last executing test programs:

597.247126ms ago: executing program 0 (id=1):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000055c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001cc0)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}, @authinfo={0x18, 0x84, 0x6, {0x1}}], 0x30}], 0x1, 0x40000)

563.146131ms ago: executing program 1 (id=2):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c00000004000000080000000000000001"], 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f00000000c0), &(0x7f00000001c0)}, 0x20)

481.850395ms ago: executing program 0 (id=4):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c40)=@newqdisc={0x58, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x0, 0x0, 0x3, 0x1, 0x41b, 0x2}}, {0x4}}]}]}, 0x58}}, 0x0)

409.192499ms ago: executing program 1 (id=6):
ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000840)={0x1, 0x0, '\x00', 0x0, &(0x7f00000007c0)})
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000040)={r1, 0x1, 0x2}, &(0x7f0000000180)={'enc=', 'pkcs1', ' hash=', {'sha256\x00'}}, &(0x7f0000000280)='P', &(0x7f0000000780)="38b5")

408.984278ms ago: executing program 0 (id=7):
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
writev(r1, &(0x7f0000010b40)=[{&(0x7f0000000140)="58ddb0", 0x3}], 0x1)
splice(r1, 0x0, r0, 0x0, 0x2, 0x0)

362.230278ms ago: executing program 1 (id=9):
syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)

283.465425ms ago: executing program 0 (id=10):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
close_range(r0, 0xffffffffffffffff, 0x0)

281.151377ms ago: executing program 2 (id=11):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='1', 0x1)

280.84221ms ago: executing program 0 (id=12):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_ringparam={0x19, 0x1, 0x70807689, 0xfff, 0xfffffffc, 0x5, 0x81, 0xffff8001, 0xecd}})

212.582593ms ago: executing program 2 (id=13):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1922, 0x4000, 0x8, 0x223})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x1, {0x3}}, 0xfffffffffffffd3a)
io_uring_enter(r0, 0x802217, 0xde73, 0xe1, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

212.389387ms ago: executing program 0 (id=14):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f088a848e08906", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36)

109.942491ms ago: executing program 2 (id=15):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0x8, 0x4)
sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e26, 0x200000ff, @loopback, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)="a6", 0x1}], 0x1, &(0x7f0000000080)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @local}}], 0x20, 0x4855}, 0x24000052)

109.626301ms ago: executing program 2 (id=16):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8fffdffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400fffab7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000007a00000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

234.603µs ago: executing program 2 (id=17):
socket$inet6(0xa, 0x3, 0x88f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000000c0)={{}, {0x1, 0x4}, [], {0x4, 0x3}, [], {0x10, 0x1}, {0x20, 0x6}}, 0x24, 0x0)

0s ago: executing program 2 (id=18):
msgrcv(0x0, 0x0, 0x0, 0x3, 0x7800)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:52180' (ED25519) to the list of known hosts.
syzkaller login: [   42.466075][ T5579] cgroup: Unknown subsys name 'net'
[   42.545754][ T5579] cgroup: Unknown subsys name 'cpuset'
[   42.549288][ T5579] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.809003][ T5579] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   47.578839][ T5598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   47.582057][ T5598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   47.585831][ T5598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   47.599362][ T5602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   47.608912][ T5604] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   47.611627][ T5604] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   47.614513][ T5604] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   47.615936][ T5605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   47.619563][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   47.619916][ T4986] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   47.625457][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   47.628513][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   47.632588][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   47.635777][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   47.638404][ T5605] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   48.041972][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.045126][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.048103][ T5596] bridge_slave_0: entered allmulticast mode
[   48.051156][ T5596] bridge_slave_0: entered promiscuous mode
[   48.066302][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.068684][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.070985][ T5596] bridge_slave_1: entered allmulticast mode
[   48.076119][ T5596] bridge_slave_1: entered promiscuous mode
[   48.132406][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.156836][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.178047][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.181825][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.184200][ T5600] bridge_slave_0: entered allmulticast mode
[   48.186848][ T5600] bridge_slave_0: entered promiscuous mode
[   48.200126][ T5596] team0: Port device team_slave_0 added
[   48.205317][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.208063][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.210940][ T5600] bridge_slave_1: entered allmulticast mode
[   48.214116][ T5600] bridge_slave_1: entered promiscuous mode
[   48.219872][ T5596] team0: Port device team_slave_1 added
[   48.258481][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.261290][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.269743][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.275748][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.280829][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.290660][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.294018][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.303754][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.338296][ T5600] team0: Port device team_slave_0 added
[   48.347925][ T5600] team0: Port device team_slave_1 added
[   48.377680][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.380948][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.384027][ T5603] bridge_slave_0: entered allmulticast mode
[   48.387397][ T5603] bridge_slave_0: entered promiscuous mode
[   48.399630][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.401850][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.410085][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.414801][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.417403][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.425748][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.429291][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.431863][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.434801][ T5603] bridge_slave_1: entered allmulticast mode
[   48.438620][ T5603] bridge_slave_1: entered promiscuous mode
[   48.457883][ T5596] hsr_slave_0: entered promiscuous mode
[   48.461642][ T5596] hsr_slave_1: entered promiscuous mode
[   48.488347][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.505007][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.518002][ T5600] hsr_slave_0: entered promiscuous mode
[   48.520492][ T5600] hsr_slave_1: entered promiscuous mode
[   48.522812][ T5600] debugfs: 'hsr0' already exists in 'hsr'
[   48.524903][ T5600] Cannot create hsr debugfs directory
[   48.559166][ T5603] team0: Port device team_slave_0 added
[   48.573933][ T5603] team0: Port device team_slave_1 added
[   48.607400][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.610192][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.619110][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.623393][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.625585][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.633535][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.709421][ T5603] hsr_slave_0: entered promiscuous mode
[   48.711690][ T5603] hsr_slave_1: entered promiscuous mode
[   48.713931][ T5603] debugfs: 'hsr0' already exists in 'hsr'
[   48.715674][ T5603] Cannot create hsr debugfs directory
[   48.790362][ T5596] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   48.796584][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.814197][ T5596] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   48.818491][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.832808][ T5596] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   48.837618][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.840180][ T5596] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.844434][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.880601][ T5600] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.887214][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.893727][ T5600] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.897665][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.902797][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.905367][ T5596] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.907817][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.910021][ T5596] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.915254][ T5600] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.920942][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.931081][ T5600] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.936734][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.952153][   T33] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.955992][   T33] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.992415][ T5603] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.997033][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   49.001747][ T5603] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   49.007734][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   49.010479][ T5603] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   49.014678][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   49.017260][ T5603] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   49.021003][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.063722][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.093909][ T5596] 8021q: adding VLAN 0 to HW filter on device team0
[   49.107622][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.111823][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.114144][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.126261][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.128465][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.132960][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.147981][ T5603] 8021q: adding VLAN 0 to HW filter on device team0
[   49.151291][ T5600] 8021q: adding VLAN 0 to HW filter on device team0
[   49.159577][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.161840][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.173168][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.175746][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.180012][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.182324][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.197531][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.199787][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.245374][ T5603] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   49.474997][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.482929][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.515794][ T5600] veth0_vlan: entered promiscuous mode
[   49.528328][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.532057][ T5600] veth1_vlan: entered promiscuous mode
[   49.565426][ T5596] veth0_vlan: entered promiscuous mode
[   49.578671][ T5596] veth1_vlan: entered promiscuous mode
[   49.590023][ T5603] veth0_vlan: entered promiscuous mode
[   49.595438][ T5600] veth0_macvtap: entered promiscuous mode
[   49.601766][ T5603] veth1_vlan: entered promiscuous mode
[   49.605907][ T5600] veth1_macvtap: entered promiscuous mode
[   49.624787][ T5596] veth0_macvtap: entered promiscuous mode
[   49.629643][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.637614][ T5596] veth1_macvtap: entered promiscuous mode
[   49.641902][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.653883][   T54] Bluetooth: hci0: command tx timeout
[   49.654045][ T5598] Bluetooth: hci1: command tx timeout
[   49.657900][ T5605] Bluetooth: hci2: command tx timeout
[   49.659555][ T5603] veth0_macvtap: entered promiscuous mode
[   49.665282][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.668670][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.675683][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.680190][ T5603] veth1_macvtap: entered promiscuous mode
[   49.686539][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.691209][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.694699][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.706849][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.709865][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.726796][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.729810][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.754946][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.767515][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.789321][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.796941][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.800436][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.810820][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.813932][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.813951][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.822173][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.823013][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.864686][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.870967][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.881396][   T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.886281][   T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.917500][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.922871][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.936785][ T1317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.937249][ T5596] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.939507][ T1317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.196439][ T5726] loop2: detected capacity change from 0 to 8
[   50.375727][ T5743] syzkaller0: entered promiscuous mode
[   50.377550][ T5743] syzkaller0: entered allmulticast mode
[   50.532152][ T5749] jffs2: notice: (5749) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   50.586825][ T5603] ------------[ cut here ]------------
[   50.588802][ T5603] kernel BUG at fs/jffs2/nodelist.c:462!
[   50.591724][ T5603] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[   50.594148][ T5603] CPU: 0 UID: 0 PID: 5603 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   50.596980][ T5603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   50.600043][ T5603] RIP: 0010:jffs2_del_ino_cache+0x2b9/0x2c0
[   50.601852][ T5603] Code: fe e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 92 15 fd fe e9 42 fe ff ff e8 08 84 8f fe 90 <0f> 0b 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[   50.607678][ T5603] RSP: 0018:ffffc90005997a38 EFLAGS: 00010293
[   50.609483][ T5603] RAX: ffffffff83376d78 RBX: ffff88816bb32ec0 RCX: ffff88810cb70000
[   50.611886][ T5603] RDX: 0000000000000000 RSI: ffff88816bb32ec0 RDI: ffff88810734a000
[   50.614304][ T5603] RBP: 0000000000000006 R08: ffff88810734a363 R09: 1ffff11020e6946c
[   50.616719][ T5603] R10: dffffc0000000000 R11: ffffed1020e6946d R12: ffff88816bb32ec0
[   50.619068][ T5603] R13: dffffc0000000000 R14: ffff88816bb32ee0 R15: ffff88810734a000
[   50.621455][ T5603] FS:  000055555b61a500(0000) GS:ffff88818d959000(0000) knlGS:0000000000000000
[   50.624130][ T5603] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   50.626088][ T5603] CR2: 00007ffed924cde0 CR3: 000000016ca44000 CR4: 00000000000006f0
[   50.628528][ T5603] Call Trace:
[   50.629576][ T5603]  <TASK>
[   50.630509][ T5603]  ? jffs2_do_clear_inode+0x314/0x390
[   50.632147][ T5603]  jffs2_do_clear_inode+0x31f/0x390
[   50.633750][ T5603]  ? __pfx_jffs2_evict_inode+0x10/0x10
[   50.635404][ T5603]  evict+0x624/0xb50
[   50.636626][ T5603]  ? __pfx_evict+0x10/0x10
[   50.637997][ T5603]  ? do_raw_spin_unlock+0x4d/0x210
[   50.639606][ T5603]  evict_inodes+0x7e3/0x870
[   50.640997][ T5603]  ? __pfx_cgroup_writeback_umount+0x10/0x10
[   50.642835][ T5603]  ? __pfx_evict_inodes+0x10/0x10
[   50.644380][ T5603]  ? jffs2_sync_fs+0x97/0xb0
[   50.645799][ T5603]  ? sync_filesystem+0x1f6/0x230
[   50.647336][ T5603]  generic_shutdown_super+0xaa/0x2d0
[   50.648944][ T5603]  kill_mtd_super+0x23/0x70
[   50.650369][ T5603]  jffs2_kill_sb+0x96/0xb0
[   50.651773][ T5603]  deactivate_locked_super+0xbc/0x130
[   50.653431][ T5603]  cleanup_mnt+0x3d3/0x460
[   50.654812][ T5603]  task_work_run+0x1d9/0x270
[   50.656243][ T5603]  ? __pfx_task_work_run+0x10/0x10
[   50.657814][ T5603]  exit_to_user_mode_loop+0x1fa/0x730
[   50.659478][ T5603]  ? rcu_is_watching+0x15/0xb0
[   50.660941][ T5603]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.662805][ T5603]  do_syscall_64+0x353/0x580
[   50.664803][ T5603]  ? trace_irq_disable+0x3b/0x140
[   50.666436][ T5603]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.668253][ T5603] RIP: 0033:0x7f1ba8f9f397
[   50.669602][ T5603] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   50.675384][ T5603] RSP: 002b:00007ffed924d438 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   50.677901][ T5603] RAX: 0000000000000000 RBX: 00007f1ba90344bb RCX: 00007f1ba8f9f397
[   50.680332][ T5603] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed924d4f0
[   50.682712][ T5603] RBP: 00007ffed924d4f0 R08: 00007ffed924e4f0 R09: 00000000ffffffff
[   50.685110][ T5603] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed924e580
[   50.687507][ T5603] R13: 00007f1ba90344bb R14: 000000000000c507 R15: 00007ffed924e5c0
[   50.689924][ T5603]  </TASK>
[   50.690881][ T5603] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   50.692830][ T5603] ---[ end trace 0000000000000000 ]---
[   50.710396][ T5603] RIP: 0010:jffs2_del_ino_cache+0x2b9/0x2c0
[   50.718015][ T5603] Code: fe e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 92 15 fd fe e9 42 fe ff ff e8 08 84 8f fe 90 <0f> 0b 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[   50.728343][ T5603] RSP: 0018:ffffc90005997a38 EFLAGS: 00010293
[   50.730280][ T5603] RAX: ffffffff83376d78 RBX: ffff88816bb32ec0 RCX: ffff88810cb70000
[   50.732760][ T5603] RDX: 0000000000000000 RSI: ffff88816bb32ec0 RDI: ffff88810734a000
[   50.735684][ T5603] RBP: 0000000000000006 R08: ffff88810734a363 R09: 1ffff11020e6946c
[   50.738188][ T5603] R10: dffffc0000000000 R11: ffffed1020e6946d R12: ffff88816bb32ec0
[   50.740646][ T5603] R13: dffffc0000000000 R14: ffff88816bb32ee0 R15: ffff88810734a000
[   50.743064][ T5603] FS:  000055555b61a500(0000) GS:ffff88818d959000(0000) knlGS:0000000000000000
[   50.749053][ T5603] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   50.751185][ T5603] CR2: 0000559c4e982038 CR3: 000000016ca44000 CR4: 00000000000006f0
[   50.758257][ T5603] Kernel panic - not syncing: Fatal exception
[   50.760809][ T5603] Kernel Offset: disabled
[   50.762147][ T5603] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:40:50  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000035 RBX=0000000000000035 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900059972d0
R8 =ffff888168b10237 R9 =1ffff1102d162046 R10=dffffc0000000000 R11=ffffffff8565fde0
R12=dffffc0000000000 R13=ffffffff9aad2080 R14=ffffffff9aad20c0 R15=0000000000000000
RIP=ffffffff8565fe5c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555b61a500 ffffffff 00c00000
GS =0000 ffff88818d959000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffed924cde0 CR3=000000016ca44000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 ffffffff818dd90b
XMM02=00007fdf2b3f25e8 00007fdf2b3f2618 XMM03=00007fdf2b3f2600 00007fdf2b3f25e0
XMM04=00007fdf2bf5d020 00007fdf2b3f25c0 XMM05=00007fdf2b3f25d0 00007fdf2b3f2610
XMM06=00007fdf2b3f25f8 00007fdf2b3f25c8 XMM07=00007fdf2b3f2600 00007fdf2b3f25e0
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=dffffc0000000000 RCX=ffff88810e455940 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900050cf7c8 RSP=ffffc900050cf6a0
R8 =ffffffff90575937 R9 =1ffffffff20aeb26 R10=dffffc0000000000 R11=fffffbfff20aeb27
R12=1ffff110242085fd R13=ffff88823c63c448 R14=ffff888121042fe8 R15=0000000000000000
RIP=ffffffff81bad305 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a8f59000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd741357e20 CR3=000000000e946000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007ffef8d31180 00007ffef8d31180 XMM01=00007fd7407f2823 00007fd7407f2823
XMM02=0000000000000000 00000000000000ff XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0100100048100003 800408800401a880
XMM06=040a0173c0000800 03c0030c040003bc XMM07=0000000000000000 000055557689c9b8
XMM08=03ac0320040003a8 0300080003a00306 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
