.837388][ T5581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.880937][ T5575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.888212][ T5575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.915166][ T5575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.016377][ T5577] hsr_slave_0: entered promiscuous mode [ 208.025531][ T5577] hsr_slave_1: entered promiscuous mode [ 208.037241][ T5575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.044770][ T5575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.071713][ T5575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.090965][ T5585] team0: Port device team_slave_0 added [ 208.128696][ T5576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.135880][ T5576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.162331][ T5576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.207879][ T5585] team0: Port device team_slave_1 added [ 208.256722][ T5576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.264126][ T5576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.290826][ T5576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.523199][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.530885][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.557305][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.586846][ T5581] hsr_slave_0: entered promiscuous mode [ 208.595955][ T5581] hsr_slave_1: entered promiscuous mode [ 208.604448][ T5581] debugfs: 'hsr0' already exists in 'hsr' [ 208.610455][ T5581] Cannot create hsr debugfs directory [ 208.667755][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.675483][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.701974][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.770111][ T5580] Bluetooth: hci0: command tx timeout [ 208.801272][ T5575] hsr_slave_0: entered promiscuous mode [ 208.810747][ T5575] hsr_slave_1: entered promiscuous mode [ 208.819185][ T5575] debugfs: 'hsr0' already exists in 'hsr' [ 208.825091][ T5575] Cannot create hsr debugfs directory [ 208.930507][ T5580] Bluetooth: hci4: command tx timeout [ 208.936331][ T5583] Bluetooth: hci3: command tx timeout [ 208.942234][ T48] Bluetooth: hci2: command tx timeout [ 208.947948][ T5590] Bluetooth: hci1: command tx timeout [ 208.973202][ T5576] hsr_slave_0: entered promiscuous mode [ 208.982192][ T5576] hsr_slave_1: entered promiscuous mode [ 208.990828][ T5576] debugfs: 'hsr0' already exists in 'hsr' [ 208.996706][ T5576] Cannot create hsr debugfs directory [ 209.199791][ T5585] hsr_slave_0: entered promiscuous mode [ 209.209340][ T5585] hsr_slave_1: entered promiscuous mode [ 209.217323][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 209.223623][ T5585] Cannot create hsr debugfs directory [ 210.406287][ T5577] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 210.428149][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.440369][ T5577] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 210.458844][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 210.469381][ T5577] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 210.490598][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 210.519312][ T5577] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 210.540112][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 210.652709][ T5581] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 210.692631][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.714307][ T5581] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 210.740736][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 210.752096][ T5581] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 210.776978][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 210.815005][ T5581] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 210.837703][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.024312][ T5575] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 211.044769][ T5575] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.068742][ T5575] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 211.087628][ T5575] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.102200][ T5575] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 211.125303][ T5575] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.139599][ T5575] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 211.158206][ T5575] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.405612][ T5585] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 211.435608][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.479648][ T5585] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.512717][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.560455][ T5585] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.585410][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.626818][ T5585] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 211.647901][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.850835][ T5576] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.872540][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.883857][ T5576] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 211.902959][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.943546][ T5576] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 211.964621][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.994127][ T5576] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 212.015044][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 212.202308][ T5577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.462750][ T5577] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.567961][ T5581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.604379][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.612235][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.666905][ T3251] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.674420][ T3251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.844039][ T5575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.880639][ T5581] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.982744][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.990440][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.054615][ T5575] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.099932][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.150138][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.157751][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.216706][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.224191][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.338894][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.346660][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.385704][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.458149][ T5576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.562585][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.570320][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.662941][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.670648][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.933505][ T5576] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.104359][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.112133][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.302579][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.310260][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.902059][ T5577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.928932][ T5577] veth0_vlan: entered promiscuous mode [ 218.128087][ T5581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.174413][ T5577] veth1_vlan: entered promiscuous mode [ 218.330974][ T5575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.570989][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.812971][ T5576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.826138][ T5577] veth0_macvtap: entered promiscuous mode [ 218.978383][ T5577] veth1_macvtap: entered promiscuous mode [ 219.036538][ T5581] veth0_vlan: entered promiscuous mode [ 219.186091][ T5575] veth0_vlan: entered promiscuous mode [ 219.302453][ T5581] veth1_vlan: entered promiscuous mode [ 219.348258][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.451228][ T5575] veth1_vlan: entered promiscuous mode [ 219.499450][ T5585] veth0_vlan: entered promiscuous mode [ 219.522130][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.675137][ T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.696739][ T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.756006][ T5585] veth1_vlan: entered promiscuous mode [ 219.774514][ T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.785829][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.077968][ T5575] veth0_macvtap: entered promiscuous mode [ 220.106407][ T5581] veth0_macvtap: entered promiscuous mode [ 220.146136][ T5575] veth1_macvtap: entered promiscuous mode [ 220.229990][ T5581] veth1_macvtap: entered promiscuous mode [ 220.491500][ T5585] veth0_macvtap: entered promiscuous mode [ 220.518257][ T5575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.622994][ T5585] veth1_macvtap: entered promiscuous mode [ 220.649352][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.678708][ T5575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.688466][ T5576] veth0_vlan: entered promiscuous mode [ 220.803598][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.846572][ T3251] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.859103][ T3251] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.899053][ T3251] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.935002][ T5576] veth1_vlan: entered promiscuous mode [ 220.967975][ T3251] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.979647][ T3251] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.021698][ T3251] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.031598][ T3251] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.095315][ T3251] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.177579][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.307519][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.453607][ T1013] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.511977][ T1013] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.543199][ T1013] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.581815][ T1013] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.881702][ T5576] veth0_macvtap: entered promiscuous mode [ 222.003289][ T5576] veth1_macvtap: entered promiscuous mode [ 222.355998][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.481605][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.656642][ T14] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.690950][ T14] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.726401][ T3251] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.761243][ T3251] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.264118][ T5704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.305655][ T5704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.548195][ T3251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.587486][ T3251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.020218][ T5577] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 227.759804][ T5835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 227.806466][ T5835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 228.259196][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.289280][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.510653][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.537455][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.556605][ T5842] batadv0: entered promiscuous mode [ 228.565063][ T5842] vlan2: entered promiscuous mode [ 228.715184][ T5704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.745089][ T5704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.917854][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.958604][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.166599][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.211188][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.500940][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.541120][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.880965][ T5846] ===================================================== [ 229.892522][ T5846] BUG: KMSAN: uninit-value in mptcp_established_options+0x112f/0x3530 [ 229.906228][ T5846] mptcp_established_options+0x112f/0x3530 [ 229.913100][ T5846] tcp_established_options+0x312/0xcc0 [ 229.918997][ T5846] __tcp_transmit_skb+0x5dc/0x5fe0 [ 229.924322][ T5846] __tcp_send_ack+0x967/0xad0 [ 229.929527][ T5846] tcp_send_ack+0x3d/0x60 [ 229.934169][ T5846] mptcp_subflow_shutdown+0x164/0x690 [ 229.939999][ T5846] mptcp_check_send_data_fin+0x31b/0x3d0 [ 229.945865][ T5846] __mptcp_close+0x860/0x1360 [ 229.951015][ T5846] mptcp_close+0x42/0x260 [ 229.955671][ T5846] inet_release+0x1ee/0x2a0 [ 229.960707][ T5846] sock_close+0xd6/0x2f0 [ 229.965140][ T5846] __fput+0x60e/0x1010 [ 229.969656][ T5846] ____fput+0x25/0x30 [ 229.973838][ T5846] task_work_run+0x208/0x2b0 [ 229.978742][ T5846] exit_to_user_mode_loop+0x505/0x2420 [ 229.984497][ T5846] do_syscall_64+0x261/0x3c0 [ 229.989844][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.998457][ T5846] [ 230.001627][ T5846] Local variable opts created at: [ 230.006777][ T5846] __tcp_transmit_skb+0x4d/0x5fe0 [ 230.012225][ T5846] __tcp_send_ack+0x967/0xad0 [ 230.017180][ T5846] [ 230.020034][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: syz.3.7 Not tainted syzkaller #0 PREEMPT(lazy) [ 230.029629][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 230.040099][ T5846] ===================================================== [ 230.047163][ T5846] Disabling lock debugging due to kernel taint [ 230.085170][ T3251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.147808][ T3251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.184885][ T5846] Kernel panic - not syncing: kmsan.panic set ... [ 230.191524][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: syz.3.7 Tainted: G B syzkaller #0 PREEMPT(lazy) [ 230.202355][ T5846] Tainted: [B]=BAD_PAGE [ 230.206636][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 230.216873][ T5846] Call Trace: [ 230.220372][ T5846] [ 230.223423][ T5846] __dump_stack+0x26/0x30 [ 230.227982][ T5846] dump_stack_lvl+0x50/0x1c0 [ 230.232779][ T5846] ? dump_stack+0x12/0x25 [ 230.237370][ T5846] dump_stack+0x1e/0x25 [ 230.241740][ T5846] vpanic+0x7b4/0x1430 [ 230.246062][ T5846] panic+0x15d/0x160 [ 230.250232][ T5846] kmsan_report+0x31a/0x320 [ 230.254991][ T5846] ? __msan_warning+0x1b/0x30 [ 230.260066][ T5846] ? mptcp_established_options+0x112f/0x3530 [ 230.266424][ T5846] ? tcp_established_options+0x312/0xcc0 [ 230.272542][ T5846] ? __tcp_transmit_skb+0x5dc/0x5fe0 [ 230.278397][ T5846] ? __tcp_send_ack+0x967/0xad0 [ 230.283459][ T5846] ? tcp_send_ack+0x3d/0x60 [ 230.288216][ T5846] ? mptcp_subflow_shutdown+0x164/0x690 [ 230.294016][ T5846] ? mptcp_check_send_data_fin+0x31b/0x3d0 [ 230.300075][ T5846] ? __mptcp_close+0x860/0x1360 [ 230.305170][ T5846] ? mptcp_close+0x42/0x260 [ 230.309866][ T5846] ? inet_release+0x1ee/0x2a0 [ 230.314779][ T5846] ? sock_close+0xd6/0x2f0 [ 230.319382][ T5846] ? __fput+0x60e/0x1010 [ 230.323833][ T5846] ? ____fput+0x25/0x30 [ 230.328184][ T5846] ? task_work_run+0x208/0x2b0 [ 230.333126][ T5846] ? exit_to_user_mode_loop+0x505/0x2420 [ 230.338956][ T5846] ? do_syscall_64+0x261/0x3c0 [ 230.343963][ T5846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.350216][ T5846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.356493][ T5846] ? kmsan_get_metadata+0xf1/0x160 [ 230.361893][ T5846] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 230.367972][ T5846] ? mptcp_established_options+0x61/0x3530 [ 230.374048][ T5846] ? filter_irq_stacks+0x49/0x190 [ 230.379282][ T5846] ? stack_depot_save_flags+0x35/0x790 [ 230.384950][ T5846] ? kmsan_get_metadata+0xf1/0x160 [ 230.390328][ T5846] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 230.396922][ T5846] ? kmsan_get_metadata+0xf1/0x160 [ 230.402321][ T5846] __msan_warning+0x1b/0x30 [ 230.407066][ T5846] mptcp_established_options+0x112f/0x3530 [ 230.413189][ T5846] tcp_established_options+0x312/0xcc0 [ 230.418920][ T5846] __tcp_transmit_skb+0x5dc/0x5fe0 [ 230.424270][ T5846] ? kmem_cache_alloc_node_noprof+0x3f5/0x12c0 [ 230.430704][ T5846] ? kmsan_get_metadata+0xf1/0x160 [ 230.436077][ T5846] ? kmsan_get_metadata+0xf1/0x160 [ 230.441449][ T5846] ? kmsan_get_metadata+0xf1/0x160 [ 230.446829][ T5846] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 230.452928][ T5846] ? __alloc_skb+0xb7d/0x1190 [ 230.457878][ T5846] __tcp_send_ack+0x967/0xad0 [ 230.462800][ T5846] tcp_send_ack+0x3d/0x60 [ 230.467558][ T5846] mptcp_subflow_shutdown+0x164/0x690 [ 230.473181][ T5846] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 230.479367][ T5846] mptcp_check_send_data_fin+0x31b/0x3d0 [ 230.485369][ T5846] __mptcp_close+0x860/0x1360 [ 230.490413][ T5846] ? __pfx_mptcp_close+0x10/0x10 [ 230.495552][ T5846] mptcp_close+0x42/0x260 [ 230.500067][ T5846] ? __pfx_mptcp_close+0x10/0x10 [ 230.505209][ T5846] inet_release+0x1ee/0x2a0 [ 230.509988][ T5846] ? __pfx_inet_release+0x10/0x10 [ 230.515348][ T5846] sock_close+0xd6/0x2f0 [ 230.519803][ T5846] ? __pfx_sock_close+0x10/0x10 [ 230.524858][ T5846] __fput+0x60e/0x1010 [ 230.529166][ T5846] ? __pfx_____fput+0x10/0x10 [ 230.534075][ T5846] ____fput+0x25/0x30 [ 230.538273][ T5846] task_work_run+0x208/0x2b0 [ 230.543152][ T5846] exit_to_user_mode_loop+0x505/0x2420 [ 230.548881][ T5846] ? __x64_sys_close_range+0x97/0xe0 [ 230.554429][ T5846] do_syscall_64+0x261/0x3c0 [ 230.559302][ T5846] ? clear_bhb_loop+0x50/0xa0 [ 230.564186][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.570332][ T5846] RIP: 0033:0x7fb20699ce59 [ 230.574916][ T5846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.594730][ T5846] RSP: 002b:00007ffd3eae03c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 230.603374][ T5846] RAX: 0000000000000000 RBX: 00007fb206c17da0 RCX: 00007fb20699ce59 [ 230.611614][ T5846] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 230.619749][ T5846] RBP: 00007fb206c17da0 R08: 00007fb206c16038 R09: 0000000000000000 [ 230.627905][ T5846] R10: 00000000003ffb88 R11: 0000000000000246 R12: 0000000000038309 [ 230.636051][ T5846] R13: 00007fb206c15fac R14: 00000000000380d2 R15: 00007ffd3eae04d0 [ 230.644344][ T5846] [ 230.648143][ T5846] Kernel Offset: disabled [ 230.652558][ T5846] Rebooting in 86400 seconds..