last executing test programs: 1.967478381s ago: executing program 3 (id=4): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0x20000e, &(0x7f0000000180)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@stripe}, {@test_dummy_encryption}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) 1.948724605s ago: executing program 0 (id=1): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x6}}]}]}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x60}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 1.947810633s ago: executing program 4 (id=5): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) sync() setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 1.780711771s ago: executing program 2 (id=3): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYRES32=0x0], 0xfe, 0x1222, &(0x7f00000024c0)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}}) 1.759700023s ago: executing program 1 (id=2): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x24040084) 1.690348757s ago: executing program 0 (id=6): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x1) 1.599395279s ago: executing program 3 (id=7): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x8000, 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000000000003}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) syz_clone(0x81200, 0x0, 0x0, 0x0, 0x0, 0x0) 1.572929056s ago: executing program 1 (id=8): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002a80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000006c0)="b3", 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000380)="b97f14", 0x3, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) listen(r0, 0x100101) accept4(r0, 0x0, 0x0, 0x0) 1.500722104s ago: executing program 0 (id=9): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.471083229s ago: executing program 2 (id=10): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000001040)={0x0, 0x22, 0x10, {[@main=@item_4={0x3, 0x0, 0xb, "cbfd1d7d"}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @main=@item_4={0x3, 0x0, 0x8, "b775e7cd"}, @local=@item_012={0x0, 0x2, 0x7}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, 0x0) 1.426021788s ago: executing program 4 (id=11): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x62ea}, 0x18) unshare(0x2c020400) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) 1.229531399s ago: executing program 4 (id=12): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000001c40)) 1.153597625s ago: executing program 4 (id=13): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000540)=0x9) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8000) getdents64(0xffffffffffffffff, &(0x7f0000000240)=""/116, 0x74) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000400)=[@mss, @sack_perm, @sack_perm, @mss={0x2, 0x1}, @timestamp, @sack_perm, @mss={0x2, 0x2}, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 168.616804ms ago: executing program 2 (id=14): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a4019565a59f6186b32e4fc4ce3b54c5fe10532bcf45c9ea220c4e3929c07885669cfbb09df33f12f6d132897d673989216585c87ccabba76785ef5a74072ad062b729301e53f11eb"], 0x64}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000140)="eb", 0x34000, 0x4008004, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 153.05052ms ago: executing program 4 (id=15): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4040801}], 0x1, 0x8800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) 126.337604ms ago: executing program 3 (id=16): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chdir(0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', <r1=>0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0xffff}, {0x10, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 85.048625ms ago: executing program 1 (id=17): r0 = socket$alg(0x26, 0x5, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) close_range(r0, r1, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x2, 0x0, {0x0, 0x1}, {0x64, 0x2}, @cond=[{0x100}, {0x0, 0x0, 0x3}]}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000240), 0x3, 0x6b6, &(0x7f0000004100)="$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") write$char_usb(r2, &(0x7f0000000040)="e2", 0x2778) 0s ago: executing program 3 (id=18): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) kernel console output (not intermixed with test programs): forked to background, child pid 6112 [ 14.360083][ T6113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 14.367776][ T6113] eql: remember to turn off Van-Jacobson compression on your slave devices [ 14.417503][ T3617] gve 0000:00:00.0 enp0s0: Device link is up. Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts. syzkaller login: [ 34.574687][ T6431] cgroup: Unknown subsys name 'net' [ 34.835751][ T6431] cgroup: Unknown subsys name 'cpuset' [ 34.839708][ T6431] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.155469][ T6431] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 36.591816][ T6444] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.594400][ T6444] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.597124][ T6444] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.602100][ T6444] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.605888][ T6448] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.610922][ T6454] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.622688][ T6445] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.625390][ T6445] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.626422][ T6455] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 36.627644][ T6445] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.630554][ T6455] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 36.632830][ T6445] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 36.634072][ T6458] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.635796][ T6445] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.637078][ T6455] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.638619][ T6445] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 36.642646][ T6445] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.646776][ T6445] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 36.648904][ T6012] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.649719][ T6457] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.651845][ T6445] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 36.653754][ T6457] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.655360][ T6445] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 36.656527][ T6012] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.659112][ T6445] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.660861][ T6457] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.662735][ T6445] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 36.667387][ T6448] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.671850][ T6457] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 36.674841][ T6457] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.874868][ T6450] chnl_net:caif_netlink_parms(): no params data found [ 36.936526][ T6442] chnl_net:caif_netlink_parms(): no params data found [ 36.989662][ T6443] chnl_net:caif_netlink_parms(): no params data found [ 37.035793][ T6449] chnl_net:caif_netlink_parms(): no params data found [ 37.039919][ T6442] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.041808][ T6442] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.043892][ T6442] bridge_slave_0: entered allmulticast mode [ 37.045951][ T6442] bridge_slave_0: entered promiscuous mode [ 37.051158][ T6450] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.052984][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.055511][ T6450] bridge_slave_0: entered allmulticast mode [ 37.057592][ T6450] bridge_slave_0: entered promiscuous mode [ 37.061529][ T6450] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.063579][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.065419][ T6450] bridge_slave_1: entered allmulticast mode [ 37.068319][ T6450] bridge_slave_1: entered promiscuous mode [ 37.077195][ T6442] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.079126][ T6442] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.081010][ T6442] bridge_slave_1: entered allmulticast mode [ 37.083132][ T6442] bridge_slave_1: entered promiscuous mode [ 37.106752][ T6450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.110576][ T6450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.131355][ T6442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.152455][ T6442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.166879][ T6443] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.168761][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.170620][ T6443] bridge_slave_0: entered allmulticast mode [ 37.172663][ T6443] bridge_slave_0: entered promiscuous mode [ 37.179557][ T6450] team0: Port device team_slave_0 added [ 37.203115][ T6443] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.205438][ T6443] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.207315][ T6443] bridge_slave_1: entered allmulticast mode [ 37.209320][ T6443] bridge_slave_1: entered promiscuous mode [ 37.212263][ T6450] team0: Port device team_slave_1 added [ 37.225179][ T6442] team0: Port device team_slave_0 added [ 37.258868][ T6442] team0: Port device team_slave_1 added [ 37.262363][ T6443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.268116][ T6443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.271179][ T6450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.273006][ T6450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.280648][ T6450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.284442][ T6449] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.286374][ T6449] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.288399][ T6449] bridge_slave_0: entered allmulticast mode [ 37.290664][ T6449] bridge_slave_0: entered promiscuous mode [ 37.302013][ T6453] chnl_net:caif_netlink_parms(): no params data found [ 37.312587][ T6450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.314576][ T6450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.321064][ T6450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.327335][ T6449] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.329255][ T6449] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.331081][ T6449] bridge_slave_1: entered allmulticast mode [ 37.333124][ T6449] bridge_slave_1: entered promiscuous mode [ 37.339007][ T6442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.340813][ T6442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.347783][ T6442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.367928][ T6443] team0: Port device team_slave_0 added [ 37.378183][ T6442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.379950][ T6442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.387535][ T6442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.406151][ T6443] team0: Port device team_slave_1 added [ 37.409141][ T6449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.420174][ T6449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.433803][ T6443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.435670][ T6443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.442241][ T6443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.446773][ T6443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.448603][ T6443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.455431][ T6443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.479594][ T6450] hsr_slave_0: entered promiscuous mode [ 37.481704][ T6450] hsr_slave_1: entered promiscuous mode [ 37.488510][ T6449] team0: Port device team_slave_0 added [ 37.490343][ T6453] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.492138][ T6453] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.498455][ T6453] bridge_slave_0: entered allmulticast mode [ 37.500568][ T6453] bridge_slave_0: entered promiscuous mode [ 37.515130][ T6442] hsr_slave_0: entered promiscuous mode [ 37.517145][ T6442] hsr_slave_1: entered promiscuous mode [ 37.518918][ T6442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.520881][ T6442] Cannot create hsr debugfs directory [ 37.524697][ T6449] team0: Port device team_slave_1 added [ 37.530867][ T6453] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.532687][ T6453] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.534652][ T6453] bridge_slave_1: entered allmulticast mode [ 37.536607][ T6453] bridge_slave_1: entered promiscuous mode [ 37.592434][ T6449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.594499][ T6449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.601089][ T6449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.606665][ T6453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.609231][ T6449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.611177][ T6449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.618089][ T6449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.623199][ T6443] hsr_slave_0: entered promiscuous mode [ 37.625267][ T6443] hsr_slave_1: entered promiscuous mode [ 37.627026][ T6443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.628918][ T6443] Cannot create hsr debugfs directory [ 37.645907][ T6453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.687498][ T6453] team0: Port device team_slave_0 added [ 37.718506][ T6453] team0: Port device team_slave_1 added [ 37.730686][ T6449] hsr_slave_0: entered promiscuous mode [ 37.732650][ T6449] hsr_slave_1: entered promiscuous mode [ 37.735241][ T6449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.737250][ T6449] Cannot create hsr debugfs directory [ 37.768001][ T6453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.769922][ T6453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.776798][ T6453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.782026][ T6453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.784561][ T6453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.790933][ T6453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.879314][ T6453] hsr_slave_0: entered promiscuous mode [ 37.881297][ T6453] hsr_slave_1: entered promiscuous mode [ 37.883022][ T6453] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.885160][ T6453] Cannot create hsr debugfs directory [ 37.900350][ T6442] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.905329][ T6442] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.926664][ T6442] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.941319][ T6442] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.979311][ T6450] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.984371][ T6450] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.991907][ T6450] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.013785][ T6450] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.034611][ T6443] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.038744][ T6443] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.042325][ T6443] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.050099][ T6443] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.114597][ T6449] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.118888][ T6449] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.131600][ T6442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.135194][ T6449] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.138407][ T6449] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.164381][ T6443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.189616][ T6453] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.193170][ T6453] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.197861][ T6453] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.202043][ T6453] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.215099][ T6442] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.220443][ T6443] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.252171][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.254316][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.259072][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.260917][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.279640][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.281470][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.284577][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.286478][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.341776][ T6450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.377093][ T6453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.384346][ T6449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.401838][ T6450] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.416603][ T6449] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.434476][ T6453] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.450803][ T3645] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.452680][ T3645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.456297][ T3645] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.458060][ T3645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.461826][ T3645] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.463768][ T3645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.469483][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.471342][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.482034][ T6449] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.485575][ T6449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.500511][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.502263][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.508622][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.510472][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.522072][ T6443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.552847][ T6453] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.561761][ T6453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.588411][ T6450] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.591115][ T6450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.639639][ T6442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.671561][ T6449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.680262][ T6443] veth0_vlan: entered promiscuous mode [ 38.704148][ T6443] veth1_vlan: entered promiscuous mode [ 38.717840][ T6453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.736278][ T6457] Bluetooth: hci4: command tx timeout [ 38.738038][ T6457] Bluetooth: hci2: command tx timeout [ 38.739621][ T6457] Bluetooth: hci3: command tx timeout [ 38.741198][ T6457] Bluetooth: hci0: command tx timeout [ 38.742744][ T6457] Bluetooth: hci1: command tx timeout [ 38.754422][ T6450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.781634][ T6442] veth0_vlan: entered promiscuous mode [ 38.792386][ T6442] veth1_vlan: entered promiscuous mode [ 38.801745][ T6443] veth0_macvtap: entered promiscuous mode [ 38.821031][ T6450] veth0_vlan: entered promiscuous mode [ 38.822985][ T6443] veth1_macvtap: entered promiscuous mode [ 38.839976][ T6443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.842690][ T6442] veth0_macvtap: entered promiscuous mode [ 38.846346][ T6442] veth1_macvtap: entered promiscuous mode [ 38.862553][ T6443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.866661][ T6443] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.868976][ T6443] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.871174][ T6443] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.874244][ T6443] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.897231][ T6449] veth0_vlan: entered promiscuous mode [ 38.904076][ T6442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.906855][ T6442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.910028][ T6442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.917940][ T6442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.920486][ T6442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.923752][ T6442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.933180][ T6450] veth1_vlan: entered promiscuous mode [ 38.938180][ T6453] veth0_vlan: entered promiscuous mode [ 38.940289][ T6449] veth1_vlan: entered promiscuous mode [ 38.957168][ T6442] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.959884][ T6442] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.962364][ T6442] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.965468][ T6442] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.984404][ T6453] veth1_vlan: entered promiscuous mode [ 39.033078][ T6453] veth0_macvtap: entered promiscuous mode [ 39.038566][ T6453] veth1_macvtap: entered promiscuous mode [ 39.040800][ T6449] veth0_macvtap: entered promiscuous mode [ 39.068328][ T6449] veth1_macvtap: entered promiscuous mode [ 39.086791][ T6450] veth0_macvtap: entered promiscuous mode [ 39.089447][ T6453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.092184][ T6453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.096345][ T6453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.098991][ T6453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.102325][ T6453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.109926][ T6453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.112575][ T6453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.116688][ T6453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.118382][ T3617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.119329][ T6453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.121364][ T3617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.125421][ T6453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.132296][ T6453] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.135406][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.135423][ T6453] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.137434][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.139598][ T6453] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.143630][ T6453] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.152060][ T6449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.159426][ T6449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.161845][ T6449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.164691][ T6449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.167192][ T6449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.169621][ T6449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.172808][ T6449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.190272][ T6449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.192858][ T6449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.195997][ T6449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.198668][ T6449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.201070][ T6449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.204131][ T6449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.207357][ T6449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.209568][ T6450] veth1_macvtap: entered promiscuous mode [ 39.212716][ T6449] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.216410][ T6449] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.218659][ T6449] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.220912][ T6449] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.269731][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.272399][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.275542][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.278277][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.280670][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.285702][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.288167][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.290823][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.294760][ T6450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.296800][ T3645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.298987][ T3645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.302183][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.313369][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.329995][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.332648][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.339689][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.342467][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.345310][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.347994][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.350473][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.352984][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.357185][ T6450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.390271][ T6450] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.392670][ T6450] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.398072][ T6450] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.400580][ T6450] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.431066][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.433033][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.459342][ T681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.461411][ T681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.478097][ T681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.480066][ T681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.500083][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.502041][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.511827][ T6442] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.517366][ T681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.519316][ T681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.586338][ T3645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.588375][ T3645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.638998][ T6532] loop4: detected capacity change from 0 to 1024 [ 39.641286][ T6532] EXT4-fs: Ignoring removed orlov option [ 39.651297][ T6532] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.653512][ T6534] bridge0: port 3(vlan2) entered blocking state [ 39.658419][ T6534] bridge0: port 3(vlan2) entered disabled state [ 39.660122][ T6534] vlan2: entered allmulticast mode [ 39.665624][ T6537] loop3: detected capacity change from 0 to 512 [ 39.669308][ T6534] vlan2: left allmulticast mode [ 39.696333][ T6532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.784187][ T6532] process 'syz.4.5' launched './file0/file0' with NULL argv: empty string added [ 39.799494][ T6537] EXT4-fs (loop3): Test dummy encryption mode enabled [ 39.819006][ T6537] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.822254][ T6537] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 39.866558][ T6537] EXT4-fs (loop3): 1 truncate cleaned up [ 39.868418][ T6537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.920401][ T6552] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.6' sets config #1 [ 39.948273][ T6548] loop2: detected capacity change from 0 to 8192 [ 39.991823][ T6442] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.145441][ T6453] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.172696][ T6565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.186361][ T6565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.323450][ T6457] Bluetooth: hci1: command tx timeout [ 41.325036][ T6457] Bluetooth: hci0: command tx timeout [ 41.326399][ T6457] Bluetooth: hci3: command tx timeout [ 41.327737][ T6457] Bluetooth: hci2: command tx timeout [ 41.329037][ T6457] Bluetooth: hci4: command tx timeout [ 41.488624][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'. [ 41.558628][ T6587] loop1: detected capacity change from 0 to 1024 [ 41.601623][ T6587] hfsplus: new node 0 already hashed? [ 41.603281][ T6587] ------------[ cut here ]------------ [ 41.604746][ T6587] WARNING: CPU: 1 PID: 6587 at fs/hfsplus/bnode.c:573 hfsplus_bnode_create+0x384/0x430 [ 41.607347][ T6587] Modules linked in: [ 41.608311][ T6587] CPU: 1 UID: 0 PID: 6587 Comm: syz.1.17 Not tainted 6.14.0-rc7-syzkaller-gcc8f508710d1 #0 [ 41.610986][ T6587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 41.613459][ T6587] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 41.615541][ T6587] pc : hfsplus_bnode_create+0x384/0x430 [ 41.616921][ T6587] lr : hfsplus_bnode_create+0x384/0x430 [ 41.618394][ T6587] sp : ffff8000a3a869f0 [ 41.619499][ T6587] x29: ffff8000a3a86a00 x28: 00000000000000f8 x27: dfff800000000000 [ 41.621502][ T6587] x26: ffff0000e0633000 x25: ffff0000e06330f8 x24: ffff0000da4de000 [ 41.623552][ T6587] x23: 0000000000000000 x22: ffff0000da4de0e0 x21: ffff0000da4de000 [ 41.625581][ T6587] x20: 0000000000000000 x19: ffff0000d9526d00 x18: 0000000000000008 [ 41.627649][ T6587] x17: 0000000000000000 x16: ffff8000832b7b9c x15: 0000000000000001 [ 41.629597][ T6587] x14: 1ffff00014750c98 x13: 0000000000000000 x12: 0000000000000000 [ 41.631685][ T6587] x11: 0000000000080000 x10: 0000000000013ba1 x9 : e8ee3afe47d50800 [ 41.633655][ T6587] x8 : e8ee3afe47d50800 x7 : 0000000000000001 x6 : 0000000000000001 [ 41.635604][ T6587] x5 : ffff8000a3a861b8 x4 : ffff80008fcafb00 x3 : ffff800083249bb4 [ 41.637654][ T6587] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000023 [ 41.639776][ T6587] Call trace: [ 41.640616][ T6587] hfsplus_bnode_create+0x384/0x430 (P) [ 41.642053][ T6587] hfsplus_bmap_alloc+0x48c/0x538 [ 41.643694][ T6587] hfs_btree_inc_height+0xf8/0xa60 [ 41.645061][ T6587] hfsplus_brec_insert+0x11c/0xaa0 [ 41.646500][ T6587] hfsplus_create_attr+0x320/0x394 [ 41.647881][ T6587] __hfsplus_setxattr+0x9c4/0x2334 [ 41.649158][ T6587] hfsplus_initxattrs+0x194/0x250 [ 41.650595][ T6587] security_inode_init_security+0x73c/0x908 [ 41.652148][ T6587] hfsplus_init_security+0x40/0x54 [ 41.653579][ T6587] hfsplus_fill_super+0x1064/0x16f8 [ 41.655004][ T6587] get_tree_bdev_flags+0x38c/0x494 [ 41.656373][ T6587] get_tree_bdev+0x2c/0x3c [ 41.657591][ T6587] hfsplus_get_tree+0x28/0x38 [ 41.658869][ T6587] vfs_get_tree+0x90/0x28c [ 41.660033][ T6587] do_new_mount+0x278/0x900 [ 41.661285][ T6587] path_mount+0x590/0xe04 [ 41.662500][ T6587] __arm64_sys_mount+0x4f4/0x5d0 [ 41.663858][ T6587] invoke_syscall+0x98/0x2b8 [ 41.665084][ T6587] el0_svc_common+0x130/0x23c [ 41.666346][ T6587] do_el0_svc+0x48/0x58 [ 41.667458][ T6587] el0_svc+0x54/0x168 [ 41.668514][ T6587] el0t_64_sync_handler+0x84/0x108 [ 41.669880][ T6587] el0t_64_sync+0x198/0x19c [ 41.671026][ T6587] irq event stamp: 3744 [ 41.672151][ T6587] hardirqs last enabled at (3743): [<ffff8000804afa4c>] __console_unlock+0x70/0xc4 [ 41.674762][ T6587] hardirqs last disabled at (3744): [<ffff80008b7c3e94>] el1_dbg+0x24/0x80 [ 41.677075][ T6587] softirqs last enabled at (3456): [<ffff8000803128a4>] handle_softirqs+0xb44/0xd34 [ 41.679691][ T6587] softirqs last disabled at (3303): [<ffff800080020dbc>] __do_softirq+0x14/0x20 [ 41.682179][ T6587] ---[ end trace 0000000000000000 ]--- [ 41.697750][ T6587] ------------[ cut here ]------------ [ 41.699271][ T6587] kernel BUG at fs/hfsplus/bnode.c:618! [ 41.700903][ T6587] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 41.702912][ T6587] Modules linked in: [ 41.703916][ T6587] CPU: 0 UID: 0 PID: 6587 Comm: syz.1.17 Tainted: G W 6.14.0-rc7-syzkaller-gcc8f508710d1 #0 [ 41.707074][ T6587] Tainted: [W]=WARN [ 41.708107][ T6587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 41.710802][ T6587] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 41.712922][ T6587] pc : hfsplus_bnode_put+0x488/0x494 [ 41.714348][ T6587] lr : hfsplus_bnode_put+0x488/0x494 [ 41.715753][ T6587] sp : ffff8000a3a86ae0 [ 41.716848][ T6587] x29: ffff8000a3a86ae0 x28: dfff800000000000 x27: ffff700014750d74 [ 41.718989][ T6587] x26: 1fffe0001b49bc03 x25: 1fffe0001b2a4da0 x24: ffff0000da4de000 [ 41.721149][ T6587] x23: dfff800000000000 x22: ffff0000d9526d00 x21: ffff0000d9526d80 [ 41.723281][ T6587] x20: 0000000000000000 x19: ffff0000d9526d00 x18: 0000000000000008 [ 41.725394][ T6587] x17: 0000000000000000 x16: ffff8000832b7b9c x15: 0000000000000001 [ 41.727523][ T6587] x14: 1fffe0001b2a4db0 x13: 0000000000000000 x12: 0000000000000000 [ 41.729550][ T6587] x11: 0000000000080000 x10: 00000000000346a9 x9 : ffff8000a463b000 [ 41.731677][ T6587] x8 : 00000000000346aa x7 : 0000000000000000 x6 : 0000000000000000 [ 41.733780][ T6587] x5 : 0000000000000001 x4 : 0000000000000000 x3 : ffff8000812d3dec [ 41.735879][ T6587] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 41.738011][ T6587] Call trace: [ 41.738881][ T6587] hfsplus_bnode_put+0x488/0x494 (P) [ 41.740264][ T6587] hfs_btree_inc_height+0x4fc/0xa60 [ 41.741626][ T6587] hfsplus_brec_insert+0x11c/0xaa0 [ 41.742967][ T6587] hfsplus_create_attr+0x320/0x394 [ 41.744352][ T6587] __hfsplus_setxattr+0x9c4/0x2334 [ 41.745690][ T6587] hfsplus_initxattrs+0x194/0x250 [ 41.746990][ T6587] security_inode_init_security+0x73c/0x908 [ 41.748544][ T6587] hfsplus_init_security+0x40/0x54 [ 41.749867][ T6587] hfsplus_fill_super+0x1064/0x16f8 [ 41.751200][ T6587] get_tree_bdev_flags+0x38c/0x494 [ 41.752527][ T6587] get_tree_bdev+0x2c/0x3c [ 41.753689][ T6587] hfsplus_get_tree+0x28/0x38 [ 41.754918][ T6587] vfs_get_tree+0x90/0x28c [ 41.756080][ T6587] do_new_mount+0x278/0x900 [ 41.757245][ T6587] path_mount+0x590/0xe04 [ 41.758388][ T6587] __arm64_sys_mount+0x4f4/0x5d0 [ 41.759655][ T6587] invoke_syscall+0x98/0x2b8 [ 41.760854][ T6587] el0_svc_common+0x130/0x23c [ 41.762089][ T6587] do_el0_svc+0x48/0x58 [ 41.763189][ T6587] el0_svc+0x54/0x168 [ 41.764251][ T6587] el0t_64_sync_handler+0x84/0x108 [ 41.765564][ T6587] el0t_64_sync+0x198/0x19c [ 41.766767][ T6587] Code: aa1403e0 97e48fb3 17ffffb7 97cf33d8 (d4210000) [ 41.768564][ T6587] ---[ end trace 0000000000000000 ]--- [ 42.178264][ T6587] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 42.180050][ T6587] SMP: stopping secondary CPUs [ 42.181357][ T6587] Kernel Offset: disabled [ 42.182434][ T6587] CPU features: 0x200,00002070,00800250,82017203 [ 42.184077][ T6587] Memory Limit: none [ 42.612016][ T6587] Rebooting in 86400 seconds..