last executing test programs:
0s ago: executing program 0 (id=1):
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x18, &(0x7f0000000040), 0x4)
bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4)
r1 = socket$kcm(0x2a, 0x2, 0x0)
socket$kcm(0xa, 0x2, 0x0) (async, rerun: 64)
socket$kcm(0x2, 0x5, 0x0) (rerun: 64)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRESOCT=r1], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffe70, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x8, 0xfe, 0x0, 0x66, 0x0, 0x203, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xaffffbffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0500000006010000400000004000000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000002da93307ecb9ed80d783811573ae7ece764a52f3d59ecd915dfeeb17f8743053e34983400ddadeac76c62f99caf00baa4367f117138f50f9c43ca15f9b723d3314dbb5ff2d1b3c503f96cc66d7b8d31575dc58cabb69aed44014de5d3e21be996b7251cdd6b44e2d5503000000103cbffed31fd83f26df350f063bc8925f01dd87fb46ae667dc1f75f52ed54624934c87f850000e6ff90da78553b397aed2274f14eb7c2f74f8d18b7ce38e08ef8c58ffcb6a73604953a80a87a0dfa4d"], 0x50) (rerun: 64)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x2}, 0x104141, 0x400000000000, 0x0, 0x2, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8fb2b00018000000000000000c0000000c000000020000000000000000000004000000000000"], 0x0, 0x26, 0x0, 0x0, 0x7f}, 0x28) (async)
r4 = socket$kcm(0x10, 0x2, 0x10) (async)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe129, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r6 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) (async)
sendmsg(r6, &(0x7f0000003680)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async, rerun: 32)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x40010141)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYRES8=r5, @ANYRES32=r2, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x4, @perf_config_ext={0x1}, 0x10a0a0, 0x58, 0x3, 0x4, 0x2, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x6e8}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98, 0x0, 0x0, 0x0}, 0x94) (rerun: 64)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.1.210' (ED25519) to the list of known hosts.
[ 64.497397][ T5848] cgroup: Unknown subsys name 'net'
[ 64.626974][ T5848] cgroup: Unknown subsys name 'cpuset'
[ 64.635545][ T5848] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 65.988165][ T5848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 68.393630][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 68.401250][ T5876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 68.410035][ T5876] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 68.434520][ T5876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 68.443047][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 68.445503][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 68.459143][ T5869] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 68.463992][ T5876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 68.466931][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 68.474011][ T5876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 68.484616][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 68.488551][ T5876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 68.501815][ T5876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 68.502852][ T5877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 68.512073][ T5873] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 68.517726][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 68.523625][ T5873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 68.530831][ T5879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 68.555866][ T5879] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 68.577160][ T5879] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 68.585206][ T5877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 68.603762][ T5879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 68.610833][ T5879] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 68.618537][ T5873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 68.634509][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 69.161027][ T5867] chnl_net:caif_netlink_parms(): no params data found
[ 69.307278][ T5859] chnl_net:caif_netlink_parms(): no params data found
[ 69.365610][ T5868] chnl_net:caif_netlink_parms(): no params data found
[ 69.388894][ T5858] chnl_net:caif_netlink_parms(): no params data found
[ 69.478201][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[ 69.486073][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[ 69.493339][ T5867] bridge_slave_0: entered allmulticast mode
[ 69.500615][ T5867] bridge_slave_0: entered promiscuous mode
[ 69.528096][ T5860] chnl_net:caif_netlink_parms(): no params data found
[ 69.551016][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state
[ 69.558435][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[ 69.565718][ T5867] bridge_slave_1: entered allmulticast mode
[ 69.572580][ T5867] bridge_slave_1: entered promiscuous mode
[ 69.700763][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 69.727863][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state
[ 69.735503][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[ 69.742724][ T5859] bridge_slave_0: entered allmulticast mode
[ 69.750870][ T5859] bridge_slave_0: entered promiscuous mode
[ 69.773992][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 69.794541][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state
[ 69.801662][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[ 69.809871][ T5859] bridge_slave_1: entered allmulticast mode
[ 69.817401][ T5859] bridge_slave_1: entered promiscuous mode
[ 69.824389][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state
[ 69.831511][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state
[ 69.839060][ T5868] bridge_slave_0: entered allmulticast mode
[ 69.846047][ T5868] bridge_slave_0: entered promiscuous mode
[ 69.892545][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state
[ 69.899942][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state
[ 69.907917][ T5868] bridge_slave_1: entered allmulticast mode
[ 69.916737][ T5868] bridge_slave_1: entered promiscuous mode
[ 69.988133][ T5867] team0: Port device team_slave_0 added
[ 69.997377][ T5867] team0: Port device team_slave_1 added
[ 70.003306][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[ 70.010848][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[ 70.018144][ T5858] bridge_slave_0: entered allmulticast mode
[ 70.025828][ T5858] bridge_slave_0: entered promiscuous mode
[ 70.049015][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 70.060861][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 70.073363][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 70.098158][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[ 70.105842][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[ 70.113100][ T5858] bridge_slave_1: entered allmulticast mode
[ 70.120305][ T5858] bridge_slave_1: entered promiscuous mode
[ 70.141798][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 70.188657][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[ 70.197892][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[ 70.205426][ T5860] bridge_slave_0: entered allmulticast mode
[ 70.212285][ T5860] bridge_slave_0: entered promiscuous mode
[ 70.242898][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 70.250061][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 70.276032][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 70.289885][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 70.296882][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 70.323446][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 70.350773][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[ 70.358028][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[ 70.365342][ T5860] bridge_slave_1: entered allmulticast mode
[ 70.372214][ T5860] bridge_slave_1: entered promiscuous mode
[ 70.394085][ T5868] team0: Port device team_slave_0 added
[ 70.412308][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 70.435487][ T5859] team0: Port device team_slave_0 added
[ 70.457503][ T5868] team0: Port device team_slave_1 added
[ 70.468365][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 70.479248][ T5859] team0: Port device team_slave_1 added
[ 70.502088][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 70.560790][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 70.584639][ T51] Bluetooth: hci1: command tx timeout
[ 70.590323][ T51] Bluetooth: hci3: command tx timeout
[ 70.599429][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 70.606433][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 70.632402][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 70.659113][ T5867] hsr_slave_0: entered promiscuous mode
[ 70.664922][ T51] Bluetooth: hci0: command tx timeout
[ 70.664938][ T5865] Bluetooth: hci2: command tx timeout
[ 70.665234][ T5869] Bluetooth: hci4: command tx timeout
[ 70.672011][ T5867] hsr_slave_1: entered promiscuous mode
[ 70.700036][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 70.707274][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 70.733216][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 70.745863][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 70.752805][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 70.778710][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 70.800933][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 70.808327][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 70.834500][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 70.856330][ T5858] team0: Port device team_slave_0 added
[ 70.871435][ T5858] team0: Port device team_slave_1 added
[ 70.879170][ T5860] team0: Port device team_slave_0 added
[ 70.888862][ T5860] team0: Port device team_slave_1 added
[ 70.936676][ T5868] hsr_slave_0: entered promiscuous mode
[ 70.942869][ T5868] hsr_slave_1: entered promiscuous mode
[ 70.949561][ T5868] debugfs: 'hsr0' already exists in 'hsr'
[ 70.955426][ T5868] Cannot create hsr debugfs directory
[ 71.030879][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 71.039058][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 71.065346][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 71.077948][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 71.084990][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 71.111230][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 71.155881][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 71.162835][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 71.189123][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 71.200650][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 71.208211][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 71.234200][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 71.275121][ T5859] hsr_slave_0: entered promiscuous mode
[ 71.281303][ T5859] hsr_slave_1: entered promiscuous mode
[ 71.288052][ T5859] debugfs: 'hsr0' already exists in 'hsr'
[ 71.293971][ T5859] Cannot create hsr debugfs directory
[ 71.309304][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.316754][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 71.450057][ T5860] hsr_slave_0: entered promiscuous mode
[ 71.457213][ T5860] hsr_slave_1: entered promiscuous mode
[ 71.463190][ T5860] debugfs: 'hsr0' already exists in 'hsr'
[ 71.469852][ T5860] Cannot create hsr debugfs directory
[ 71.567792][ T5858] hsr_slave_0: entered promiscuous mode
[ 71.574245][ T5858] hsr_slave_1: entered promiscuous mode
[ 71.580249][ T5858] debugfs: 'hsr0' already exists in 'hsr'
[ 71.586247][ T5858] Cannot create hsr debugfs directory
[ 71.907240][ T5867] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 71.948817][ T5867] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 71.980196][ T5867] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 72.011885][ T5867] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 72.056274][ T5868] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 72.085692][ T5868] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 72.096333][ T5868] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 72.119780][ T5868] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 72.180671][ T5859] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 72.191918][ T5859] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 72.204029][ T5859] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 72.224789][ T5859] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 72.326545][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 72.340634][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 72.351461][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 72.363091][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 72.511493][ T5858] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 72.523136][ T5858] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 72.556302][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0
[ 72.563154][ T5858] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 72.577017][ T5858] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 72.605267][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0
[ 72.631948][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0
[ 72.662172][ T5859] 8021q: adding VLAN 0 to HW filter on device team0
[ 72.666937][ T5869] Bluetooth: hci1: command tx timeout
[ 72.669863][ T51] Bluetooth: hci3: command tx timeout
[ 72.687315][ T5867] 8021q: adding VLAN 0 to HW filter on device team0
[ 72.719303][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 72.726663][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 72.737821][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 72.744978][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 72.752436][ T51] Bluetooth: hci4: command tx timeout
[ 72.753505][ T5869] Bluetooth: hci2: command tx timeout
[ 72.762007][ T51] Bluetooth: hci0: command tx timeout
[ 72.766338][ T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 72.776117][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 72.808941][ T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 72.816053][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 72.835929][ T5868] 8021q: adding VLAN 0 to HW filter on device team0
[ 72.902763][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 72.909967][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 72.925602][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0
[ 72.939586][ T68] bridge0: port 2(bridge_slave_1) entered blocking state
[ 72.946740][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 73.079560][ T5860] 8021q: adding VLAN 0 to HW filter on device team0
[ 73.121216][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 73.128428][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 73.167373][ T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 73.174545][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 73.237268][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[ 73.296887][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[ 73.324969][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state
[ 73.332106][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 73.376076][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state
[ 73.383211][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 73.481142][ T5860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 73.577370][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 73.611650][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 73.677635][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 73.788449][ T5859] veth0_vlan: entered promiscuous mode
[ 73.831127][ T5859] veth1_vlan: entered promiscuous mode
[ 73.942747][ T5867] veth0_vlan: entered promiscuous mode
[ 73.962447][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 74.023086][ T5867] veth1_vlan: entered promiscuous mode
[ 74.052820][ T5859] veth0_macvtap: entered promiscuous mode
[ 74.082346][ T5859] veth1_macvtap: entered promiscuous mode
[ 74.167937][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 74.180170][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 74.219669][ T5867] veth0_macvtap: entered promiscuous mode
[ 74.227215][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.237302][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.253244][ T5860] veth0_vlan: entered promiscuous mode
[ 74.270163][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.279514][ T1163] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.299279][ T5860] veth1_vlan: entered promiscuous mode
[ 74.326841][ T5867] veth1_macvtap: entered promiscuous mode
[ 74.348301][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 74.392714][ T5868] veth0_vlan: entered promiscuous mode
[ 74.412873][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 74.425693][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 74.470616][ T5868] veth1_vlan: entered promiscuous mode
[ 74.483433][ T1163] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.522741][ T1163] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.532356][ T1163] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.566228][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 74.568625][ T1163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.588673][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 74.607836][ T5860] veth0_macvtap: entered promiscuous mode
[ 74.621927][ T5860] veth1_macvtap: entered promiscuous mode
[ 74.663848][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 74.672843][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 74.692432][ T5858] veth0_vlan: entered promiscuous mode
[ 74.718801][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 74.746572][ T51] Bluetooth: hci1: command tx timeout
[ 74.746581][ T5865] Bluetooth: hci3: command tx timeout
[ 74.750826][ T5868] veth0_macvtap: entered promiscuous mode
[ 74.787196][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 74.795025][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 74.816737][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 74.826809][ T51] Bluetooth: hci2: command tx timeout
[ 74.826829][ T5865] Bluetooth: hci4: command tx timeout
[ 74.832206][ T51] Bluetooth: hci0: command tx timeout
[ 74.868405][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 74.895385][ T5858] veth1_vlan: entered promiscuous mode
[ 74.902357][ T5868] veth1_macvtap: entered promiscuous mode
[ 74.934861][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 74.936851][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.942682][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 74.969981][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.994359][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.028248][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.099985][ T5858] veth0_macvtap: entered promiscuous mode
[ 75.107148][ T5965] ------------[ cut here ]------------
[ 75.112723][ T5965] WARNING: CPU: 0 PID: 5965 at kernel/cgroup/rstat.c:305 css_rstat_flush+0x6d0/0x1890
[ 75.122287][ T5965] Modules linked in:
[ 75.126265][ T5965] CPU: 0 UID: 0 PID: 5965 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full)
[ 75.135635][ T5965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 75.145690][ T5965] Workqueue: cgroup_destroy css_free_rwork_fn
[ 75.151783][ T5965] RIP: 0010:css_rstat_flush+0x6d0/0x1890
[ 75.157419][ T5965] Code: ff df 80 3c 08 00 74 08 4c 89 ff e8 ca 8a 6a 00 4d 8b 27 4c 3b 64 24 20 74 24 e8 7b 15 07 00 e9 77 ff ff ff e8 71 15 07 00 90 <0f> 0b 90 eb be e8 66 15 07 00 4c 8b 74 24 20 e9 c5 10 00 00 e8 57
[ 75.177023][ T5965] RSP: 0018:ffffc9000515f848 EFLAGS: 00010093
[ 75.183080][ T5965] RAX: ffffffff81b896df RBX: ffff88814d37a000 RCX: ffff88807e6cda00
[ 75.191037][ T5965] RDX: 0000000000000000 RSI: ffffffff8be332e0 RDI: ffff8880b8640f88
[ 75.198992][ T5965] RBP: ffffffff8dbded10 R08: ffffffff8fa38037 R09: 1ffffffff1f47006
[ 75.206955][ T5965] R10: dffffc0000000000 R11: fffffbfff1f47007 R12: ffff88814d37a000
[ 75.214911][ T5965] R13: 1ffff11024b83801 R14: ffff888125c1c008 R15: ffffe8ffffc67900
[ 75.222880][ T5965] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000
[ 75.231793][ T5965] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 75.238358][ T5965] CR2: 0000000000000000 CR3: 0000000075d9a000 CR4: 00000000003526f0
[ 75.246315][ T5965] Call Trace:
[ 75.249581][ T5965]
[ 75.252515][ T5965] ? __lock_acquire+0xab9/0xd20
[ 75.257364][ T5965] css_rstat_exit+0xa9/0x320
[ 75.261946][ T5965] ? process_scheduled_works+0x9ef/0x17b0
[ 75.267650][ T5965] ? percpu_ref_exit+0xc5/0x1c0
[ 75.272499][ T5965] css_free_rwork_fn+0x90/0xb80
[ 75.277337][ T5965] ? process_scheduled_works+0x9ef/0x17b0
[ 75.283043][ T5965] ? process_scheduled_works+0x9ef/0x17b0
[ 75.288745][ T5965] process_scheduled_works+0xae1/0x17b0
[ 75.294296][ T5965] ? __pfx_process_scheduled_works+0x10/0x10
[ 75.300273][ T5965] worker_thread+0x8a0/0xda0
[ 75.304853][ T5965] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 75.311175][ T5965] ? __kthread_parkme+0x7b/0x200
[ 75.316101][ T5965] kthread+0x711/0x8a0
[ 75.320159][ T5965] ? __pfx_worker_thread+0x10/0x10
[ 75.325252][ T5965] ? __pfx_kthread+0x10/0x10
[ 75.329829][ T5965] ? _raw_spin_unlock_irq+0x23/0x50
[ 75.335017][ T5965] ? lockdep_hardirqs_on+0x9c/0x150
[ 75.340203][ T5965] ? __pfx_kthread+0x10/0x10
[ 75.344781][ T5965] ret_from_fork+0x3f9/0x770
[ 75.349358][ T5965] ? __pfx_ret_from_fork+0x10/0x10
[ 75.354455][ T5965] ? __switch_to_asm+0x39/0x70
[ 75.359205][ T5965] ? __switch_to_asm+0x33/0x70
[ 75.363954][ T5965] ? __pfx_kthread+0x10/0x10
[ 75.368532][ T5965] ret_from_fork_asm+0x1a/0x30
[ 75.373322][ T5965]
[ 75.376345][ T5965] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 75.383622][ T5965] CPU: 0 UID: 0 PID: 5965 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full)
[ 75.392982][ T5965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 75.403020][ T5965] Workqueue: cgroup_destroy css_free_rwork_fn
[ 75.409080][ T5965] Call Trace:
[ 75.412342][ T5965]
[ 75.415257][ T5965] dump_stack_lvl+0x99/0x250
[ 75.419836][ T5965] ? __asan_memcpy+0x40/0x70
[ 75.424411][ T5965] ? __pfx_dump_stack_lvl+0x10/0x10
[ 75.429593][ T5965] ? __pfx__printk+0x10/0x10
[ 75.434205][ T5965] vpanic+0x281/0x750
[ 75.438175][ T5965] ? __pfx__printk+0x10/0x10
[ 75.442750][ T5965] ? __pfx_vpanic+0x10/0x10
[ 75.447239][ T5965] ? is_bpf_text_address+0x26/0x2b0
[ 75.452437][ T5965] panic+0xb9/0xc0
[ 75.456143][ T5965] ? __pfx_panic+0x10/0x10
[ 75.460558][ T5965] __warn+0x31b/0x4b0
[ 75.464523][ T5965] ? css_rstat_flush+0x6d0/0x1890
[ 75.469534][ T5965] ? css_rstat_flush+0x6d0/0x1890
[ 75.474552][ T5965] report_bug+0x2be/0x4f0
[ 75.478883][ T5965] ? css_rstat_flush+0x6d0/0x1890
[ 75.483895][ T5965] ? css_rstat_flush+0x6d0/0x1890
[ 75.488904][ T5965] ? css_rstat_flush+0x6d2/0x1890
[ 75.493918][ T5965] handle_bug+0x84/0x160
[ 75.498149][ T5965] exc_invalid_op+0x1a/0x50
[ 75.502634][ T5965] asm_exc_invalid_op+0x1a/0x20
[ 75.507467][ T5965] RIP: 0010:css_rstat_flush+0x6d0/0x1890
[ 75.513083][ T5965] Code: ff df 80 3c 08 00 74 08 4c 89 ff e8 ca 8a 6a 00 4d 8b 27 4c 3b 64 24 20 74 24 e8 7b 15 07 00 e9 77 ff ff ff e8 71 15 07 00 90 <0f> 0b 90 eb be e8 66 15 07 00 4c 8b 74 24 20 e9 c5 10 00 00 e8 57
[ 75.532699][ T5965] RSP: 0018:ffffc9000515f848 EFLAGS: 00010093
[ 75.538752][ T5965] RAX: ffffffff81b896df RBX: ffff88814d37a000 RCX: ffff88807e6cda00
[ 75.546707][ T5965] RDX: 0000000000000000 RSI: ffffffff8be332e0 RDI: ffff8880b8640f88
[ 75.554749][ T5965] RBP: ffffffff8dbded10 R08: ffffffff8fa38037 R09: 1ffffffff1f47006
[ 75.562715][ T5965] R10: dffffc0000000000 R11: fffffbfff1f47007 R12: ffff88814d37a000
[ 75.570687][ T5965] R13: 1ffff11024b83801 R14: ffff888125c1c008 R15: ffffe8ffffc67900
[ 75.578658][ T5965] ? css_rstat_flush+0x6cf/0x1890
[ 75.583685][ T5965] ? css_rstat_flush+0x6cf/0x1890
[ 75.588712][ T5965] ? __lock_acquire+0xab9/0xd20
[ 75.593562][ T5965] css_rstat_exit+0xa9/0x320
[ 75.598144][ T5965] ? process_scheduled_works+0x9ef/0x17b0
[ 75.603849][ T5965] ? percpu_ref_exit+0xc5/0x1c0
[ 75.608696][ T5965] css_free_rwork_fn+0x90/0xb80
[ 75.613539][ T5965] ? process_scheduled_works+0x9ef/0x17b0
[ 75.619244][ T5965] ? process_scheduled_works+0x9ef/0x17b0
[ 75.624955][ T5965] process_scheduled_works+0xae1/0x17b0
[ 75.630509][ T5965] ? __pfx_process_scheduled_works+0x10/0x10
[ 75.636485][ T5965] worker_thread+0x8a0/0xda0
[ 75.641065][ T5965] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 75.647385][ T5965] ? __kthread_parkme+0x7b/0x200
[ 75.652314][ T5965] kthread+0x711/0x8a0
[ 75.656374][ T5965] ? __pfx_worker_thread+0x10/0x10
[ 75.661468][ T5965] ? __pfx_kthread+0x10/0x10
[ 75.666045][ T5965] ? _raw_spin_unlock_irq+0x23/0x50
[ 75.671227][ T5965] ? lockdep_hardirqs_on+0x9c/0x150
[ 75.676412][ T5965] ? __pfx_kthread+0x10/0x10
[ 75.680989][ T5965] ret_from_fork+0x3f9/0x770
[ 75.685570][ T5965] ? __pfx_ret_from_fork+0x10/0x10
[ 75.690670][ T5965] ? __switch_to_asm+0x39/0x70
[ 75.695420][ T5965] ? __switch_to_asm+0x33/0x70
[ 75.700169][ T5965] ? __pfx_kthread+0x10/0x10
[ 75.704748][ T5965] ret_from_fork_asm+0x1a/0x30
[ 75.709517][ T5965]
[ 75.712764][ T5965] Kernel Offset: disabled
[ 75.717077][ T5965] Rebooting in 86400 seconds..