last executing test programs: 1.268709825s ago: executing program 2 (id=3): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) sendmsg(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socket$inet(0x10, 0x3, 0x0) select(0x40, &(0x7f0000000240)={0x3, 0x5, 0xb96, 0x1, 0x1, 0x9, 0x6, 0x400}, 0x0, &(0x7f0000000340)={0xa, 0x2536, 0xffffffffffff0001, 0x9, 0x1, 0x29e, 0x10000, 0x8}, &(0x7f0000000380)={0x0, 0x2710}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x26, 0x101020) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000280)={0x0, 0x0, r4}) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20008040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x2, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r6, 0x47fa, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) 1.145777135s ago: executing program 1 (id=2): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f0000000080)=0xfffffff8, 0x4) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) close(r2) chdir(0x0) socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000000e00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5}, 0x4) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x2, 0x2, 0x1) bind$unix(r6, &(0x7f0000000000)=@abs, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) 0s ago: executing program 1 (id=6): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r1 = dup(r0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x100f2cf, 0x10100, 0x0, 0x163}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.64' (ED25519) to the list of known hosts. [ 79.630707][ T5798] cgroup: Unknown subsys name 'net' [ 79.892068][ T5798] cgroup: Unknown subsys name 'cpuset' [ 79.947909][ T5798] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.528725][ T5798] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.739496][ T9] cfg80211: failed to load regulatory.db [ 84.313355][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.317257][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.331892][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.336177][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.337959][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.368050][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.379581][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.428143][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.429238][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.429922][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.484713][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.486305][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.487003][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.518980][ T5130] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.523090][ T5130] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.541818][ T5130] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.555817][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.567698][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.577621][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.578407][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.650288][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.653275][ T5817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.655409][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.671368][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.672853][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.314223][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 85.358805][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 85.734183][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 85.744065][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 85.750261][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 86.329331][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.330633][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.331233][ T5814] bridge_slave_0: entered allmulticast mode [ 86.334105][ T5814] bridge_slave_0: entered promiscuous mode [ 86.339802][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.339924][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.340092][ T5811] bridge_slave_0: entered allmulticast mode [ 86.342542][ T5811] bridge_slave_0: entered promiscuous mode [ 86.407270][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.407377][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.407849][ T5814] bridge_slave_1: entered allmulticast mode [ 86.409322][ T5814] bridge_slave_1: entered promiscuous mode [ 86.411592][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.411700][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.411810][ T5811] bridge_slave_1: entered allmulticast mode [ 86.413281][ T5811] bridge_slave_1: entered promiscuous mode [ 86.448477][ T5817] Bluetooth: hci1: command tx timeout [ 86.448665][ T5813] Bluetooth: hci0: command tx timeout [ 86.607303][ T5813] Bluetooth: hci2: command tx timeout [ 86.687331][ T5817] Bluetooth: hci3: command tx timeout [ 86.687484][ T5813] Bluetooth: hci4: command tx timeout [ 87.002002][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.004975][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.240229][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.242204][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.242423][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.242551][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.242663][ T5819] bridge_slave_0: entered allmulticast mode [ 87.244091][ T5819] bridge_slave_0: entered promiscuous mode [ 87.246227][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.246353][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.246509][ T5818] bridge_slave_0: entered allmulticast mode [ 87.258929][ T5818] bridge_slave_0: entered promiscuous mode [ 87.263795][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.263921][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.264380][ T5823] bridge_slave_0: entered allmulticast mode [ 87.266867][ T5823] bridge_slave_0: entered promiscuous mode [ 87.418281][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.418374][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.418486][ T5818] bridge_slave_1: entered allmulticast mode [ 87.419940][ T5818] bridge_slave_1: entered promiscuous mode [ 87.422587][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.422733][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.422842][ T5819] bridge_slave_1: entered allmulticast mode [ 87.424300][ T5819] bridge_slave_1: entered promiscuous mode [ 87.425293][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.425404][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.425678][ T5823] bridge_slave_1: entered allmulticast mode [ 87.436326][ T5823] bridge_slave_1: entered promiscuous mode [ 87.889489][ T5814] team0: Port device team_slave_0 added [ 87.892053][ T5811] team0: Port device team_slave_0 added [ 88.101805][ T5814] team0: Port device team_slave_1 added [ 88.104476][ T5811] team0: Port device team_slave_1 added [ 88.109292][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.115649][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.121952][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.241680][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.243755][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.246988][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.527314][ T5813] Bluetooth: hci0: command tx timeout [ 88.527346][ T5813] Bluetooth: hci1: command tx timeout [ 88.609869][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.609882][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.609895][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.611862][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.611876][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.611898][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.687347][ T5817] Bluetooth: hci2: command tx timeout [ 88.767417][ T5817] Bluetooth: hci3: command tx timeout [ 88.767449][ T5817] Bluetooth: hci4: command tx timeout [ 89.043630][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.043645][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.043667][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.044770][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.044778][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.044791][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.046571][ T5818] team0: Port device team_slave_0 added [ 89.051341][ T5819] team0: Port device team_slave_0 added [ 89.055812][ T5823] team0: Port device team_slave_0 added [ 89.110267][ T5818] team0: Port device team_slave_1 added [ 89.112742][ T5819] team0: Port device team_slave_1 added [ 89.115119][ T5823] team0: Port device team_slave_1 added [ 89.660118][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.660134][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.660156][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.742419][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.742434][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.742455][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.842195][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.842211][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.842234][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.843527][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.843539][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.843560][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.852824][ T5814] hsr_slave_0: entered promiscuous mode [ 89.854412][ T5814] hsr_slave_1: entered promiscuous mode [ 89.856741][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.856754][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.856777][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.928998][ T5811] hsr_slave_0: entered promiscuous mode [ 89.945324][ T5811] hsr_slave_1: entered promiscuous mode [ 89.946268][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 89.946388][ T5811] Cannot create hsr debugfs directory [ 89.968576][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.968592][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.968620][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.607318][ T5813] Bluetooth: hci1: command tx timeout [ 90.607348][ T5813] Bluetooth: hci0: command tx timeout [ 90.674946][ T5818] hsr_slave_0: entered promiscuous mode [ 90.675835][ T5818] hsr_slave_1: entered promiscuous mode [ 90.676321][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 90.676340][ T5818] Cannot create hsr debugfs directory [ 90.767205][ T5817] Bluetooth: hci2: command tx timeout [ 90.847830][ T5817] Bluetooth: hci4: command tx timeout [ 90.847861][ T5817] Bluetooth: hci3: command tx timeout [ 90.868968][ T5823] hsr_slave_0: entered promiscuous mode [ 90.870144][ T5823] hsr_slave_1: entered promiscuous mode [ 90.871057][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 90.871078][ T5823] Cannot create hsr debugfs directory [ 90.901808][ T5819] hsr_slave_0: entered promiscuous mode [ 90.902578][ T5819] hsr_slave_1: entered promiscuous mode [ 90.903086][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 90.903103][ T5819] Cannot create hsr debugfs directory [ 92.250030][ T5814] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.286003][ T5814] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.327594][ T5814] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.379268][ T5814] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.482684][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.504366][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.542391][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.601491][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.698119][ T5813] Bluetooth: hci0: command tx timeout [ 92.698149][ T5813] Bluetooth: hci1: command tx timeout [ 92.740631][ T5811] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.783740][ T5811] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.820004][ T5811] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.847472][ T5817] Bluetooth: hci2: command tx timeout [ 92.882384][ T5811] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.929130][ T5813] Bluetooth: hci4: command tx timeout [ 92.929173][ T5817] Bluetooth: hci3: command tx timeout [ 93.044976][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.081781][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.125504][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.185079][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.264925][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.335825][ T5819] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.392592][ T5819] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.440412][ T5819] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.483902][ T5819] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.529352][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.572611][ T3740] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.573229][ T3740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.611954][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.634836][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.634936][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.717509][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.754825][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.754962][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.810784][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.816153][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.831137][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.925053][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.961787][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.983770][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.985071][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.051491][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.051622][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.114657][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.171578][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.211818][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.211959][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.315325][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.316216][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.409019][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.461941][ T4489] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.464593][ T4489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.513705][ T4489] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.513942][ T4489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.554087][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.656368][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.976007][ T5814] veth0_vlan: entered promiscuous mode [ 95.003952][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.065234][ T5814] veth1_vlan: entered promiscuous mode [ 95.081010][ T5818] veth0_vlan: entered promiscuous mode [ 95.154282][ T5818] veth1_vlan: entered promiscuous mode [ 95.184795][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.246155][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.315273][ T5814] veth0_macvtap: entered promiscuous mode [ 95.364656][ T5811] veth0_vlan: entered promiscuous mode [ 95.392158][ T5814] veth1_macvtap: entered promiscuous mode [ 95.422493][ T5818] veth0_macvtap: entered promiscuous mode [ 95.455112][ T5818] veth1_macvtap: entered promiscuous mode [ 95.461499][ T5811] veth1_vlan: entered promiscuous mode [ 95.515859][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.571861][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.594034][ T5823] veth0_vlan: entered promiscuous mode [ 95.615704][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.646181][ T4489] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.656691][ T4489] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.669516][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.675938][ T4489] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.683523][ T5823] veth1_vlan: entered promiscuous mode [ 95.693462][ T4489] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.759065][ T4521] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.765445][ T4521] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.783230][ T4521] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.798095][ T4521] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.798733][ T5811] veth0_macvtap: entered promiscuous mode [ 95.866566][ T5811] veth1_macvtap: entered promiscuous mode [ 96.146928][ T5823] veth0_macvtap: entered promiscuous mode [ 96.168440][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.196336][ T5819] veth0_vlan: entered promiscuous mode [ 96.212137][ T5823] veth1_macvtap: entered promiscuous mode [ 96.218807][ T4489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.218829][ T4489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.235544][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.302645][ T4489] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.303151][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.303165][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.324582][ T5819] veth1_vlan: entered promiscuous mode [ 96.326820][ T4489] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.356151][ T4489] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.389574][ T4489] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.416526][ T4521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.416545][ T4521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.444082][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.515555][ T4521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.515574][ T4521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.526430][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.668213][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.696128][ T1167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.725242][ T1167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.802538][ T1167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.929645][ T5819] veth0_macvtap: entered promiscuous mode [ 97.031824][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.031845][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.991311][ T5819] veth1_macvtap: entered promiscuous mode [ 98.255987][ T4489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.256006][ T4489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.369451][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.473266][ T4521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.473286][ T4521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.508177][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.596476][ T5931] ------------[ cut here ]------------ [ 98.596499][ T5931] WARNING: CPU: 1 PID: 5931 at ./include/linux/seqlock.h:221 cgroup_freeze+0x80a/0xf90 [ 98.596542][ T5931] Modules linked in: [ 98.596583][ T5931] CPU: 1 UID: 0 PID: 5931 Comm: syz.1.6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 98.596605][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 98.596616][ T5931] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 98.596642][ T5931] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 e1 43 67 00 e9 da f9 ff ff e8 17 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 98.596659][ T5931] RSP: 0018:ffffc900054ef8e0 EFLAGS: 00010283 [ 98.596675][ T5931] RAX: ffffffff81b6c6a9 RBX: 0000000000000000 RCX: 0000000000080000 [ 98.596688][ T5931] RDX: ffffc9000e6ab000 RSI: 00000000000000fc RDI: 00000000000000fd [ 98.596700][ T5931] RBP: ffffc900054efa70 R08: 0000000000000000 R09: 0000000000000000 [ 98.596711][ T5931] R10: dffffc0000000000 R11: fffffbfff1d6d2a7 R12: dffffc0000000000 [ 98.596725][ T5931] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88805ea8a791 [ 98.596745][ T5931] FS: 00007f5f2b4856c0(0000) GS:ffff888127117000(0000) knlGS:0000000000000000 [ 98.596763][ T5931] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.596777][ T5931] CR2: 0000200000200000 CR3: 0000000031f18000 CR4: 00000000003526f0 [ 98.596794][ T5931] Call Trace: [ 98.596807][ T5931] [ 98.596828][ T5931] ? __pfx_cgroup_freeze+0x10/0x10 [ 98.596870][ T5931] ? cgroup_kn_lock_live+0x13c/0x230 [ 98.596897][ T5931] ? mutex_lock_nested+0x16a/0x1d0 [ 98.596935][ T5931] cgroup_freeze_write+0x156/0x1c0 [ 98.596958][ T5931] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 98.596976][ T5931] ? kernfs_root+0x1c/0x230 [ 98.596994][ T5931] ? kernfs_root+0x1c/0x230 [ 98.597014][ T5931] ? kernfs_root+0x1ea/0x230 [ 98.597032][ T5931] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 98.597104][ T5931] cgroup_file_write+0x39b/0x740 [ 98.597138][ T5931] ? __pfx_cgroup_file_write+0x10/0x10 [ 98.597163][ T5931] ? kernfs_get_active+0x14/0x170 [ 98.597194][ T5931] ? __pfx_cgroup_file_write+0x10/0x10 [ 98.597215][ T5931] kernfs_fop_write_iter+0x3b0/0x540 [ 98.597236][ T5931] vfs_write+0x5d5/0xb40 [ 98.597251][ T5931] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 98.597265][ T5931] ? __pfx_vfs_write+0x10/0x10 [ 98.597274][ T5931] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 98.597293][ T5931] ? mutex_lock_nested+0x154/0x1d0 [ 98.597304][ T5931] ? fdget_pos+0x253/0x320 [ 98.597323][ T5931] ksys_write+0x14b/0x260 [ 98.597336][ T5931] ? __pfx_ksys_write+0x10/0x10 [ 98.597351][ T5931] ? do_syscall_64+0xbe/0x3b0 [ 98.597363][ T5931] do_syscall_64+0xfa/0x3b0 [ 98.597374][ T5931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.597383][ T5931] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 98.597393][ T5931] ? clear_bhb_loop+0x60/0xb0 [ 98.597405][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.597415][ T5931] RIP: 0033:0x7f5f2d23eec9 [ 98.597432][ T5931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.597441][ T5931] RSP: 002b:00007f5f2b485038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 98.597452][ T5931] RAX: ffffffffffffffda RBX: 00007f5f2d496090 RCX: 00007f5f2d23eec9 [ 98.597460][ T5931] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000a [ 98.597467][ T5931] RBP: 00007f5f2d2c1f91 R08: 0000000000000000 R09: 0000000000000000 [ 98.597474][ T5931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.597480][ T5931] R13: 00007f5f2d496128 R14: 00007f5f2d496090 R15: 00007fff624e5ee8 [ 98.597497][ T5931] [ 98.597504][ T5931] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 98.597513][ T5931] CPU: 1 UID: 0 PID: 5931 Comm: syz.1.6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 98.597524][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 98.597530][ T5931] Call Trace: [ 98.597534][ T5931] [ 98.597539][ T5931] dump_stack_lvl+0x99/0x250 [ 98.597549][ T5931] ? __asan_memcpy+0x40/0x70 [ 98.597560][ T5931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.597569][ T5931] ? __pfx__printk+0x10/0x10 [ 98.597590][ T5931] vpanic+0x281/0x750 [ 98.597601][ T5931] ? __pfx__printk+0x10/0x10 [ 98.597613][ T5931] ? __pfx_vpanic+0x10/0x10 [ 98.597623][ T5931] ? is_bpf_text_address+0x26/0x2b0 [ 98.597641][ T5931] panic+0xb9/0xc0 [ 98.597651][ T5931] ? __pfx_panic+0x10/0x10 [ 98.597670][ T5931] __warn+0x31b/0x4b0 [ 98.597679][ T5931] ? cgroup_freeze+0x80a/0xf90 [ 98.597694][ T5931] ? cgroup_freeze+0x80a/0xf90 [ 98.597706][ T5931] report_bug+0x2be/0x4f0 [ 98.597721][ T5931] ? cgroup_freeze+0x80a/0xf90 [ 98.597741][ T5931] ? cgroup_freeze+0x80a/0xf90 [ 98.597754][ T5931] ? cgroup_freeze+0x80c/0xf90 [ 98.597766][ T5931] handle_bug+0x84/0x160 [ 98.597779][ T5931] exc_invalid_op+0x1a/0x50 [ 98.597790][ T5931] asm_exc_invalid_op+0x1a/0x20 [ 98.597799][ T5931] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 98.597813][ T5931] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 e1 43 67 00 e9 da f9 ff ff e8 17 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 98.597820][ T5931] RSP: 0018:ffffc900054ef8e0 EFLAGS: 00010283 [ 98.597829][ T5931] RAX: ffffffff81b6c6a9 RBX: 0000000000000000 RCX: 0000000000080000 [ 98.597837][ T5931] RDX: ffffc9000e6ab000 RSI: 00000000000000fc RDI: 00000000000000fd [ 98.597844][ T5931] RBP: ffffc900054efa70 R08: 0000000000000000 R09: 0000000000000000 [ 98.597850][ T5931] R10: dffffc0000000000 R11: fffffbfff1d6d2a7 R12: dffffc0000000000 [ 98.597858][ T5931] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88805ea8a791 [ 98.597869][ T5931] ? cgroup_freeze+0x809/0xf90 [ 98.597891][ T5931] ? __pfx_cgroup_freeze+0x10/0x10 [ 98.597912][ T5931] ? cgroup_kn_lock_live+0x13c/0x230 [ 98.597925][ T5931] ? mutex_lock_nested+0x16a/0x1d0 [ 98.597942][ T5931] cgroup_freeze_write+0x156/0x1c0 [ 98.597954][ T5931] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 98.597963][ T5931] ? kernfs_root+0x1c/0x230 [ 98.597972][ T5931] ? kernfs_root+0x1c/0x230 [ 98.597982][ T5931] ? kernfs_root+0x1ea/0x230 [ 98.597991][ T5931] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 98.598002][ T5931] cgroup_file_write+0x39b/0x740 [ 98.598019][ T5931] ? __pfx_cgroup_file_write+0x10/0x10 [ 98.598032][ T5931] ? kernfs_get_active+0x14/0x170 [ 98.598048][ T5931] ? __pfx_cgroup_file_write+0x10/0x10 [ 98.598060][ T5931] kernfs_fop_write_iter+0x3b0/0x540 [ 98.598077][ T5931] vfs_write+0x5d5/0xb40 [ 98.598091][ T5931] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 98.598104][ T5931] ? __pfx_vfs_write+0x10/0x10 [ 98.598114][ T5931] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 98.598131][ T5931] ? mutex_lock_nested+0x154/0x1d0 [ 98.598142][ T5931] ? fdget_pos+0x253/0x320 [ 98.598160][ T5931] ksys_write+0x14b/0x260 [ 98.598173][ T5931] ? __pfx_ksys_write+0x10/0x10 [ 98.598187][ T5931] ? do_syscall_64+0xbe/0x3b0 [ 98.598199][ T5931] do_syscall_64+0xfa/0x3b0 [ 98.598209][ T5931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.598222][ T5931] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 98.598232][ T5931] ? clear_bhb_loop+0x60/0xb0 [ 98.598244][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.598253][ T5931] RIP: 0033:0x7f5f2d23eec9 [ 98.598262][ T5931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.598269][ T5931] RSP: 002b:00007f5f2b485038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 98.598279][ T5931] RAX: ffffffffffffffda RBX: 00007f5f2d496090 RCX: 00007f5f2d23eec9 [ 98.598286][ T5931] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000a [ 98.598292][ T5931] RBP: 00007f5f2d2c1f91 R08: 0000000000000000 R09: 0000000000000000 [ 98.598298][ T5931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.598304][ T5931] R13: 00007f5f2d496128 R14: 00007f5f2d496090 R15: 00007fff624e5ee8 [ 98.598326][ T5931] [ 98.598611][ T5931] Kernel Offset: disabled