last executing test programs: 2.009704566s ago: executing program 2 (id=89): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058560f, &(0x7f0000000a40)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "68ab0498"}, 0x0, 0x1, {0x0}}) 1.51361876s ago: executing program 1 (id=98): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0xfd}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) 1.427818156s ago: executing program 0 (id=99): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x5, 0x4) 1.358591189s ago: executing program 1 (id=100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r1, 0x50b, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2401c8d0}, 0x200000c0) 1.352671897s ago: executing program 2 (id=101): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 1.276926955s ago: executing program 0 (id=102): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000", 0x20) 1.190272759s ago: executing program 1 (id=103): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r0, 0x118, 0x2, 0x0, &(0x7f00000003c0)) 1.147536568s ago: executing program 0 (id=104): r0 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0x8, 0x2) 1.047770308s ago: executing program 1 (id=105): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x40000, 0x0, 0x0, 0xfffffffe, 0xffff], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) 978.786674ms ago: executing program 0 (id=106): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x4, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x34}}, 0x0) 918.510766ms ago: executing program 1 (id=107): capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x5f22}) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000240)={'sit0\x00', 0x0}) 841.160431ms ago: executing program 0 (id=109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf2501000000000000000b000000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x4000006}, 0x40) 766.24997ms ago: executing program 1 (id=110): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000003c0)) 762.015116ms ago: executing program 0 (id=111): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 460.523469ms ago: executing program 3 (id=116): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x00') munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 404.300705ms ago: executing program 3 (id=117): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xfc, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) 386.928484ms ago: executing program 2 (id=118): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) 323.862284ms ago: executing program 2 (id=119): r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x18, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1=0xe000006a}, 0x10) 282.963248ms ago: executing program 3 (id=120): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4008af60, &(0x7f0000000940)) 198.475164ms ago: executing program 3 (id=121): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x4c, 0x46, 0x8, 0x6, 0xfc, 0x28, 0xd, 0xfb, 0x8, 0x4, [0x8, 0x7, 0x9, 0xfffffffd, 0x101, 0x4, 0x5, 0x5]}}) 148.167249ms ago: executing program 2 (id=122): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x2, 0x1, 0x1, 0xd, 0xa, 0x64f}, 0x20) 120.624443ms ago: executing program 3 (id=123): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001780)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x3ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@flowinfo={{0x14, 0x29, 0x37, 0x6}}], 0x18}}], 0x1, 0x81) 7.14921ms ago: executing program 3 (id=124): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xc2602, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0x283, 0x3}) 0s ago: executing program 2 (id=125): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.57' (ED25519) to the list of known hosts. [ 72.056201][ T5815] cgroup: Unknown subsys name 'net' [ 72.131862][ T5815] cgroup: Unknown subsys name 'cpuset' [ 72.141194][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.525603][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.580133][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.592417][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.602420][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.603896][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.614811][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.620178][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.632413][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.633015][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.649043][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.652651][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.658768][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.671529][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.671797][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.681009][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.692491][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.696933][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.710216][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.718126][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.725795][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.735450][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.296860][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 76.351872][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 76.391312][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 76.587098][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 76.605702][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.614080][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.621906][ T5834] bridge_slave_0: entered allmulticast mode [ 76.629695][ T5834] bridge_slave_0: entered promiscuous mode [ 76.681525][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.688973][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.697437][ T5834] bridge_slave_1: entered allmulticast mode [ 76.705453][ T5834] bridge_slave_1: entered promiscuous mode [ 76.713611][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.721451][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.728752][ T5833] bridge_slave_0: entered allmulticast mode [ 76.736058][ T5833] bridge_slave_0: entered promiscuous mode [ 76.755142][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.762527][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.769858][ T5827] bridge_slave_0: entered allmulticast mode [ 76.777330][ T5827] bridge_slave_0: entered promiscuous mode [ 76.795298][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.802724][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.810088][ T5833] bridge_slave_1: entered allmulticast mode [ 76.817404][ T5833] bridge_slave_1: entered promiscuous mode [ 76.840471][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.847783][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.855006][ T5827] bridge_slave_1: entered allmulticast mode [ 76.863638][ T5827] bridge_slave_1: entered promiscuous mode [ 76.914572][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.927229][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.981134][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.006943][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.019942][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.043743][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.077997][ T5834] team0: Port device team_slave_0 added [ 77.096478][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.104092][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.111700][ T5826] bridge_slave_0: entered allmulticast mode [ 77.119113][ T5826] bridge_slave_0: entered promiscuous mode [ 77.139544][ T5834] team0: Port device team_slave_1 added [ 77.156913][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.164550][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.171920][ T5826] bridge_slave_1: entered allmulticast mode [ 77.179704][ T5826] bridge_slave_1: entered promiscuous mode [ 77.189730][ T5827] team0: Port device team_slave_0 added [ 77.209943][ T5833] team0: Port device team_slave_0 added [ 77.229083][ T5827] team0: Port device team_slave_1 added [ 77.249158][ T5833] team0: Port device team_slave_1 added [ 77.279446][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.286403][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.312379][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.339260][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.355051][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.382611][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.389740][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.417055][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.453985][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.461047][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.487976][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.525886][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.533072][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.559045][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.571941][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.578966][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.605085][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.629626][ T5826] team0: Port device team_slave_0 added [ 77.636911][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.644164][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.670388][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.721016][ T5834] hsr_slave_0: entered promiscuous mode [ 77.728607][ T5834] hsr_slave_1: entered promiscuous mode [ 77.738970][ T5826] team0: Port device team_slave_1 added [ 77.748444][ T5839] Bluetooth: hci1: command tx timeout [ 77.754721][ T5842] Bluetooth: hci2: command tx timeout [ 77.789389][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.796619][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.823110][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.828086][ T5842] Bluetooth: hci3: command tx timeout [ 77.840734][ T5839] Bluetooth: hci0: command tx timeout [ 77.887151][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.894196][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.920395][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.020713][ T5827] hsr_slave_0: entered promiscuous mode [ 78.027665][ T5827] hsr_slave_1: entered promiscuous mode [ 78.034804][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 78.040787][ T5827] Cannot create hsr debugfs directory [ 78.051768][ T5833] hsr_slave_0: entered promiscuous mode [ 78.059015][ T5833] hsr_slave_1: entered promiscuous mode [ 78.065504][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 78.071462][ T5833] Cannot create hsr debugfs directory [ 78.190066][ T5826] hsr_slave_0: entered promiscuous mode [ 78.196751][ T5826] hsr_slave_1: entered promiscuous mode [ 78.203515][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 78.209634][ T5826] Cannot create hsr debugfs directory [ 78.604531][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.633139][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.650950][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.673008][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.746019][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.770727][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.783490][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.805994][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.896684][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.919378][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.932667][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.945074][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.060840][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.079668][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.097472][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.111019][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.149541][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.230314][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.276284][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.284243][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.307158][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.314857][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.331038][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.425971][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.469949][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.477241][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.505839][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.524178][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.531939][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.611235][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.652256][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.700045][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.720324][ T3964] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.728891][ T3964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.767106][ T3964] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.774472][ T3964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.787402][ T3964] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.794658][ T3964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.828757][ T5842] Bluetooth: hci1: command tx timeout [ 79.834302][ T5839] Bluetooth: hci2: command tx timeout [ 79.842639][ T3964] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.849809][ T3964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.908254][ T5839] Bluetooth: hci3: command tx timeout [ 79.908776][ T5842] Bluetooth: hci0: command tx timeout [ 79.954298][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.243053][ T5834] veth0_vlan: entered promiscuous mode [ 80.275700][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.300831][ T5834] veth1_vlan: entered promiscuous mode [ 80.494488][ T5833] veth0_vlan: entered promiscuous mode [ 80.504030][ T5834] veth0_macvtap: entered promiscuous mode [ 80.523857][ T5834] veth1_macvtap: entered promiscuous mode [ 80.553978][ T5833] veth1_vlan: entered promiscuous mode [ 80.573186][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.599661][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.611065][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.640710][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.669730][ T3964] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.679921][ T3964] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.702555][ T3964] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.713184][ T3964] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.741236][ T5833] veth0_macvtap: entered promiscuous mode [ 80.786787][ T5833] veth1_macvtap: entered promiscuous mode [ 80.901012][ T5826] veth0_vlan: entered promiscuous mode [ 80.901097][ T3964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.921325][ T3964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.922964][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.962263][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.006369][ T3964] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.016378][ T3964] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.035444][ T5826] veth1_vlan: entered promiscuous mode [ 81.044407][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.044512][ T3964] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.053028][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.064372][ T5827] veth0_vlan: entered promiscuous mode [ 81.085290][ T3964] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.116294][ T5827] veth1_vlan: entered promiscuous mode [ 81.174583][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.337849][ T3964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.369699][ T3964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.385397][ T5826] veth0_macvtap: entered promiscuous mode [ 81.431737][ T5827] veth0_macvtap: entered promiscuous mode [ 81.462546][ T5826] veth1_macvtap: entered promiscuous mode [ 81.483546][ T3964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.495275][ T3964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.505280][ T5827] veth1_macvtap: entered promiscuous mode [ 81.603111][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.647491][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.691314][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.738406][ T77] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.757246][ T77] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.794518][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.843701][ T77] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.877721][ T77] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.909177][ T5842] Bluetooth: hci2: command tx timeout [ 81.909177][ T5839] Bluetooth: hci1: command tx timeout [ 81.966849][ T77] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.988175][ T5842] Bluetooth: hci0: command tx timeout [ 81.990339][ T5839] Bluetooth: hci3: command tx timeout [ 82.003101][ T3964] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.028720][ T33] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.056960][ T33] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.277786][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.307322][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.468259][ T3964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.507796][ T3964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.576777][ T5949] capability: warning: `syz.3.18' uses deprecated v2 capabilities in a way that may be insecure [ 82.598855][ T3964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.619225][ T5949] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.632503][ T3964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.710458][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.746048][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.333389][ T5974] program syz.1.25 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.411144][ T5979] program syz.1.25 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.432883][ T5979] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 83.566078][ T5985] netlink: 'syz.2.32': attribute type 12 has an invalid length. [ 83.585692][ T5985] netlink: 172 bytes leftover after parsing attributes in process `syz.2.32'. [ 83.988340][ T5839] Bluetooth: hci2: command tx timeout [ 83.992521][ T5842] Bluetooth: hci1: command tx timeout [ 84.069183][ T5842] Bluetooth: hci0: command tx timeout [ 84.069313][ T5839] Bluetooth: hci3: command tx timeout [ 84.294573][ T6016] GUP no longer grows the stack in syz.0.45 (6016): 200000007000-200000008000 (200000004000) [ 84.305040][ T6018] 9p: Unknown Cache mode or invalid value n [ 84.343555][ T6016] CPU: 1 UID: 0 PID: 6016 Comm: syz.0.45 Not tainted syzkaller #0 PREEMPT(full) [ 84.343586][ T6016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 84.343603][ T6016] Call Trace: [ 84.343611][ T6016] [ 84.343618][ T6016] dump_stack_lvl+0xe8/0x150 [ 84.343655][ T6016] fixup_user_fault+0x637/0x6f0 [ 84.343683][ T6016] fault_in_user_writeable+0x71/0xd0 [ 84.343711][ T6016] futex_lock_pi+0x80b/0xb10 [ 84.343742][ T6016] ? __pfx_futex_lock_pi+0x10/0x10 [ 84.343759][ T6016] ? get_futex_key+0x86e/0x1590 [ 84.343812][ T6016] ? __pfx_futex_wake_mark+0x10/0x10 [ 84.343866][ T6016] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 84.343898][ T6016] do_futex+0x292/0x420 [ 84.343929][ T6016] ? __pfx_do_futex+0x10/0x10 [ 84.343974][ T6016] ? __vm_munmap+0x2e6/0x3d0 [ 84.344003][ T6016] __se_sys_futex+0x3a8/0x450 [ 84.344038][ T6016] ? __pfx___se_sys_futex+0x10/0x10 [ 84.344066][ T6016] ? rcu_is_watching+0x15/0xb0 [ 84.344091][ T6016] ? __x64_sys_futex+0x21/0xf0 [ 84.344121][ T6016] do_syscall_64+0x14d/0xf80 [ 84.344143][ T6016] ? trace_irq_disable+0x3b/0x150 [ 84.344176][ T6016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.344199][ T6016] ? clear_bhb_loop+0x40/0x90 [ 84.344222][ T6016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.344257][ T6016] RIP: 0033:0x7ff3d699c799 [ 84.344285][ T6016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.344305][ T6016] RSP: 002b:00007ff3d788c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 84.344326][ T6016] RAX: ffffffffffffffda RBX: 00007ff3d6c15fa0 RCX: 00007ff3d699c799 [ 84.344339][ T6016] RDX: 0000000000000000 RSI: 000000000000008d RDI: 0000200000004000 [ 84.344350][ T6016] RBP: 00007ff3d6a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 84.344369][ T6016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.344381][ T6016] R13: 00007ff3d6c16038 R14: 00007ff3d6c15fa0 R15: 00007ffffd40cf18 [ 84.344412][ T6016] [ 85.299742][ T6056] hugetlbfs: Bad value 'm' for mount option 'nr_inodes' [ 85.299742][ T6056] [ 85.763953][ T6076] rdma_op ffff8880588de9f0 conn xmit_rdma 0000000000000000 [ 86.112885][ T6094] netlink: 52 bytes leftover after parsing attributes in process `syz.1.82'. [ 86.125322][ T6094] netlink: 'syz.1.82': attribute type 1 has an invalid length. [ 86.887939][ T990] cfg80211: failed to load regulatory.db [ 87.204488][ T30] audit: type=1800 audit(1773240386.617:2): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.104" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 87.737309][ T6161] netlink: 'syz.3.114': attribute type 3 has an invalid length. [ 87.747509][ T6161] netlink: 224 bytes leftover after parsing attributes in process `syz.3.114'. [ 87.848274][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.867552][ T6130] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 87.969989][ T6169] binder: 6168:6169 ioctl c0306201 200000000180 returned -14 [ 88.035438][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 88.056285][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.069781][ T9] usb 1-1: Product: syz [ 88.074632][ T9] usb 1-1: Manufacturer: syz [ 88.079710][ T9] usb 1-1: SerialNumber: syz [ 88.123825][ T9] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 88.196898][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 88.237222][ C0] BUG: workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 88.630611][ T24] usb 1-1: USB disconnect, device number 2 [ 89.428587][ T10] usb 1-1: Service connection timeout for: 256 [ 89.434798][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 89.443941][ T10] ath9k_htc: Failed to initialize the device [ 89.450402][ T24] usb 1-1: ath9k_htc: USB layer deinitialized