last executing test programs: 181.379331ms ago: executing program 0 (id=1): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000280)='./file1\x00', 0x30008c0, &(0x7f0000000940)=ANY=[@ANYBLOB="696f636861727365743d6d61637475726b6973682c6469725f756d61736b3d30303030303030303030303030303030303030303030302c66696c655f756d61736b3d30303030303030303030303030303030303031303030312c636f6465706167653d6370313235352c747970653dc166d6432c000e5194516ad69c8e413d99df9075e1eb5820198c6c569814fd0c2f"], 0x11, 0x2fe, &(0x7f00000004c0)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 0s ago: executing program 0 (id=6): r0 = socket(0x10, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r5, 0x851, 0x0) mount(0x0, 0x0, 0x0, 0x1c3425, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r6, 0x11, 0x2, 0x0, &(0x7f0000000140)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000003c0)={0x0, 0x3, 0x1, {0x0, @raw_data="0a3130b9e72ca52d37ad6ea6ba74763b50e4ebe61a7f4f27115b6bec68bb830fe90bf6bd7c57a21292e3520f5253ee284930640e151f65b111f1fbdb2b2f3d679401e241a58f159820bf8cddffa2de0d135d35eab63ef48435980e13edcf0117f9e6ee6b59367edb8375dae8870ac5df7bb619c8ec0b2b1ec80027bf68d1b1ce3299fe3f3c695bfaff71cee8a1be4aa14db5d6508d4ebbd346e63cb43f0301eec127dcbb2f7e100cc58a5cd7060e756a94c0242ad21bddfa3653970a80a4cf9299ab4273cd1b4579"}, 0x10000}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getxattr(0x0, &(0x7f0000000500)=@random={'btrfs.', '\xeb2\xd9\xca\xfc-\x00\aB\\\x1a\xd11&2)\x19(M\xa7\x03'}, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @private1, 0x0, 0x80}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.146' (ED25519) to the list of known hosts. [ 65.939908][ T5850] cgroup: Unknown subsys name 'net' [ 66.079456][ T5850] cgroup: Unknown subsys name 'cpuset' [ 66.087444][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.425299][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.864541][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.865156][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.872182][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.887771][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.888199][ T5872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.902273][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.909844][ T5872] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.917317][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.917323][ T5873] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.917527][ T5872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.925099][ T5873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.931857][ T5872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.944321][ T5188] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.948292][ T5872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.952807][ T5188] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.973763][ T5188] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.979977][ T5872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.986769][ T5188] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.995741][ T5872] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.995856][ T5188] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.010385][ T5188] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.018961][ T5188] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.026421][ T5188] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.034900][ T5879] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.045679][ T5879] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.388374][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 70.410873][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 70.483268][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 70.573091][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 70.597689][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.605322][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.612824][ T5860] bridge_slave_0: entered allmulticast mode [ 70.619748][ T5860] bridge_slave_0: entered promiscuous mode [ 70.641368][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 70.650970][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.658323][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.665622][ T5860] bridge_slave_1: entered allmulticast mode [ 70.672589][ T5860] bridge_slave_1: entered promiscuous mode [ 70.718369][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.725506][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.732812][ T5861] bridge_slave_0: entered allmulticast mode [ 70.739767][ T5861] bridge_slave_0: entered promiscuous mode [ 70.767616][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.778973][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.788512][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.795652][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.803240][ T5861] bridge_slave_1: entered allmulticast mode [ 70.810276][ T5861] bridge_slave_1: entered promiscuous mode [ 70.852011][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.859257][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.866636][ T5871] bridge_slave_0: entered allmulticast mode [ 70.873982][ T5871] bridge_slave_0: entered promiscuous mode [ 70.906070][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.913353][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.920841][ T5871] bridge_slave_1: entered allmulticast mode [ 70.927793][ T5871] bridge_slave_1: entered promiscuous mode [ 70.943296][ T5860] team0: Port device team_slave_0 added [ 70.951217][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.962678][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.995194][ T5860] team0: Port device team_slave_1 added [ 71.023157][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.031574][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.038830][ T5864] bridge_slave_0: entered allmulticast mode [ 71.045507][ T5864] bridge_slave_0: entered promiscuous mode [ 71.068426][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.075548][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.082923][ T5877] bridge_slave_0: entered allmulticast mode [ 71.090060][ T5877] bridge_slave_0: entered promiscuous mode [ 71.099535][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.109039][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.116220][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.123499][ T5864] bridge_slave_1: entered allmulticast mode [ 71.130252][ T5864] bridge_slave_1: entered promiscuous mode [ 71.152042][ T5861] team0: Port device team_slave_0 added [ 71.158151][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.165306][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.172792][ T5877] bridge_slave_1: entered allmulticast mode [ 71.179916][ T5877] bridge_slave_1: entered promiscuous mode [ 71.188285][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.205211][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.212499][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.238835][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.250991][ T5861] team0: Port device team_slave_1 added [ 71.281544][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.291305][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.298339][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.324613][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.360000][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.373644][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.381181][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.407158][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.420343][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.431057][ T5871] team0: Port device team_slave_0 added [ 71.459386][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.466389][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.492470][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.510486][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.529114][ T5871] team0: Port device team_slave_1 added [ 71.536077][ T5864] team0: Port device team_slave_0 added [ 71.563246][ T5860] hsr_slave_0: entered promiscuous mode [ 71.569554][ T5860] hsr_slave_1: entered promiscuous mode [ 71.592676][ T5864] team0: Port device team_slave_1 added [ 71.602330][ T5877] team0: Port device team_slave_0 added [ 71.647133][ T5877] team0: Port device team_slave_1 added [ 71.653536][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.661174][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.687230][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.698598][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.705568][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.731680][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.743612][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.750664][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.776683][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.797582][ T5861] hsr_slave_0: entered promiscuous mode [ 71.803905][ T5861] hsr_slave_1: entered promiscuous mode [ 71.810163][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 71.815922][ T5861] Cannot create hsr debugfs directory [ 71.829777][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.837066][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.863318][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.907603][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.914597][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.942157][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.979147][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.986133][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.012082][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.022772][ T5879] Bluetooth: hci1: command tx timeout [ 72.038533][ T5864] hsr_slave_0: entered promiscuous mode [ 72.044691][ T5864] hsr_slave_1: entered promiscuous mode [ 72.051046][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 72.056848][ T5864] Cannot create hsr debugfs directory [ 72.089149][ T5871] hsr_slave_0: entered promiscuous mode [ 72.095995][ T5871] hsr_slave_1: entered promiscuous mode [ 72.101761][ T5879] Bluetooth: hci4: command tx timeout [ 72.102697][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 72.107344][ T5879] Bluetooth: hci3: command tx timeout [ 72.107369][ T5879] Bluetooth: hci2: command tx timeout [ 72.107393][ T5879] Bluetooth: hci0: command tx timeout [ 72.129493][ T5871] Cannot create hsr debugfs directory [ 72.214076][ T5877] hsr_slave_0: entered promiscuous mode [ 72.220797][ T5877] hsr_slave_1: entered promiscuous mode [ 72.227611][ T5877] debugfs: 'hsr0' already exists in 'hsr' [ 72.233370][ T5877] Cannot create hsr debugfs directory [ 72.403780][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.437452][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.466515][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.489096][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.548066][ T5861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.557960][ T5861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.572920][ T5861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.589831][ T5861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.614308][ T5864] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.625762][ T5864] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.642324][ T5864] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.661753][ T5864] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.699898][ T5871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.718506][ T5871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.743874][ T5871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.755045][ T5871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.814962][ T5877] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.835719][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.842670][ T5877] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.852303][ T5877] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.863198][ T5877] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.906266][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.925256][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.932427][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.963410][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.970556][ T2967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.016695][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.029958][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.046093][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.064200][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.093608][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.100799][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.110577][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.129791][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.136936][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.159341][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.166500][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.175277][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.182398][ T2967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.201080][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.246212][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.261953][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.269118][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.283953][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.291143][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.340284][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.400686][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.407874][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.421344][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.428554][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.459183][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.580683][ T5860] veth0_vlan: entered promiscuous mode [ 73.628621][ T5860] veth1_vlan: entered promiscuous mode [ 73.695581][ T5860] veth0_macvtap: entered promiscuous mode [ 73.731248][ T5860] veth1_macvtap: entered promiscuous mode [ 73.755237][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.798866][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.818580][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.834059][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.880349][ T2967] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.894566][ T2967] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.903597][ T2967] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.921369][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.944023][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.962898][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.012889][ T5871] veth0_vlan: entered promiscuous mode [ 74.051400][ T5871] veth1_vlan: entered promiscuous mode [ 74.103170][ T5873] Bluetooth: hci1: command tx timeout [ 74.123954][ T5877] veth0_vlan: entered promiscuous mode [ 74.134203][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.143334][ T5877] veth1_vlan: entered promiscuous mode [ 74.147295][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.171812][ T5871] veth0_macvtap: entered promiscuous mode [ 74.177549][ T5873] Bluetooth: hci0: command tx timeout [ 74.183072][ T5873] Bluetooth: hci2: command tx timeout [ 74.190534][ T5879] Bluetooth: hci3: command tx timeout [ 74.190548][ T5870] Bluetooth: hci4: command tx timeout [ 74.197370][ T5861] veth0_vlan: entered promiscuous mode [ 74.211735][ T5871] veth1_macvtap: entered promiscuous mode [ 74.232011][ T5861] veth1_vlan: entered promiscuous mode [ 74.239696][ T803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.248408][ T803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.266735][ T5877] veth0_macvtap: entered promiscuous mode [ 74.290891][ T5877] veth1_macvtap: entered promiscuous mode [ 74.304481][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.320827][ T5860] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.344827][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.362508][ T5861] veth0_macvtap: entered promiscuous mode [ 74.380117][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.380172][ T5975] loop0: detected capacity change from 0 to 64 [ 74.400516][ T5975] ======================================================= [ 74.400516][ T5975] WARNING: The mand mount option has been deprecated and [ 74.400516][ T5975] and is ignored by this kernel. Remove the mand [ 74.400516][ T5975] option from the mount to silence this warning. [ 74.400516][ T5975] ======================================================= [ 74.416330][ T5864] veth0_vlan: entered promiscuous mode [ 74.454025][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.460019][ T5975] hfs: unable to locate alternate MDB [ 74.470931][ T5975] hfs: continuing without an alternate MDB [ 74.472106][ T803] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.489344][ T5861] veth1_macvtap: entered promiscuous mode [ 74.502734][ T5864] veth1_vlan: entered promiscuous mode [ 74.514639][ T803] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.524607][ T803] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.534756][ T2967] hfs: new node 0 already hashed? [ 74.543245][ T2967] ------------[ cut here ]------------ [ 74.548947][ T2967] WARNING: fs/hfs/bnode.c:520 at hfs_bnode_create+0x461/0x4f0, CPU#1: kworker/u8:7/2967 [ 74.558839][ T2967] Modules linked in: [ 74.562761][ T2967] CPU: 1 UID: 0 PID: 2967 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 74.572554][ T2967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 74.582872][ T2967] Workqueue: writeback wb_workfn (flush-7:0) [ 74.589020][ T2967] RIP: 0010:hfs_bnode_create+0x461/0x4f0 [ 74.594876][ T2967] Code: c1 8b 89 ee e8 e0 a4 8c fe e9 cf fc ff ff e8 d6 8f 25 ff 4c 89 ef e8 5e 38 e6 08 48 c7 c7 20 d1 c1 8b 89 ee e8 c0 a4 8c fe 90 <0f> 0b 90 eb b0 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c d6 fb ff ff [ 74.614754][ T2967] RSP: 0018:ffffc9000b246c00 EFLAGS: 00010246 [ 74.621110][ T2967] RAX: 000000000000001f RBX: ffff88802443e000 RCX: 4b02b50e54e30800 [ 74.629384][ T2967] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 74.637507][ T2967] RBP: 0000000000000000 R08: ffffc9000b246927 R09: 1ffff92001648d24 [ 74.645514][ T2967] R10: dffffc0000000000 R11: fffff52001648d25 R12: 0000000000000000 [ 74.653565][ T2967] R13: ffff88802443e0e0 R14: ffff888075f5e100 R15: dffffc0000000000 [ 74.662179][ T2967] FS: 0000000000000000(0000) GS:ffff888125aff000(0000) knlGS:0000000000000000 [ 74.671234][ T2967] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.677949][ T2967] CR2: 00007ffc6f957de8 CR3: 00000000675fe000 CR4: 00000000003526f0 [ 74.685959][ T2967] Call Trace: [ 74.689329][ T2967] [ 74.692293][ T2967] ? do_raw_spin_unlock+0x122/0x240 [ 74.697705][ T2967] hfs_bmap_alloc+0x5bb/0x640 [ 74.702418][ T2967] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 74.707873][ T2967] ? __asan_memcpy+0x40/0x70 [ 74.712552][ T2967] ? hfs_bnode_read+0x425/0x8e0 [ 74.717506][ T2967] hfs_btree_inc_height+0xf6/0xac0 [ 74.722649][ T2967] ? lock_acquire+0x5f/0x360 [ 74.727363][ T2967] ? __pfx_folio_mark_accessed+0x10/0x10 [ 74.733059][ T2967] ? __pfx_hfs_btree_inc_height+0x10/0x10 [ 74.738938][ T2967] ? rcu_is_watching+0x15/0xb0 [ 74.743739][ T2967] ? do_raw_spin_unlock+0x122/0x240 [ 74.749013][ T2967] hfs_brec_insert+0x743/0xbd0 [ 74.753831][ T2967] ? __pfx_hfs_brec_insert+0x10/0x10 [ 74.759204][ T2967] __hfs_ext_write_extent+0x2a1/0x470 [ 74.764626][ T2967] hfs_ext_write_extent+0x161/0x1e0 [ 74.769898][ T2967] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 74.775655][ T2967] hfs_write_inode+0x91/0x7d0 [ 74.780451][ T2967] ? __pfx_hfs_write_inode+0x10/0x10 [ 74.785769][ T2967] ? set_shrinker_bit+0x7c/0x350 [ 74.790763][ T2967] ? rcu_is_watching+0x15/0xb0 [ 74.795563][ T2967] ? set_shrinker_bit+0x7c/0x350 [ 74.800754][ T2967] ? rcu_is_watching+0x15/0xb0 [ 74.805572][ T2967] __writeback_single_inode+0x6ee/0xff0 [ 74.811445][ T2967] writeback_sb_inodes+0x6c7/0x1010 [ 74.816692][ T2967] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 74.822810][ T2967] ? rcu_is_watching+0x15/0xb0 [ 74.827690][ T2967] wb_writeback+0x43b/0xaf0 [ 74.832242][ T2967] ? queue_io+0x331/0x590 [ 74.836578][ T2967] ? __pfx_wb_writeback+0x10/0x10 [ 74.841691][ T2967] ? rcu_is_watching+0x15/0xb0 [ 74.846489][ T2967] wb_workfn+0x409/0xef0 [ 74.850795][ T2967] ? __pfx_wb_workfn+0x10/0x10 [ 74.855596][ T2967] ? rcu_is_watching+0x15/0xb0 [ 74.860425][ T2967] ? rcu_is_watching+0x15/0xb0 [ 74.865223][ T2967] ? process_scheduled_works+0x9ef/0x17b0 [ 74.871039][ T2967] ? rcu_is_watching+0x15/0xb0 [ 74.875838][ T2967] ? lock_acquire+0x5f/0x360 [ 74.880524][ T2967] ? rcu_is_watching+0x15/0xb0 [ 74.885329][ T2967] ? process_scheduled_works+0x9ef/0x17b0 [ 74.891132][ T2967] ? process_scheduled_works+0x9ef/0x17b0 [ 74.897081][ T2967] process_scheduled_works+0xae1/0x17b0 [ 74.902826][ T2967] ? __pfx_process_scheduled_works+0x10/0x10 [ 74.909017][ T2967] worker_thread+0x8a0/0xda0 [ 74.913663][ T2967] kthread+0x711/0x8a0 [ 74.917801][ T2967] ? __pfx_worker_thread+0x10/0x10 [ 74.922947][ T2967] ? __pfx_kthread+0x10/0x10 [ 74.927596][ T2967] ? rcu_is_watching+0x15/0xb0 [ 74.932456][ T2967] ? __pfx_kthread+0x10/0x10 [ 74.937134][ T2967] ret_from_fork+0x47c/0x820 [ 74.941760][ T2967] ? __pfx_ret_from_fork+0x10/0x10 [ 74.946969][ T2967] ? __switch_to_asm+0x39/0x70 [ 74.951768][ T2967] ? __switch_to_asm+0x33/0x70 [ 74.956563][ T2967] ? __pfx_kthread+0x10/0x10 [ 74.961238][ T2967] ret_from_fork_asm+0x1a/0x30 [ 74.966060][ T2967] [ 74.969139][ T2967] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 74.976437][ T2967] CPU: 1 UID: 0 PID: 2967 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 74.985904][ T2967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 74.995968][ T2967] Workqueue: writeback wb_workfn (flush-7:0) [ 75.001974][ T2967] Call Trace: [ 75.005256][ T2967] [ 75.008187][ T2967] dump_stack_lvl+0x99/0x250 [ 75.012783][ T2967] ? __asan_memcpy+0x40/0x70 [ 75.017373][ T2967] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.022586][ T2967] ? __pfx__printk+0x10/0x10 [ 75.027198][ T2967] vpanic+0x281/0x750 [ 75.031204][ T2967] ? __pfx_vpanic+0x10/0x10 [ 75.035725][ T2967] ? is_bpf_text_address+0x292/0x2b0 [ 75.041020][ T2967] ? is_bpf_text_address+0x26/0x2b0 [ 75.046231][ T2967] panic+0xb9/0xc0 [ 75.049964][ T2967] ? __pfx_panic+0x10/0x10 [ 75.054391][ T2967] ? ret_from_fork_asm+0x1a/0x30 [ 75.059351][ T2967] __warn+0x334/0x4c0 [ 75.063345][ T2967] ? hfs_bnode_create+0x461/0x4f0 [ 75.068383][ T2967] ? hfs_bnode_create+0x461/0x4f0 [ 75.073413][ T2967] report_bug+0x2be/0x4f0 [ 75.077750][ T2967] ? hfs_bnode_create+0x461/0x4f0 [ 75.082782][ T2967] ? hfs_bnode_create+0x461/0x4f0 [ 75.087812][ T2967] ? hfs_bnode_create+0x463/0x4f0 [ 75.092852][ T2967] handle_bug+0x84/0x160 [ 75.097114][ T2967] exc_invalid_op+0x1a/0x50 [ 75.101628][ T2967] asm_exc_invalid_op+0x1a/0x20 [ 75.106483][ T2967] RIP: 0010:hfs_bnode_create+0x461/0x4f0 [ 75.112127][ T2967] Code: c1 8b 89 ee e8 e0 a4 8c fe e9 cf fc ff ff e8 d6 8f 25 ff 4c 89 ef e8 5e 38 e6 08 48 c7 c7 20 d1 c1 8b 89 ee e8 c0 a4 8c fe 90 <0f> 0b 90 eb b0 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c d6 fb ff ff [ 75.131744][ T2967] RSP: 0018:ffffc9000b246c00 EFLAGS: 00010246 [ 75.137823][ T2967] RAX: 000000000000001f RBX: ffff88802443e000 RCX: 4b02b50e54e30800 [ 75.145803][ T2967] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 75.153863][ T2967] RBP: 0000000000000000 R08: ffffc9000b246927 R09: 1ffff92001648d24 [ 75.161838][ T2967] R10: dffffc0000000000 R11: fffff52001648d25 R12: 0000000000000000 [ 75.169812][ T2967] R13: ffff88802443e0e0 R14: ffff888075f5e100 R15: dffffc0000000000 [ 75.177802][ T2967] ? do_raw_spin_unlock+0x122/0x240 [ 75.183015][ T2967] hfs_bmap_alloc+0x5bb/0x640 [ 75.187707][ T2967] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 75.192924][ T2967] ? __asan_memcpy+0x40/0x70 [ 75.197519][ T2967] ? hfs_bnode_read+0x425/0x8e0 [ 75.202379][ T2967] hfs_btree_inc_height+0xf6/0xac0 [ 75.207500][ T2967] ? lock_acquire+0x5f/0x360 [ 75.212132][ T2967] ? __pfx_folio_mark_accessed+0x10/0x10 [ 75.217783][ T2967] ? __pfx_hfs_btree_inc_height+0x10/0x10 [ 75.223529][ T2967] ? rcu_is_watching+0x15/0xb0 [ 75.228309][ T2967] ? do_raw_spin_unlock+0x122/0x240 [ 75.233524][ T2967] hfs_brec_insert+0x743/0xbd0 [ 75.238307][ T2967] ? __pfx_hfs_brec_insert+0x10/0x10 [ 75.243608][ T2967] __hfs_ext_write_extent+0x2a1/0x470 [ 75.248993][ T2967] hfs_ext_write_extent+0x161/0x1e0 [ 75.254228][ T2967] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 75.259999][ T2967] hfs_write_inode+0x91/0x7d0 [ 75.264693][ T2967] ? __pfx_hfs_write_inode+0x10/0x10 [ 75.269991][ T2967] ? set_shrinker_bit+0x7c/0x350 [ 75.274943][ T2967] ? rcu_is_watching+0x15/0xb0 [ 75.279749][ T2967] ? set_shrinker_bit+0x7c/0x350 [ 75.284710][ T2967] ? rcu_is_watching+0x15/0xb0 [ 75.289489][ T2967] __writeback_single_inode+0x6ee/0xff0 [ 75.295061][ T2967] writeback_sb_inodes+0x6c7/0x1010 [ 75.300300][ T2967] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 75.305975][ T2967] ? rcu_is_watching+0x15/0xb0 [ 75.310764][ T2967] wb_writeback+0x43b/0xaf0 [ 75.315282][ T2967] ? queue_io+0x331/0x590 [ 75.319620][ T2967] ? __pfx_wb_writeback+0x10/0x10 [ 75.324666][ T2967] ? rcu_is_watching+0x15/0xb0 [ 75.329450][ T2967] wb_workfn+0x409/0xef0 [ 75.333714][ T2967] ? __pfx_wb_workfn+0x10/0x10 [ 75.338491][ T2967] ? rcu_is_watching+0x15/0xb0 [ 75.343266][ T2967] ? rcu_is_watching+0x15/0xb0 [ 75.348044][ T2967] ? process_scheduled_works+0x9ef/0x17b0 [ 75.353781][ T2967] ? rcu_is_watching+0x15/0xb0 [ 75.358555][ T2967] ? lock_acquire+0x5f/0x360 [ 75.363158][ T2967] ? rcu_is_watching+0x15/0xb0 [ 75.367941][ T2967] ? process_scheduled_works+0x9ef/0x17b0 [ 75.373672][ T2967] ? process_scheduled_works+0x9ef/0x17b0 [ 75.379406][ T2967] process_scheduled_works+0xae1/0x17b0 [ 75.385021][ T2967] ? __pfx_process_scheduled_works+0x10/0x10 [ 75.391028][ T2967] worker_thread+0x8a0/0xda0 [ 75.395671][ T2967] kthread+0x711/0x8a0 [ 75.399746][ T2967] ? __pfx_worker_thread+0x10/0x10 [ 75.404869][ T2967] ? __pfx_kthread+0x10/0x10 [ 75.409467][ T2967] ? rcu_is_watching+0x15/0xb0 [ 75.414244][ T2967] ? __pfx_kthread+0x10/0x10 [ 75.418865][ T2967] ret_from_fork+0x47c/0x820 [ 75.423476][ T2967] ? __pfx_ret_from_fork+0x10/0x10 [ 75.428607][ T2967] ? __switch_to_asm+0x39/0x70 [ 75.433411][ T2967] ? __switch_to_asm+0x33/0x70 [ 75.438186][ T2967] ? __pfx_kthread+0x10/0x10 [ 75.442782][ T2967] ret_from_fork_asm+0x1a/0x30 [ 75.447565][ T2967] [ 75.450905][ T2967] Kernel Offset: disabled [ 75.455233][ T2967] Rebooting in 86400 seconds..