last executing test programs: 1.005960781s ago: executing program 3 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x9) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb}, 0x11000) 510.047657ms ago: executing program 2 (id=3): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="200000000000000014001a80100004800c000980"], 0x34}}, 0x0) 298.807746ms ago: executing program 0 (id=1): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 128.681413ms ago: executing program 2 (id=6): ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), &(0x7f00000004c0)}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(r1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a32000000000500010007000000050005000a00000011000300686173683a6e65742c6e65740000000014000780050015001100000008001240"], 0x60}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 3 (id=7): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800"], 0x0, 0x42}, 0x28) ioctl$sock_SIOCGIFINDEX(r0, 0x8932, &(0x7f0000000000)={'veth1_macvtap\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.217' (ED25519) to the list of known hosts. [ 80.290558][ T5787] cgroup: Unknown subsys name 'net' [ 80.511578][ T5787] cgroup: Unknown subsys name 'cpuset' [ 80.556946][ T5787] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.432956][ T5787] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.240665][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.242742][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.244585][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.272432][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.273719][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.291914][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.292400][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.294532][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.295336][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.303506][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.307389][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.317027][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.319872][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.320755][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.321902][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.322082][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.322970][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.323306][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.344525][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.347044][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.412766][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.415922][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.417173][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.418615][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.432184][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.358583][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 86.374920][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 86.430634][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 86.657477][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 86.686886][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 86.891305][ T31] cfg80211: failed to load regulatory.db [ 87.338674][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.339461][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.339900][ T5798] bridge_slave_0: entered allmulticast mode [ 87.341552][ T5798] bridge_slave_0: entered promiscuous mode [ 87.359056][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.359200][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.359669][ T5800] bridge_slave_0: entered allmulticast mode [ 87.362612][ T5800] bridge_slave_0: entered promiscuous mode [ 87.368220][ T5806] Bluetooth: hci3: command tx timeout [ 87.368416][ T61] Bluetooth: hci2: command tx timeout [ 87.447923][ T5806] Bluetooth: hci1: command tx timeout [ 87.448432][ T61] Bluetooth: hci0: command tx timeout [ 87.470002][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.470077][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.470216][ T5798] bridge_slave_1: entered allmulticast mode [ 87.471735][ T5798] bridge_slave_1: entered promiscuous mode [ 87.484571][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.484710][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.484914][ T5800] bridge_slave_1: entered allmulticast mode [ 87.489152][ T5800] bridge_slave_1: entered promiscuous mode [ 87.526567][ T61] Bluetooth: hci4: command tx timeout [ 87.587272][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.587372][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.587488][ T5801] bridge_slave_0: entered allmulticast mode [ 87.588998][ T5801] bridge_slave_0: entered promiscuous mode [ 87.857271][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.857400][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.857588][ T5801] bridge_slave_1: entered allmulticast mode [ 87.859466][ T5801] bridge_slave_1: entered promiscuous mode [ 88.128099][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.128260][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.128509][ T5799] bridge_slave_0: entered allmulticast mode [ 88.130311][ T5799] bridge_slave_0: entered promiscuous mode [ 88.191799][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.192098][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.192219][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.192392][ T5814] bridge_slave_0: entered allmulticast mode [ 88.194176][ T5814] bridge_slave_0: entered promiscuous mode [ 88.200183][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.200465][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.200589][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.200755][ T5799] bridge_slave_1: entered allmulticast mode [ 88.203561][ T5799] bridge_slave_1: entered promiscuous mode [ 88.270117][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.270358][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.270473][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.270578][ T5814] bridge_slave_1: entered allmulticast mode [ 88.272041][ T5814] bridge_slave_1: entered promiscuous mode [ 88.274836][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.341664][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.620021][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.113595][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.208931][ T5798] team0: Port device team_slave_0 added [ 89.212314][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.214291][ T5800] team0: Port device team_slave_0 added [ 89.221716][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.309170][ T5798] team0: Port device team_slave_1 added [ 89.312539][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.314022][ T5800] team0: Port device team_slave_1 added [ 89.378836][ T5801] team0: Port device team_slave_0 added [ 89.456570][ T5806] Bluetooth: hci3: command tx timeout [ 89.456753][ T61] Bluetooth: hci2: command tx timeout [ 89.526608][ T5806] Bluetooth: hci1: command tx timeout [ 89.526729][ T61] Bluetooth: hci0: command tx timeout [ 89.606572][ T61] Bluetooth: hci4: command tx timeout [ 89.624700][ T5801] team0: Port device team_slave_1 added [ 89.829094][ T5799] team0: Port device team_slave_0 added [ 90.048378][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.048390][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.048403][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.051589][ T5814] team0: Port device team_slave_0 added [ 90.052759][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.052773][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.052795][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.055699][ T5799] team0: Port device team_slave_1 added [ 90.143536][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.143560][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.143583][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.147850][ T5814] team0: Port device team_slave_1 added [ 90.149269][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.149281][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.149304][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.240899][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.240916][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.240940][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.438099][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.438115][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.438140][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.559056][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.559073][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.559091][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.573335][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.573354][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.573378][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.576098][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.576113][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.576137][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.808750][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.808766][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.808791][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.083352][ T5798] hsr_slave_0: entered promiscuous mode [ 91.084362][ T5798] hsr_slave_1: entered promiscuous mode [ 91.096572][ T5800] hsr_slave_0: entered promiscuous mode [ 91.097971][ T5800] hsr_slave_1: entered promiscuous mode [ 91.099491][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 91.099609][ T5800] Cannot create hsr debugfs directory [ 91.233059][ T5801] hsr_slave_0: entered promiscuous mode [ 91.233867][ T5801] hsr_slave_1: entered promiscuous mode [ 91.234501][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 91.234520][ T5801] Cannot create hsr debugfs directory [ 91.526745][ T5806] Bluetooth: hci3: command tx timeout [ 91.526849][ T61] Bluetooth: hci2: command tx timeout [ 91.572771][ T5799] hsr_slave_0: entered promiscuous mode [ 91.573755][ T5799] hsr_slave_1: entered promiscuous mode [ 91.574357][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 91.574374][ T5799] Cannot create hsr debugfs directory [ 91.596720][ T5814] hsr_slave_0: entered promiscuous mode [ 91.598082][ T5814] hsr_slave_1: entered promiscuous mode [ 91.599048][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 91.599079][ T5814] Cannot create hsr debugfs directory [ 91.608447][ T5806] Bluetooth: hci1: command tx timeout [ 91.608534][ T61] Bluetooth: hci0: command tx timeout [ 91.686507][ T61] Bluetooth: hci4: command tx timeout [ 93.041433][ T5800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.073595][ T5800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.102675][ T5800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.163281][ T5800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.272794][ T5798] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.314053][ T5798] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.332084][ T5798] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.388408][ T5798] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.520878][ T5801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.563587][ T5801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.585398][ T5801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.606942][ T5806] Bluetooth: hci3: command tx timeout [ 93.606982][ T61] Bluetooth: hci2: command tx timeout [ 93.641374][ T5801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.686620][ T5806] Bluetooth: hci1: command tx timeout [ 93.686666][ T61] Bluetooth: hci0: command tx timeout [ 93.766421][ T61] Bluetooth: hci4: command tx timeout [ 93.803340][ T5799] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.845071][ T5799] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.863229][ T5799] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.919411][ T5799] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.021484][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.070552][ T5814] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.120524][ T5814] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.153530][ T5814] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.199266][ T5814] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.253892][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.289939][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.299250][ T1920] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.299833][ T1920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.343196][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.343295][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.399435][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.434360][ T1920] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.434837][ T1920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.449886][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.475679][ T1920] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.475808][ T1920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.549267][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.589176][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.589385][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.614455][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.659402][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.659618][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.751203][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.783341][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.810305][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.810497][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.875027][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.878431][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.931446][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.978082][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.978206][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.030379][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.031339][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.067519][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.304643][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.392524][ T5800] veth0_vlan: entered promiscuous mode [ 95.459425][ T5800] veth1_vlan: entered promiscuous mode [ 95.473132][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.565890][ T5798] veth0_vlan: entered promiscuous mode [ 95.613911][ T5800] veth0_macvtap: entered promiscuous mode [ 95.630630][ T5798] veth1_vlan: entered promiscuous mode [ 95.646011][ T5800] veth1_macvtap: entered promiscuous mode [ 95.706064][ T5801] veth0_vlan: entered promiscuous mode [ 95.729783][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.747184][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.771912][ T5801] veth1_vlan: entered promiscuous mode [ 95.782109][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.820940][ T1920] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.823955][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.839252][ T5798] veth0_macvtap: entered promiscuous mode [ 95.849967][ T1920] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.854469][ T1920] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.887643][ T5798] veth1_macvtap: entered promiscuous mode [ 95.889171][ T1920] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.141697][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.165497][ T5801] veth0_macvtap: entered promiscuous mode [ 96.178092][ T5799] veth0_vlan: entered promiscuous mode [ 96.225719][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.229120][ T5801] veth1_macvtap: entered promiscuous mode [ 96.272142][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.272162][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.272536][ T5799] veth1_vlan: entered promiscuous mode [ 96.300638][ T4319] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.304448][ T4319] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.328891][ T4319] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.355428][ T4319] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.377256][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.424554][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.424573][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.439100][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.601635][ T69] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.617060][ T69] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.622260][ T152] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.625187][ T5814] veth0_vlan: entered promiscuous mode [ 96.634409][ T152] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.683270][ T5799] veth0_macvtap: entered promiscuous mode [ 96.751476][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.751495][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.757044][ T5799] veth1_macvtap: entered promiscuous mode [ 96.770872][ T5814] veth1_vlan: entered promiscuous mode [ 96.964226][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.964245][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.024815][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.061224][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.061244][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.073193][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.139047][ T1920] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.145444][ T1920] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.164653][ T1920] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.175399][ T1920] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.185477][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.185497][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.189772][ T5814] veth0_macvtap: entered promiscuous mode [ 97.260615][ T5814] veth1_macvtap: entered promiscuous mode [ 97.390930][ T5921] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.436052][ T5921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 97.483988][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.520557][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.659949][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.661739][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.664404][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.665356][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.665373][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.750269][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.990672][ T5929] ------------[ cut here ]------------ [ 97.990694][ T5929] WARNING: CPU: 1 PID: 5929 at ./include/linux/seqlock.h:221 cgroup_freeze+0x80a/0xf90 [ 97.990745][ T5929] Modules linked in: [ 97.990777][ T5929] CPU: 1 UID: 0 PID: 5929 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 97.990800][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 97.990816][ T5929] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 97.990844][ T5929] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 91 1c 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 97.990861][ T5929] RSP: 0018:ffffc900051af8e0 EFLAGS: 00010283 [ 97.990878][ T5929] RAX: ffffffff81b8a4f9 RBX: 0000000000000000 RCX: 0000000000080000 [ 97.990892][ T5929] RDX: ffffc90010e95000 RSI: 00000000000000b4 RDI: 00000000000000b5 [ 97.990906][ T5929] RBP: ffffc900051afa70 R08: 0000000000000000 R09: 0000000000000000 [ 97.990918][ T5929] R10: dffffc0000000000 R11: fffffbfff1deea2f R12: dffffc0000000000 [ 97.990933][ T5929] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888021714791 [ 97.990946][ T5929] FS: 00007fa88984c6c0(0000) GS:ffff888126cc8000(0000) knlGS:0000000000000000 [ 97.990963][ T5929] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.990977][ T5929] CR2: 00007fa88984bf98 CR3: 00000000295e2000 CR4: 00000000003526f0 [ 97.990999][ T5929] Call Trace: [ 97.991012][ T5929] [ 97.991027][ T5929] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 97.991064][ T5929] ? __pfx_cgroup_freeze+0x10/0x10 [ 97.991091][ T5929] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 97.991121][ T5929] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 97.991149][ T5929] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 97.991185][ T5929] ? mutex_lock_nested+0x154/0x1d0 [ 97.991207][ T5929] ? cgroup_kn_lock_live+0x13c/0x230 [ 97.991240][ T5929] cgroup_freeze_write+0x156/0x1c0 [ 97.991267][ T5929] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 97.991289][ T5929] ? kernfs_root+0x1c/0x230 [ 97.991313][ T5929] ? kernfs_root+0x1c/0x230 [ 97.991339][ T5929] ? kernfs_root+0x1ea/0x230 [ 97.991362][ T5929] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 97.991388][ T5929] cgroup_file_write+0x39e/0x740 [ 97.991416][ T5929] ? __pfx_cgroup_file_write+0x10/0x10 [ 97.991452][ T5929] ? __pfx_cgroup_file_write+0x10/0x10 [ 97.991470][ T5929] kernfs_fop_write_iter+0x3b0/0x540 [ 97.991501][ T5929] vfs_write+0x5d5/0xb40 [ 97.991544][ T5929] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 97.991567][ T5929] ? __pfx_vfs_write+0x10/0x10 [ 97.991592][ T5929] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 97.991630][ T5929] ? mutex_lock_nested+0x154/0x1d0 [ 97.991653][ T5929] ? fdget_pos+0x253/0x320 [ 97.991685][ T5929] ksys_write+0x14b/0x260 [ 97.991708][ T5929] ? __pfx_ksys_write+0x10/0x10 [ 97.991732][ T5929] ? do_syscall_64+0xbe/0xfa0 [ 97.991756][ T5929] do_syscall_64+0xfa/0xfa0 [ 97.991772][ T5929] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.991800][ T5929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.991820][ T5929] ? clear_bhb_loop+0x60/0xb0 [ 97.991845][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.991864][ T5929] RIP: 0033:0x7fa88b62efc9 [ 97.991887][ T5929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.991903][ T5929] RSP: 002b:00007fa88984c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 97.991924][ T5929] RAX: ffffffffffffffda RBX: 00007fa88b886180 RCX: 00007fa88b62efc9 [ 97.991939][ T5929] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000009 [ 97.991951][ T5929] RBP: 00007fa88b6b1f91 R08: 0000000000000000 R09: 0000000000000000 [ 97.991964][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.991977][ T5929] R13: 00007fa88b886218 R14: 00007fa88b886180 R15: 00007ffe30385f48 [ 97.992014][ T5929] [ 97.992025][ T5929] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 97.992040][ T5929] CPU: 1 UID: 0 PID: 5929 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 97.992061][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 97.992072][ T5929] Call Trace: [ 97.992080][ T5929] [ 97.992088][ T5929] dump_stack_lvl+0x99/0x250 [ 97.992113][ T5929] ? __asan_memcpy+0x40/0x70 [ 97.992141][ T5929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.992165][ T5929] ? __pfx__printk+0x10/0x10 [ 97.992205][ T5929] vpanic+0x237/0x6d0 [ 97.992225][ T5929] ? __pfx_vpanic+0x10/0x10 [ 97.992257][ T5929] panic+0xb9/0xc0 [ 97.992275][ T5929] ? __pfx_panic+0x10/0x10 [ 97.992317][ T5929] __warn+0x31b/0x4b0 [ 97.992335][ T5929] ? cgroup_freeze+0x80a/0xf90 [ 97.992366][ T5929] ? cgroup_freeze+0x80a/0xf90 [ 97.992393][ T5929] report_bug+0x2be/0x4f0 [ 97.992422][ T5929] ? cgroup_freeze+0x80a/0xf90 [ 97.992450][ T5929] ? cgroup_freeze+0x80a/0xf90 [ 97.992482][ T5929] ? cgroup_freeze+0x80c/0xf90 [ 97.992511][ T5929] handle_bug+0x84/0x160 [ 97.992539][ T5929] exc_invalid_op+0x1a/0x50 [ 97.992562][ T5929] asm_exc_invalid_op+0x1a/0x20 [ 97.992580][ T5929] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 97.992609][ T5929] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 91 1c 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 97.992625][ T5929] RSP: 0018:ffffc900051af8e0 EFLAGS: 00010283 [ 97.992642][ T5929] RAX: ffffffff81b8a4f9 RBX: 0000000000000000 RCX: 0000000000080000 [ 97.992656][ T5929] RDX: ffffc90010e95000 RSI: 00000000000000b4 RDI: 00000000000000b5 [ 97.992670][ T5929] RBP: ffffc900051afa70 R08: 0000000000000000 R09: 0000000000000000 [ 97.992683][ T5929] R10: dffffc0000000000 R11: fffffbfff1deea2f R12: dffffc0000000000 [ 97.992698][ T5929] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888021714791 [ 97.992721][ T5929] ? cgroup_freeze+0x809/0xf90 [ 97.992763][ T5929] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 97.992796][ T5929] ? __pfx_cgroup_freeze+0x10/0x10 [ 97.992822][ T5929] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 97.992852][ T5929] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 97.992879][ T5929] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 97.992915][ T5929] ? mutex_lock_nested+0x154/0x1d0 [ 97.992938][ T5929] ? cgroup_kn_lock_live+0x13c/0x230 [ 97.992970][ T5929] cgroup_freeze_write+0x156/0x1c0 [ 97.992997][ T5929] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 97.993020][ T5929] ? kernfs_root+0x1c/0x230 [ 97.993043][ T5929] ? kernfs_root+0x1c/0x230 [ 97.993069][ T5929] ? kernfs_root+0x1ea/0x230 [ 97.993093][ T5929] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 97.993118][ T5929] cgroup_file_write+0x39e/0x740 [ 97.993150][ T5929] ? __pfx_cgroup_file_write+0x10/0x10 [ 97.993187][ T5929] ? __pfx_cgroup_file_write+0x10/0x10 [ 97.993204][ T5929] kernfs_fop_write_iter+0x3b0/0x540 [ 97.993238][ T5929] vfs_write+0x5d5/0xb40 [ 97.993273][ T5929] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 97.993296][ T5929] ? __pfx_vfs_write+0x10/0x10 [ 97.993321][ T5929] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 97.993357][ T5929] ? mutex_lock_nested+0x154/0x1d0 [ 97.993380][ T5929] ? fdget_pos+0x253/0x320 [ 97.993413][ T5929] ksys_write+0x14b/0x260 [ 97.993455][ T5929] ? __pfx_ksys_write+0x10/0x10 [ 97.993479][ T5929] ? do_syscall_64+0xbe/0xfa0 [ 97.993502][ T5929] do_syscall_64+0xfa/0xfa0 [ 97.993527][ T5929] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.993556][ T5929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.993575][ T5929] ? clear_bhb_loop+0x60/0xb0 [ 97.993601][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.993620][ T5929] RIP: 0033:0x7fa88b62efc9 [ 97.993637][ T5929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.993652][ T5929] RSP: 002b:00007fa88984c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 97.993671][ T5929] RAX: ffffffffffffffda RBX: 00007fa88b886180 RCX: 00007fa88b62efc9 [ 97.993686][ T5929] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000009 [ 97.993698][ T5929] RBP: 00007fa88b6b1f91 R08: 0000000000000000 R09: 0000000000000000 [ 97.993711][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.993723][ T5929] R13: 00007fa88b886218 R14: 00007fa88b886180 R15: 00007ffe30385f48 [ 97.993759][ T5929] [ 97.993911][ T5929] Kernel Offset: disabled