last executing test programs: 190.437725ms ago: executing program 2 (id=3): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14752313660608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x1a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"}) syz_open_pts(r1, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0xf43, 0x0, r2, 0x0, '\x00', r5, r6, 0x4, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) close(r7) r8 = socket$l2tp6(0xa, 0x2, 0x73) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000700)={0x5, 0x5, 0x2b3, 0xff, 0x1b, "cd820741aa66fb44694144d10f93a7c0bbf1da"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@deltclass={0x2c, 0x29, 0x204, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0x3}, {0xfff2, 0xfff1}, {0x7, 0xfff2}}, [@tclass_kind_options=@c_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4044815) r11 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x48001, 0x4, 0x1}, 0x18) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/124, 0x7c, 0x0, &(0x7f00000003c0)=""/167, 0xa7}, &(0x7f0000000480)=0x40) connect$l2tp6(r8, &(0x7f0000000000)={0xa, 0x0, 0x7, @local, 0x6, 0x2}, 0x20) 0s ago: executing program 2 (id=6): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x14031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf250900000004000480e262b8fd6119e6ed00d9df5304"], 0x18}, 0x1, 0x0, 0x0, 0x882}, 0x4004) r2 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="20000000760021070000000000000000080000007f00000105000d"], 0x20}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x22, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="640000000008010800000000000000000a00000805000300060000000900010073797a3100000000060002406558000006000240891700002c0004"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x128, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x238, 0x20a, 0x278, 0x238, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [0x0, 0x0, 0xffff00], 'batadv_slave_0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xa}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@inet=@udp={{0x30}, {[0x4e21, 0x4e24], [0x4e20, 0x4e20], 0x1}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0xff], [], 'syzkaller1\x00', 'caif0\x00', {}, {}, 0x3c, 0x0, 0x0, 0x8}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x80000, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) syz_io_uring_complete(r0) openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.52' (ED25519) to the list of known hosts. [ 36.595370][ T6479] cgroup: Unknown subsys name 'net' [ 36.826068][ T6479] cgroup: Unknown subsys name 'cpuset' [ 36.829782][ T6479] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 37.150721][ T6479] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 38.751153][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.769551][ T6503] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.771507][ T6504] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.771902][ T6504] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.773192][ T6504] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.773592][ T6504] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.774824][ T6504] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.775229][ T6504] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.785168][ T6504] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 38.785447][ T6504] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.785620][ T6504] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.785765][ T6504] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.794000][ T6503] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.794121][ T6503] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.794203][ T6503] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.795169][ T6503] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.795467][ T6503] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 38.796797][ T6504] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.799045][ T6494] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.799498][ T6494] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.800196][ T6058] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 38.804376][ T6058] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.807016][ T6058] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 38.808808][ T6504] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.828120][ T6504] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 39.109757][ T6492] chnl_net:caif_netlink_parms(): no params data found [ 39.133714][ T6498] chnl_net:caif_netlink_parms(): no params data found [ 39.185970][ T6496] chnl_net:caif_netlink_parms(): no params data found [ 39.323290][ T6498] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.323450][ T6498] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.323598][ T6498] bridge_slave_0: entered allmulticast mode [ 39.324513][ T6498] bridge_slave_0: entered promiscuous mode [ 39.326580][ T6498] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.326630][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.326762][ T6498] bridge_slave_1: entered allmulticast mode [ 39.327624][ T6498] bridge_slave_1: entered promiscuous mode [ 39.341204][ T6492] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.342184][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.342316][ T6492] bridge_slave_0: entered allmulticast mode [ 39.343157][ T6492] bridge_slave_0: entered promiscuous mode [ 39.344855][ T6492] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.344901][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.344997][ T6492] bridge_slave_1: entered allmulticast mode [ 39.345785][ T6492] bridge_slave_1: entered promiscuous mode [ 39.348701][ T6490] chnl_net:caif_netlink_parms(): no params data found [ 39.389018][ T6498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.408053][ T6496] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.410146][ T6496] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.412296][ T6496] bridge_slave_0: entered allmulticast mode [ 39.413127][ T6496] bridge_slave_0: entered promiscuous mode [ 39.415097][ T6498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.448691][ T6492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.450965][ T6492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.471244][ T6496] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.471329][ T6496] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.471451][ T6496] bridge_slave_1: entered allmulticast mode [ 39.472619][ T6496] bridge_slave_1: entered promiscuous mode [ 39.491911][ T6498] team0: Port device team_slave_0 added [ 39.496555][ T6492] team0: Port device team_slave_0 added [ 39.520304][ T6498] team0: Port device team_slave_1 added [ 39.531832][ T6492] team0: Port device team_slave_1 added [ 39.550115][ T6496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.554265][ T6496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.568240][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.570352][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.572602][ T6498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.582341][ T6490] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.584373][ T6490] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.586638][ T6490] bridge_slave_0: entered allmulticast mode [ 39.589231][ T6490] bridge_slave_0: entered promiscuous mode [ 39.590694][ T6490] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.590739][ T6490] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.590837][ T6490] bridge_slave_1: entered allmulticast mode [ 39.591650][ T6490] bridge_slave_1: entered promiscuous mode [ 39.599382][ T6491] chnl_net:caif_netlink_parms(): no params data found [ 39.604008][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.606042][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.606085][ T6498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.618338][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.618400][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.618438][ T6492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.664671][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.664728][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.664785][ T6492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.682899][ T6490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.684797][ T6496] team0: Port device team_slave_0 added [ 39.686234][ T6490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.714320][ T6498] hsr_slave_0: entered promiscuous mode [ 39.714905][ T6498] hsr_slave_1: entered promiscuous mode [ 39.731057][ T6496] team0: Port device team_slave_1 added [ 39.733882][ T6492] hsr_slave_0: entered promiscuous mode [ 39.734403][ T6492] hsr_slave_1: entered promiscuous mode [ 39.734695][ T6492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.734787][ T6492] Cannot create hsr debugfs directory [ 39.773849][ T6496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.775895][ T6496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.782269][ T6496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.787454][ T6490] team0: Port device team_slave_0 added [ 39.818542][ T6490] team0: Port device team_slave_1 added [ 39.820842][ T6496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.820893][ T6496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.820935][ T6496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.863712][ T6491] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.863829][ T6491] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.863944][ T6491] bridge_slave_0: entered allmulticast mode [ 39.864783][ T6491] bridge_slave_0: entered promiscuous mode [ 39.868663][ T6491] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.868710][ T6491] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.868833][ T6491] bridge_slave_1: entered allmulticast mode [ 39.869608][ T6491] bridge_slave_1: entered promiscuous mode [ 39.925993][ T6496] hsr_slave_0: entered promiscuous mode [ 39.926583][ T6496] hsr_slave_1: entered promiscuous mode [ 39.926931][ T6496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.926961][ T6496] Cannot create hsr debugfs directory [ 39.936682][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.938737][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.942511][ T6490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.943718][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.943742][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.943789][ T6490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.955781][ T6491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.958699][ T6491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.038326][ T6490] hsr_slave_0: entered promiscuous mode [ 40.038850][ T6490] hsr_slave_1: entered promiscuous mode [ 40.039153][ T6490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.039182][ T6490] Cannot create hsr debugfs directory [ 40.054880][ T6491] team0: Port device team_slave_0 added [ 40.056381][ T6491] team0: Port device team_slave_1 added [ 40.106465][ T6491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.106529][ T6491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.112873][ T6491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.132698][ T6491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.132770][ T6491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.132839][ T6491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.213640][ T6491] hsr_slave_0: entered promiscuous mode [ 40.214185][ T6491] hsr_slave_1: entered promiscuous mode [ 40.214513][ T6491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.214542][ T6491] Cannot create hsr debugfs directory [ 40.258688][ T6492] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.289928][ T6492] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.314578][ T6492] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.341207][ T6492] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.388880][ T6498] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.394162][ T6498] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.399795][ T6498] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.415166][ T6498] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.451629][ T6496] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.459448][ T6496] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.464551][ T6496] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.468526][ T6496] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.521408][ T6490] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.526523][ T6490] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.530572][ T6490] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.542078][ T6490] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.576909][ T6492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.593841][ T6491] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 40.610226][ T6491] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 40.618986][ T6498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.623405][ T6492] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.627287][ T6491] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 40.631272][ T6491] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 40.640883][ T220] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.641021][ T220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.677270][ T220] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.677388][ T220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.710649][ T6498] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.719161][ T220] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.719242][ T220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.729916][ T6492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.756188][ T6496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.766568][ T6496] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.781247][ T6490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.783724][ T4080] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.783778][ T4080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.799099][ T6490] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.807407][ T203] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.807479][ T203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.828122][ T203] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.828206][ T203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.830981][ T203] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.831035][ T203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.841225][ T203] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.841314][ T203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.847379][ T6497] Bluetooth: hci0: command tx timeout [ 40.847416][ T6058] Bluetooth: hci2: command tx timeout [ 40.847674][ T6058] Bluetooth: hci4: command tx timeout [ 40.847859][ T6502] Bluetooth: hci1: command tx timeout [ 40.874883][ T6496] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.896999][ T6491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.923070][ T6497] Bluetooth: hci3: command tx timeout [ 40.936630][ T6491] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.949119][ T6490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.966332][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.966441][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.982714][ T6492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.018766][ T203] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.018859][ T203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.050339][ T6492] veth0_vlan: entered promiscuous mode [ 41.066570][ T6492] veth1_vlan: entered promiscuous mode [ 41.103823][ T6491] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.122967][ T6496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.128638][ T6492] veth0_macvtap: entered promiscuous mode [ 41.140671][ T6492] veth1_macvtap: entered promiscuous mode [ 41.165908][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.170272][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.177291][ T6492] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.180025][ T6492] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.182766][ T6492] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.185241][ T6492] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.239671][ T6496] veth0_vlan: entered promiscuous mode [ 41.260041][ T6498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.280966][ T6496] veth1_vlan: entered promiscuous mode [ 41.295007][ T6490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.310844][ T220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.311105][ T220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.320663][ T6496] veth0_macvtap: entered promiscuous mode [ 41.325031][ T6496] veth1_macvtap: entered promiscuous mode [ 41.341373][ T6496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.357291][ T6496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.376685][ T6496] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.379263][ T6496] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.381846][ T6496] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.385067][ T6496] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.406653][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.409475][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.439659][ T6498] veth0_vlan: entered promiscuous mode [ 41.443229][ T6490] veth0_vlan: entered promiscuous mode [ 41.451719][ T6491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.476837][ T6498] veth1_vlan: entered promiscuous mode [ 41.480500][ T6490] veth1_vlan: entered promiscuous mode [ 41.489566][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.489620][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.516364][ T6492] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.531883][ T6490] veth0_macvtap: entered promiscuous mode [ 41.567083][ T6498] veth0_macvtap: entered promiscuous mode [ 41.571229][ T6498] veth1_macvtap: entered promiscuous mode [ 41.571246][ T220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.571300][ T220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.581246][ T6490] veth1_macvtap: entered promiscuous mode [ 41.590101][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.599594][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.606845][ T6490] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.609489][ T6490] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.613563][ T6570] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 41.616396][ T6490] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.618008][ T6490] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.630941][ T6498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.667735][ T6498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.671888][ T6498] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.676571][ T6498] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.679148][ T6498] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.681652][ T6498] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.798162][ T6491] veth0_vlan: entered promiscuous mode [ 41.827438][ T220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.827503][ T220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.843692][ T6577] ------------[ cut here ]------------ [ 41.843778][ T6577] WARNING: CPU: 0 PID: 6577 at mm/vma.c:1240 vms_complete_munmap_vmas+0x694/0x7e4 [ 41.847917][ T6577] Modules linked in: [ 41.849109][ T6577] CPU: 0 UID: 0 PID: 6577 Comm: syz.2.6 Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT [ 41.852063][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 41.854914][ T6577] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 41.857112][ T6577] pc : vms_complete_munmap_vmas+0x694/0x7e4 [ 41.858824][ T6577] lr : vms_complete_munmap_vmas+0x694/0x7e4 [ 41.860468][ T6577] sp : ffff8000a2a17510 [ 41.861651][ T6577] x29: ffff8000a2a17560 x28: ffff0000ce922a80 x27: 0000000000000736 [ 41.863838][ T6577] x26: ffff0000ce922cf8 x25: ffff8000a2a177a0 x24: ffff0000ce922cf0 [ 41.866066][ T6577] x23: ffff8000a2a17798 x22: 0000000000000021 x21: 0000000000006337 [ 41.868298][ T6577] x20: 1ffff00014542ef0 x19: dfff800000000000 x18: 00000000ffffffff [ 41.870543][ T6577] x17: ffff0001fea8a870 x16: ffff80008adbeaf4 x15: 0000000000000001 [ 41.872871][ T6577] x14: 1ffff00011e63d53 x13: 0000000000000000 x12: 0000000000000000 [ 41.875090][ T6577] x11: 0000000000080000 x10: 000000000000534d x9 : ffff8000a5aee000 [ 41.877401][ T6577] x8 : 000000000000534e x7 : 0000000000000000 x6 : 0000000000000000 [ 41.879654][ T6577] x5 : 00000000000000fe x4 : ffff0000d59ec000 x3 : ffff8000809799f4 [ 41.881971][ T6577] x2 : 0000000000000001 x1 : 0000000000000021 x0 : 0000000000000736 [ 41.884226][ T6577] Call trace: [ 41.885179][ T6577] vms_complete_munmap_vmas+0x694/0x7e4 (P) [ 41.886859][ T6577] mmap_region+0x10b4/0x1a24 [ 41.888146][ T6577] do_mmap+0x968/0xf78 [ 41.889251][ T6577] vm_mmap_pgoff+0x2b8/0x43c [ 41.890638][ T6577] ksys_mmap_pgoff+0xd0/0x5b8 [ 41.891931][ T6577] __arm64_sys_mmap+0xf8/0x110 [ 41.893273][ T6577] invoke_syscall+0x98/0x2b8 [ 41.894540][ T6577] el0_svc_common+0x130/0x23c [ 41.895893][ T6577] do_el0_svc+0x48/0x58 [ 41.897095][ T6577] el0_svc+0x58/0x17c [ 41.898249][ T6577] el0t_64_sync_handler+0x78/0x108 [ 41.899672][ T6577] el0t_64_sync+0x198/0x19c [ 41.900951][ T6577] irq event stamp: 830 [ 41.902068][ T6577] hardirqs last enabled at (829): [] call_rcu+0x650/0x96c [ 41.904570][ T6577] hardirqs last disabled at (830): [] el1_dbg+0x24/0x80 [ 41.906990][ T6577] softirqs last enabled at (678): [] local_bh_enable+0x10/0x34 [ 41.909541][ T6577] softirqs last disabled at (676): [] local_bh_disable+0x10/0x34 [ 41.912201][ T6577] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 42.062866][ T6577] x_tables: ip6_tables: udp match: only valid for protocol 17 [ 43.766551][ T2541] bridge_slave_1: left allmulticast mode [ 43.766669][ T2541] bridge_slave_1: left promiscuous mode [ 43.767129][ T2541] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.775277][ T2541] bridge_slave_0: left allmulticast mode [ 43.775367][ T2541] bridge_slave_0: left promiscuous mode [ 43.775633][ T2541] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.117704][ T2541] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.157021][ T2541] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.214204][ T2541] bond0 (unregistering): Released all slaves [ 45.297609][ T2541] hsr_slave_0: left promiscuous mode [ 45.298238][ T2541] hsr_slave_1: left promiscuous mode [ 45.298787][ T2541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.305467][ T2541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.319230][ T2541] veth0_vlan: left promiscuous mode [ 46.325305][ T2541] team0 (unregistering): Port device team_slave_1 removed [ 46.515255][ T2541] team0 (unregistering): Port device team_slave_0 removed [ 50.045094][ T2541] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.148178][ T2541] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.236497][ T2541] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.335226][ T2541] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.535458][ T2541] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.618306][ T2541] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.684736][ T2541] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.755397][ T2541] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.015044][ T2541] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.105269][ T2541] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.186062][ T2541] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.297749][ T2541] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.504666][ T2541] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.574889][ T2541] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.657708][ T2541] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.727193][ T2541] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0