last executing test programs: 1.132215807s ago: executing program 2 (id=3): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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") syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syslog(0x2, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@reiserfs_5={0x14, 0x5, {0x4, 0x7, 0x2, 0x8, 0x80008001}}, 0x0, 0x1200) 892.607393ms ago: executing program 0 (id=1): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000640000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x7, &(0x7f0000003dc0)={0x0, 0x0, 0x0, 0x2, 0x40000000}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, 0x0, 0x20) 443.684298ms ago: executing program 1 (id=2): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) 416.52409ms ago: executing program 3 (id=4): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000076000d0b000000000000f5ff0200faffffff000008000ac0"], 0x28}}, 0x0) 0s ago: executing program 0 (id=6): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0xd, @loopback, 0xffffffec}, r1, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000540), r1, 0x2}}, 0x18) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.117' (ED25519) to the list of known hosts. [ 200.063866][ T5788] cgroup: Unknown subsys name 'net' [ 200.239282][ T5788] cgroup: Unknown subsys name 'cpuset' [ 200.262488][ T5788] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.699853][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.706733][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 253.432740][ T5788] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 258.729407][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 258.739061][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 258.752426][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 258.760550][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 258.768655][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 258.778862][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 258.788169][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 258.797557][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 258.829437][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 258.839552][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 258.850362][ T5821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 258.859085][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 258.868809][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 258.871098][ T5821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 258.898856][ T5816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 258.910516][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 258.924863][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 258.938924][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 258.952622][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 258.954108][ T5816] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 258.962830][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 258.981175][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 258.993274][ T5813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 259.006935][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 259.009851][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 260.581588][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 261.000472][ T5820] Bluetooth: hci0: command tx timeout [ 261.006505][ T5820] Bluetooth: hci1: command tx timeout [ 261.006775][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 261.036590][ T5820] Bluetooth: hci4: command tx timeout [ 261.047961][ T5821] Bluetooth: hci2: command tx timeout [ 261.052609][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 261.116779][ T5821] Bluetooth: hci3: command tx timeout [ 261.342629][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 261.579100][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 261.900288][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.908218][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.916006][ T5822] bridge_slave_0: entered allmulticast mode [ 261.925974][ T5822] bridge_slave_0: entered promiscuous mode [ 261.969308][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.977117][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.984868][ T5822] bridge_slave_1: entered allmulticast mode [ 261.994999][ T5822] bridge_slave_1: entered promiscuous mode [ 262.416819][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.590097][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.601591][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.610097][ T5814] bridge_slave_0: entered allmulticast mode [ 262.619667][ T5814] bridge_slave_0: entered promiscuous mode [ 262.641693][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.651575][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.660139][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.668007][ T5814] bridge_slave_1: entered allmulticast mode [ 262.677893][ T5814] bridge_slave_1: entered promiscuous mode [ 262.741374][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.749357][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.758086][ T5810] bridge_slave_0: entered allmulticast mode [ 262.767985][ T5810] bridge_slave_0: entered promiscuous mode [ 262.944304][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.952469][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.960474][ T5810] bridge_slave_1: entered allmulticast mode [ 262.970252][ T5810] bridge_slave_1: entered promiscuous mode [ 262.979680][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.987711][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.995407][ T5826] bridge_slave_0: entered allmulticast mode [ 263.005567][ T5826] bridge_slave_0: entered promiscuous mode [ 263.036821][ T5821] Bluetooth: hci1: command tx timeout [ 263.042552][ T5820] Bluetooth: hci0: command tx timeout [ 263.104622][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.147178][ T5821] Bluetooth: hci2: command tx timeout [ 263.150555][ T5820] Bluetooth: hci4: command tx timeout [ 263.166468][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.174171][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.182061][ T5817] bridge_slave_0: entered allmulticast mode [ 263.191693][ T5817] bridge_slave_0: entered promiscuous mode [ 263.218158][ T5820] Bluetooth: hci3: command tx timeout [ 263.246121][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.253950][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.262028][ T5826] bridge_slave_1: entered allmulticast mode [ 263.271954][ T5826] bridge_slave_1: entered promiscuous mode [ 263.289750][ T5822] team0: Port device team_slave_0 added [ 263.308952][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.326426][ T5822] team0: Port device team_slave_1 added [ 263.414012][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.421748][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.429694][ T5817] bridge_slave_1: entered allmulticast mode [ 263.439831][ T5817] bridge_slave_1: entered promiscuous mode [ 263.574654][ T5814] team0: Port device team_slave_0 added [ 263.628871][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.650608][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.740239][ T5814] team0: Port device team_slave_1 added [ 263.873070][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.889321][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.896698][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.923220][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.980939][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.038415][ T5810] team0: Port device team_slave_0 added [ 264.055211][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.108327][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.115494][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.142075][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.156247][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.163740][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.191395][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.214040][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.232701][ T5810] team0: Port device team_slave_1 added [ 264.331416][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.338753][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.365144][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.420431][ T5826] team0: Port device team_slave_0 added [ 264.530069][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.537495][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.564012][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.584017][ T5826] team0: Port device team_slave_1 added [ 264.600707][ T5817] team0: Port device team_slave_0 added [ 264.619344][ T5817] team0: Port device team_slave_1 added [ 264.663782][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.671081][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.697537][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.924908][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.932688][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.959099][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.019709][ T5822] hsr_slave_0: entered promiscuous mode [ 265.030146][ T5822] hsr_slave_1: entered promiscuous mode [ 265.087072][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.094298][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.121018][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.123916][ T5820] Bluetooth: hci1: command tx timeout [ 265.137765][ T5820] Bluetooth: hci0: command tx timeout [ 265.155175][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.163786][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.193997][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.196966][ T5821] Bluetooth: hci4: command tx timeout [ 265.210587][ T5821] Bluetooth: hci2: command tx timeout [ 265.264832][ T5814] hsr_slave_0: entered promiscuous mode [ 265.274469][ T5814] hsr_slave_1: entered promiscuous mode [ 265.277017][ T5821] Bluetooth: hci3: command tx timeout [ 265.283765][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.293553][ T5814] Cannot create hsr debugfs directory [ 265.310205][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.318843][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.345768][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.450555][ T5810] hsr_slave_0: entered promiscuous mode [ 265.461042][ T5810] hsr_slave_1: entered promiscuous mode [ 265.469941][ T5810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.477906][ T5810] Cannot create hsr debugfs directory [ 265.812268][ T5826] hsr_slave_0: entered promiscuous mode [ 265.822474][ T5826] hsr_slave_1: entered promiscuous mode [ 265.832925][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.840840][ T5826] Cannot create hsr debugfs directory [ 266.192903][ T5817] hsr_slave_0: entered promiscuous mode [ 266.202957][ T5817] hsr_slave_1: entered promiscuous mode [ 266.212073][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.220006][ T5817] Cannot create hsr debugfs directory [ 267.196912][ T5821] Bluetooth: hci0: command tx timeout [ 267.202759][ T5820] Bluetooth: hci1: command tx timeout [ 267.276563][ T5821] Bluetooth: hci2: command tx timeout [ 267.288258][ T5821] Bluetooth: hci4: command tx timeout [ 267.362522][ T5821] Bluetooth: hci3: command tx timeout [ 267.393263][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 267.417538][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 267.441974][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 267.504468][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 267.558690][ T5814] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 267.605957][ T5814] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 267.632021][ T5814] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 267.746121][ T5814] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 267.891551][ T5810] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 267.960628][ T5810] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 268.008683][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 268.039261][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 268.065936][ T5810] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 268.119853][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 268.161730][ T5810] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 268.214030][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 268.483030][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 268.577849][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 268.652333][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 268.740475][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 269.108363][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.226257][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.352729][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.398739][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.482868][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.490606][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.507568][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.515244][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.665076][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.672896][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.694284][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.702172][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.785525][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.885476][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.050875][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.130173][ T5814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 270.140982][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.164790][ T5822] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 270.177489][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.237726][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.316967][ T3867] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.324705][ T3867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.341318][ T3867] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.349062][ T3867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.457103][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.543123][ T3867] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.550881][ T3867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.573679][ T3867] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.581435][ T3867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.825987][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.011728][ T3867] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.019487][ T3867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.322770][ T3867] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.330688][ T3867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.423906][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.470140][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.595926][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.223544][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.235274][ T5822] veth0_vlan: entered promiscuous mode [ 273.313372][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.355833][ T5822] veth1_vlan: entered promiscuous mode [ 273.624870][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.753871][ T5822] veth0_macvtap: entered promiscuous mode [ 273.878788][ T5822] veth1_macvtap: entered promiscuous mode [ 273.912367][ T5810] veth0_vlan: entered promiscuous mode [ 274.058297][ T5810] veth1_vlan: entered promiscuous mode [ 274.072566][ T5826] veth0_vlan: entered promiscuous mode [ 274.162181][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.238507][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.273321][ T5826] veth1_vlan: entered promiscuous mode [ 274.353213][ T5817] veth0_vlan: entered promiscuous mode [ 274.375650][ T5822] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.384948][ T5822] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.394209][ T5822] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.405620][ T5822] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.556194][ T5810] veth0_macvtap: entered promiscuous mode [ 274.580968][ T5817] veth1_vlan: entered promiscuous mode [ 274.634461][ T5810] veth1_macvtap: entered promiscuous mode [ 274.819628][ T5826] veth0_macvtap: entered promiscuous mode [ 274.866894][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.934438][ T5826] veth1_macvtap: entered promiscuous mode [ 274.971722][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.042898][ T5817] veth0_macvtap: entered promiscuous mode [ 275.068161][ T5810] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.077444][ T5810] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.086736][ T5810] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.095799][ T5810] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.155298][ T5817] veth1_macvtap: entered promiscuous mode [ 275.275244][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.332775][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.378385][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.445579][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.469272][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.478570][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.488013][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.497293][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.553076][ T5817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.562574][ T5817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.575488][ T5817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.586464][ T5817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.880383][ T5814] veth0_vlan: entered promiscuous mode [ 276.029227][ T5814] veth1_vlan: entered promiscuous mode [ 276.384239][ T5814] veth0_macvtap: entered promiscuous mode [ 276.439293][ T5814] veth1_macvtap: entered promiscuous mode [ 276.664363][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.795030][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.904709][ T5814] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.915362][ T5814] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.926422][ T5814] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.935508][ T5814] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.201677][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.211084][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.412509][ T3867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.421731][ T3867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.827998][ T4095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.836112][ T4095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.048503][ T3867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.056693][ T3867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.085890][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.094270][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 283.094331][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.395441][ T3705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.404702][ T3705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.574657][ T4234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.582976][ T4234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.651769][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.660317][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.064554][ T5998] loop2: detected capacity change from 0 to 512 [ 284.712383][ T4234] ===================================================== [ 284.721791][ T4234] BUG: KMSAN: uninit-value in xas_load+0xd20/0xd70 [ 284.738031][ T4234] xas_load+0xd20/0xd70 [ 284.742439][ T4234] xas_find+0x2c8/0xd40 [ 284.752058][ T4234] xa_find+0x15a/0x2a0 [ 284.756645][ T4234] io_unregister_zcrx_ifqs+0x75/0x1d0 [ 284.762278][ T4234] io_ring_ctx_free+0x61/0x740 [ 284.767455][ T4234] io_ring_exit_work+0xdec/0xe20 [ 284.772642][ T4234] process_scheduled_works+0xb8e/0x1d80 [ 284.779356][ T4234] worker_thread+0xedf/0x1590 [ 284.784319][ T4234] kthread+0xd5c/0xf00 [ 284.788831][ T4234] ret_from_fork+0x1e3/0x310 [ 284.793639][ T4234] ret_from_fork_asm+0x1a/0x30 [ 284.798828][ T4234] [ 284.801311][ T4234] Uninit was stored to memory at: [ 284.806721][ T4234] xa_find+0x26c/0x2a0 [ 284.811041][ T4234] io_unregister_zcrx_ifqs+0x75/0x1d0 [ 284.816857][ T4234] io_ring_ctx_free+0x61/0x740 [ 284.821879][ T4234] io_ring_exit_work+0xdec/0xe20 [ 284.828645][ T4234] process_scheduled_works+0xb8e/0x1d80 [ 284.840450][ T4234] worker_thread+0xedf/0x1590 [ 284.845451][ T4234] kthread+0xd5c/0xf00 [ 284.852717][ T4234] ret_from_fork+0x1e3/0x310 [ 284.857797][ T4234] ret_from_fork_asm+0x1a/0x30 [ 284.862848][ T4234] [ 284.865311][ T4234] Local variable id created at: [ 284.870424][ T4234] io_unregister_zcrx_ifqs+0x3d/0x1d0 [ 284.876052][ T4234] io_ring_ctx_free+0x61/0x740 [ 284.881382][ T4234] [ 284.883916][ T4234] CPU: 1 UID: 0 PID: 4234 Comm: kworker/u8:28 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(undef) [ 284.896346][ T4234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 284.906834][ T4234] Workqueue: iou_exit io_ring_exit_work [ 284.912718][ T4234] ===================================================== [ 284.919934][ T4234] Disabling lock debugging due to kernel taint [ 284.926397][ T4234] Kernel panic - not syncing: kmsan.panic set ... [ 284.933047][ T4234] CPU: 1 UID: 0 PID: 4234 Comm: kworker/u8:28 Tainted: G B 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(undef) [ 284.947056][ T4234] Tainted: [B]=BAD_PAGE [ 284.951378][ T4234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 284.961641][ T4234] Workqueue: iou_exit io_ring_exit_work [ 284.967468][ T4234] Call Trace: [ 284.970883][ T4234] [ 284.973970][ T4234] __dump_stack+0x26/0x30 [ 284.978527][ T4234] dump_stack_lvl+0x53/0x270 [ 284.983357][ T4234] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 284.989429][ T4234] dump_stack+0x1e/0x25 [ 284.993794][ T4234] panic+0x4bd/0xd50 [ 284.997971][ T4234] kmsan_report+0x31c/0x320 [ 285.002735][ T4234] ? __msan_warning+0x1b/0x30 [ 285.007628][ T4234] ? xas_load+0xd20/0xd70 [ 285.012247][ T4234] ? xas_find+0x2c8/0xd40 [ 285.016787][ T4234] ? xa_find+0x15a/0x2a0 [ 285.021257][ T4234] ? io_unregister_zcrx_ifqs+0x75/0x1d0 [ 285.027029][ T4234] ? io_ring_ctx_free+0x61/0x740 [ 285.032193][ T4234] ? io_ring_exit_work+0xdec/0xe20 [ 285.037528][ T4234] ? process_scheduled_works+0xb8e/0x1d80 [ 285.043489][ T4234] ? worker_thread+0xedf/0x1590 [ 285.048572][ T4234] ? kthread+0xd5c/0xf00 [ 285.053033][ T4234] ? ret_from_fork+0x1e3/0x310 [ 285.057987][ T4234] ? ret_from_fork_asm+0x1a/0x30 [ 285.063221][ T4234] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 285.069231][ T4234] ? stack_depot_save_flags+0x60f/0x7b0 [ 285.075016][ T4234] ? stack_depot_save+0x12/0x20 [ 285.080059][ T4234] ? kmsan_internal_chain_origin+0xb6/0xd0 [ 285.086114][ T4234] ? kmsan_internal_chain_origin+0x5d/0xd0 [ 285.092159][ T4234] ? __msan_chain_origin+0xc3/0x140 [ 285.097585][ T4234] ? xa_find+0x26c/0x2a0 [ 285.102047][ T4234] ? io_unregister_zcrx_ifqs+0x75/0x1d0 [ 285.107816][ T4234] ? io_ring_ctx_free+0x61/0x740 [ 285.112998][ T4234] ? io_ring_exit_work+0xdec/0xe20 [ 285.118361][ T4234] ? process_scheduled_works+0xb8e/0x1d80 [ 285.124364][ T4234] ? worker_thread+0xedf/0x1590 [ 285.129469][ T4234] ? kthread+0xd5c/0xf00 [ 285.133929][ T4234] ? ret_from_fork+0x1e3/0x310 [ 285.138910][ T4234] ? ret_from_fork_asm+0x1a/0x30 [ 285.144123][ T4234] ? kmsan_get_metadata+0xfb/0x160 [ 285.149492][ T4234] ? io_sqe_files_unregister+0xea/0x120 [ 285.155289][ T4234] __msan_warning+0x1b/0x30 [ 285.160046][ T4234] xas_load+0xd20/0xd70 [ 285.164399][ T4234] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 285.170722][ T4234] ? kmsan_get_metadata+0xfb/0x160 [ 285.176090][ T4234] ? io_sqe_files_unregister+0xea/0x120 [ 285.181872][ T4234] ? io_sqe_files_unregister+0xea/0x120 [ 285.187658][ T4234] xas_find+0x2c8/0xd40 [ 285.192039][ T4234] ? kmsan_get_metadata+0xfb/0x160 [ 285.197388][ T4234] ? kmsan_get_metadata+0xfb/0x160 [ 285.202741][ T4234] ? io_sqe_files_unregister+0xea/0x120 [ 285.208542][ T4234] ? io_sqe_files_unregister+0xea/0x120 [ 285.214346][ T4234] xa_find+0x15a/0x2a0 [ 285.218640][ T4234] ? io_sqe_files_unregister+0xea/0x120 [ 285.224449][ T4234] io_unregister_zcrx_ifqs+0x75/0x1d0 [ 285.230112][ T4234] ? io_sqe_files_unregister+0xea/0x120 [ 285.235898][ T4234] io_ring_ctx_free+0x61/0x740 [ 285.240916][ T4234] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 285.247057][ T4234] io_ring_exit_work+0xdec/0xe20 [ 285.252235][ T4234] ? __pfx_io_tctx_exit_cb+0x10/0x10 [ 285.257795][ T4234] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 285.264398][ T4234] ? __pfx_io_ring_exit_work+0x10/0x10 [ 285.270083][ T4234] process_scheduled_works+0xb8e/0x1d80 [ 285.275950][ T4234] worker_thread+0xedf/0x1590 [ 285.280969][ T4234] kthread+0xd5c/0xf00 [ 285.285250][ T4234] ? __pfx_worker_thread+0x10/0x10 [ 285.290645][ T4234] ? __pfx_kthread+0x10/0x10 [ 285.295496][ T4234] ret_from_fork+0x1e3/0x310 [ 285.300317][ T4234] ? __pfx_kthread+0x10/0x10 [ 285.305109][ T4234] ret_from_fork_asm+0x1a/0x30 [ 285.310146][ T4234] [ 285.313709][ T4234] Kernel Offset: disabled [ 285.318142][ T4234] Rebooting in 86400 seconds..