last executing test programs: 184.637197ms ago: executing program 3 (id=4): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2e3, &(0x7f0000000800)="$eJzs3UFPE00cx/Hf7Ja2PPDw7CMYE+PBoERPRvBivDQxxNfgRSPSmhAaiIiJcrHxbHwB3rn4AnwRxoMx8YwnT74AbmtmO2Wn7W5LQbog309S2t2d2fnP7rY7/6XNCsC5dX95b/fOT/swUqhQ0j0psIuuqiTpoi5VX25sr203G/VBKwqlqpKHkZKapq/M6kYjq6qtl9RwIjtV0rQ/DycjjuP4R9FBoEhV9xxmLQykint3hn7h06zSMz3RM90KpdYY4zmNzL729UozRccBACiWaZ/fA3een3bj9yCQFtxp3z//f/+34HiP54b2iw6hYN75P8myYmP373/JojTfM5p05TtZ4qjt2LFYWe0jq2uAabqzyv5kMYklmHy21mzcWt1s1gO9VS1h/LxwTlJNdZezZkXbv+r5jHndyv7E3rDSuaaSPkzYPiyl8ddqXpHZrEaPurUPw3w2X81jE+mD6gfjv1Js/D67PfVgIo3/dt7qNp8/ss9Ru1ROL/+3u6F0uXvDDuxlmJeRyG2pOFT3BYKoO85yZq2yemq1e7eY15Jbz2xmraUhteZsrY9erfRozq950sx789DM65c+adkb/wd2ay+o/52ZvZKkpDsyBvanlJSM/FmtK5klg9H7ghGl2/idnuquZl683llfaTYbW+N+YWMYe6Pn80Wk3jmdg+C0RHi0F/Yz1p+jqLFVGk/r5WNvuqrbKXYw01+msrO+UvELt3vaOSH2rrDztj5E650LeEMjHOOnEgqT7vT8Mm/Ef2L+YvbDw7TzP5evTNlRXZL02D/RgHF6PGzY5mVAixm5QXqp/h9vTcZdn8/PgKYyM7iWDpdzJXWv3ZSuezP3diuDcq5IF3SQDZ99Zlnf9ITr/wAAAAAAAAAAAAAAAAAAAGdN37f/v0y3F/zB30t4zfE9cgAAAAAAAAAAAAAAAAAAAAAAjiD//r9VneD9f9PfAUyOcP/f3ht7AjiW3wEAAP//zmlk6Q==") mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000600), &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x620442, 0x0, 0x1, 0x0, &(0x7f0000000d40)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x104800, 0x0, 0x81, 0x0, &(0x7f0000000040)) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 0s ago: executing program 3 (id=6): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffeb9) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000040), 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x20004, r6, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f00000001c0)=0x7) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r9 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r9, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x7}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000008400000005000000200000000008000012000000000000008400000006000000070000000000000030000000000000008400000001"], 0x60, 0x8890}, 0x24000052) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. [ 62.721108][ T5598] cgroup: Unknown subsys name 'net' [ 62.811125][ T5598] cgroup: Unknown subsys name 'cpuset' [ 62.819755][ T5598] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.172114][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.032949][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.041707][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.061386][ T4932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.062749][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.063178][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.063923][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.071366][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.077914][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.089891][ T4932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.091885][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.092339][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.106185][ T4932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.106799][ T4932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.107144][ T4932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.119253][ T4932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.130326][ T4932] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.133215][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.134173][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.135514][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.136342][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.214232][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.226052][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.233453][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.246234][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.254491][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.910171][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.910348][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.910554][ T5618] bridge_slave_0: entered allmulticast mode [ 69.912279][ T5618] bridge_slave_0: entered promiscuous mode [ 69.917520][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.917607][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.917920][ T5618] bridge_slave_1: entered allmulticast mode [ 69.919904][ T5618] bridge_slave_1: entered promiscuous mode [ 69.975271][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.975386][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.975503][ T5610] bridge_slave_0: entered allmulticast mode [ 69.977082][ T5610] bridge_slave_0: entered promiscuous mode [ 69.980156][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.980249][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.980368][ T5610] bridge_slave_1: entered allmulticast mode [ 69.982084][ T5610] bridge_slave_1: entered promiscuous mode [ 70.031390][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.052236][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.052403][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.053805][ T5619] bridge_slave_0: entered allmulticast mode [ 70.055412][ T5619] bridge_slave_0: entered promiscuous mode [ 70.081767][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.112031][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.112138][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.112254][ T5619] bridge_slave_1: entered allmulticast mode [ 70.113853][ T5619] bridge_slave_1: entered promiscuous mode [ 70.138503][ T52] Bluetooth: hci2: command tx timeout [ 70.138906][ T52] Bluetooth: hci0: command tx timeout [ 70.146681][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.146830][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.146947][ T5617] bridge_slave_0: entered allmulticast mode [ 70.149792][ T5617] bridge_slave_0: entered promiscuous mode [ 70.181698][ T5618] team0: Port device team_slave_0 added [ 70.184586][ T5618] team0: Port device team_slave_1 added [ 70.197044][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.197204][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.197321][ T5617] bridge_slave_1: entered allmulticast mode [ 70.199266][ T5617] bridge_slave_1: entered promiscuous mode [ 70.211813][ T5611] Bluetooth: hci3: command tx timeout [ 70.218169][ T5611] Bluetooth: hci1: command tx timeout [ 70.234248][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.238684][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.242373][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.242580][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.242671][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.243077][ T5614] bridge_slave_0: entered allmulticast mode [ 70.244972][ T5614] bridge_slave_0: entered promiscuous mode [ 70.247707][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.247810][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.247921][ T5614] bridge_slave_1: entered allmulticast mode [ 70.250140][ T5614] bridge_slave_1: entered promiscuous mode [ 70.269764][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.269780][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.269801][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.291277][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.294400][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.298454][ T5611] Bluetooth: hci4: command tx timeout [ 70.360585][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.360600][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.360622][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.365051][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.398940][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.449655][ T5619] team0: Port device team_slave_0 added [ 70.452390][ T5619] team0: Port device team_slave_1 added [ 70.466759][ T5610] team0: Port device team_slave_0 added [ 70.470541][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.504122][ T5610] team0: Port device team_slave_1 added [ 70.534505][ T5617] team0: Port device team_slave_0 added [ 70.537412][ T5617] team0: Port device team_slave_1 added [ 70.550250][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.550322][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.550344][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.567611][ T5614] team0: Port device team_slave_0 added [ 70.597104][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.597121][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.597142][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.599678][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.599693][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.599714][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.604621][ T5614] team0: Port device team_slave_1 added [ 70.612036][ T5618] hsr_slave_0: entered promiscuous mode [ 70.613272][ T5618] hsr_slave_1: entered promiscuous mode [ 70.614937][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.614948][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.614969][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.627952][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.627967][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.627989][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.646511][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.646527][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.646548][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.751585][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.751602][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.751624][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.812757][ T5619] hsr_slave_0: entered promiscuous mode [ 70.814392][ T5619] hsr_slave_1: entered promiscuous mode [ 70.815133][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 70.815238][ T5619] Cannot create hsr debugfs directory [ 70.816045][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.816056][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.816078][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.912172][ T5610] hsr_slave_0: entered promiscuous mode [ 70.913406][ T5610] hsr_slave_1: entered promiscuous mode [ 70.914107][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 70.914125][ T5610] Cannot create hsr debugfs directory [ 70.955698][ T5617] hsr_slave_0: entered promiscuous mode [ 70.956642][ T5617] hsr_slave_1: entered promiscuous mode [ 70.957366][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 70.957384][ T5617] Cannot create hsr debugfs directory [ 71.016306][ T5614] hsr_slave_0: entered promiscuous mode [ 71.017237][ T5614] hsr_slave_1: entered promiscuous mode [ 71.017907][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 71.017924][ T5614] Cannot create hsr debugfs directory [ 71.411290][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.411756][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.455232][ T5618] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.470165][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.472872][ T5618] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.483863][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.487373][ T5618] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.495409][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.513365][ T5618] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.522931][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.585417][ T5619] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.595701][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.596556][ T5619] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.606813][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.614327][ T5619] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.624621][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.630228][ T5619] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.636901][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.725450][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.733637][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.734611][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.743878][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.758922][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.769299][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.782469][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.793456][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.897951][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.906911][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.925067][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.928906][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.935856][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.955559][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.958833][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.966842][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.967668][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.972728][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.050608][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.067396][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.076809][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.090455][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.099958][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.110627][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.110802][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.123700][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.135611][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.145012][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.147349][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.155045][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.170970][ T2170] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.171065][ T2170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.200029][ T2170] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.200131][ T2170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.214858][ T5611] Bluetooth: hci0: command tx timeout [ 72.214889][ T5611] Bluetooth: hci2: command tx timeout [ 72.229757][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.229851][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.288359][ T52] Bluetooth: hci1: command tx timeout [ 72.288405][ T52] Bluetooth: hci3: command tx timeout [ 72.345122][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.368428][ T5611] Bluetooth: hci4: command tx timeout [ 72.460569][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.486028][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.486144][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.536017][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.536132][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.567326][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.644058][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.693374][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.699281][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.699379][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.725138][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.725258][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.795468][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.847536][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.847639][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.934505][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.934638][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.271183][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.335687][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.563754][ T5618] veth0_vlan: entered promiscuous mode [ 73.603881][ T5618] veth1_vlan: entered promiscuous mode [ 73.758950][ T5618] veth0_macvtap: entered promiscuous mode [ 73.781498][ T5618] veth1_macvtap: entered promiscuous mode [ 73.865636][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.909973][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.983564][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.988561][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.989998][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.990037][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.990068][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.118537][ T5619] veth0_vlan: entered promiscuous mode [ 74.185155][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.217124][ T5619] veth1_vlan: entered promiscuous mode [ 74.243413][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.243467][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.301179][ T5611] Bluetooth: hci2: command tx timeout [ 74.301216][ T52] Bluetooth: hci0: command tx timeout [ 74.302392][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.334961][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.334997][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.354452][ T5610] veth0_vlan: entered promiscuous mode [ 74.369593][ T52] Bluetooth: hci3: command tx timeout [ 74.369640][ T52] Bluetooth: hci1: command tx timeout [ 74.401630][ T5610] veth1_vlan: entered promiscuous mode [ 74.430416][ T5618] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.436047][ T5619] veth0_macvtap: entered promiscuous mode [ 74.458458][ T5611] Bluetooth: hci4: command tx timeout [ 74.473463][ T5617] veth0_vlan: entered promiscuous mode [ 74.478991][ T5619] veth1_macvtap: entered promiscuous mode [ 74.524141][ T5617] veth1_vlan: entered promiscuous mode [ 74.560286][ T5614] veth0_vlan: entered promiscuous mode [ 74.574217][ T5799] loop3: detected capacity change from 0 to 64 [ 74.594426][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.600492][ T5610] veth0_macvtap: entered promiscuous mode [ 74.633611][ T5799] hfs: hfs: Invalid key length: 94 [ 74.652616][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.653012][ T5610] veth1_macvtap: entered promiscuous mode [ 74.666943][ T5614] veth1_vlan: entered promiscuous mode ** replaying previous printk message ** [ 74.687398][ T12] ------------[ cut here ]------------ [ 74.687440][ T12] kernel BUG at fs/hfs/inode.c:476! [ 74.687492][ T12] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 74.707925][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 74.717204][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.717217][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.720098][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.741631][ T12] Workqueue: writeback wb_workfn (flush-7:3) [ 74.747622][ T12] RIP: 0010:hfs_write_inode+0x9c7/0xa00 [ 74.753155][ T12] Code: 40 31 ff e8 3b d8 0c ff 81 e3 00 00 00 40 75 1c e8 2e d3 0c ff 49 bc f8 f8 f8 f8 f8 f8 f8 f8 e9 48 f7 ff ff e8 1a d3 0c ff 90 <0f> 0b e8 12 d3 0c ff e8 1d d3 77 fe eb dd 44 89 f1 80 e1 07 80 c1 [ 74.772748][ T12] RSP: 0018:ffffc90000117160 EFLAGS: 00010293 [ 74.778815][ T12] RAX: ffffffff82baec06 RBX: ffff88802ae63a80 RCX: ffff88801def8000 [ 74.786771][ T12] RDX: 0000000000000000 RSI: ffffffff8efdc1f0 RDI: 0000000000000000 [ 74.794777][ T12] RBP: ffffc900001172f8 R08: ffff88801def8000 R09: 0000000000000003 [ 74.802783][ T12] R10: 0000000000000004 R11: 0000000000000000 R12: f8f8f8f8f8f8f8f8 [ 74.810758][ T12] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000022e30 [ 74.818720][ T12] FS: 0000000000000000(0000) GS:ffff888124ddc000(0000) knlGS:0000000000000000 [ 74.827634][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.834204][ T12] CR2: 00007fd3e294a000 CR3: 00000000611bc000 CR4: 00000000003526f0 [ 74.842174][ T12] Call Trace: [ 74.845456][ T12] [ 74.848376][ T12] ? __pfx_hfs_write_inode+0x10/0x10 [ 74.853716][ T12] ? do_raw_spin_unlock+0xf5/0x200 [ 74.858842][ T12] __writeback_single_inode+0x69d/0x1220 [ 74.864467][ T12] writeback_sb_inodes+0x9de/0x1b00 [ 74.869659][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 74.875289][ T12] ? rcu_is_watching+0x16/0xb0 [ 74.880039][ T12] ? queue_io+0x2d3/0x470 [ 74.884353][ T12] wb_writeback+0x41c/0xad0 [ 74.888839][ T12] ? queue_io+0x271/0x470 [ 74.893159][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 74.898170][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 74.903184][ T12] wb_workfn+0x431/0x10f0 [ 74.907528][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 74.912279][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 74.917292][ T12] ? lock_acquire+0x115/0x350 [ 74.921951][ T12] ? rcu_is_watching+0x16/0xb0 [ 74.926698][ T12] ? process_scheduled_works+0x97a/0x1630 [ 74.932416][ T12] process_scheduled_works+0xc3d/0x1630 [ 74.937971][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 74.943955][ T12] ? assign_work+0x3cf/0x5d0 [ 74.948539][ T12] worker_thread+0xa47/0xfb0 [ 74.953164][ T12] kthread+0x38b/0x480 [ 74.957502][ T12] ? __pfx_worker_thread+0x10/0x10 [ 74.962608][ T12] ? __pfx_kthread+0x10/0x10 [ 74.967190][ T12] ret_from_fork+0x514/0xb70 [ 74.971766][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 74.976865][ T12] ? __switch_to+0xc89/0x1420 [ 74.981528][ T12] ? __pfx_kthread+0x10/0x10 [ 74.986103][ T12] ret_from_fork_asm+0x1a/0x30 [ 74.990869][ T12] [ 74.993871][ T12] Modules linked in: [ 74.998866][ T12] ---[ end trace 0000000000000000 ]--- [ 75.012118][ T12] RIP: 0010:hfs_write_inode+0x9c7/0xa00 [ 75.012159][ T12] Code: 40 31 ff e8 3b d8 0c ff 81 e3 00 00 00 40 75 1c e8 2e d3 0c ff 49 bc f8 f8 f8 f8 f8 f8 f8 f8 e9 48 f7 ff ff e8 1a d3 0c ff 90 <0f> 0b e8 12 d3 0c ff e8 1d d3 77 fe eb dd 44 89 f1 80 e1 07 80 c1 [ 75.012177][ T12] RSP: 0018:ffffc90000117160 EFLAGS: 00010293 [ 75.012197][ T12] RAX: ffffffff82baec06 RBX: ffff88802ae63a80 RCX: ffff88801def8000 [ 75.012213][ T12] RDX: 0000000000000000 RSI: ffffffff8efdc1f0 RDI: 0000000000000000 [ 75.012226][ T12] RBP: ffffc900001172f8 R08: ffff88801def8000 R09: 0000000000000003 [ 75.012241][ T12] R10: 0000000000000004 R11: 0000000000000000 R12: f8f8f8f8f8f8f8f8 [ 75.012254][ T12] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000022e30 [ 75.012267][ T12] FS: 0000000000000000(0000) GS:ffff888124ddc000(0000) knlGS:0000000000000000 [ 75.012283][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.012296][ T12] CR2: 000055e020ef1168 CR3: 000000007ac34000 CR4: 00000000003526f0 [ 75.012317][ T12] Kernel panic - not syncing: Fatal exception [ 75.114235][ T12] Kernel Offset: disabled [ 75.118556][ T12] Rebooting in 86400 seconds..