last executing test programs: 469.306508ms ago: executing program 2 (id=3): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/ping_group_range\x00', 0x202, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/machinecheck/machinecheck1/ignore_ce\x00', 0xa0202, 0x0) read$auto(r0, &(0x7f0000000140)='ovs_p\x04\x00\x00\x00\x00\x00', 0xa) syz_clone3(&(0x7f00000000c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) open(&(0x7f0000000080)='.\x00', 0x400, 0x408) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sched_get_priority_max$auto_SCHED_BATCH(0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = io_uring_setup$auto(0x6, 0x0) mknod$auto(0x0, 0x1081, 0x3) creat$auto(0x0, 0x1000) getsockopt$auto_SO_PREFER_BUSY_POLL(r1, 0x100, 0x45, &(0x7f0000000000)='MAC802154_HWSIM\x00', &(0x7f0000000040)=0x6) creat$auto(0x0, 0x8d00) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) keyctl$auto(0xffffff82, 0x7, 0x0, 0x0, 0x3) select$auto(0x3, &(0x7f0000000040)={[0x4, 0x2, 0x34, 0x3, 0x8, 0x6, 0x7, 0x8, 0x9, 0x0, 0xa044, 0x2, 0x5, 0x6373, 0x5, 0xfffffffbffffffff]}, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x20004855) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) ioctl$auto(r0, 0x4b67, r2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x80091, 0x0) read$auto(r2, 0x0, 0x4) write$auto(0x3, 0x0, 0xfdef) 46.629032ms ago: executing program 1 (id=2): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/ping_group_range\x00', 0x202, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/machinecheck/machinecheck1/ignore_ce\x00', 0xa0202, 0x0) read$auto(r0, &(0x7f0000000140)='ovs_p\x04\x00\x00\x00\x00\x00', 0xa) syz_clone3(&(0x7f00000000c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) open(&(0x7f0000000080)='.\x00', 0x400, 0x408) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sched_get_priority_max$auto_SCHED_BATCH(0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = io_uring_setup$auto(0x6, 0x0) mknod$auto(0x0, 0x1081, 0x3) creat$auto(0x0, 0x1000) getsockopt$auto_SO_PREFER_BUSY_POLL(r1, 0x100, 0x45, &(0x7f0000000000)='MAC802154_HWSIM\x00', &(0x7f0000000040)=0x6) creat$auto(0x0, 0x8d00) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) keyctl$auto(0xffffff82, 0x7, 0x0, 0x0, 0x3) select$auto(0x3, &(0x7f0000000040)={[0x4, 0x2, 0x34, 0x3, 0x8, 0x6, 0x7, 0x8, 0x9, 0x0, 0xa044, 0x2, 0x5, 0x6373, 0x5, 0xfffffffbffffffff]}, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x20004855) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) ioctl$auto(r0, 0x4b67, r2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$auto(0xffffffffffffffff, 0xe, 0xffffffffffffffff) read$auto(r2, 0x0, 0x4) write$auto(0x3, 0x0, 0xfdef) 0s ago: executing program 2 (id=5): r0 = socket(0x2, 0x1, 0x106) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon16\x00', 0x400, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio0/set\x00', 0x80302, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace\x00', 0x80302, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) setsockopt$auto(r0, 0x1, 0x9, 0x0, 0xeb66) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000000)={0x675d529c, 0x0, 0xfffffff1, 0x101, 0x7, 0x4, "1ec4c233770d5d8a5db102d8cd84eca696782c21e3f04b115d400f6fdc12a842646fdb9806c535a29c7c1ebbdcd2be5c88e17422928a5110f6e9fef8cac28588"}) r4 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/block/sda/sched/read0_fifo_list\x00', 0x2000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r4, &(0x7f0000000040)=""/163, 0xa3) ioperm$auto(0x3, 0xe, 0x2000000000000149) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) shutdown$auto(0x200000003, 0x2) r5 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x401f, 0x1, 0x8e051, r5, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.30' (ED25519) to the list of known hosts. [ 98.523108][ T5827] cgroup: Unknown subsys name 'net' [ 98.707821][ T5827] cgroup: Unknown subsys name 'cpuset' [ 98.717078][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.671167][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.214390][ T9] cfg80211: failed to load regulatory.db [ 103.133705][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.144046][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.151664][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.176216][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.180889][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.197913][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.205512][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.215884][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.223691][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.228460][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.233764][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.239018][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.248752][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.252901][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.264543][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.276061][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.283508][ T5160] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.294083][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.303239][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.310525][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.068453][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 104.081626][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 104.137274][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 104.221903][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 104.350985][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.358780][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.366567][ T5841] bridge_slave_0: entered allmulticast mode [ 104.374296][ T5841] bridge_slave_0: entered promiscuous mode [ 104.383735][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.390868][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.398233][ T5841] bridge_slave_1: entered allmulticast mode [ 104.405757][ T5841] bridge_slave_1: entered promiscuous mode [ 104.518322][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.525614][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.533378][ T5843] bridge_slave_0: entered allmulticast mode [ 104.540729][ T5843] bridge_slave_0: entered promiscuous mode [ 104.565687][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.589187][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.596784][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.604713][ T5843] bridge_slave_1: entered allmulticast mode [ 104.612092][ T5843] bridge_slave_1: entered promiscuous mode [ 104.632726][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.639890][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.647183][ T5842] bridge_slave_0: entered allmulticast mode [ 104.654727][ T5842] bridge_slave_0: entered promiscuous mode [ 104.665616][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.674989][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.682128][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.690277][ T5840] bridge_slave_0: entered allmulticast mode [ 104.697998][ T5840] bridge_slave_0: entered promiscuous mode [ 104.720094][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.727385][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.734849][ T5842] bridge_slave_1: entered allmulticast mode [ 104.742209][ T5842] bridge_slave_1: entered promiscuous mode [ 104.762809][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.769970][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.777866][ T5840] bridge_slave_1: entered allmulticast mode [ 104.785840][ T5840] bridge_slave_1: entered promiscuous mode [ 104.795747][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.850442][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.875461][ T5841] team0: Port device team_slave_0 added [ 104.911925][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.923876][ T5841] team0: Port device team_slave_1 added [ 104.932729][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.945317][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.001666][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.013582][ T5843] team0: Port device team_slave_0 added [ 105.061201][ T5843] team0: Port device team_slave_1 added [ 105.069182][ T5842] team0: Port device team_slave_0 added [ 105.076598][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.083908][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.110038][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.150592][ T5842] team0: Port device team_slave_1 added [ 105.157437][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.164516][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.190874][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.204161][ T5840] team0: Port device team_slave_0 added [ 105.263504][ T5840] team0: Port device team_slave_1 added [ 105.270091][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.277214][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.303822][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.316647][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.323782][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.350878][ T51] Bluetooth: hci2: command tx timeout [ 105.356507][ T5848] Bluetooth: hci1: command tx timeout [ 105.356670][ T51] Bluetooth: hci0: command tx timeout [ 105.367870][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.386972][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.394072][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.420419][ T51] Bluetooth: hci3: command tx timeout [ 105.420961][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.470055][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.477358][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.503493][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.516706][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.523809][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.549903][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.590151][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.597325][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.623622][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.673810][ T5841] hsr_slave_0: entered promiscuous mode [ 105.680412][ T5841] hsr_slave_1: entered promiscuous mode [ 105.702928][ T5843] hsr_slave_0: entered promiscuous mode [ 105.709499][ T5843] hsr_slave_1: entered promiscuous mode [ 105.716424][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 105.722257][ T5843] Cannot create hsr debugfs directory [ 105.811089][ T5840] hsr_slave_0: entered promiscuous mode [ 105.817760][ T5840] hsr_slave_1: entered promiscuous mode [ 105.824153][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 105.829906][ T5840] Cannot create hsr debugfs directory [ 105.874769][ T5842] hsr_slave_0: entered promiscuous mode [ 105.881480][ T5842] hsr_slave_1: entered promiscuous mode [ 105.887995][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 105.894324][ T5842] Cannot create hsr debugfs directory [ 106.357704][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.371097][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.393954][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.413668][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.471788][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.500557][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.511810][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.536987][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.592483][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.605348][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.635535][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.649293][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.728618][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.741117][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.753566][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.766952][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.903174][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.938362][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.991691][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.005315][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.030147][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.037450][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.048563][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.055715][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.084887][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.092072][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.108016][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.115240][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.143489][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.191666][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.242607][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.249908][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.272880][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.280105][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.300250][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.380019][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.414281][ T51] Bluetooth: hci0: command tx timeout [ 107.414448][ T5852] Bluetooth: hci1: command tx timeout [ 107.419737][ T51] Bluetooth: hci2: command tx timeout [ 107.497439][ T51] Bluetooth: hci3: command tx timeout [ 107.497820][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.510110][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.550273][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.568147][ T3598] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.575376][ T3598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.811015][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.955432][ T5841] veth0_vlan: entered promiscuous mode [ 107.967427][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.996154][ T5841] veth1_vlan: entered promiscuous mode [ 108.102172][ T5841] veth0_macvtap: entered promiscuous mode [ 108.145947][ T5841] veth1_macvtap: entered promiscuous mode [ 108.161964][ T5843] veth0_vlan: entered promiscuous mode [ 108.205078][ T5843] veth1_vlan: entered promiscuous mode [ 108.216674][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.227799][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.239907][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.255134][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.292167][ T3507] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.302220][ T3507] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.335656][ T3507] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.359596][ T3507] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.397177][ T5843] veth0_macvtap: entered promiscuous mode [ 108.428962][ T5843] veth1_macvtap: entered promiscuous mode [ 108.452041][ T5840] veth0_vlan: entered promiscuous mode [ 108.525329][ T5842] veth0_vlan: entered promiscuous mode [ 108.537400][ T5840] veth1_vlan: entered promiscuous mode [ 108.549611][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.562080][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.578377][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.590406][ T5842] veth1_vlan: entered promiscuous mode [ 108.624206][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.653972][ T3598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.662429][ T3598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.674640][ T1087] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.685229][ T1087] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.710634][ T1087] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.720600][ T1087] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.778526][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.788279][ T5840] veth0_macvtap: entered promiscuous mode [ 108.835589][ T5840] veth1_macvtap: entered promiscuous mode [ 108.891832][ T5842] veth0_macvtap: entered promiscuous mode [ 108.905619][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.926588][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.951762][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.964994][ T5842] veth1_macvtap: entered promiscuous mode [ 108.997407][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.026183][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.042741][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.044345][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.060700][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.067550][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.076362][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.086334][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.109118][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.140410][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.164907][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.204010][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.220855][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.428624][ T3507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.440902][ T3507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.499825][ T5848] Bluetooth: hci1: command tx timeout [ 109.499932][ T5852] Bluetooth: hci0: command tx timeout [ 109.505420][ T51] Bluetooth: hci2: command tx timeout [ 109.520261][ T5939] ------------[ cut here ]------------ [ 109.526079][ T5939] WARNING: CPU: 1 PID: 5939 at kernel/trace/trace.c:8604 tracing_buffers_mmap_close+0xdd/0x130 [ 109.536632][ T5939] Modules linked in: [ 109.540688][ T5939] CPU: 1 UID: 0 PID: 5939 Comm: syz.2.5 Not tainted syzkaller #0 PREEMPT(full) [ 109.549865][ T5939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 109.560205][ T5939] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 109.560876][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.566858][ T5939] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 27 4c fb ff 85 db 75 0a 48 83 c4 08 5b e9 d9 50 fb ff e8 d4 50 fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 c6 50 fb ff e8 31 cf 62 00 eb 87 e8 5a [ 109.595678][ T5939] RSP: 0018:ffffc900045cf990 EFLAGS: 00010293 [ 109.602239][ T5939] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bf5479 [ 109.610760][ T5939] RDX: ffff888031359e40 RSI: ffffffff81bf548c RDI: 0000000000000005 [ 109.618825][ T5939] RBP: ffffffff81bf53b0 R08: 0000000000000005 R09: 0000000000000000 [ 109.626871][ T5939] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff8880764ab688 [ 109.634974][ T5939] R13: dffffc0000000000 R14: ffffc900045cfa18 R15: 0000000000000000 [ 109.643031][ T5939] FS: 0000000000000000(0000) GS:ffff888124f8c000(0000) knlGS:0000000000000000 [ 109.646195][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.651991][ T5939] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.652017][ T5939] CR2: 0000001b31efaff8 CR3: 000000007d6f6000 CR4: 00000000003526f0 [ 109.674178][ T5939] Call Trace: [ 109.674350][ T51] Bluetooth: hci3: command tx timeout [ 109.677484][ T5939] [ 109.677500][ T5939] remove_vma+0x85/0x160 [ 109.690163][ T5939] exit_mmap+0x50a/0xb90 [ 109.695182][ T5939] ? __pfx_exit_mmap+0x10/0x10 [ 109.700022][ T5939] ? __lock_acquire+0xb97/0x1ce0 [ 109.705510][ T5939] ? arch_uprobe_clear_state+0x16/0x150 [ 109.711124][ T5939] __mmput+0x12a/0x410 [ 109.715386][ T5939] mmput+0x62/0x70 [ 109.719167][ T5939] do_exit+0x7c7/0x2bf0 [ 109.723526][ T5939] ? __pfx_do_exit+0x10/0x10 [ 109.728157][ T5939] ? do_raw_spin_lock+0x12c/0x2b0 [ 109.733425][ T5939] ? find_held_lock+0x2b/0x80 [ 109.738179][ T5939] do_group_exit+0xd3/0x2a0 [ 109.742787][ T5939] get_signal+0x2671/0x26d0 [ 109.747364][ T5939] ? __pfx_get_signal+0x10/0x10 [ 109.752270][ T5939] ? do_futex+0x122/0x350 [ 109.756722][ T5939] ? __pfx_do_futex+0x10/0x10 [ 109.761465][ T5939] arch_do_signal_or_restart+0x8f/0x790 [ 109.767174][ T5939] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 109.773493][ T5939] ? ksys_mmap_pgoff+0x85/0x5c0 [ 109.778413][ T5939] exit_to_user_mode_loop+0x85/0x130 [ 109.783883][ T5939] do_syscall_64+0x419/0x4b0 [ 109.788525][ T5939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.794595][ T5939] RIP: 0033:0x7f074f18eec9 [ 109.800115][ T5939] Code: Unable to access opcode bytes at 0x7f074f18ee9f. [ 109.807580][ T5939] RSP: 002b:00007f07500ca0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 109.816360][ T5939] RAX: fffffffffffffe00 RBX: 00007f074f3e5fa8 RCX: 00007f074f18eec9 [ 109.824419][ T5939] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f074f3e5fa8 [ 109.832470][ T5939] RBP: 00007f074f3e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 109.840476][ T5939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.848591][ T5939] R13: 00007f074f3e6038 R14: 00007ffc640309e0 R15: 00007ffc64030ac8 [ 109.856761][ T5939] [ 109.859831][ T5939] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 109.867267][ T5939] CPU: 1 UID: 0 PID: 5939 Comm: syz.2.5 Not tainted syzkaller #0 PREEMPT(full) [ 109.876333][ T5939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 109.886429][ T5939] Call Trace: [ 109.889737][ T5939] [ 109.892699][ T5939] dump_stack_lvl+0x3d/0x1f0 [ 109.897333][ T5939] vpanic+0x640/0x6f0 [ 109.901364][ T5939] ? tracing_buffers_mmap_close+0xdd/0x130 [ 109.907230][ T5939] panic+0xca/0xd0 [ 109.910993][ T5939] ? __pfx_panic+0x10/0x10 [ 109.915458][ T5939] ? check_panic_on_warn+0x1f/0xb0 [ 109.920605][ T5939] check_panic_on_warn+0xab/0xb0 [ 109.925594][ T5939] __warn+0xf6/0x3c0 [ 109.929515][ T5939] ? tracing_buffers_mmap_close+0xdd/0x130 [ 109.935356][ T5939] report_bug+0x3c3/0x580 [ 109.939724][ T5939] ? tracing_buffers_mmap_close+0xdd/0x130 [ 109.945563][ T5939] handle_bug+0x184/0x210 [ 109.949917][ T5939] exc_invalid_op+0x17/0x50 [ 109.954449][ T5939] asm_exc_invalid_op+0x1a/0x20 [ 109.959322][ T5939] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 109.965771][ T5939] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 27 4c fb ff 85 db 75 0a 48 83 c4 08 5b e9 d9 50 fb ff e8 d4 50 fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 c6 50 fb ff e8 31 cf 62 00 eb 87 e8 5a [ 109.985395][ T5939] RSP: 0018:ffffc900045cf990 EFLAGS: 00010293 [ 109.991481][ T5939] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bf5479 [ 109.999462][ T5939] RDX: ffff888031359e40 RSI: ffffffff81bf548c RDI: 0000000000000005 [ 110.007444][ T5939] RBP: ffffffff81bf53b0 R08: 0000000000000005 R09: 0000000000000000 [ 110.015427][ T5939] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff8880764ab688 [ 110.023420][ T5939] R13: dffffc0000000000 R14: ffffc900045cfa18 R15: 0000000000000000 [ 110.031415][ T5939] ? __pfx_tracing_buffers_mmap_close+0x10/0x10 [ 110.037698][ T5939] ? tracing_buffers_mmap_close+0xc9/0x130 [ 110.043547][ T5939] ? tracing_buffers_mmap_close+0xdc/0x130 [ 110.049478][ T5939] remove_vma+0x85/0x160 [ 110.053745][ T5939] exit_mmap+0x50a/0xb90 [ 110.058026][ T5939] ? __pfx_exit_mmap+0x10/0x10 [ 110.062926][ T5939] ? __lock_acquire+0xb97/0x1ce0 [ 110.067928][ T5939] ? arch_uprobe_clear_state+0x16/0x150 [ 110.073506][ T5939] __mmput+0x12a/0x410 [ 110.077605][ T5939] mmput+0x62/0x70 [ 110.081352][ T5939] do_exit+0x7c7/0x2bf0 [ 110.085532][ T5939] ? __pfx_do_exit+0x10/0x10 [ 110.090138][ T5939] ? do_raw_spin_lock+0x12c/0x2b0 [ 110.095181][ T5939] ? find_held_lock+0x2b/0x80 [ 110.099891][ T5939] do_group_exit+0xd3/0x2a0 [ 110.104415][ T5939] get_signal+0x2671/0x26d0 [ 110.108962][ T5939] ? __pfx_get_signal+0x10/0x10 [ 110.113847][ T5939] ? do_futex+0x122/0x350 [ 110.118213][ T5939] ? __pfx_do_futex+0x10/0x10 [ 110.122931][ T5939] arch_do_signal_or_restart+0x8f/0x790 [ 110.128519][ T5939] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 110.134717][ T5939] ? ksys_mmap_pgoff+0x85/0x5c0 [ 110.139629][ T5939] exit_to_user_mode_loop+0x85/0x130 [ 110.144943][ T5939] do_syscall_64+0x419/0x4b0 [ 110.149562][ T5939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.155498][ T5939] RIP: 0033:0x7f074f18eec9 [ 110.159929][ T5939] Code: Unable to access opcode bytes at 0x7f074f18ee9f. [ 110.166957][ T5939] RSP: 002b:00007f07500ca0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 110.175405][ T5939] RAX: fffffffffffffe00 RBX: 00007f074f3e5fa8 RCX: 00007f074f18eec9 [ 110.183394][ T5939] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f074f3e5fa8 [ 110.191401][ T5939] RBP: 00007f074f3e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 110.199414][ T5939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.207436][ T5939] R13: 00007f074f3e6038 R14: 00007ffc640309e0 R15: 00007ffc64030ac8 [ 110.215454][ T5939] [ 110.218750][ T5939] Kernel Offset: disabled [ 110.223085][ T5939] Rebooting in 86400 seconds..