last executing test programs: 7.060235112s ago: executing program 4 (id=299): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$inet6(0x10, 0x80000, 0x3) open_tree(0xffffffffffffff9c, 0x0, 0x89901) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x5c}}, 0x0) 6.51924115s ago: executing program 2 (id=301): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) listen(r0, 0x0) 6.411739592s ago: executing program 2 (id=302): r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0xeb476000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x32) 5.745967142s ago: executing program 4 (id=305): openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x143901, 0x0) syz_emit_vhci(&(0x7f0000001fc0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc9, 0x6}}}, 0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04050400c9"], 0x7) msgctl$IPC_RMID(0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x802, &(0x7f0000000240)={[{@nomblk_io_submit}, {@dioread_nolock}, {@nobh}, {@minixdf}, {@nobh}, {@usrjquota, 0x2e}, {@grpquota}, {@test_dummy_encryption_v1}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@noload}, {@test_dummy_encryption}], [], 0x2c}, 0x84, 0x45e, &(0x7f0000000900)="$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") syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 5.581975104s ago: executing program 0 (id=307): openat$ppp(0xffffffffffffff9c, 0x0, 0xc0200, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r2, 0x905, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 5.503378406s ago: executing program 3 (id=309): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002880)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xffff}, {0x9, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 5.319635368s ago: executing program 3 (id=310): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000017c0)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x8, 0x1, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) 5.101531151s ago: executing program 3 (id=311): socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x25, 0x5, 0x2, &(0x7f0000000000)) 5.100092602s ago: executing program 0 (id=321): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002880)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xffff}, {0x9, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 4.791325567s ago: executing program 0 (id=312): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 4.54725807s ago: executing program 0 (id=313): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f00000004c0)={[{@fatal_errors_bug}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@flushoncommit}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@ssd_spread}, {@nodatasum}, {@enospc_debug}, {@ssd_spread}, {@clear_cache}]}, 0x3, 0x55a3, &(0x7f0000005600)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) write$FUSE_STATX(r2, 0x0, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={{r2}, 0x0, 0x0, 0x100000}) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvfrom$inet(r1, &(0x7f0000000000)=""/22, 0x16, 0xc9100120, 0x0, 0x0) 4.407100503s ago: executing program 4 (id=315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_buf(r3, 0x1, 0x45, 0x0, &(0x7f0000000140)=0x2000) 4.343832524s ago: executing program 2 (id=316): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18}}], 0x1, 0x0) 4.328063653s ago: executing program 1 (id=317): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$inet6(0x10, 0x80000, 0x3) open_tree(0xffffffffffffff9c, 0x0, 0x89901) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x5c}}, 0x0) 3.303732839s ago: executing program 4 (id=318): syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f00000001c0)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x0) 3.174906901s ago: executing program 1 (id=319): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) 3.174602772s ago: executing program 2 (id=320): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 3.174393672s ago: executing program 4 (id=322): socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) socket$caif_stream(0x25, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x5, 0x82}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.234503926s ago: executing program 2 (id=323): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ftruncate(0xffffffffffffffff, 0x2008002) setpriority(0x2, 0x0, 0xffffffffffffffcd) 2.214395026s ago: executing program 1 (id=324): sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x80000) 2.117574807s ago: executing program 3 (id=325): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 2.117316607s ago: executing program 0 (id=326): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$kcm(0x2, 0xa, 0x2) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESHEX=r1], 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x80, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040", @ANYRES32=0xee01], 0xb8}}, 0x4000) 2.116359998s ago: executing program 4 (id=327): r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0xeb476000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x32) 1.30192139s ago: executing program 2 (id=328): openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x143901, 0x0) syz_emit_vhci(&(0x7f0000001fc0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc9, 0x6}}}, 0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04050400c9"], 0x7) msgctl$IPC_RMID(0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x802, &(0x7f0000000240)={[{@nomblk_io_submit}, {@dioread_nolock}, {@nobh}, {@minixdf}, {@nobh}, {@usrjquota, 0x2e}, {@grpquota}, {@test_dummy_encryption_v1}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@noload}, {@test_dummy_encryption}], [], 0x2c}, 0x84, 0x45e, &(0x7f0000000900)="$eJzs28tvG8UfAPDvbpq++0t+oTz6AAIFUfFImrRAD1xAIPWChASHcuAQ0rQqdRvUBIlWFQ0IlSMq/wBwROIv4AQXBJxAXOGOkCrUC4UDWrT22jWOncaPxGn9+UibzOyOPfP17tizM3YAA2s8/5NE7IyIXyJiJCKGGguMV/7duH5p9q/rl2aTyLJX/0jyh8Wf1y/NVosmxf8dReZgGpF+mMS+JvUuXLh4ZqZUmjtf5CcXz749uXDh4lOnz86cmjs1d2766NEjh6eefWb66Z7EuStv69735vfvOfb61Zdnj1998/sv8/buLI7Xx1Ex2nWd4zFee00aPdr1s28su+rSyaY+NoS25H09P13D5f4/EkNx8+SNxEsf9LVxwJrKsizbsmxvbQSwlAF3sCT63QKgP6of9Pn9b3Vbx+FH3117vnIDlMd9o9gqRzZFWpQZbri/7aXxiDi+9Pen+RZN5yEAAHrr63z882Sz8V8a99SV+1+xNjQaEf+PiLGIuCsidkfE3RHlsvdGxH1t1j/ekF8+/vlpW0eBrVI+/nuuWNv67/ivOvqL0aEit6sc/3By8nRp7lDxmhyM4S15fmqFOr558eePWx2rH//lW15/dSxYtOP3TQ0TdCdmFme6ibnetffLc4CXl8ef1FYCkojYExF7O3j+rRFx+vEv9rc6fuv4V9CDdabs84jHKud/KRrir0pWXp+c3BqluUOT1atiuR9+vPJKq/q7ir8H8vO/ven1X4t/NKlfr11ov44rv37U8p6m0+t/c/JaOb252PfuzOLi+amIzcnS8v3TNx9bzVfL5/EfPNC8/49F/PNZ8bh9EZFfxPdHxAMR8WDR9oci4uGIOLBC/N+98Mhbnce/tvL4T7R1/ttPDJ359qtW9a/u/B+JGHujNlmxmve/1Tawu1cPAAAAbg9p+TvwSTpRS6fpxMQn5e/w747taWl+YfGJk/PvnDtR+a78aAyn1Zmukbr50Klibrian27IHy7PG2dZlm0r5ydm50trtaYOrM6Opv2/cuy3oX63Dlhzba2jtfpFG3Bb8ntNGFz6Pwwu/R8Gl/4Pg6tZ/78ccaMPTQHWmc9/GFz6Pwwu/R8Gl/4PA6mb3/WvlBg7tlbPfEclIuaGNkAzOklEuiGa0Vki3RjNqCS2RESxJ71V4cuxXg3r9zsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAb/wbAAD//9FS7cA=") syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 1.259828081s ago: executing program 1 (id=329): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 1.247654611s ago: executing program 0 (id=330): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18}}], 0x1, 0x0) 1.100225733s ago: executing program 1 (id=331): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_buf(r3, 0x1, 0x45, 0x0, &(0x7f0000000140)=0x2000) 908.253776ms ago: executing program 3 (id=332): syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f00000001c0)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x0) 17.50615ms ago: executing program 1 (id=333): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 3 (id=334): syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000000)='./file2\x00', 0x40, &(0x7f0000000280)=ANY=[], 0x11, 0x2ff, &(0x7f0000000680)="$eJzs3U9rE0EYx/HfbNImtbGmf0TwWC3oRbRexEtE8hYE8SDaNkIxVNQK6sVUPIno3btvwRfhRfEN6MmD+ALa08rM/kk22c2msUka/H5A3Wzm2Xkmm919JiAjAP+tm/Ufn67+sn+MVFBBentd8iSVpaKk0zpTfrazu73bbGz1O1DBRejAl1EQaXrabO403L97yd02zkWEqvZVUZXOfRgN3/dv/Oza99ubUDKYGHf1p/CkUnh1uvfLY8+sv70h41pHnMe0Mfva13MtTDoPAMCkBI99+/zfCwp/u6MS1u+eJ62Fj/1j+fwf1v6kExg5v++7Hc9/N8vyjT2/p9xb7fmem8LZ971oljhIzzNdr2cVFJKJAtPkzSpdLt7cg+1m49Lmo+aWp9eqhTqarcQ9hOw3NCfb1ZS5aR8DjN2kVpRBWt6MHcN6Rv7LQ/bYR8/0LXFCzBfzzdw1VX3UVlz/FX1js3UJV7vOVJD/5ez+5l2UbaXwtlGr1Tx3oMii6+Rs8kzljLKcPiNR9MEuKvkDQTUvTxe11BUVjO5KakApjlpOjVqPXmX0tZKIsqOJv83ZWY6aeW9um1X90WfVO+p/z+a35hp4WVdm+6oxa8GF5j7xYDyz6d0V3TGrPU+Olu5UknviT7GUlfpB/3saBhCdw3fa0DUtPH3x8mGh2Ww8sRv3UzYeV+I9M2+k1Db/vmGK0tDharX3lOQ7PY2je+AIks/cuHikB7T3j9zG9iobywBH9U1wG/LGeZoOv1H/Oqovkl86DgM8OcEbFMapfdKHCu8u9TF9bN1lgvmfq+TDet8VCvavW6XsOj0qyNJKNle9h0f0bY0dz4DKifglt3UiWUbnzA3mwzomZR7X0mBzrnMXpPOD91gN85wO/qucBqau77rH7/8AAAAAAAAAAAAAAAAAAADT5vD/Q2Du0FGTHiMAAAAAAAAAAAAAAAAAAAAAANMuXv9X0fq/Gmz93+6lWML1f8vKWf93ozeHnvV/P+zItCTW/wVG628AAAD//+RRfuQ=") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x101442, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x10042, 0x151) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x40000, 0x0, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.21' (ED25519) to the list of known hosts. [ 35.199327][ T4284] cgroup: Unknown subsys name 'net' [ 35.485822][ T4284] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.802416][ T4284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 37.421850][ T4300] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.427387][ T4302] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.430233][ T4302] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.433431][ T4305] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.435603][ T4305] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.437688][ T4305] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.442669][ T4307] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.444997][ T4307] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.447275][ T4307] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.450074][ T4307] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 37.450352][ T4311] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.453550][ T4307] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.455547][ T4312] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.457147][ T4307] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.458844][ T4312] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 37.461795][ T4307] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.463440][ T4312] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 37.464542][ T4307] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 37.466752][ T4312] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 37.468241][ T4307] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.470200][ T4312] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 37.472420][ T4307] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.474063][ T4312] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 37.475727][ T4307] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.478460][ T4312] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.480131][ T4307] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 37.488641][ T4307] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.498316][ T4307] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.501376][ T4300] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 37.503498][ T4300] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.722172][ T4299] chnl_net:caif_netlink_parms(): no params data found [ 37.760855][ T4308] chnl_net:caif_netlink_parms(): no params data found [ 37.798969][ T4296] chnl_net:caif_netlink_parms(): no params data found [ 37.817729][ T4306] chnl_net:caif_netlink_parms(): no params data found [ 37.824461][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.826407][ T4299] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.828887][ T4299] device bridge_slave_0 entered promiscuous mode [ 37.850181][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.852329][ T4308] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.855028][ T4308] device bridge_slave_0 entered promiscuous mode [ 37.858209][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.860228][ T4308] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.863196][ T4308] device bridge_slave_1 entered promiscuous mode [ 37.865600][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.867429][ T4299] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.870025][ T4299] device bridge_slave_1 entered promiscuous mode [ 37.909967][ T4308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.922429][ T4295] chnl_net:caif_netlink_parms(): no params data found [ 37.933693][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.935722][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.938371][ T4296] device bridge_slave_0 entered promiscuous mode [ 37.945441][ T4299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.949123][ T4308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.960163][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.963010][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.965436][ T4296] device bridge_slave_1 entered promiscuous mode [ 37.975954][ T4299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.003662][ T4306] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.005623][ T4306] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.008169][ T4306] device bridge_slave_0 entered promiscuous mode [ 38.013390][ T4308] team0: Port device team_slave_0 added [ 38.016346][ T4308] team0: Port device team_slave_1 added [ 38.021795][ T4296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.035850][ T4306] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.037845][ T4306] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.040304][ T4306] device bridge_slave_1 entered promiscuous mode [ 38.048162][ T4296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.061400][ T4299] team0: Port device team_slave_0 added [ 38.084898][ T4299] team0: Port device team_slave_1 added [ 38.097948][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.099757][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.107087][ T4308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.112371][ T4296] team0: Port device team_slave_0 added [ 38.114455][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.116444][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.123804][ T4308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.127230][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.129208][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.131753][ T4295] device bridge_slave_0 entered promiscuous mode [ 38.139766][ T4306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.144103][ T4306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.147595][ T4296] team0: Port device team_slave_1 added [ 38.155993][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.158064][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.161051][ T4295] device bridge_slave_1 entered promiscuous mode [ 38.191411][ T4299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.193322][ T4299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.200047][ T4299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.211064][ T4306] team0: Port device team_slave_0 added [ 38.214284][ T4306] team0: Port device team_slave_1 added [ 38.216356][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.218172][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.225274][ T4296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.229415][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.231503][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.238315][ T4296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.246378][ T4299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.248249][ T4299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.255303][ T4299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.270588][ T4295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.290166][ T4295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.293653][ T4306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.295510][ T4306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.303104][ T4306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.307159][ T4306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.308987][ T4306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.316366][ T4306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.362439][ T4308] device hsr_slave_0 entered promiscuous mode [ 38.411051][ T4308] device hsr_slave_1 entered promiscuous mode [ 38.532294][ T4296] device hsr_slave_0 entered promiscuous mode [ 38.571314][ T4296] device hsr_slave_1 entered promiscuous mode [ 38.610837][ T4296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.613113][ T4296] Cannot create hsr debugfs directory [ 38.626039][ T4295] team0: Port device team_slave_0 added [ 38.672216][ T4299] device hsr_slave_0 entered promiscuous mode [ 38.720952][ T4299] device hsr_slave_1 entered promiscuous mode [ 38.760718][ T4299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.762825][ T4299] Cannot create hsr debugfs directory [ 38.802313][ T4306] device hsr_slave_0 entered promiscuous mode [ 38.850995][ T4306] device hsr_slave_1 entered promiscuous mode [ 38.900669][ T4306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.902834][ T4306] Cannot create hsr debugfs directory [ 38.905511][ T4295] team0: Port device team_slave_1 added [ 38.960237][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.962397][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.969187][ T4295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.973914][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.975938][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.983367][ T4295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.122228][ T4295] device hsr_slave_0 entered promiscuous mode [ 39.160923][ T4295] device hsr_slave_1 entered promiscuous mode [ 39.190666][ T4295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.192771][ T4295] Cannot create hsr debugfs directory [ 39.311858][ T4296] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.363133][ T4296] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.392905][ T4296] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.432615][ T4296] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.507552][ T4306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.531300][ T4302] Bluetooth: hci2: command 0x0409 tx timeout [ 39.533098][ T4302] Bluetooth: hci3: command 0x0409 tx timeout [ 39.534756][ T4302] Bluetooth: hci1: command 0x0409 tx timeout [ 39.536342][ T4300] Bluetooth: hci0: command 0x0409 tx timeout [ 39.536483][ T4307] Bluetooth: hci4: command 0x0409 tx timeout [ 39.542955][ T4306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.579474][ T4306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.623778][ T4306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.687584][ T4299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.722319][ T4299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.767814][ T4299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.802682][ T4299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.890058][ T4296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.909308][ T4295] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.965916][ T4295] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 40.015077][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.018491][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.021669][ T4295] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 40.075372][ T4296] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.084030][ T4295] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 40.149241][ T4308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.183298][ T4308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.222865][ T4308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.252059][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.254741][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.257745][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.259878][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.262758][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.271830][ T4308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.321612][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.324189][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.326910][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.328922][ T4343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.351561][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.364477][ T4306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.369475][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.386084][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.389413][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.393154][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.395873][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.398418][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.401111][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.404152][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.413247][ T4299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.420501][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.424545][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.426980][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.429500][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.436557][ T4306] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.451963][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.468690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.471915][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.474414][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.476469][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.479806][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.489077][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.493360][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.495393][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.497746][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.504851][ T4295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.516322][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.518970][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.523994][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.534525][ T4299] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.538845][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.543107][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.545568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.548094][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.556447][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.559072][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.561055][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.566430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.578475][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.581926][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.584575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.587480][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.590272][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.594067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.597013][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.600883][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.603274][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.605378][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.607689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.612155][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.614683][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.620427][ T4295] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.631287][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.646187][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.648376][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.667483][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.670315][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.677654][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.680967][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.682907][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.685576][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.690110][ T4296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.698488][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.705494][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.708181][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.710762][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.712758][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.718332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.729541][ T4308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.733140][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.736427][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.739049][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.743563][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.746205][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.758164][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.762461][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.765671][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.779700][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.783419][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.786207][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.789161][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.792593][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.795205][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.797778][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.800294][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.804494][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.807791][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.811730][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.822013][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.825947][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.828572][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.837929][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.840089][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.845184][ T4308] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.850450][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.859459][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.865973][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.881428][ T4306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.894278][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.896956][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.899350][ T1589] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.901407][ T1589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.912358][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.926624][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.935001][ T4296] device veth0_vlan entered promiscuous mode [ 40.948615][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.951872][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.954503][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.969327][ T4296] device veth1_vlan entered promiscuous mode [ 40.975952][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.978473][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.986644][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.989635][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.992769][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.995287][ T1589] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.997175][ T1589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.026439][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.029035][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.037711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.040324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.044235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.053841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.059699][ T4306] device veth0_vlan entered promiscuous mode [ 41.075350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.077542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.079683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.084220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.087992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.093926][ T4299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.096398][ T4296] device veth0_macvtap entered promiscuous mode [ 41.108265][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.111098][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.114048][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.116771][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.119007][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.126149][ T4295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.128162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.133648][ T4296] device veth1_macvtap entered promiscuous mode [ 41.139862][ T4306] device veth1_vlan entered promiscuous mode [ 41.159256][ T4308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.168005][ T4308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.174079][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.176668][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.179316][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.184243][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.187093][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.192412][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.194978][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.197809][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.200390][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.212563][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.226090][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.228713][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.247639][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.249846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.253109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.255773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.258487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.268171][ T4306] device veth0_macvtap entered promiscuous mode [ 41.274251][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.276290][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.278920][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.281943][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.302561][ T4306] device veth1_macvtap entered promiscuous mode [ 41.308042][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.310464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.313518][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.317218][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.319621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.326140][ T4299] device veth0_vlan entered promiscuous mode [ 41.334483][ T4296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.336879][ T4296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.339303][ T4296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.346290][ T4296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.376483][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.379394][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.388564][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.393983][ T4299] device veth1_vlan entered promiscuous mode [ 41.400431][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.404175][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.406835][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.439643][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.443005][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.445752][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.449620][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.454197][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.457931][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.466538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.469179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.485566][ T4306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.488075][ T4306] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.491776][ T4306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.494197][ T4306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.513909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.517341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.520225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.522819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.525215][ T4295] device veth0_vlan entered promiscuous mode [ 41.527718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.530222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.549230][ T4308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.577359][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.579609][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.596100][ T4295] device veth1_vlan entered promiscuous mode [ 41.599223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.602500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.605049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.607749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.611512][ T4297] Bluetooth: hci1: command 0x041b tx timeout [ 41.611577][ T4307] Bluetooth: hci4: command 0x041b tx timeout [ 41.613132][ T4297] Bluetooth: hci0: command 0x041b tx timeout [ 41.614802][ T4307] Bluetooth: hci3: command 0x041b tx timeout [ 41.616263][ T4297] Bluetooth: hci2: command 0x041b tx timeout [ 41.634236][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.636440][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.636847][ T4299] device veth0_macvtap entered promiscuous mode [ 41.643798][ T4299] device veth1_macvtap entered promiscuous mode [ 41.655602][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.658476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.662370][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.664877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.667341][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.670078][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.712467][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.715332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.733478][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.736362][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.738978][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.742031][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.745920][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.757034][ T4295] device veth0_macvtap entered promiscuous mode [ 41.758925][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.765084][ T4295] device veth1_macvtap entered promiscuous mode [ 41.771096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.773550][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.776132][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.778703][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.782024][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.791277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.798647][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.807987][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.811520][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.814333][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.818062][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.830947][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.833528][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.842162][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.844853][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.862028][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.864882][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.867640][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.880867][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.883600][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.886382][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.892603][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.915816][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.918338][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.922685][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.925484][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.931715][ T4299] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.934135][ T4299] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.937264][ T4299] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.947090][ T4299] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.953398][ T4308] device veth0_vlan entered promiscuous mode [ 41.955972][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.958883][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.963885][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.966679][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.969319][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.972324][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.976086][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.987376][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.990094][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.998118][ T4373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.009333][ T4373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.012251][ T4295] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.014603][ T4295] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.016923][ T4295] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.019278][ T4295] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.027566][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.055958][ T4308] device veth1_vlan entered promiscuous mode [ 42.092501][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.094693][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.124994][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.147432][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.151028][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.158421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.179462][ T4308] device veth0_macvtap entered promiscuous mode [ 42.186618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.189328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.193816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.212422][ T4308] device veth1_macvtap entered promiscuous mode [ 42.233268][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.236871][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.239842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.246589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.301847][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.307103][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.310125][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.315321][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.318087][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.323599][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.326391][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.329349][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.335077][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.340003][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.352818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.366452][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.366574][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.368711][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.376394][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.379230][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.383615][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.386426][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.389387][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.392353][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.395406][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.401679][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.409480][ T4308] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.420510][ T4308] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.424269][ T4308] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.427068][ T4308] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.441992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.444561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.447536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.509633][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.512255][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.523139][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.565037][ T4373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.567352][ T4373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.574990][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.653536][ T4397] loop3: detected capacity change from 0 to 256 [ 43.691111][ T4302] Bluetooth: hci2: command 0x040f tx timeout [ 43.700735][ T4302] Bluetooth: hci3: command 0x040f tx timeout [ 43.702342][ T4302] Bluetooth: hci0: command 0x040f tx timeout [ 43.704041][ T4302] Bluetooth: hci4: command 0x040f tx timeout [ 43.705753][ T4302] Bluetooth: hci1: command 0x040f tx timeout [ 44.608354][ T4410] loop1: detected capacity change from 0 to 256 [ 44.708542][ T4420] loop0: detected capacity change from 0 to 256 [ 44.757472][ T4404] sctp: failed to load transform for md5: -2 [ 45.032933][ T4429] netlink: del zone limit has 4 unknown bytes [ 45.600073][ T4431] loop3: detected capacity change from 0 to 4096 [ 45.639244][ T4431] ntfs: volume version 3.1. [ 45.674181][ T4420] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 45.676745][ T4420] FAT-fs (loop0): Filesystem has been set read-only [ 45.771790][ T4307] Bluetooth: hci1: command 0x0419 tx timeout [ 45.845145][ T4302] Bluetooth: hci4: command 0x0419 tx timeout [ 45.846828][ T4302] Bluetooth: hci0: command 0x0419 tx timeout [ 45.848480][ T4302] Bluetooth: hci3: command 0x0419 tx timeout [ 45.850080][ T4302] Bluetooth: hci2: command 0x0419 tx timeout [ 46.864107][ T4445] loop0: detected capacity change from 0 to 4096 [ 46.866601][ T4445] EXT4-fs: inline encryption not supported [ 47.006553][ T4445] EXT4-fs: Ignoring removed oldalloc option [ 47.017773][ T4445] EXT4-fs (loop0): Test dummy encryption mode enabled [ 47.057923][ T4445] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 47.083240][ T4466] loop2: detected capacity change from 0 to 128 [ 47.104810][ T4468] loop1: detected capacity change from 0 to 512 [ 47.105798][ T4466] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 47.106981][ T4468] EXT4-fs: Ignoring removed orlov option [ 47.131931][ T4466] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 47.138560][ T4468] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.26: inode #15: comm syz.1.26: iget: illegal inode # [ 47.143009][ T4468] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.26: couldn't read orphan inode 15 (err -117) [ 47.150666][ T4468] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 47.168253][ T4468] EXT4-fs error (device loop1): ext4_lookup:1858: comm syz.1.26: inode #15: comm syz.1.26: iget: illegal inode # [ 47.512204][ T4306] EXT4-fs (loop1): unmounting filesystem. [ 47.716862][ T4296] EXT4-fs (loop0): unmounting filesystem. [ 47.793186][ T4484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.31'. [ 50.229625][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 51.354735][ C1] sched: RT throttling activated [ 51.587359][ T4526] loop3: detected capacity change from 0 to 40427 [ 51.621402][ T4526] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 51.644920][ T4526] F2FS-fs (loop3): invalid crc value [ 51.650109][ T4526] F2FS-fs (loop3): invalid crc value [ 51.651633][ T4526] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 52.812269][ T22] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.815329][ T22] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.817954][ T22] usb 1-1: config 0 interface 0 has no altsetting 0 [ 52.828583][ T22] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 52.831463][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.836707][ T22] usb 1-1: config 0 descriptor?? [ 52.902803][ T22] usbhid 1-1:0.0: can't add hid device: -71 [ 52.904518][ T22] usbhid: probe of 1-1:0.0 failed with error -71 [ 52.916849][ T22] usb 1-1: USB disconnect, device number 2 [ 53.307685][ T4552] loop0: detected capacity change from 0 to 256 [ 53.361446][ T4552] FAT-fs (loop0): Directory bread(block 64) failed [ 53.368123][ T4552] FAT-fs (loop0): Directory bread(block 65) failed [ 53.372333][ T4552] FAT-fs (loop0): Directory bread(block 66) failed [ 53.383072][ T4552] FAT-fs (loop0): Directory bread(block 67) failed [ 53.406258][ T4552] FAT-fs (loop0): Directory bread(block 68) failed [ 53.411478][ T4552] FAT-fs (loop0): Directory bread(block 69) failed [ 53.417922][ T4552] FAT-fs (loop0): Directory bread(block 70) failed [ 53.421081][ T4552] FAT-fs (loop0): Directory bread(block 71) failed [ 53.423058][ T4552] FAT-fs (loop0): Directory bread(block 72) failed [ 53.428712][ T4552] FAT-fs (loop0): Directory bread(block 73) failed [ 53.570009][ T4552] syz.0.52: attempt to access beyond end of device [ 53.570009][ T4552] loop0: rw=2051, sector=1224, nr_sectors = 128 limit=256 [ 53.959227][ T4307] Bluetooth: hci0: unexpected event 0x03 length: 17 > 11 [ 55.515910][ C0] vcan0: j1939_tp_rxtimer: 0x0000000050558a17: rx timeout, send abort [ 55.893709][ T4307] Bluetooth: hci0: command 0x0409 tx timeout [ 56.006817][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e2d56bb4: rx timeout, send abort [ 56.011714][ C0] vcan0: j1939_tp_rxtimer: 0x0000000050558a17: abort rx timeout. Force session deactivation [ 56.500041][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e2d56bb4: abort rx timeout. Force session deactivation [ 64.172458][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.174339][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.371909][ T4592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.65'. [ 65.528483][ T4612] process 'syz.4.73' launched './file1' with NULL argv: empty string added [ 65.579307][ T4611] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.916947][ T4640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.84'. [ 66.009100][ T4642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.85'. [ 66.133931][ T4649] tipc: Started in network mode [ 66.136729][ T4649] tipc: Node identity 4, cluster identity 4711 [ 66.141496][ T4649] tipc: Node number set to 4 [ 66.221188][ T4658] binder: 4657:4658 tried to acquire reference to desc 0, got 1 instead [ 66.224278][ T4658] binder: 4657:4658 ioctl c0306201 200003c0 returned -14 [ 66.228086][ T4658] binder: 4657:4658 got transaction with out-of-order buffer fixup [ 66.247014][ T4658] binder: 4658:4657 failed to fixup parent [ 66.248695][ T4658] binder: 4657:4658 transaction call to 4657:0 failed 5/29201/-22, size 104-24 line 3549 [ 66.253739][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 66.922406][ T4686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.102'. [ 66.928502][ T4686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.102'. [ 67.141366][ T4688] loop3: detected capacity change from 0 to 256 [ 67.178941][ T4688] netlink: 277 bytes leftover after parsing attributes in process `syz.3.103'. [ 67.339201][ T4692] netlink: 'syz.2.105': attribute type 4 has an invalid length. [ 67.376288][ T4692] netlink: 'syz.2.105': attribute type 4 has an invalid length. [ 68.393970][ T4704] netlink: 24 bytes leftover after parsing attributes in process `syz.4.111'. [ 68.431135][ T4709] binder: 4708:4709 tried to acquire reference to desc 0, got 1 instead [ 68.434499][ T4709] binder: 4708:4709 got transaction with fd, 5, but target does not allow fds [ 68.436891][ T4709] binder: 4709:4708 translate fd failed [ 68.438426][ T4709] binder: 4708:4709 transaction call to 4708:0 failed 11/29201/-1, size 96-24 line 3424 [ 68.447825][ T4344] binder: undelivered TRANSACTION_ERROR: 29201 [ 68.544659][ T4718] loop3: detected capacity change from 0 to 512 [ 68.555683][ T4718] EXT4-fs: Ignoring removed i_version option [ 68.676934][ T4297] Bluetooth: hci4: command 0x0405 tx timeout [ 68.706167][ T4718] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.723031][ T4718] EXT4-fs (loop3): orphan cleanup on readonly fs [ 68.725377][ T4718] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 68.729089][ T4718] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 68.733385][ T4718] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 68.740164][ T4718] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 68.749488][ T4718] EXT4-fs (loop3): Remounting filesystem read-only [ 68.756564][ T4718] EXT4-fs (loop3): 1 truncate cleaned up [ 68.758160][ T4718] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 68.794209][ T4718] EXT4-fs warning (device loop3): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 68.854530][ T4299] EXT4-fs (loop3): unmounting filesystem. [ 69.844808][ T112] cfg80211: failed to load regulatory.db [ 70.243155][ T4745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.124'. [ 72.657864][ T4769] loop1: detected capacity change from 0 to 256 [ 72.741123][ T4769] ======================================================= [ 72.741123][ T4769] WARNING: The mand mount option has been deprecated and [ 72.741123][ T4769] and is ignored by this kernel. Remove the mand [ 72.741123][ T4769] option from the mount to silence this warning. [ 72.741123][ T4769] ======================================================= [ 73.773026][ T4769] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.776054][ T4769] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 73.875546][ T4769] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 74.677475][ T4793] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 74.684719][ T4793] CIFS mount error: No usable UNC path provided in device string! [ 74.684719][ T4793] [ 74.687822][ T4793] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 75.947152][ T4806] netlink: 168 bytes leftover after parsing attributes in process `syz.2.143'. [ 76.914776][ T4819] fuse: Bad value for 'fd' [ 77.139126][ T4822] netlink: 'syz.3.148': attribute type 10 has an invalid length. [ 77.144371][ T4822] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.146920][ T4822] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.020503][ T4822] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.022459][ T4822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.025473][ T4822] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.027392][ T4822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.044332][ T4822] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 78.061904][ T4831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.148'. [ 78.083184][ T4831] device bridge_slave_1 left promiscuous mode [ 78.124762][ T4831] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.180604][ T4831] device bridge_slave_0 left promiscuous mode [ 78.182336][ T4831] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.270175][ T4844] loop1: detected capacity change from 0 to 64 [ 78.369568][ T4831] bond0: (slave bridge0): Releasing backup interface [ 78.860432][ T4855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.158'. [ 78.881906][ T4858] netlink: 277 bytes leftover after parsing attributes in process `syz.2.159'. [ 78.924958][ T4855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 78.942389][ T4855] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 78.946410][ T4855] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 78.982687][ T4855] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 79.041122][ T4855] bond1 (unregistering): Released all slaves [ 79.369589][ T4844] hfs: request for non-existent node 8 in B*Tree [ 79.371701][ T4844] hfs: request for non-existent node 8 in B*Tree [ 79.688086][ T4888] UBIFS error (pid: 4888): cannot open "./file0", error -22 [ 79.695597][ T4887] loop3: detected capacity change from 0 to 4096 [ 79.727639][ T4887] ntfs3: loop3: Failed to load $MFT. [ 80.111312][ T4896] netlink: 277 bytes leftover after parsing attributes in process `syz.0.171'. [ 80.272239][ T4903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.175'. [ 80.325994][ T4899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.415440][ T4905] loop3: detected capacity change from 0 to 1024 [ 80.440331][ T178] kworker/u4:3: attempt to access beyond end of device [ 80.440331][ T178] loop1: rw=1, sector=4200, nr_sectors = 1 limit=64 [ 80.449013][ T178] Buffer I/O error on dev loop1, logical block 4200, lost async page write [ 80.451446][ T178] kworker/u4:3: attempt to access beyond end of device [ 80.451446][ T178] loop1: rw=1, sector=4201, nr_sectors = 1 limit=64 [ 80.456038][ T178] Buffer I/O error on dev loop1, logical block 4201, lost async page write [ 80.459639][ T178] kworker/u4:3: attempt to access beyond end of device [ 80.459639][ T178] loop1: rw=1, sector=4202, nr_sectors = 1 limit=64 [ 80.464596][ T178] Buffer I/O error on dev loop1, logical block 4202, lost async page write [ 80.476304][ T178] kworker/u4:3: attempt to access beyond end of device [ 80.476304][ T178] loop1: rw=1, sector=4203, nr_sectors = 1 limit=64 [ 80.480871][ T178] Buffer I/O error on dev loop1, logical block 4203, lost async page write [ 80.488375][ T4373] kworker/u4:6: attempt to access beyond end of device [ 80.488375][ T4373] loop1: rw=2049, sector=4200, nr_sectors = 1 limit=64 [ 80.492219][ T4373] Buffer I/O error on dev loop1, logical block 4200, lost async page write [ 80.494573][ T4373] kworker/u4:6: attempt to access beyond end of device [ 80.494573][ T4373] loop1: rw=2049, sector=4201, nr_sectors = 1 limit=64 [ 80.504930][ T4905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 80.511698][ T4373] Buffer I/O error on dev loop1, logical block 4201, lost async page write [ 80.514130][ T4373] kworker/u4:6: attempt to access beyond end of device [ 80.514130][ T4373] loop1: rw=2049, sector=4202, nr_sectors = 1 limit=64 [ 80.517749][ T4373] Buffer I/O error on dev loop1, logical block 4202, lost async page write [ 80.526927][ T4373] kworker/u4:6: attempt to access beyond end of device [ 80.526927][ T4373] loop1: rw=2049, sector=4203, nr_sectors = 1 limit=64 [ 80.531182][ T4373] Buffer I/O error on dev loop1, logical block 4203, lost async page write [ 80.596690][ T4909] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.180'. [ 80.654805][ T4343] hfsplus: b-tree write err: -5, ino 4 [ 80.679769][ T4913] netlink: 24 bytes leftover after parsing attributes in process `syz.2.181'. [ 80.738592][ T4916] loop3: detected capacity change from 0 to 2048 [ 80.744036][ T4916] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.783558][ T4916] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 80.877857][ T4299] EXT4-fs (loop3): unmounting filesystem. [ 80.996548][ T4934] __nla_validate_parse: 1 callbacks suppressed [ 80.996561][ T4934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'. [ 81.025874][ T4936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.188'. [ 81.109576][ T4932] loop3: detected capacity change from 0 to 8192 [ 81.218459][ T4932] loop3: p1 < > p3 < p5 > p4 [ 81.219969][ T4932] loop3: partition table partially beyond EOD, truncated [ 81.224258][ T4932] loop3: p1 start 4294967040 is beyond EOD, truncated [ 81.424166][ T4950] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.192'. [ 81.514290][ T4952] loop1: detected capacity change from 0 to 1024 [ 81.609556][ T4952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'. [ 81.661880][ T178] wlan1: Trigger new scan to find an IBSS to join [ 81.685970][ T4606] udevd[4606]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 81.691815][ T4720] udevd[4720]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 81.711174][ T4960] udevd[4960]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 81.730770][ T4959] loop3: detected capacity change from 0 to 1024 [ 81.832989][ T4343] hfsplus: b-tree write err: -5, ino 4 [ 81.961759][ T4962] loop1: detected capacity change from 0 to 2048 [ 81.965722][ T4962] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.021093][ T4962] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 82.024530][ T4972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.198'. [ 82.139520][ T4306] EXT4-fs (loop1): unmounting filesystem. [ 82.148694][ T4963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.177673][ T4976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.201'. [ 82.286188][ T4980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.203'. [ 82.477527][ T4986] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.206'. [ 82.578530][ T4990] binder: 4989:4990 tried to acquire reference to desc 0, got 1 instead [ 82.586992][ T4301] binder: undelivered TRANSACTION_COMPLETE [ 82.613478][ T4301] binder: undelivered transaction 16, process died. [ 82.697436][ T4994] loop1: detected capacity change from 0 to 1024 [ 82.731475][ T4992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.209'. [ 82.823372][ T5000] loop4: detected capacity change from 0 to 2048 [ 82.836310][ T5000] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.859630][ T5000] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 83.067529][ T4295] EXT4-fs (loop4): unmounting filesystem. [ 83.133991][ T4998] loop3: detected capacity change from 0 to 32768 [ 83.169198][ T4998] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.211 (4998) [ 83.181456][ T5005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.184175][ T5005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.211964][ T4998] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 83.221490][ T4998] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 83.223826][ T4998] BTRFS info (device loop3): force clearing of disk cache [ 83.225734][ T4998] BTRFS info (device loop3): setting nodatacow, compression disabled [ 83.227939][ T4998] BTRFS info (device loop3): doing ref verification [ 83.249297][ T4998] BTRFS info (device loop3): enabling auto defrag [ 83.251202][ T4998] BTRFS info (device loop3): max_inline at 0 [ 83.252900][ T4998] BTRFS info (device loop3): using free space tree [ 84.371718][ T4998] BTRFS info (device loop3): enabling ssd optimizations [ 84.390815][ T4998] BTRFS info (device loop3): rebuilding free space tree [ 84.500126][ T5044] binder: 5043:5044 tried to acquire reference to desc 0, got 1 instead [ 84.516679][ T4301] binder: undelivered TRANSACTION_COMPLETE [ 84.552021][ T4301] binder: undelivered transaction 21, process died. [ 84.579520][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'. [ 84.768637][ T5048] UBIFS error (pid: 5048): cannot open "./file0", error -22 [ 85.033901][ T4297] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 85.038904][ T4297] Bluetooth: hci2: Injecting HCI hardware error event [ 85.044518][ T4297] Bluetooth: hci2: hardware error 0x00 [ 85.403083][ T4307] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 85.405908][ T4307] Bluetooth: hci4: Injecting HCI hardware error event [ 85.410868][ T4302] Bluetooth: hci4: hardware error 0x00 [ 85.498696][ T4299] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 85.524853][ T5045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.719753][ T5061] loop4: detected capacity change from 0 to 1024 [ 85.888531][ T5063] overlayfs: failed to clone upperpath [ 86.708803][ T4590] hfsplus: b-tree write err: -5, ino 4 [ 86.752598][ T5074] __nla_validate_parse: 1 callbacks suppressed [ 86.752611][ T5074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.230'. [ 86.801914][ T5074] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.805261][ T5074] bond1: (slave bond2): Enslaving as an active interface with an up link [ 86.825978][ T5074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.230'. [ 86.836620][ T5074] bond1 (unregistering): (slave bond2): Releasing backup interface [ 87.002462][ T5074] bond1 (unregistering): Released all slaves [ 87.556391][ T4297] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 87.905670][ T4302] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 88.023905][ T5101] Zero length message leads to an empty skb [ 88.725592][ T5103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.239'. [ 88.883394][ T5094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.951536][ T5119] binder: 5116:5119 tried to acquire reference to desc 0, got 1 instead [ 89.959244][ T5119] binder: tried to use weak ref as strong ref [ 89.961325][ T5119] binder: 5116:5119 got transaction to invalid handle, 1 [ 89.980713][ T5119] binder: 5119:5116 cannot find target node [ 89.982429][ T5119] binder: 5116:5119 transaction async to 0:0 failed 33/29201/-22, size 0-0 line 3054 [ 90.011067][ T4378] binder: undelivered TRANSACTION_COMPLETE [ 90.072723][ T4378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 90.078326][ T4378] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 90.109119][ T4378] binder: undelivered TRANSACTION_ERROR: 29201 [ 90.180185][ T4378] binder: undelivered transaction 26, process died. [ 90.987926][ T5133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.249'. [ 91.108045][ T5133] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.235058][ T5133] bond1: (slave bond2): Enslaving as an active interface with an up link [ 91.304406][ T5126] fido_id[5126]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 91.998118][ T5133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'. [ 92.023052][ T5133] bond1 (unregistering): (slave bond2): Releasing backup interface [ 92.074704][ T5133] bond1 (unregistering): Released all slaves [ 92.386512][ T5165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.255'. [ 93.655965][ T5163] binder: 5162:5163 tried to acquire reference to desc 0, got 1 instead [ 93.672139][ T5163] binder: tried to use weak ref as strong ref [ 93.673747][ T5163] binder: 5162:5163 got transaction to invalid handle, 1 [ 93.694168][ T5163] binder: 5163:5162 cannot find target node [ 93.695819][ T5163] binder: 5162:5163 transaction async to 0:0 failed 45/29201/-22, size 0-0 line 3054 [ 93.712114][ T5157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.716772][ T14] binder: undelivered TRANSACTION_COMPLETE [ 93.738605][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 93.740373][ T14] binder: undelivered transaction 38, process died. [ 93.850199][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 93.861502][ T14] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 94.020267][ T5180] fido_id[5180]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 94.860047][ T5196] netlink: 'syz.2.269': attribute type 4 has an invalid length. [ 95.040180][ T5199] loop1: detected capacity change from 0 to 8192 [ 95.069954][ T5199] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 95.156073][ T5199] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 95.159749][ T5199] REISERFS (device loop1): using ordered data mode [ 95.161744][ T5199] reiserfs: using flush barriers [ 95.165736][ T5199] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 95.170667][ T5199] REISERFS (device loop1): checking transaction log (loop1) [ 96.109070][ T5214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.275'. [ 96.111642][ T5214] netlink: 1 bytes leftover after parsing attributes in process `syz.2.275'. [ 96.139684][ T5216] netlink: 24 bytes leftover after parsing attributes in process `syz.4.274'. [ 96.191111][ T5199] REISERFS (device loop1): Using tea hash to sort names [ 96.194244][ T5199] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 96.212657][ T5219] netlink: 24 bytes leftover after parsing attributes in process `syz.0.276'. [ 96.277465][ T5219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.276'. [ 96.351756][ T5199] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 8 0x0 SD] (nlink == 1) not found (pos 2) [ 96.476110][ T5222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.278'. [ 96.533061][ T5221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.942428][ T5246] netlink: 'syz.1.284': attribute type 4 has an invalid length. [ 99.103918][ T5263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.289'. [ 99.137913][ T5266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.292'. [ 99.140364][ T5266] netlink: 1 bytes leftover after parsing attributes in process `syz.4.292'. [ 99.198475][ T5268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.293'. [ 99.299844][ T5268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'. [ 99.763863][ T5282] netlink: 24 bytes leftover after parsing attributes in process `syz.1.306'. [ 99.931901][ T5285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'. [ 101.604781][ T5317] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 101.800813][ T5322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.310'. [ 101.857706][ T5309] loop4: detected capacity change from 0 to 512 [ 101.884140][ T5309] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.885962][ T5309] EXT4-fs: Ignoring removed nobh option [ 101.887513][ T5309] EXT4-fs: Ignoring removed nobh option [ 101.889108][ T5309] EXT4-fs: Conflicting test_dummy_encryption options [ 102.101421][ T5326] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 102.374972][ T5331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.312'. [ 103.512097][ T4302] Bluetooth: hci0: command 0x0406 tx timeout [ 105.712271][ T5368] syz.0.326 uses obsolete (PF_INET,SOCK_PACKET) [ 105.898472][ T5371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 107.111531][ T5391] loop3: detected capacity change from 0 to 64 [ 107.200662][ T5391] [ 107.201298][ T5391] ====================================================== [ 107.203293][ T5391] WARNING: possible circular locking dependency detected [ 107.205182][ T5391] 6.1.141-syzkaller #0 Not tainted [ 107.206568][ T5391] ------------------------------------------------------ [ 107.208482][ T5391] syz.3.334/5391 is trying to acquire lock: [ 107.210064][ T5391] ffff0000dbe260b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x148/0x1c8 [ 107.212712][ T5391] [ 107.212712][ T5391] but task is already holding lock: [ 107.214699][ T5391] ffff0000d3830778 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xd4/0xf9c [ 107.217676][ T5391] [ 107.217676][ T5391] which lock already depends on the new lock. [ 107.217676][ T5391] [ 107.220576][ T5391] [ 107.220576][ T5391] the existing dependency chain (in reverse order) is: [ 107.223011][ T5391] [ 107.223011][ T5391] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 107.225540][ T5391] __mutex_lock_common+0x190/0x1f38 [ 107.227125][ T5391] mutex_lock_nested+0x38/0x44 [ 107.228549][ T5391] hfs_extend_file+0xd4/0xf9c [ 107.230005][ T5391] hfs_bmap_reserve+0xd4/0x3e0 [ 107.231484][ T5391] __hfs_ext_write_extent+0x19c/0x488 [ 107.233178][ T5391] __hfs_ext_cache_extent+0x84/0x750 [ 107.234811][ T5391] hfs_extend_file+0x264/0xf9c [ 107.236247][ T5391] hfs_get_block+0x2e8/0x9cc [ 107.237631][ T5391] __block_write_begin_int+0x34c/0x13b8 [ 107.239273][ T5391] cont_write_begin+0x548/0x780 [ 107.240723][ T5391] hfs_write_begin+0x98/0xe4 [ 107.242112][ T5391] cont_write_begin+0x268/0x780 [ 107.243555][ T5391] hfs_write_begin+0x98/0xe4 [ 107.244946][ T5391] generic_perform_write+0x230/0x4b0 [ 107.246527][ T5391] __generic_file_write_iter+0x168/0x37c [ 107.248216][ T5391] generic_file_write_iter+0xb4/0x2b0 [ 107.249830][ T5391] vfs_write+0x5ac/0x7c4 [ 107.251184][ T5391] __arm64_sys_pwrite64+0x170/0x200 [ 107.252777][ T5391] invoke_syscall+0x98/0x2bc [ 107.254284][ T5391] el0_svc_common+0x138/0x258 [ 107.255695][ T5391] do_el0_svc+0x58/0x13c [ 107.257009][ T5391] el0_svc+0x58/0x138 [ 107.258229][ T5391] el0t_64_sync_handler+0x84/0xf0 [ 107.259715][ T5391] el0t_64_sync+0x18c/0x190 [ 107.261109][ T5391] [ 107.261109][ T5391] -> #0 (&tree->tree_lock/1){+.+.}-{3:3}: [ 107.263243][ T5391] __lock_acquire+0x293c/0x6544 [ 107.264700][ T5391] lock_acquire+0x20c/0x644 [ 107.266056][ T5391] __mutex_lock_common+0x190/0x1f38 [ 107.267636][ T5391] mutex_lock_nested+0x38/0x44 [ 107.269172][ T5391] hfs_find_init+0x148/0x1c8 [ 107.270592][ T5391] hfs_extend_file+0x238/0xf9c [ 107.272014][ T5391] hfs_bmap_reserve+0xd4/0x3e0 [ 107.273423][ T5391] hfs_cat_create+0x1a0/0x758 [ 107.274849][ T5391] hfs_mkdir+0x6c/0xe0 [ 107.276113][ T5391] vfs_mkdir+0x314/0x4d4 [ 107.277460][ T5391] do_mkdirat+0x1b4/0x3e0 [ 107.278800][ T5391] __arm64_sys_mkdirat+0x90/0xa8 [ 107.280301][ T5391] invoke_syscall+0x98/0x2bc [ 107.281742][ T5391] el0_svc_common+0x138/0x258 [ 107.283172][ T5391] do_el0_svc+0x58/0x13c [ 107.284512][ T5391] el0_svc+0x58/0x138 [ 107.285740][ T5391] el0t_64_sync_handler+0x84/0xf0 [ 107.287231][ T5391] el0t_64_sync+0x18c/0x190 [ 107.288593][ T5391] [ 107.288593][ T5391] other info that might help us debug this: [ 107.288593][ T5391] [ 107.291375][ T5391] Possible unsafe locking scenario: [ 107.291375][ T5391] [ 107.293489][ T5391] CPU0 CPU1 [ 107.294999][ T5391] ---- ---- [ 107.296473][ T5391] lock(&HFS_I(tree->inode)->extents_lock); [ 107.298189][ T5391] lock(&tree->tree_lock/1); [ 107.300169][ T5391] lock(&HFS_I(tree->inode)->extents_lock); [ 107.302516][ T5391] lock(&tree->tree_lock/1); [ 107.303845][ T5391] [ 107.303845][ T5391] *** DEADLOCK *** [ 107.303845][ T5391] [ 107.306053][ T5391] 4 locks held by syz.3.334/5391: [ 107.307452][ T5391] #0: ffff0000fbc76460 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 107.309981][ T5391] #1: ffff0000d3830fa8 (&type->i_mutex_dir_key#9/1){+.+.}-{3:3}, at: filename_create+0x1ac/0x39c [ 107.313108][ T5391] #2: ffff0000c3ea60b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfs_find_init+0x148/0x1c8 [ 107.315733][ T5391] #3: ffff0000d3830778 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xd4/0xf9c [ 107.318779][ T5391] [ 107.318779][ T5391] stack backtrace: [ 107.320332][ T5391] CPU: 0 PID: 5391 Comm: syz.3.334 Not tainted 6.1.141-syzkaller #0 [ 107.322508][ T5391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.325295][ T5391] Call trace: [ 107.326188][ T5391] dump_backtrace+0x1c8/0x1f4 [ 107.327517][ T5391] show_stack+0x2c/0x3c [ 107.328625][ T5391] __dump_stack+0x30/0x40 [ 107.329769][ T5391] dump_stack_lvl+0xf8/0x160 [ 107.330979][ T5391] dump_stack+0x1c/0x5c [ 107.332133][ T5391] print_circular_bug+0x148/0x1b0 [ 107.333486][ T5391] check_noncircular+0x240/0x2d4 [ 107.334821][ T5391] __lock_acquire+0x293c/0x6544 [ 107.336110][ T5391] lock_acquire+0x20c/0x644 [ 107.337320][ T5391] __mutex_lock_common+0x190/0x1f38 [ 107.338742][ T5391] mutex_lock_nested+0x38/0x44 [ 107.340048][ T5391] hfs_find_init+0x148/0x1c8 [ 107.341310][ T5391] hfs_extend_file+0x238/0xf9c [ 107.342628][ T5391] hfs_bmap_reserve+0xd4/0x3e0 [ 107.343937][ T5391] hfs_cat_create+0x1a0/0x758 [ 107.345238][ T5391] hfs_mkdir+0x6c/0xe0 [ 107.346367][ T5391] vfs_mkdir+0x314/0x4d4 [ 107.347549][ T5391] do_mkdirat+0x1b4/0x3e0 [ 107.348726][ T5391] __arm64_sys_mkdirat+0x90/0xa8 [ 107.350142][ T5391] invoke_syscall+0x98/0x2bc [ 107.351437][ T5391] el0_svc_common+0x138/0x258 [ 107.352728][ T5391] do_el0_svc+0x58/0x13c [ 107.353916][ T5391] el0_svc+0x58/0x138 [ 107.354973][ T5391] el0t_64_sync_handler+0x84/0xf0 [ 107.356324][ T5391] el0t_64_sync+0x18c/0x190