last executing test programs: 1.515847975s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)={[0x7]}, 0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) setitimer(0x1, 0x0, 0x0) utimensat(r1, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x100) syz_pidfd_open(0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 986.933666ms ago: executing program 0 (id=1): socket$inet6(0xa, 0x11, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) 866.309301ms ago: executing program 3 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)={[0x7]}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setitimer(0x1, 0x0, 0x0) utimensat(r1, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x100) syz_pidfd_open(0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syslog(0x4, &(0x7f0000000140)=""/61, 0x3d) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffff5b}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8001}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004031}, 0x24008040) 455.586644ms ago: executing program 2 (id=6): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x3}}, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 0 (id=7): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. [ 80.456721][ T5822] cgroup: Unknown subsys name 'net' [ 80.633584][ T5822] cgroup: Unknown subsys name 'cpuset' [ 80.644833][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.147423][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.900572][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.911457][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.970843][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.987194][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.989139][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.001478][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.009282][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.016848][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.028836][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.047603][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.047778][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.056974][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.073805][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.084502][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.091752][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.093173][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.119095][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.127004][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.129522][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.150326][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.155013][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.159610][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.169288][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.176970][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.185679][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.892241][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 85.997640][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 86.018309][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 86.108312][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 86.276341][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.287448][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.299261][ T5837] bridge_slave_0: entered allmulticast mode [ 86.310751][ T5837] bridge_slave_0: entered promiscuous mode [ 86.347474][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 86.363768][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.374209][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.382461][ T5837] bridge_slave_1: entered allmulticast mode [ 86.392559][ T5837] bridge_slave_1: entered promiscuous mode [ 86.470034][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.478016][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.491149][ T5846] bridge_slave_0: entered allmulticast mode [ 86.503871][ T5846] bridge_slave_0: entered promiscuous mode [ 86.569478][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.583970][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.593207][ T5842] bridge_slave_0: entered allmulticast mode [ 86.603792][ T5842] bridge_slave_0: entered promiscuous mode [ 86.612473][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.622755][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.631757][ T5846] bridge_slave_1: entered allmulticast mode [ 86.640249][ T5846] bridge_slave_1: entered promiscuous mode [ 86.669678][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.681613][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.691767][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.703568][ T5842] bridge_slave_1: entered allmulticast mode [ 86.712607][ T5842] bridge_slave_1: entered promiscuous mode [ 86.752076][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.761431][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.770774][ T5832] bridge_slave_0: entered allmulticast mode [ 86.778844][ T5832] bridge_slave_0: entered promiscuous mode [ 86.796384][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.805361][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.819579][ T5832] bridge_slave_1: entered allmulticast mode [ 86.827706][ T5832] bridge_slave_1: entered promiscuous mode [ 86.836879][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.883940][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.948890][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.022669][ T5837] team0: Port device team_slave_0 added [ 87.037847][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.064039][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.073745][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.084314][ T5844] bridge_slave_0: entered allmulticast mode [ 87.095488][ T5844] bridge_slave_0: entered promiscuous mode [ 87.108368][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.124006][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.135463][ T5852] Bluetooth: hci1: command tx timeout [ 87.137724][ T5837] team0: Port device team_slave_1 added [ 87.169201][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.197066][ T5846] team0: Port device team_slave_0 added [ 87.207503][ T5846] team0: Port device team_slave_1 added [ 87.217527][ T5852] Bluetooth: hci3: command tx timeout [ 87.224959][ T5845] Bluetooth: hci0: command tx timeout [ 87.237326][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.245228][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.254691][ T5844] bridge_slave_1: entered allmulticast mode [ 87.263064][ T5844] bridge_slave_1: entered promiscuous mode [ 87.289965][ T5852] Bluetooth: hci4: command tx timeout [ 87.298000][ T5845] Bluetooth: hci2: command tx timeout [ 87.310735][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.320385][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.357312][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.426718][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.434688][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.466720][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.489272][ T5842] team0: Port device team_slave_0 added [ 87.498972][ T5842] team0: Port device team_slave_1 added [ 87.509283][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.520951][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.551609][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.581094][ T5832] team0: Port device team_slave_0 added [ 87.592168][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.606528][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.633016][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.641156][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.671660][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.687505][ T5832] team0: Port device team_slave_1 added [ 87.789567][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.798243][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.832410][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.848163][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.856795][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.895050][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.910297][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.917991][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.952123][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.994666][ T5844] team0: Port device team_slave_0 added [ 88.006000][ T5844] team0: Port device team_slave_1 added [ 88.036315][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.047082][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.079466][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.100589][ T5837] hsr_slave_0: entered promiscuous mode [ 88.108535][ T5837] hsr_slave_1: entered promiscuous mode [ 88.216373][ T5842] hsr_slave_0: entered promiscuous mode [ 88.224838][ T5842] hsr_slave_1: entered promiscuous mode [ 88.232526][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 88.239565][ T5842] Cannot create hsr debugfs directory [ 88.297178][ T5846] hsr_slave_0: entered promiscuous mode [ 88.306009][ T5846] hsr_slave_1: entered promiscuous mode [ 88.315719][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 88.323891][ T5846] Cannot create hsr debugfs directory [ 88.338215][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.346070][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.384755][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.449079][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.457646][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.492992][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.559598][ T5832] hsr_slave_0: entered promiscuous mode [ 88.568377][ T5832] hsr_slave_1: entered promiscuous mode [ 88.576214][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 88.585373][ T5832] Cannot create hsr debugfs directory [ 88.742399][ T5844] hsr_slave_0: entered promiscuous mode [ 88.754487][ T5844] hsr_slave_1: entered promiscuous mode [ 88.763003][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 88.771492][ T5844] Cannot create hsr debugfs directory [ 89.150887][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.199150][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.213876][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.222988][ T5845] Bluetooth: hci1: command tx timeout [ 89.262795][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.290035][ T5845] Bluetooth: hci0: command tx timeout [ 89.297119][ T5845] Bluetooth: hci3: command tx timeout [ 89.361217][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.380389][ T5845] Bluetooth: hci2: command tx timeout [ 89.382050][ T5852] Bluetooth: hci4: command tx timeout [ 89.393428][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.406771][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.420078][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.533363][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.548167][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.564223][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.579562][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.716075][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.726557][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.751975][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.766152][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.798334][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.882413][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.907165][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.941821][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.954400][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.967361][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.982029][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.990148][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.009198][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.063103][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.072299][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.091261][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.159565][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.167223][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.212607][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.243741][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.254091][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.327639][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.387578][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.398060][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.417407][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.427164][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.455990][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.609334][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.647686][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.684235][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.691834][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.768077][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.777507][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.829273][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.879507][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.953706][ T3571] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.961645][ T3571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.987373][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.998093][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.088891][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.125162][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.195775][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.221882][ T5837] veth0_vlan: entered promiscuous mode [ 91.297659][ T5852] Bluetooth: hci1: command tx timeout [ 91.308351][ T5837] veth1_vlan: entered promiscuous mode [ 91.370336][ T5852] Bluetooth: hci3: command tx timeout [ 91.372466][ T5845] Bluetooth: hci0: command tx timeout [ 91.433057][ T5846] veth0_vlan: entered promiscuous mode [ 91.461945][ T5845] Bluetooth: hci4: command tx timeout [ 91.461953][ T5852] Bluetooth: hci2: command tx timeout [ 91.506065][ T5842] veth0_vlan: entered promiscuous mode [ 91.522220][ T5837] veth0_macvtap: entered promiscuous mode [ 91.543087][ T5846] veth1_vlan: entered promiscuous mode [ 91.569459][ T5837] veth1_macvtap: entered promiscuous mode [ 91.607746][ T5842] veth1_vlan: entered promiscuous mode [ 91.683768][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.714345][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.736851][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.803981][ T3542] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.821586][ T5846] veth0_macvtap: entered promiscuous mode [ 91.848117][ T5842] veth0_macvtap: entered promiscuous mode [ 91.861397][ T3542] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.873374][ T3542] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.886813][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.901597][ T3542] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.935171][ T5846] veth1_macvtap: entered promiscuous mode [ 91.953113][ T5842] veth1_macvtap: entered promiscuous mode [ 92.045289][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.072854][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.101570][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.137162][ T3542] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.158494][ T3542] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.185650][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.220151][ T3542] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.232245][ T3542] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.279575][ T3571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.293695][ T3571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.318742][ T3542] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.359047][ T5832] veth0_vlan: entered promiscuous mode [ 92.377110][ T3542] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.404288][ T3991] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.423386][ T3991] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.464145][ T5832] veth1_vlan: entered promiscuous mode [ 92.496795][ T3571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.521550][ T3571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.566613][ T5844] veth0_vlan: entered promiscuous mode [ 92.618260][ T3571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.638478][ T3571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.660187][ T5844] veth1_vlan: entered promiscuous mode [ 92.675020][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.680526][ T3571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.700785][ T3571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.799644][ T5832] veth0_macvtap: entered promiscuous mode [ 92.888383][ T5844] veth0_macvtap: entered promiscuous mode [ 92.907143][ T5844] veth1_macvtap: entered promiscuous mode [ 92.945710][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.963161][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.013344][ T3991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.028154][ T3991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.094012][ T3571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.121427][ T5832] veth1_macvtap: entered promiscuous mode [ 93.130769][ T5958] syz.2.3 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 93.155783][ T3571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.169448][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.194337][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.243389][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.287656][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.336554][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.370716][ T5845] Bluetooth: hci1: command tx timeout [ 93.429244][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.452565][ T5845] Bluetooth: hci3: command tx timeout [ 93.452576][ T5852] Bluetooth: hci0: command tx timeout [ 93.530363][ T5845] Bluetooth: hci2: command tx timeout [ 93.537598][ T5852] Bluetooth: hci4: command tx timeout [ 93.993378][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.034636][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.067724][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.082334][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.365081][ T5970] Illegal XDP return value 4294967294 on prog (id 2) dev N/A, expect packet loss! [ 94.434844][ T5842] [ 94.437404][ T5842] ============================================ [ 94.445565][ T5842] WARNING: possible recursive locking detected [ 94.452997][ T5842] 6.16.0-rc4-next-20250703-syzkaller #0 Not tainted [ 94.461161][ T5842] -------------------------------------------- [ 94.468095][ T5842] syz-executor/5842 is trying to acquire lock: [ 94.475287][ T5842] ffff888059ec48c8 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: rpc_close_pipes+0x10a/0x730 [ 94.487943][ T5842] [ 94.487943][ T5842] but task is already holding lock: [ 94.497638][ T5842] ffff888059ec11c8 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 94.513387][ T5842] [ 94.513387][ T5842] other info that might help us debug this: [ 94.522054][ T5842] Possible unsafe locking scenario: [ 94.522054][ T5842] [ 94.532295][ T5842] CPU0 [ 94.535852][ T5842] ---- [ 94.539380][ T5842] lock(&sb->s_type->i_mutex_key#20); [ 94.546803][ T5842] lock(&sb->s_type->i_mutex_key#20); [ 94.553773][ T5842] [ 94.553773][ T5842] *** DEADLOCK *** [ 94.553773][ T5842] [ 94.563522][ T5842] May be due to missing lock nesting notation [ 94.563522][ T5842] [ 94.574038][ T5842] 4 locks held by syz-executor/5842: [ 94.580149][ T5842] #0: ffff8880281860e0 (&type->s_umount_key#50){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 94.592121][ T5842] #1: ffff888026aaa0a0 (&sn->pipefs_sb_lock){+.+.}-{4:4}, at: rpc_kill_sb+0x77/0x190 [ 94.603633][ T5842] #2: ffffffff8f6d0e30 ((rpc_pipefs_notifier_list).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 94.618146][ T5842] #3: ffff888059ec11c8 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 94.632874][ T5842] [ 94.632874][ T5842] stack backtrace: [ 94.640187][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250703-syzkaller #0 PREEMPT(full) [ 94.640209][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 94.640223][ T5842] Call Trace: [ 94.640232][ T5842] [ 94.640240][ T5842] dump_stack_lvl+0x189/0x250 [ 94.640264][ T5842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.640281][ T5842] ? __pfx__printk+0x10/0x10 [ 94.640296][ T5842] ? print_lock_name+0xde/0x100 [ 94.640310][ T5842] print_deadlock_bug+0x28b/0x2a0 [ 94.640328][ T5842] validate_chain+0x1a3f/0x2140 [ 94.640353][ T5842] __lock_acquire+0xab9/0xd20 [ 94.640369][ T5842] ? rpc_close_pipes+0x10a/0x730 [ 94.640384][ T5842] lock_acquire+0x120/0x360 [ 94.640397][ T5842] ? rpc_close_pipes+0x10a/0x730 [ 94.640416][ T5842] down_write+0x96/0x1f0 [ 94.640430][ T5842] ? rpc_close_pipes+0x10a/0x730 [ 94.640444][ T5842] ? __pfx_down_write+0x10/0x10 [ 94.640456][ T5842] ? __pfx_find_submount+0x10/0x10 [ 94.640470][ T5842] ? _raw_spin_unlock+0x28/0x50 [ 94.640485][ T5842] ? d_walk+0x6f4/0x780 [ 94.640498][ T5842] rpc_close_pipes+0x10a/0x730 [ 94.640513][ T5842] ? d_invalidate+0x204/0x260 [ 94.640526][ T5842] ? __pfx_rpc_close_pipes+0x10/0x10 [ 94.640542][ T5842] ? up_write+0x1c4/0x420 [ 94.640559][ T5842] ? __pfx_rpc_close_pipes+0x10/0x10 [ 94.640588][ T5842] __simple_recursive_removal+0x20b/0x510 [ 94.640605][ T5842] ? __pfx_rpc_close_pipes+0x10/0x10 [ 94.640621][ T5842] rpc_unlink+0x56/0x80 [ 94.640635][ T5842] rpc_pipefs_event+0xc0/0x170 [ 94.640649][ T5842] notifier_call_chain+0x1b3/0x3e0 [ 94.640669][ T5842] blocking_notifier_call_chain+0x6a/0x90 [ 94.640686][ T5842] rpc_kill_sb+0xd0/0x190 [ 94.640704][ T5842] deactivate_locked_super+0xb9/0x130 [ 94.640720][ T5842] cleanup_mnt+0x425/0x4c0 [ 94.640734][ T5842] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.640753][ T5842] task_work_run+0x1d1/0x260 [ 94.640767][ T5842] ? __pfx_task_work_run+0x10/0x10 [ 94.640778][ T5842] ? __x64_sys_umount+0x122/0x160 [ 94.640859][ T5842] ? exit_to_user_mode_loop+0x40/0x110 [ 94.640882][ T5842] exit_to_user_mode_loop+0xec/0x110 [ 94.640898][ T5842] do_syscall_64+0x2bd/0x3b0 [ 94.640911][ T5842] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.640929][ T5842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.640941][ T5842] ? clear_bhb_loop+0x60/0xb0 [ 94.640955][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.640968][ T5842] RIP: 0033:0x7fda8058fc57 [ 94.640992][ T5842] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 94.641002][ T5842] RSP: 002b:00007ffca6051c28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 94.641018][ T5842] RAX: 0000000000000000 RBX: 00007fda80610925 RCX: 00007fda8058fc57 [ 94.641027][ T5842] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca6051ce0 [ 94.641036][ T5842] RBP: 00007ffca6051ce0 R08: 0000000000000000 R09: 0000000000000000 [ 94.641044][ T5842] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffca6052d70 [ 94.641052][ T5842] R13: 00007fda80610925 R14: 0000000000016e13 R15: 00007ffca6052db0 [ 94.641073][ T5842] [ 95.097712][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.108887][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.145815][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.159347][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.181196][ T5832] ieee80211 phy11: Selected rate control algorithm 'minstrel_ht' [ 95.250815][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.262653][ T5832] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht' [ 95.275777][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.308088][ T3571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.329639][ T3571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.850966][ T1208] cfg80211: failed to load regulatory.db