last executing test programs: 2.092208717s ago: executing program 3 (id=4): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x40, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x46}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4041) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x8000000004) llistxattr(0x0, 0x0, 0x0) writev(r2, &(0x7f0000000040), 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050009000000140004"], 0x58}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000002180)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x4c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2a}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 1.554714951s ago: executing program 2 (id=3): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x8, 0xe}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x1, 0x1, 0x9}, 0x50}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x40000000000016c, 0x0) 1.090506909s ago: executing program 3 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) fcntl$notify(r1, 0x402, 0x8000003d) close_range(r0, r1, 0x0) 0s ago: executing program 2 (id=7): syz_open_dev$usbfs(0x0, 0x76, 0x101341) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0xf0}, 0x50) openat$kvm(0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x8, &(0x7f0000000140)={0x4f, 0x0}) write(r1, &(0x7f0000000000), 0x0) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x9, @remote, 0xf}]}, &(0x7f0000000140)=0x10) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="12000000f8ffffff080000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) r6 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004800}, 0x40001) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.52' (ED25519) to the list of known hosts. [ 156.615551][ T5759] cgroup: Unknown subsys name 'net' [ 156.754527][ T5759] cgroup: Unknown subsys name 'cpuset' [ 156.770978][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 162.213666][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 167.655955][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 167.668270][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.681081][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.690678][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 167.701146][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.714458][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.724320][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 167.729835][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.734650][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 167.741528][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.750299][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 167.762074][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.772659][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 167.773515][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.802189][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 167.818360][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.826709][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.839457][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.844097][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 167.848120][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 167.861568][ T5792] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.874259][ T5792] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.891505][ T5792] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.894838][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 167.903060][ T5792] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.290827][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 169.434080][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 169.478064][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 169.786680][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 169.864705][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 169.946022][ T49] Bluetooth: hci0: command tx timeout [ 170.026109][ T49] Bluetooth: hci1: command tx timeout [ 170.031705][ T49] Bluetooth: hci4: command tx timeout [ 170.037655][ T5790] Bluetooth: hci2: command tx timeout [ 170.039836][ T5780] Bluetooth: hci3: command tx timeout [ 170.316040][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.337778][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.345443][ T5782] bridge_slave_0: entered allmulticast mode [ 170.363963][ T5782] bridge_slave_0: entered promiscuous mode [ 170.441701][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.456305][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.463939][ T5782] bridge_slave_1: entered allmulticast mode [ 170.492664][ T5782] bridge_slave_1: entered promiscuous mode [ 170.602064][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.610430][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.619560][ T5793] bridge_slave_0: entered allmulticast mode [ 170.629314][ T5793] bridge_slave_0: entered promiscuous mode [ 170.731747][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.739447][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.747074][ T5793] bridge_slave_1: entered allmulticast mode [ 170.755277][ T5793] bridge_slave_1: entered promiscuous mode [ 170.764833][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.772485][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.780344][ T5777] bridge_slave_0: entered allmulticast mode [ 170.788469][ T5777] bridge_slave_0: entered promiscuous mode [ 170.829481][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.884448][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.892169][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.899972][ T5777] bridge_slave_1: entered allmulticast mode [ 170.908524][ T5777] bridge_slave_1: entered promiscuous mode [ 170.918040][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.925479][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.933484][ T5783] bridge_slave_0: entered allmulticast mode [ 170.941774][ T5783] bridge_slave_0: entered promiscuous mode [ 170.959336][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.969222][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.977604][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.985087][ T5779] bridge_slave_0: entered allmulticast mode [ 170.994285][ T5779] bridge_slave_0: entered promiscuous mode [ 171.053250][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.061157][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.069506][ T5783] bridge_slave_1: entered allmulticast mode [ 171.078050][ T5783] bridge_slave_1: entered promiscuous mode [ 171.110899][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.118507][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.126533][ T5779] bridge_slave_1: entered allmulticast mode [ 171.134734][ T5779] bridge_slave_1: entered promiscuous mode [ 171.151265][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.235160][ T5782] team0: Port device team_slave_0 added [ 171.345433][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.387991][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.429487][ T5782] team0: Port device team_slave_1 added [ 171.444708][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.486564][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.503044][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.543540][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.583117][ T5793] team0: Port device team_slave_0 added [ 171.619524][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.682150][ T5793] team0: Port device team_slave_1 added [ 171.736381][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.743454][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.769882][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.789155][ T5779] team0: Port device team_slave_0 added [ 171.826612][ T5777] team0: Port device team_slave_0 added [ 171.856718][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.863826][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.890920][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.910611][ T5779] team0: Port device team_slave_1 added [ 171.948582][ T5777] team0: Port device team_slave_1 added [ 171.961095][ T5783] team0: Port device team_slave_0 added [ 172.012209][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.019522][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.046118][ T5780] Bluetooth: hci0: command tx timeout [ 172.052232][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.095406][ T5783] team0: Port device team_slave_1 added [ 172.106140][ T5792] Bluetooth: hci3: command tx timeout [ 172.106226][ T49] Bluetooth: hci2: command tx timeout [ 172.111671][ T5792] Bluetooth: hci1: command tx timeout [ 172.122783][ T5780] Bluetooth: hci4: command tx timeout [ 172.201107][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.208657][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.235208][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.294422][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.301766][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.328078][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.341840][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.349366][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.375959][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.406702][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.413801][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.440310][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.475381][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.482645][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.509355][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.540161][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.547348][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.573659][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.604793][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.612024][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.638331][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.662206][ T5782] hsr_slave_0: entered promiscuous mode [ 172.671043][ T5782] hsr_slave_1: entered promiscuous mode [ 172.786949][ T5793] hsr_slave_0: entered promiscuous mode [ 172.795216][ T5793] hsr_slave_1: entered promiscuous mode [ 172.803283][ T5793] debugfs: 'hsr0' already exists in 'hsr' [ 172.809260][ T5793] Cannot create hsr debugfs directory [ 173.061748][ T5777] hsr_slave_0: entered promiscuous mode [ 173.070373][ T5777] hsr_slave_1: entered promiscuous mode [ 173.078613][ T5777] debugfs: 'hsr0' already exists in 'hsr' [ 173.084439][ T5777] Cannot create hsr debugfs directory [ 173.103321][ T5779] hsr_slave_0: entered promiscuous mode [ 173.111827][ T5779] hsr_slave_1: entered promiscuous mode [ 173.120079][ T5779] debugfs: 'hsr0' already exists in 'hsr' [ 173.126026][ T5779] Cannot create hsr debugfs directory [ 173.181504][ T5783] hsr_slave_0: entered promiscuous mode [ 173.190060][ T5783] hsr_slave_1: entered promiscuous mode [ 173.198295][ T5783] debugfs: 'hsr0' already exists in 'hsr' [ 173.204121][ T5783] Cannot create hsr debugfs directory [ 174.105912][ T5780] Bluetooth: hci0: command tx timeout [ 174.186025][ T5780] Bluetooth: hci4: command tx timeout [ 174.186121][ T5792] Bluetooth: hci2: command tx timeout [ 174.191705][ T5790] Bluetooth: hci3: command tx timeout [ 174.197466][ T49] Bluetooth: hci1: command tx timeout [ 174.345281][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 174.370873][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 174.387826][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 174.406094][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 174.536287][ T5793] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 174.559969][ T5793] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 174.620922][ T5793] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 174.641743][ T5793] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 174.811961][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 174.856776][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 174.901569][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 174.943695][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 175.132325][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 175.190006][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 175.239981][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 175.271326][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 175.510807][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.632946][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.652304][ T5779] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 175.684217][ T5779] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 175.720574][ T5779] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 175.754696][ T5779] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 175.862098][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.869696][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.914643][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.974326][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.981841][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.078065][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.185924][ T49] Bluetooth: hci0: command tx timeout [ 176.220613][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.227994][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.266310][ T5792] Bluetooth: hci2: command tx timeout [ 176.268460][ T5790] Bluetooth: hci3: command tx timeout [ 176.271943][ T49] Bluetooth: hci1: command tx timeout [ 176.279184][ T5780] Bluetooth: hci4: command tx timeout [ 176.304787][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.312165][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.420462][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.593119][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.709872][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.717443][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.803820][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.811346][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.847596][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.068501][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.179553][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.289866][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.297404][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.359751][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.367265][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.461525][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.605084][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.612595][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.687831][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.760780][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.768424][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.124204][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.482206][ T5782] veth0_vlan: entered promiscuous mode [ 178.572270][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.691099][ T5782] veth1_vlan: entered promiscuous mode [ 178.940515][ T5793] veth0_vlan: entered promiscuous mode [ 178.973217][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.075059][ T5793] veth1_vlan: entered promiscuous mode [ 179.280463][ T5783] veth0_vlan: entered promiscuous mode [ 179.309380][ T5782] veth0_macvtap: entered promiscuous mode [ 179.372270][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.395239][ T5783] veth1_vlan: entered promiscuous mode [ 179.417794][ T5782] veth1_macvtap: entered promiscuous mode [ 179.552142][ T5793] veth0_macvtap: entered promiscuous mode [ 179.687668][ T5793] veth1_macvtap: entered promiscuous mode [ 179.732992][ T5777] veth0_vlan: entered promiscuous mode [ 179.749525][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.844077][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.980453][ T5777] veth1_vlan: entered promiscuous mode [ 180.001788][ T5783] veth0_macvtap: entered promiscuous mode [ 180.014679][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.048151][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.126234][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.152812][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.172184][ T5783] veth1_macvtap: entered promiscuous mode [ 180.209692][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.274718][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.362909][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.400121][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.414028][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.489427][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.509954][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.553486][ T5777] veth0_macvtap: entered promiscuous mode [ 180.708904][ T5777] veth1_macvtap: entered promiscuous mode [ 180.752076][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.842272][ T1130] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.947916][ T1130] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.965968][ T1130] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.974965][ T1130] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.102156][ T5779] veth0_vlan: entered promiscuous mode [ 181.144407][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.269032][ T5779] veth1_vlan: entered promiscuous mode [ 181.316359][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.435005][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.458416][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.551276][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.599941][ T53] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.932982][ T5779] veth0_macvtap: entered promiscuous mode [ 182.003238][ T5779] veth1_macvtap: entered promiscuous mode [ 182.290698][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.381491][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.598414][ T53] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.634497][ T53] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.681221][ T53] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.756787][ T53] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.041279][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.059989][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.323806][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.351725][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.611465][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.638441][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.775413][ T5782] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 185.893617][ T1077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.929403][ T1077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.448218][ T5957] netlink: 'syz.3.4': attribute type 11 has an invalid length. [ 187.046116][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.054117][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.903275][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.955374][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.272046][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.301224][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.318102][ T1123] ===================================================== [ 188.325273][ T1123] BUG: KMSAN: uninit-value in __inet6_bind+0x4ac/0x1830 [ 188.332688][ T1123] __inet6_bind+0x4ac/0x1830 [ 188.340287][ T1123] inet6_bind+0x11e/0x1a0 [ 188.346227][ T1123] kernel_bind+0xd6/0x130 [ 188.350716][ T1123] rds_tcp_conn_path_connect+0x952/0xff0 [ 188.357722][ T1123] rds_connect_worker+0x353/0x4d0 [ 188.362926][ T1123] process_scheduled_works+0xb21/0x1e30 [ 188.369319][ T1123] worker_thread+0xede/0x1580 [ 188.374153][ T1123] kthread+0x53f/0x600 [ 188.378504][ T1123] ret_from_fork+0x20f/0x910 [ 188.383237][ T1123] ret_from_fork_asm+0x1a/0x30 [ 188.388323][ T1123] [ 188.390712][ T1123] Uninit was stored to memory at: [ 188.396049][ T1123] kernel_bind+0x92/0x130 [ 188.400517][ T1123] rds_tcp_conn_path_connect+0x952/0xff0 [ 188.406535][ T1123] rds_connect_worker+0x353/0x4d0 [ 188.411754][ T1123] process_scheduled_works+0xb21/0x1e30 [ 188.417649][ T1123] worker_thread+0xede/0x1580 [ 188.422463][ T1123] kthread+0x53f/0x600 [ 188.426970][ T1123] ret_from_fork+0x20f/0x910 [ 188.431702][ T1123] ret_from_fork_asm+0x1a/0x30 [ 188.436824][ T1123] [ 188.439206][ T1123] Uninit was stored to memory at: [ 188.446057][ T1123] rds_tcp_conn_path_connect+0xae5/0xff0 [ 188.451836][ T1123] rds_connect_worker+0x353/0x4d0 [ 188.457146][ T1123] process_scheduled_works+0xb21/0x1e30 [ 188.462860][ T1123] worker_thread+0xede/0x1580 [ 188.467907][ T1123] kthread+0x53f/0x600 [ 188.472127][ T1123] ret_from_fork+0x20f/0x910 [ 188.476987][ T1123] ret_from_fork_asm+0x1a/0x30 [ 188.481918][ T1123] [ 188.484304][ T1123] Uninit was created at: [ 188.488984][ T1123] kmem_cache_alloc_noprof+0x37b/0x1270 [ 188.494696][ T1123] rds_tcp_conn_alloc+0x7b/0xbb0 [ 188.499949][ T1123] __rds_conn_create+0x267f/0x34e0 [ 188.505205][ T1123] rds_conn_create_outgoing+0x5d/0x80 [ 188.511003][ T1123] rds_sendmsg+0x2684/0x4d70 [ 188.515857][ T1123] __sys_sendto+0xa77/0xb90 [ 188.520539][ T1123] __x64_sys_sendto+0x130/0x200 [ 188.525576][ T1123] x64_sys_call+0x39a0/0x3ea0 [ 188.530639][ T1123] do_syscall_64+0x134/0xf80 [ 188.535361][ T1123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.541644][ T1123] [ 188.544075][ T1123] CPU: 1 UID: 0 PID: 1123 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 188.555179][ T1123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 188.565821][ T1123] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 188.572195][ T1123] ===================================================== [ 188.579497][ T1123] Disabling lock debugging due to kernel taint [ 188.599165][ T1123] Kernel panic - not syncing: kmsan.panic set ... [ 188.605740][ T1123] CPU: 1 UID: 0 PID: 1123 Comm: kworker/u8:11 Tainted: G B syzkaller #0 PREEMPT(full) [ 188.617023][ T1123] Tainted: [B]=BAD_PAGE [ 188.621257][ T1123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 188.631427][ T1123] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 188.637817][ T1123] Call Trace: [ 188.641185][ T1123] [ 188.644189][ T1123] __dump_stack+0x26/0x30 [ 188.648686][ T1123] dump_stack_lvl+0x50/0x1c0 [ 188.653425][ T1123] ? dump_stack+0x12/0x25 [ 188.657917][ T1123] dump_stack+0x1e/0x25 [ 188.662226][ T1123] vpanic+0x7b4/0x1430 [ 188.666480][ T1123] panic+0x15d/0x160 [ 188.670578][ T1123] kmsan_report+0x31a/0x320 [ 188.675257][ T1123] ? __msan_warning+0x1b/0x30 [ 188.680085][ T1123] ? __inet6_bind+0x4ac/0x1830 [ 188.684996][ T1123] ? inet6_bind+0x11e/0x1a0 [ 188.689652][ T1123] ? kernel_bind+0xd6/0x130 [ 188.694330][ T1123] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 188.700298][ T1123] ? rds_connect_worker+0x353/0x4d0 [ 188.705685][ T1123] ? process_scheduled_works+0xb21/0x1e30 [ 188.711567][ T1123] ? worker_thread+0xede/0x1580 [ 188.716565][ T1123] ? kthread+0x53f/0x600 [ 188.720972][ T1123] ? ret_from_fork+0x20f/0x910 [ 188.725875][ T1123] ? ret_from_fork_asm+0x1a/0x30 [ 188.730982][ T1123] ? stack_depot_save+0x12/0x20 [ 188.735987][ T1123] ? kmsan_internal_chain_origin+0xb6/0xd0 [ 188.741962][ T1123] ? kmsan_internal_chain_origin+0x5d/0xd0 [ 188.747929][ T1123] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 188.754422][ T1123] ? __msan_memcpy+0x105/0x1c0 [ 188.759337][ T1123] ? kernel_bind+0x92/0x130 [ 188.763988][ T1123] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 188.769945][ T1123] ? rds_connect_worker+0x353/0x4d0 [ 188.775324][ T1123] ? process_scheduled_works+0xb21/0x1e30 [ 188.781207][ T1123] ? worker_thread+0xede/0x1580 [ 188.786212][ T1123] ? kthread+0x53f/0x600 [ 188.790613][ T1123] ? ret_from_fork+0x20f/0x910 [ 188.795529][ T1123] ? ret_from_fork_asm+0x1a/0x30 [ 188.800639][ T1123] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 188.806648][ T1123] ? stack_depot_save_flags+0x610/0x790 [ 188.812380][ T1123] ? kmsan_get_metadata+0xf1/0x160 [ 188.817659][ T1123] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 188.823639][ T1123] ? kmsan_get_metadata+0xf1/0x160 [ 188.828941][ T1123] __msan_warning+0x1b/0x30 [ 188.833600][ T1123] __inet6_bind+0x4ac/0x1830 [ 188.838342][ T1123] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 188.844360][ T1123] inet6_bind+0x11e/0x1a0 [ 188.848847][ T1123] ? __pfx_inet6_bind+0x10/0x10 [ 188.853851][ T1123] kernel_bind+0xd6/0x130 [ 188.858340][ T1123] ? kmsan_get_metadata+0xf1/0x160 [ 188.863628][ T1123] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 188.869631][ T1123] rds_tcp_conn_path_connect+0x952/0xff0 [ 188.875462][ T1123] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 188.881982][ T1123] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 188.888301][ T1123] rds_connect_worker+0x353/0x4d0 [ 188.893517][ T1123] ? __pfx_rds_connect_worker+0x10/0x10 [ 188.899252][ T1123] process_scheduled_works+0xb21/0x1e30 [ 188.905029][ T1123] worker_thread+0xede/0x1580 [ 188.909909][ T1123] kthread+0x53f/0x600 [ 188.914240][ T1123] ? __pfx_worker_thread+0x10/0x10 [ 188.919597][ T1123] ? __pfx_kthread+0x10/0x10 [ 188.924364][ T1123] ret_from_fork+0x20f/0x910 [ 188.929101][ T1123] ? __switch_to+0x51c/0x750 [ 188.933968][ T1123] ? __pfx_kthread+0x10/0x10 [ 188.938734][ T1123] ret_from_fork_asm+0x1a/0x30 [ 188.943708][ T1123] [ 188.947002][ T1123] Kernel Offset: disabled [ 188.951369][ T1123] Rebooting in 86400 seconds..