last executing test programs: 544.886818ms ago: executing program 2 (id=3): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x2810880, &(0x7f0000000000)=ANY=[], 0x8b, 0x2a7, &(0x7f0000000180)="$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") rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./control\x00') unlink(&(0x7f0000000280)='./file1\x00') rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') 389.486002ms ago: executing program 0 (id=1): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x2) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, &(0x7f00000008c0)=ANY=[], 0xff, 0x0, &(0x7f0000000200)) rename(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0\x00') 383.709754ms ago: executing program 3 (id=4): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000940)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000980)=r8, 0x4) 0s ago: executing program 1 (id=2): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'gre0\x00', 0x400}) close(r1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts. [ 192.610321][ T5771] cgroup: Unknown subsys name 'net' [ 192.762801][ T5771] cgroup: Unknown subsys name 'cpuset' [ 192.779085][ T5771] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.477015][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.483979][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 242.336940][ T5771] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 246.662668][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 246.671152][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 246.679862][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 246.689088][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 246.699320][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 246.712454][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 246.721854][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 246.730674][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 246.738663][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 246.743526][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 246.747354][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 246.759688][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 246.770793][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 246.770893][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 246.781744][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 246.787156][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 246.795790][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 246.811942][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 246.822254][ T5796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.834941][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 246.863130][ T5807] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 246.882472][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.911283][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.935207][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 246.946764][ T5799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 248.037212][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 248.845060][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 248.902554][ T5799] Bluetooth: hci2: command tx timeout [ 248.902655][ T5088] Bluetooth: hci0: command tx timeout [ 248.908112][ T5799] Bluetooth: hci1: command tx timeout [ 248.923517][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 248.967673][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 248.993120][ T5799] Bluetooth: hci4: command tx timeout [ 248.993254][ T5088] Bluetooth: hci3: command tx timeout [ 249.359481][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 249.483509][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.494737][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.503079][ T5793] bridge_slave_0: entered allmulticast mode [ 249.512766][ T5793] bridge_slave_0: entered promiscuous mode [ 249.556829][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.568571][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.577482][ T5793] bridge_slave_1: entered allmulticast mode [ 249.586915][ T5793] bridge_slave_1: entered promiscuous mode [ 249.885025][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.029738][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.190246][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.197764][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.207745][ T5800] bridge_slave_0: entered allmulticast mode [ 250.217281][ T5800] bridge_slave_0: entered promiscuous mode [ 250.391592][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.399373][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.407043][ T5795] bridge_slave_0: entered allmulticast mode [ 250.416774][ T5795] bridge_slave_0: entered promiscuous mode [ 250.429391][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.436979][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.444780][ T5800] bridge_slave_1: entered allmulticast mode [ 250.454233][ T5800] bridge_slave_1: entered promiscuous mode [ 250.558799][ T5793] team0: Port device team_slave_0 added [ 250.571229][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.579096][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.586717][ T5795] bridge_slave_1: entered allmulticast mode [ 250.596701][ T5795] bridge_slave_1: entered promiscuous mode [ 250.641755][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.649420][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.656857][ T5806] bridge_slave_0: entered allmulticast mode [ 250.666510][ T5806] bridge_slave_0: entered promiscuous mode [ 250.722849][ T5793] team0: Port device team_slave_1 added [ 250.791552][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.801780][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.809533][ T5806] bridge_slave_1: entered allmulticast mode [ 250.817813][ T5806] bridge_slave_1: entered promiscuous mode [ 250.837883][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.944070][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.951786][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.959757][ T5794] bridge_slave_0: entered allmulticast mode [ 250.969095][ T5794] bridge_slave_0: entered promiscuous mode [ 250.979425][ T5088] Bluetooth: hci1: command tx timeout [ 250.996640][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.006662][ T5088] Bluetooth: hci0: command tx timeout [ 251.012547][ T5088] Bluetooth: hci2: command tx timeout [ 251.016169][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.039389][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.080344][ T5799] Bluetooth: hci3: command tx timeout [ 251.080402][ T5088] Bluetooth: hci4: command tx timeout [ 251.170177][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.177742][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.187918][ T5794] bridge_slave_1: entered allmulticast mode [ 251.197367][ T5794] bridge_slave_1: entered promiscuous mode [ 251.289821][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.301682][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.308845][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.336535][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.353924][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.361263][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.387779][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.480671][ T5795] team0: Port device team_slave_0 added [ 251.529048][ T5800] team0: Port device team_slave_0 added [ 251.545300][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.626245][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.643948][ T5795] team0: Port device team_slave_1 added [ 251.660462][ T5800] team0: Port device team_slave_1 added [ 251.713070][ T5806] team0: Port device team_slave_0 added [ 251.735873][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.857538][ T5806] team0: Port device team_slave_1 added [ 252.039077][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.046340][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.072683][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.126045][ T5794] team0: Port device team_slave_0 added [ 252.147996][ T5793] hsr_slave_0: entered promiscuous mode [ 252.158163][ T5793] hsr_slave_1: entered promiscuous mode [ 252.170674][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.177846][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.204587][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.268173][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.275830][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.302385][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.319882][ T5794] team0: Port device team_slave_1 added [ 252.331105][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.338246][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.365058][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.379599][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.386738][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.413326][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.460502][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.467680][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.494248][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.748136][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.755358][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.781841][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.800654][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.807799][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.834775][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.860555][ T5800] hsr_slave_0: entered promiscuous mode [ 252.869450][ T5800] hsr_slave_1: entered promiscuous mode [ 252.877940][ T5800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.885710][ T5800] Cannot create hsr debugfs directory [ 253.069254][ T5799] Bluetooth: hci2: command tx timeout [ 253.069450][ T5795] hsr_slave_0: entered promiscuous mode [ 253.074818][ T5799] Bluetooth: hci0: command tx timeout [ 253.085197][ T5795] hsr_slave_1: entered promiscuous mode [ 253.087239][ T5799] Bluetooth: hci1: command tx timeout [ 253.094866][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.105406][ T5795] Cannot create hsr debugfs directory [ 253.139145][ T5088] Bluetooth: hci3: command tx timeout [ 253.151920][ T5088] Bluetooth: hci4: command tx timeout [ 253.175516][ T5806] hsr_slave_0: entered promiscuous mode [ 253.185868][ T5806] hsr_slave_1: entered promiscuous mode [ 253.194631][ T5806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.202516][ T5806] Cannot create hsr debugfs directory [ 253.376911][ T5794] hsr_slave_0: entered promiscuous mode [ 253.387161][ T5794] hsr_slave_1: entered promiscuous mode [ 253.396004][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.403878][ T5794] Cannot create hsr debugfs directory [ 254.719383][ T5793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 254.786105][ T5793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 254.835732][ T5793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 254.887641][ T5793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 255.047498][ T5806] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 255.092960][ T5800] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 255.127168][ T5800] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 255.140858][ T5088] Bluetooth: hci1: command tx timeout [ 255.146599][ T5799] Bluetooth: hci0: command tx timeout [ 255.150365][ T53] Bluetooth: hci2: command tx timeout [ 255.159632][ T5800] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 255.180752][ T5806] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 255.207331][ T5806] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 255.220716][ T5799] Bluetooth: hci4: command tx timeout [ 255.226366][ T5799] Bluetooth: hci3: command tx timeout [ 255.255327][ T5800] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 255.276250][ T5806] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 255.518088][ T5795] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 255.606257][ T5795] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 255.657362][ T5795] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 255.693082][ T5795] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 255.874837][ T5794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 255.950567][ T5794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 255.995696][ T5794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 256.024879][ T5794] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 256.518552][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.602838][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.715479][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.815935][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.835329][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.875439][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.883042][ T4365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.998642][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.070359][ T4365] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.077919][ T4365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.098537][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.106166][ T4365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.200908][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.216770][ T4173] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.224532][ T4173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.340170][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.391255][ T4173] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.398808][ T4173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.419042][ T4173] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.426520][ T4173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.500931][ T4173] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.508463][ T4173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.636757][ T5793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.666662][ T4173] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.674320][ T4173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.061651][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.290111][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.406025][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.413812][ T4365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.570914][ T4365] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.578479][ T4365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.886869][ T5794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.968351][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.010986][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.109727][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.266456][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.656008][ T5806] veth0_vlan: entered promiscuous mode [ 260.754159][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.763982][ T5793] veth0_vlan: entered promiscuous mode [ 260.851528][ T5806] veth1_vlan: entered promiscuous mode [ 260.943425][ T5793] veth1_vlan: entered promiscuous mode [ 261.058672][ T5795] veth0_vlan: entered promiscuous mode [ 261.174073][ T5795] veth1_vlan: entered promiscuous mode [ 261.278599][ T5806] veth0_macvtap: entered promiscuous mode [ 261.399043][ T5806] veth1_macvtap: entered promiscuous mode [ 261.411756][ T5794] veth0_vlan: entered promiscuous mode [ 261.461871][ T5793] veth0_macvtap: entered promiscuous mode [ 261.558486][ T5793] veth1_macvtap: entered promiscuous mode [ 261.606592][ T5794] veth1_vlan: entered promiscuous mode [ 261.623102][ T5795] veth0_macvtap: entered promiscuous mode [ 261.670369][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.739320][ T5795] veth1_macvtap: entered promiscuous mode [ 261.769437][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.821862][ T5806] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.832397][ T5806] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.842545][ T5806] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.851773][ T5806] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.891589][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.947339][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.018700][ T5793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.029569][ T5793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.038574][ T5793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.047918][ T5793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.133646][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.189993][ T5794] veth0_macvtap: entered promiscuous mode [ 262.268603][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.300394][ T5794] veth1_macvtap: entered promiscuous mode [ 262.368064][ T5795] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.378512][ T5795] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.389125][ T5795] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.398171][ T5795] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.585304][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.682154][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.772525][ T5794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.781749][ T5794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.790949][ T5794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.800077][ T5794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.397338][ T5800] veth0_vlan: entered promiscuous mode [ 263.532560][ T5800] veth1_vlan: entered promiscuous mode [ 263.856419][ T5800] veth0_macvtap: entered promiscuous mode [ 263.958785][ T5800] veth1_macvtap: entered promiscuous mode [ 264.162168][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.266253][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.403033][ T5800] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.412301][ T5800] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.421646][ T5800] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.430843][ T5800] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.013967][ T3624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.023378][ T3624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.248199][ T4365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.257363][ T4365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.317703][ T4365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.326160][ T4365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.561937][ T4365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.570111][ T4365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.700445][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.708609][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.913564][ T3919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.922747][ T3919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.980268][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.988246][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.035281][ T5806] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 270.269617][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.277719][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.577546][ T5974] loop2: detected capacity change from 0 to 64 [ 270.813977][ T5974] hfs: keylen 94 too large [ 270.818684][ T5974] hfs: inconsistency in B*Tree (1,0,1,0,3) [ 270.921831][ T5980] ===================================================== [ 270.929543][ T5980] BUG: KMSAN: uninit-value in hfs_free_fork+0x929/0xa70 [ 270.936735][ T5980] hfs_free_fork+0x929/0xa70 [ 270.942164][ T5980] hfs_cat_delete+0x47c/0xb90 [ 270.947087][ T5980] hfs_remove+0x167/0x310 [ 270.953788][ T5980] vfs_unlink+0x616/0xab0 [ 270.958359][ T5980] do_unlinkat+0x6e6/0xe50 [ 270.963824][ T5980] __x64_sys_unlink+0x71/0xb0 [ 270.968743][ T5980] x64_sys_call+0x29de/0x3db0 [ 270.973915][ T5980] do_syscall_64+0xd9/0x1b0 [ 270.978668][ T5980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.985637][ T5980] [ 270.988084][ T5980] Uninit was created at: [ 270.992853][ T5980] __kmalloc_noprof+0x95f/0x1310 [ 270.998007][ T5980] hfs_find_init+0x93/0x260 [ 271.002913][ T5980] hfs_free_fork+0x392/0xa70 [ 271.007739][ T5980] hfs_cat_delete+0x47c/0xb90 [ 271.012784][ T5980] hfs_remove+0x167/0x310 [ 271.017338][ T5980] vfs_unlink+0x616/0xab0 [ 271.022079][ T5980] do_unlinkat+0x6e6/0xe50 [ 271.026748][ T5980] __x64_sys_unlink+0x71/0xb0 [ 271.031835][ T5980] x64_sys_call+0x29de/0x3db0 [ 271.036773][ T5980] do_syscall_64+0xd9/0x1b0 [ 271.041706][ T5980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.047825][ T5980] [ 271.052345][ T5980] CPU: 0 UID: 0 PID: 5980 Comm: syz.2.3 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(undef) [ 271.067225][ T5980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 271.078073][ T5980] ===================================================== [ 271.085282][ T5980] Disabling lock debugging due to kernel taint [ 271.091697][ T5980] Kernel panic - not syncing: kmsan.panic set ... [ 271.098293][ T5980] CPU: 0 UID: 0 PID: 5980 Comm: syz.2.3 Tainted: G B 6.15.0-rc7-syzkaller #0 PREEMPT(undef) [ 271.110266][ T5980] Tainted: [B]=BAD_PAGE [ 271.114569][ T5980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 271.124794][ T5980] Call Trace: [ 271.128202][ T5980] [ 271.131243][ T5980] __dump_stack+0x26/0x30 [ 271.135793][ T5980] dump_stack_lvl+0x53/0x270 [ 271.140588][ T5980] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 271.146650][ T5980] dump_stack+0x1e/0x25 [ 271.151017][ T5980] panic+0x4bd/0xd50 [ 271.155211][ T5980] kmsan_report+0x29d/0x2a0 [ 271.160013][ T5980] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 271.166639][ T5980] ? __msan_warning+0x96/0x120 [ 271.171622][ T5980] ? hfs_free_fork+0x929/0xa70 [ 271.176586][ T5980] ? hfs_cat_delete+0x47c/0xb90 [ 271.181647][ T5980] ? hfs_remove+0x167/0x310 [ 271.186360][ T5980] ? vfs_unlink+0x616/0xab0 [ 271.191057][ T5980] ? do_unlinkat+0x6e6/0xe50 [ 271.195851][ T5980] ? __x64_sys_unlink+0x71/0xb0 [ 271.200903][ T5980] ? x64_sys_call+0x29de/0x3db0 [ 271.205969][ T5980] ? do_syscall_64+0xd9/0x1b0 [ 271.210864][ T5980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.217131][ T5980] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 271.223153][ T5980] ? stack_depot_save_flags+0x60f/0x7c0 [ 271.228911][ T5980] ? kmsan_get_metadata+0x105/0x1b0 [ 271.234357][ T5980] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 271.240912][ T5980] ? kmsan_get_metadata+0x105/0x1b0 [ 271.246344][ T5980] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 271.252396][ T5980] ? hfs_brec_find+0x20f/0x9f0 [ 271.257354][ T5980] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 271.263430][ T5980] ? kmsan_get_metadata+0x105/0x1b0 [ 271.268868][ T5980] __msan_warning+0x96/0x120 [ 271.273683][ T5980] hfs_free_fork+0x929/0xa70 [ 271.278516][ T5980] hfs_cat_delete+0x47c/0xb90 [ 271.283485][ T5980] hfs_remove+0x167/0x310 [ 271.288006][ T5980] ? __pfx_hfs_remove+0x10/0x10 [ 271.293081][ T5980] vfs_unlink+0x616/0xab0 [ 271.297631][ T5980] do_unlinkat+0x6e6/0xe50 [ 271.302261][ T5980] __x64_sys_unlink+0x71/0xb0 [ 271.307145][ T5980] x64_sys_call+0x29de/0x3db0 [ 271.312042][ T5980] do_syscall_64+0xd9/0x1b0 [ 271.316761][ T5980] ? irqentry_exit+0x16/0x60 [ 271.321545][ T5980] ? clear_bhb_loop+0x40/0x90 [ 271.326400][ T5980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.332485][ T5980] RIP: 0033:0x7fb2d538e969 [ 271.337054][ T5980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.356864][ T5980] RSP: 002b:00007fb2d61d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 271.365491][ T5980] RAX: ffffffffffffffda RBX: 00007fb2d55b6080 RCX: 00007fb2d538e969 [ 271.373620][ T5980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 271.381752][ T5980] RBP: 00007fb2d5410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 271.389851][ T5980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.397952][ T5980] R13: 0000000000000001 R14: 00007fb2d55b6080 R15: 00007ffefc3d10f8 [ 271.406128][ T5980] [ 271.409639][ T5980] Kernel Offset: disabled [ 271.414055][ T5980] Rebooting in 86400 seconds..