last executing test programs: 4.850795202s ago: executing program 0 (id=1): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 4.588544455s ago: executing program 2 (id=3): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x1de) 4.509847846s ago: executing program 3 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x80242) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) 4.16446444s ago: executing program 2 (id=5): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, 0x0, &(0x7f00000001c0)) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x1, 0x0, &(0x7f00000007c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26000884}, 0x12) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r6, 0x4014563c, &(0x7f0000000040)={0xa, {0x8000, 0x2e7, 0x4c6e, 0x2e6}}) 3.920545876s ago: executing program 1 (id=2): syz_usb_connect$midi(0x2, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="12011003000000403512028240000102030109022e00010118980409040000"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 3.110183163s ago: executing program 2 (id=6): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000050000000060a010400000000000000000500000008000b400000000028000480240001800b0001007470726f7879000014000280080002400000001508000140000000010900010073797a30000000001400000011000100000000"], 0xc4}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x10, 0xfffffffc, 0x0, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x4, 0xfffc, 0xfb, 0x89, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xffffffff}}}}) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x6a) 3.089845206s ago: executing program 0 (id=7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, 0x0) 3.024895997s ago: executing program 3 (id=8): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x13000000, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x5c}}, 0x0) 2.619650187s ago: executing program 3 (id=9): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc01c586a, &(0x7f0000000340)={r0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0}) 2.351023646s ago: executing program 3 (id=10): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0xb00}], 0x1, 0x0, 0x0, 0x0) write$dsp(r0, 0x0, 0x0) 2.175489069s ago: executing program 2 (id=11): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRES32=r0]) 1.953286557s ago: executing program 0 (id=12): r0 = fanotify_init(0x200, 0x80000) socket$inet_icmp_raw(0x2, 0x3, 0x1) fanotify_mark(r0, 0x200, 0x20, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) sendfile(r2, r1, 0x0, 0x23b) 1.23009416s ago: executing program 3 (id=13): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="1201100127aa18080204025683490102030109021200010000500f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x550c, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 1.228367857s ago: executing program 2 (id=21): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0xb00}], 0x1, 0x0, 0x0, 0x0) write$dsp(r0, 0x0, 0x0) 594.100968ms ago: executing program 1 (id=14): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x100d, 0xde8bef52389a5434) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000280)={r0, 0x0, {0x0, 0x0, 0x0, 0x2000000000, 0x4000000000000004, 0x0, 0x0, 0x12, 0x14, "996a78edc5cac93c3e473f65d9eb5297f0ca82d56dcddb164e29606b4f2cf0b60d9b92b3cf1597f6b7ff9c4fbf4326f66eccdbf05411d4a42e798491c54e3e6f", "3c54d63cef61aa187f941933694c882f4835e79819ddc15edb9ca42b19129e446327fbe58f617cc4617f5347a395cacecf34365db4d55dace1d4e9d56e6fa42e", "fd0000e7744b74eaa2317fdd9db2fea7e7d63f9a007866063c8c162b99d845fb", [0x61, 0x4]}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x10002, 0x3, 0x15, 0xc, "e1c5be584875f9a3a8c3d21d4aed0888fd5bbc6482d20f77cd7c69344687c22d97bae414bddadaa37277c798331a9beae5f95599c89e8c9e4abd843f22651d53", "1de095496130c0f2d7e3adec074fcc6ef189d2e859a4a31a9afd00", [0x4, 0x3]}) 0s ago: executing program 2 (id=15): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x44000}}], 0x1, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x40047457, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts. [ 73.180579][ T5595] cgroup: Unknown subsys name 'net' [ 73.421610][ T5595] cgroup: Unknown subsys name 'cpuset' [ 73.477762][ T5595] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.175142][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.562469][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.566009][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.570004][ T5609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.572699][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.576070][ T5609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.649906][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.669163][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.694906][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.695731][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.714255][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.722161][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.730011][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.734615][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.735306][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.740007][ T5609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.762535][ T5609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.779776][ T5609] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.788064][ T5609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.819705][ T4925] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.838028][ T4925] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.572068][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.572803][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.573489][ T5607] bridge_slave_0: entered allmulticast mode [ 80.575228][ T5607] bridge_slave_0: entered promiscuous mode [ 80.624933][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.625176][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.625386][ T5607] bridge_slave_1: entered allmulticast mode [ 80.627788][ T5607] bridge_slave_1: entered promiscuous mode [ 80.631064][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.631751][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.634131][ T5611] bridge_slave_0: entered allmulticast mode [ 80.640368][ T5611] bridge_slave_0: entered promiscuous mode [ 80.648426][ T4925] Bluetooth: hci0: command tx timeout [ 80.706434][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.706615][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.706922][ T5611] bridge_slave_1: entered allmulticast mode [ 80.712270][ T5611] bridge_slave_1: entered promiscuous mode [ 80.735503][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.735778][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.736007][ T5612] bridge_slave_0: entered allmulticast mode [ 80.740154][ T5612] bridge_slave_0: entered promiscuous mode [ 80.776675][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.776889][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.777610][ T5613] bridge_slave_0: entered allmulticast mode [ 80.781281][ T5613] bridge_slave_0: entered promiscuous mode [ 80.785045][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.785312][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.785922][ T5612] bridge_slave_1: entered allmulticast mode [ 80.798400][ T5612] bridge_slave_1: entered promiscuous mode [ 80.807265][ T4925] Bluetooth: hci2: command tx timeout [ 80.807365][ T4925] Bluetooth: hci1: command tx timeout [ 80.809284][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.834961][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.835234][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.835450][ T5613] bridge_slave_1: entered allmulticast mode [ 80.840864][ T5613] bridge_slave_1: entered promiscuous mode [ 80.874566][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.882827][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.887587][ T60] Bluetooth: hci3: command tx timeout [ 80.943272][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.963489][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.002515][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.008804][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.026208][ T5607] team0: Port device team_slave_0 added [ 81.048479][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.067342][ T5607] team0: Port device team_slave_1 added [ 81.069829][ T5611] team0: Port device team_slave_0 added [ 81.123608][ T5611] team0: Port device team_slave_1 added [ 81.144525][ T5612] team0: Port device team_slave_0 added [ 81.470546][ T5613] team0: Port device team_slave_0 added [ 81.473089][ T5612] team0: Port device team_slave_1 added [ 81.474515][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.474523][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.474537][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.505453][ T5613] team0: Port device team_slave_1 added [ 81.528266][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.528280][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.528301][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.531053][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.531065][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.531088][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.641051][ T992] cfg80211: failed to load regulatory.db [ 81.715823][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.715839][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.715862][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.788166][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.788181][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.788203][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.849708][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.849718][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.849732][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.851528][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.851538][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.851552][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.855657][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.855665][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.855679][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.987990][ T5607] hsr_slave_0: entered promiscuous mode [ 81.989264][ T5607] hsr_slave_1: entered promiscuous mode [ 82.028852][ T5611] hsr_slave_0: entered promiscuous mode [ 82.029933][ T5611] hsr_slave_1: entered promiscuous mode [ 82.030856][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 82.030929][ T5611] Cannot create hsr debugfs directory [ 82.099715][ T5612] hsr_slave_0: entered promiscuous mode [ 82.100846][ T5612] hsr_slave_1: entered promiscuous mode [ 82.101715][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 82.101736][ T5612] Cannot create hsr debugfs directory [ 82.132411][ T5613] hsr_slave_0: entered promiscuous mode [ 82.133525][ T5613] hsr_slave_1: entered promiscuous mode [ 82.134380][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 82.134400][ T5613] Cannot create hsr debugfs directory [ 82.727236][ T60] Bluetooth: hci0: command tx timeout [ 82.888018][ T60] Bluetooth: hci1: command tx timeout [ 82.888046][ T60] Bluetooth: hci2: command tx timeout [ 82.944808][ T5607] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.967194][ T4925] Bluetooth: hci3: command tx timeout [ 82.998649][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.004102][ T5607] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.022990][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.026541][ T5607] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.061826][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.081186][ T5607] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.120817][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.223085][ T5611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.255332][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.269898][ T5611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.311666][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.318903][ T5611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.352123][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.374073][ T5611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.411701][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.550648][ T5612] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.596946][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.604672][ T5612] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.621056][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.626159][ T5612] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.661417][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.691871][ T5612] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.721851][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.832005][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.860490][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.863475][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.900179][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.911693][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.940172][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.943066][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.980614][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.071384][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.151199][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.182361][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.220064][ T2358] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.221169][ T2358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.256208][ T2358] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.256495][ T2358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.313523][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.354100][ T1537] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.354244][ T1537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.381243][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.401476][ T1537] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.401605][ T1537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.486925][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.524659][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.550940][ T1537] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.551085][ T1537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.635904][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.642415][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.721329][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.766571][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.766830][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.807255][ T4925] Bluetooth: hci0: command tx timeout [ 84.829562][ T1537] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.829685][ T1537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.967207][ T4925] Bluetooth: hci2: command tx timeout [ 84.967235][ T4925] Bluetooth: hci1: command tx timeout [ 85.049167][ T60] Bluetooth: hci3: command tx timeout [ 85.792236][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.144041][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.159258][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.212664][ T5607] veth0_vlan: entered promiscuous mode [ 86.233526][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.265494][ T5607] veth1_vlan: entered promiscuous mode [ 86.386684][ T5612] veth0_vlan: entered promiscuous mode [ 86.392047][ T5611] veth0_vlan: entered promiscuous mode [ 86.426492][ T5607] veth0_macvtap: entered promiscuous mode [ 86.436934][ T5612] veth1_vlan: entered promiscuous mode [ 86.454982][ T5611] veth1_vlan: entered promiscuous mode [ 86.472911][ T5607] veth1_macvtap: entered promiscuous mode [ 86.482935][ T5613] veth0_vlan: entered promiscuous mode [ 86.524629][ T5613] veth1_vlan: entered promiscuous mode [ 86.543467][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.584289][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.623658][ T5612] veth0_macvtap: entered promiscuous mode [ 86.630915][ T1491] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.638528][ T5611] veth0_macvtap: entered promiscuous mode [ 86.655867][ T1491] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.671382][ T1491] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.674831][ T5612] veth1_macvtap: entered promiscuous mode [ 86.685173][ T1491] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.691689][ T5611] veth1_macvtap: entered promiscuous mode [ 86.854675][ T5613] veth0_macvtap: entered promiscuous mode [ 86.892423][ T60] Bluetooth: hci0: command tx timeout [ 86.910956][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.991002][ T5613] veth1_macvtap: entered promiscuous mode [ 87.046122][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.050415][ T60] Bluetooth: hci1: command tx timeout [ 87.050443][ T60] Bluetooth: hci2: command tx timeout [ 87.103334][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.117816][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.137240][ T4925] Bluetooth: hci3: command tx timeout [ 87.150869][ T154] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.164679][ T154] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.174689][ T154] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.178904][ T154] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.188763][ T154] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.194632][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.197098][ T154] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.209745][ T154] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.213660][ T154] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.265870][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.425622][ T154] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.440805][ T1491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.440827][ T1491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.499462][ T154] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.544668][ T154] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.588033][ T154] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.817764][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.817782][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.084247][ T1537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.084263][ T1537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.357629][ T1471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.357647][ T1471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.391710][ T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.391726][ T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.493889][ T1491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.493906][ T1491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.782069][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.782088][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.039309][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.039327][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.214782][ T5759] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1'. [ 90.654699][ T5777] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.425271][ T5689] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 91.621509][ T5689] usb 2-1: unable to get BOS descriptor or descriptor too short [ 91.638040][ T5689] usb 2-1: not running at top speed; connect to a high speed hub [ 91.641392][ T5689] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.671568][ T5689] usb 2-1: New USB device found, idVendor=1235, idProduct=8202, bcdDevice= 0.40 [ 91.671595][ T5689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.671614][ T5689] usb 2-1: Product: syz [ 91.671628][ T5689] usb 2-1: Manufacturer: syz [ 91.671641][ T5689] usb 2-1: SerialNumber: syz [ 92.466185][ T5689] usb 2-1: USB disconnect, device number 2 [ 92.729175][ T5688] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 92.944717][ T5688] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 92.944748][ T5688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.944774][ T5688] usb 4-1: Product: syz [ 92.944789][ T5688] usb 4-1: Manufacturer: syz [ 92.944803][ T5688] usb 4-1: SerialNumber: syz [ 93.035665][ T5688] usb 4-1: config 0 descriptor?? [ 93.102321][ T5688] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 93.253326][ T5803] loop9: detected capacity change from 0 to 255852544 [ 93.332250][ T5688] gspca_m5602: Failed to find a sensor [ 93.332262][ T5688] ALi m5602 4-1:0.0: ALi m5602 webcam failed [ 93.403302][ T5688] usb 4-1: USB disconnect, device number 2 [ 93.552536][ T5804] loop9: detected capacity change from 255852544 to 524287871 [ 93.629070][ T0] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 93.629092][ T0] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 93.629117][ T0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 93.629137][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 93.629147][ T0] RIP: 0010:__schedule+0x4030/0x5550 [ 93.629170][ T0] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 93.629181][ T0] RSP: 0018:ffffffff8e007be0 EFLAGS: 00010003 [ 93.629196][ T0] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 93.629205][ T0] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff8880b8620c60 [ 93.629214][ T0] RBP: ffffffff8e007dd0 R08: ffffffff8fcf38f7 R09: 1ffffffff1f9e71e [ 93.629224][ T0] R10: dffffc0000000000 R11: fffffbfff1f9e71f R12: ffff8880b863c658 [ 93.629234][ T0] R13: ffff888125a6b000 R14: 1ffff110170c7922 R15: 0000000000000014 [ 93.629244][ T0] FS: 0000000000000000(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 93.629255][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.629265][ T0] CR2: 000000110c34fc82 CR3: 0000000029c04000 CR4: 00000000003526f0 [ 93.629277][ T0] Call Trace: [ 93.629286][ T0] [ 93.629305][ T0] ? irqentry_exit+0x1c1/0x8c0 [ 93.629325][ T0] ? __pfx___schedule+0x10/0x10 [ 93.629339][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 93.629358][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 93.629378][ T0] schedule_idle+0x51/0x90 [ 93.629396][ T0] do_idle+0x4a6/0x540 [ 93.629416][ T0] ? __pfx_do_idle+0x10/0x10 [ 93.629436][ T0] cpu_startup_entry+0x43/0x60 [ 93.629454][ T0] rest_init+0x2de/0x300 [ 93.629474][ T0] start_kernel+0x392/0x3e0 [ 93.629494][ T0] x86_64_start_reservations+0x24/0x30 [ 93.629510][ T0] x86_64_start_kernel+0x143/0x1c0 [ 93.629524][ T0] common_startup_64+0x13e/0x157 [ 93.629549][ T0] [ 93.629555][ T0] Modules linked in: [ 93.629567][ T0] ---[ end trace 0000000000000000 ]--- [ 93.629579][ T0] RIP: 0010:__schedule+0x4030/0x5550 [ 93.629595][ T0] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 93.629605][ T0] RSP: 0018:ffffffff8e007be0 EFLAGS: 00010003 [ 93.629617][ T0] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 93.629625][ T0] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff8880b8620c60 [ 93.629634][ T0] RBP: ffffffff8e007dd0 R08: ffffffff8fcf38f7 R09: 1ffffffff1f9e71e [ 93.629644][ T0] R10: dffffc0000000000 R11: fffffbfff1f9e71f R12: ffff8880b863c658 [ 93.629654][ T0] R13: ffff888125a6b000 R14: 1ffff110170c7922 R15: 0000000000000014 [ 93.629663][ T0] FS: 0000000000000000(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 93.629675][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.629688][ T0] CR2: 000000110c34fc82 CR3: 0000000029c04000 CR4: 00000000003526f0 [ 93.629702][ T0] Kernel panic - not syncing: Fatal exception [ 94.699939][ T0] Shutting down cpus with NMI [ 94.700241][ T0] Kernel Offset: disabled