last executing test programs: 1.874596835s ago: executing program 1 (id=2): r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40200) ioctl$HIDIOCGUSAGE(r0, 0x501c4814, &(0x7f00000000c0)={0x2}) 1.73191989s ago: executing program 1 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 1.670353446s ago: executing program 2 (id=3): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x80000800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.601268617s ago: executing program 3 (id=4): memfd_create(0x0, 0x2) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x20) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48}) setrlimit(0x9, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) 924.768459ms ago: executing program 0 (id=1): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r1, &(0x7f0000002180)=""/4101, 0x1005, 0x0) 758.140369ms ago: executing program 1 (id=6): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x46}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) 171.294604ms ago: executing program 3 (id=7): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e25, @broadcast}}}, 0x108) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)={@multicast1=0xe0000000, @loopback, 0x0, 0x1, [@multicast2]}, 0x14) 112.003529ms ago: executing program 0 (id=8): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, 0x0, 0xfffffffe, 0x0}) 18.160802ms ago: executing program 3 (id=9): creat(&(0x7f0000000300)='./file0\x00', 0x28) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000400)=ANY=[@ANYBLOB='8'], 0x138) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 0s ago: executing program 0 (id=10): r0 = memfd_create(&(0x7f0000000300)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xde', 0x0) write(r0, &(0x7f0000000140)='/', 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f00000060c0), 0x7, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0xc0085666, &(0x7f0000000080)={0x2, 0x3}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000180)={0x0, {0x9, 0x4}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. [ 64.049442][ T5849] cgroup: Unknown subsys name 'net' [ 64.198956][ T5849] cgroup: Unknown subsys name 'cpuset' [ 64.206418][ T5849] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.448731][ T5849] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.581910][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.589464][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.596993][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.604383][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.607633][ T5873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.612159][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.626166][ T5876] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.627634][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.633692][ T5876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.644452][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.647887][ T5876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.654956][ T5873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.669340][ T5873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.676622][ T5876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.676761][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.691262][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.691835][ T5873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.705946][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.705957][ T5876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.722013][ T5187] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.946574][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 69.012556][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 69.090120][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.097404][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.104672][ T5859] bridge_slave_0: entered allmulticast mode [ 69.112297][ T5859] bridge_slave_0: entered promiscuous mode [ 69.131402][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.139353][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.146617][ T5859] bridge_slave_1: entered allmulticast mode [ 69.153501][ T5859] bridge_slave_1: entered promiscuous mode [ 69.187663][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 69.222298][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.229728][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.237736][ T5858] bridge_slave_0: entered allmulticast mode [ 69.244692][ T5858] bridge_slave_0: entered promiscuous mode [ 69.253439][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.263110][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 69.277697][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.284790][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.292069][ T5858] bridge_slave_1: entered allmulticast mode [ 69.298611][ T5858] bridge_slave_1: entered promiscuous mode [ 69.306277][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.344870][ T5859] team0: Port device team_slave_0 added [ 69.367778][ T5859] team0: Port device team_slave_1 added [ 69.378453][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.392995][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.443756][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.450898][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.477184][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.489805][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.496757][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.523371][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.534289][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.541587][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.548875][ T5866] bridge_slave_0: entered allmulticast mode [ 69.555445][ T5866] bridge_slave_0: entered promiscuous mode [ 69.569417][ T5858] team0: Port device team_slave_0 added [ 69.586753][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.594082][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.601390][ T5866] bridge_slave_1: entered allmulticast mode [ 69.607976][ T5866] bridge_slave_1: entered promiscuous mode [ 69.615251][ T5858] team0: Port device team_slave_1 added [ 69.628508][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.635777][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.643379][ T5860] bridge_slave_0: entered allmulticast mode [ 69.649858][ T5860] bridge_slave_0: entered promiscuous mode [ 69.676251][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.683579][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.690950][ T5860] bridge_slave_1: entered allmulticast mode [ 69.697482][ T5860] bridge_slave_1: entered promiscuous mode [ 69.716473][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.723832][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.750198][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.776074][ T5859] hsr_slave_0: entered promiscuous mode [ 69.782186][ T5859] hsr_slave_1: entered promiscuous mode [ 69.791322][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.801195][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.808348][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.834564][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.847356][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.858606][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.869191][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.917473][ T5860] team0: Port device team_slave_0 added [ 69.924668][ T5866] team0: Port device team_slave_0 added [ 69.944747][ T5860] team0: Port device team_slave_1 added [ 69.957961][ T5866] team0: Port device team_slave_1 added [ 69.991213][ T5858] hsr_slave_0: entered promiscuous mode [ 69.997386][ T5858] hsr_slave_1: entered promiscuous mode [ 70.003276][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 70.009599][ T5858] Cannot create hsr debugfs directory [ 70.037769][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.044766][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.070795][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.081978][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.089392][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.115916][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.128135][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.135096][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.161457][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.181312][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.188380][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.215150][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.288148][ T5866] hsr_slave_0: entered promiscuous mode [ 70.294209][ T5866] hsr_slave_1: entered promiscuous mode [ 70.300595][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 70.306690][ T5866] Cannot create hsr debugfs directory [ 70.322811][ T5860] hsr_slave_0: entered promiscuous mode [ 70.330014][ T5860] hsr_slave_1: entered promiscuous mode [ 70.336843][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 70.342786][ T5860] Cannot create hsr debugfs directory [ 70.479675][ T5859] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.499427][ T5859] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.519207][ T5859] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.538054][ T5859] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.565751][ T5858] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.576228][ T5858] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.586691][ T5858] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.598106][ T5858] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.636587][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.649087][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.658891][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.668526][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.718379][ T5866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.727087][ T51] Bluetooth: hci1: command tx timeout [ 70.729870][ T5866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.743040][ T5866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.757925][ T5866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.807466][ T5873] Bluetooth: hci2: command tx timeout [ 70.807471][ T5187] Bluetooth: hci3: command tx timeout [ 70.807530][ T51] Bluetooth: hci0: command tx timeout [ 70.848174][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.869865][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.884887][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.909408][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.922705][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.934143][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.947993][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.955073][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.963603][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.970725][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.005092][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.012248][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.021493][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.028602][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.038383][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.045443][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.055020][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.062108][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.091742][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.114038][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.151871][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.159049][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.177690][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.184827][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.225270][ T5858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.419537][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.481645][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.494894][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.540566][ T5860] veth0_vlan: entered promiscuous mode [ 71.564311][ T5860] veth1_vlan: entered promiscuous mode [ 71.587830][ T5859] veth0_vlan: entered promiscuous mode [ 71.595097][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.609978][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.617146][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.631662][ T5858] veth0_vlan: entered promiscuous mode [ 71.641419][ T5859] veth1_vlan: entered promiscuous mode [ 71.653421][ T5858] veth1_vlan: entered promiscuous mode [ 71.670847][ T5860] veth0_macvtap: entered promiscuous mode [ 71.685888][ T5860] veth1_macvtap: entered promiscuous mode [ 71.703239][ T5866] veth0_vlan: entered promiscuous mode [ 71.719421][ T5866] veth1_vlan: entered promiscuous mode [ 71.730620][ T5859] veth0_macvtap: entered promiscuous mode [ 71.752236][ T5859] veth1_macvtap: entered promiscuous mode [ 71.760385][ T5858] veth0_macvtap: entered promiscuous mode [ 71.775117][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.792049][ T5858] veth1_macvtap: entered promiscuous mode [ 71.802175][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.811687][ T5866] veth0_macvtap: entered promiscuous mode [ 71.821456][ T5866] veth1_macvtap: entered promiscuous mode [ 71.839882][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.852240][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.860876][ T3459] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.871438][ T3459] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.888743][ T3459] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.897583][ T3459] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.911682][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.933669][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.945508][ T3459] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.955757][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.975319][ T3459] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.989102][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.005926][ T3459] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.016274][ T3459] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.038293][ T3459] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.060024][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.068907][ T3459] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.078204][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.079461][ T3459] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.109507][ T3459] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.135817][ T3459] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.145073][ T1344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.148777][ T3459] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.162397][ T1344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.180144][ T3459] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.190958][ T3459] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.231635][ T5860] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.232964][ T1331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.266742][ T3459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.276919][ T3459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.285521][ T1331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.344972][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.353382][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.377716][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.384819][ T3459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.394110][ T3459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.397096][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.446077][ T1344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.459220][ T1344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.612575][ T5954] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.627304][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.647284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.655833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.792144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.894472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.996975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 73.079635][ T5873] Bluetooth: hci2: command tx timeout [ 73.081249][ T5872] Bluetooth: hci3: command tx timeout [ 73.090939][ T5187] Bluetooth: hci0: command tx timeout [ 73.096702][ T51] Bluetooth: hci1: command tx timeout [ 73.207485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.287443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.647017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.162932][ T5976] ------------[ cut here ]------------ [ 74.182787][ T5976] UBSAN: shift-out-of-bounds in fs/9p/vfs_super.c:57:22 [ 74.192065][ T5976] shift exponent 32 is too large for 32-bit type 'int' [ 74.199807][ T5976] CPU: 1 UID: 0 PID: 5976 Comm: syz.3.9 Not tainted syzkaller #0 PREEMPT(full) [ 74.199833][ T5976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 74.199844][ T5976] Call Trace: [ 74.199852][ T5976] [ 74.199859][ T5976] dump_stack_lvl+0x189/0x250 [ 74.199893][ T5976] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.199916][ T5976] ? __pfx__printk+0x10/0x10 [ 74.199940][ T5976] ? preempt_schedule_common+0x83/0xd0 [ 74.199968][ T5976] ubsan_epilogue+0xa/0x40 [ 74.199987][ T5976] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 74.200012][ T5976] ? __pfx_v9fs_set_super+0x10/0x10 [ 74.200036][ T5976] v9fs_get_tree+0x957/0xa90 [ 74.200058][ T5976] ? __pfx_v9fs_get_tree+0x10/0x10 [ 74.200081][ T5976] vfs_get_tree+0x8f/0x2b0 [ 74.200099][ T5976] do_new_mount+0x2a2/0xa30 [ 74.200121][ T5976] ? ns_capable+0x8a/0xf0 [ 74.200139][ T5976] ? __pfx_do_new_mount+0x10/0x10 [ 74.200158][ T5976] ? path_mount+0x61c/0xfe0 [ 74.200176][ T5976] ? user_path_at+0x44/0x60 [ 74.200212][ T5976] __se_sys_mount+0x317/0x410 [ 74.200235][ T5976] ? __pfx___se_sys_mount+0x10/0x10 [ 74.200259][ T5976] ? rcu_is_watching+0x15/0xb0 [ 74.200281][ T5976] ? __x64_sys_mount+0x20/0xc0 [ 74.200304][ T5976] do_syscall_64+0xfa/0xfa0 [ 74.200326][ T5976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.200343][ T5976] ? clear_bhb_loop+0x60/0xb0 [ 74.200360][ T5976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.200378][ T5976] RIP: 0033:0x7f557318ebe9 [ 74.200395][ T5976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.200410][ T5976] RSP: 002b:00007f5573fce038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 74.200431][ T5976] RAX: ffffffffffffffda RBX: 00007f55733c5fa0 RCX: 00007f557318ebe9 [ 74.200444][ T5976] RDX: 0000200000004500 RSI: 0000200000000140 RDI: 0000000000000000 [ 74.200457][ T5976] RBP: 00007f5573211e19 R08: 0000200000000000 R09: 0000000000000000 [ 74.200469][ T5976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.200480][ T5976] R13: 00007f55733c6038 R14: 00007f55733c5fa0 R15: 00007fff6676a5d8 [ 74.200501][ T5976] [ 74.200508][ T5976] ---[ end trace ]--- [ 74.428776][ T5954] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.440710][ T5976] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 74.447993][ T5976] CPU: 1 UID: 0 PID: 5976 Comm: syz.3.9 Not tainted syzkaller #0 PREEMPT(full) [ 74.457014][ T5976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 74.467173][ T5976] Call Trace: [ 74.470448][ T5976] [ 74.473389][ T5976] dump_stack_lvl+0x99/0x250 [ 74.478030][ T5976] ? __asan_memcpy+0x40/0x70 [ 74.482615][ T5976] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.487896][ T5976] ? __pfx__printk+0x10/0x10 [ 74.492482][ T5976] vpanic+0x281/0x750 [ 74.496469][ T5976] ? __pfx_vpanic+0x10/0x10 [ 74.500976][ T5976] panic+0xb9/0xc0 [ 74.504689][ T5976] ? __pfx_panic+0x10/0x10 [ 74.509216][ T5976] ? __pfx__printk+0x10/0x10 [ 74.513815][ T5976] ? preempt_schedule_common+0x83/0xd0 [ 74.519313][ T5976] check_panic_on_warn+0x89/0xb0 [ 74.524269][ T5976] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 74.530947][ T5976] ? __pfx_v9fs_set_super+0x10/0x10 [ 74.536153][ T5976] v9fs_get_tree+0x957/0xa90 [ 74.540756][ T5976] ? __pfx_v9fs_get_tree+0x10/0x10 [ 74.545962][ T5976] vfs_get_tree+0x8f/0x2b0 [ 74.550446][ T5976] do_new_mount+0x2a2/0xa30 [ 74.555004][ T5976] ? ns_capable+0x8a/0xf0 [ 74.559431][ T5976] ? __pfx_do_new_mount+0x10/0x10 [ 74.564469][ T5976] ? path_mount+0x61c/0xfe0 [ 74.568992][ T5976] ? user_path_at+0x44/0x60 [ 74.573497][ T5976] __se_sys_mount+0x317/0x410 [ 74.578265][ T5976] ? __pfx___se_sys_mount+0x10/0x10 [ 74.583457][ T5976] ? rcu_is_watching+0x15/0xb0 [ 74.588212][ T5976] ? __x64_sys_mount+0x20/0xc0 [ 74.592982][ T5976] do_syscall_64+0xfa/0xfa0 [ 74.597484][ T5976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.603539][ T5976] ? clear_bhb_loop+0x60/0xb0 [ 74.608228][ T5976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.614188][ T5976] RIP: 0033:0x7f557318ebe9 [ 74.618598][ T5976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.638299][ T5976] RSP: 002b:00007f5573fce038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 74.646723][ T5976] RAX: ffffffffffffffda RBX: 00007f55733c5fa0 RCX: 00007f557318ebe9 [ 74.654784][ T5976] RDX: 0000200000004500 RSI: 0000200000000140 RDI: 0000000000000000 [ 74.662787][ T5976] RBP: 00007f5573211e19 R08: 0000200000000000 R09: 0000000000000000 [ 74.670764][ T5976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.678745][ T5976] R13: 00007f55733c6038 R14: 00007f55733c5fa0 R15: 00007fff6676a5d8 [ 74.686734][ T5976] [ 74.689897][ T5976] Kernel Offset: disabled [ 74.694212][ T5976] Rebooting in 86400 seconds..