last executing test programs: 11.493591354s ago: executing program 0 (id=153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) 11.218797605s ago: executing program 0 (id=157): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000040)="cb", 0xfffffdef) 7.430944318s ago: executing program 0 (id=164): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) read(r0, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180)={0x2, 0xfc}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x1}, 0x2) 5.446748985s ago: executing program 4 (id=173): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='contention_end\x00', r0}, 0x18) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x2802, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000780)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x81, 0xf7, 0x10, 0x7, 0x2, 0x3, 0x1, 0x3cd, 0x38, 0x2a3, 0x1, 0xfffb, 0x20, 0x1, 0x7, 0xfffc, 0x80}, [{0x1, 0x1, 0x6, 0x4, 0x5, 0xf, 0x9}]}, 0x58) recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/11, 0xb, 0x6667b9fa4a4fca1, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 5.441475102s ago: executing program 0 (id=175): socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2\xdf', &(0x7f00000007c0)='{\xe0e%m\"\x92\xb5\xcb\x00\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xf2j\t\x7f??,\xd9\xe28\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x1c\x81>\t\xc30-\xe2\xb3\xb00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x501483, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="3a58d52eff463cad44947f01521db350d6848c14a693610d78f068554c65f1d95f21a8ebd3d942a3b557e158565c6ce3f2b8e5cfed652634107e8d5847f3515966a1f42e84be39ac8136ef5a786255cc2da3a3224b7412213d422404861ea08e3e7c8e9a08ee3f432a546bfe3e9683d47312872cfd58e9c3eeacce81c811c65c16c027d62d00000000000000", @ANYRES8=r7], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0x4}, {0x5, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffa, 0xfffffffc, 0xa066, 0x100005, 0xad2, 0x2, 0x0, 0xffff, 0x80000000}}}}]}, 0x58}}, 0x24000841) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0xffff, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x10}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000400)={0x24, r0, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@val={0x8, 0x1, 0x2e}, @val={0x8, 0x3, r10}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_START_POLL(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x24, r12, 0x1, 0x70bd2a, 0x234, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xc}]}, 0x24}}, 0x0) 4.976470601s ago: executing program 2 (id=183): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) bind$ax25(r0, &(0x7f0000000540)={{0x3, @default}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r0, &(0x7f00000000c0)={{0x3, @null}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1a, 0x0, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r5, 0x0) r7 = fcntl$dupfd(r4, 0x0, r4) sendmsg$IPSET_CMD_RENAME(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="64000000050601010000000000000000070000080900030073797a30000000100900020073797a320000000005000100070000000900020073797a32000000000900030073797a32000000000900030073797a30000000000900030073797a3000000000"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x85) 4.3674353s ago: executing program 1 (id=186): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) 4.271414767s ago: executing program 4 (id=187): socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2\xdf', &(0x7f00000007c0)='{\xe0e%m\"\x92\xb5\xcb\x00\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xf2j\t\x7f??,\xd9\xe28\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x1c\x81>\t\xc30-\xe2\xb3\xb00xffffffffffffffff, 0xffffffffffffffff}) memfd_create(0x0, 0x4) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(0x0, 0x0, 0x0, 0x20887b, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.01975194s ago: executing program 2 (id=189): r0 = openat$ttyprintk(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, 0x0) 4.01319804s ago: executing program 4 (id=190): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000b0000400000000000000000000000000000140002"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x7}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r3}, 0x38) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x40010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) capset(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 2.912601089s ago: executing program 1 (id=191): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r1 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) close(0x3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.984218652s ago: executing program 2 (id=192): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='ui']) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xda, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000400)}, 0x10) 1.898171185s ago: executing program 1 (id=193): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r2, 0x3b8d, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000440)}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.820695805s ago: executing program 2 (id=194): r0 = syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x181800) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000d40)={0x10000000000000, 0x1, 0x6, 0xfffffffc, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.710296957s ago: executing program 2 (id=196): r0 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x10, 0x2, 0x3d7}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/241, 0xf1}], 0x1) 1.516554762s ago: executing program 4 (id=197): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x155, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0xc000) 1.516346832s ago: executing program 3 (id=198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd679412ce0a7a50e}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x41}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20000840) 1.353924108s ago: executing program 3 (id=199): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000440)) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x1) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 1.247984083s ago: executing program 4 (id=200): socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2\xdf', &(0x7f00000007c0)='{\xe0e%m\"\x92\xb5\xcb\x00\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xf2j\t\x7f??,\xd9\xe28\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x1c\x81>\t\xc30-\xe2\xb3\xb00x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x44800) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): [ 17.107861][ T6198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 17.114366][ T6198] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: [ 17.169432][ T722] gve 0000:00:00.0 enp0s0: Device link is up. OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.90' (ED25519) to the list of known hosts. syzkaller login: [ 37.043330][ T6516] cgroup: Unknown subsys name 'net' [ 37.169921][ T6516] cgroup: Unknown subsys name 'cpuset' [ 37.173534][ T6516] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 37.399795][ T6516] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 38.880359][ T6539] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.882925][ T6543] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.883280][ T6543] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.884841][ T6541] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.885592][ T6541] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 38.886165][ T6541] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 38.886577][ T6541] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 38.887625][ T6541] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 38.888074][ T6541] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 38.889069][ T6539] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.889462][ T6539] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.890106][ T6539] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.890523][ T6539] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.911422][ T6539] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.911709][ T6539] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.911972][ T6095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.912428][ T6095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.913083][ T6095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.913503][ T6095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.919476][ T6531] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.926169][ T6531] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.932005][ T6531] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.932711][ T6531] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.951084][ T6531] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.958247][ T6531] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.171397][ T6527] chnl_net:caif_netlink_parms(): no params data found [ 39.353025][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.355251][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.357745][ T6527] bridge_slave_0: entered allmulticast mode [ 39.360606][ T6527] bridge_slave_0: entered promiscuous mode [ 39.364422][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.366821][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.369144][ T6527] bridge_slave_1: entered allmulticast mode [ 39.372227][ T6527] bridge_slave_1: entered promiscuous mode [ 39.375134][ T6536] chnl_net:caif_netlink_parms(): no params data found [ 39.408387][ T6528] chnl_net:caif_netlink_parms(): no params data found [ 39.423726][ T6526] chnl_net:caif_netlink_parms(): no params data found [ 39.429894][ T6527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.433830][ T6527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.460835][ T6529] chnl_net:caif_netlink_parms(): no params data found [ 39.536951][ T6527] team0: Port device team_slave_0 added [ 39.538771][ T6527] team0: Port device team_slave_1 added [ 39.576132][ T6528] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.576215][ T6528] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.576333][ T6528] bridge_slave_0: entered allmulticast mode [ 39.581875][ T6528] bridge_slave_0: entered promiscuous mode [ 39.583339][ T6528] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.583388][ T6528] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.583503][ T6528] bridge_slave_1: entered allmulticast mode [ 39.584380][ T6528] bridge_slave_1: entered promiscuous mode [ 39.607921][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.607978][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.608015][ T6527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.609760][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.609789][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.609823][ T6527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.636952][ T6536] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.639522][ T6536] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.641814][ T6536] bridge_slave_0: entered allmulticast mode [ 39.644416][ T6536] bridge_slave_0: entered promiscuous mode [ 39.671550][ T6528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.674431][ T6536] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.674538][ T6536] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.674657][ T6536] bridge_slave_1: entered allmulticast mode [ 39.675489][ T6536] bridge_slave_1: entered promiscuous mode [ 39.683475][ T6529] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.683563][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.683668][ T6529] bridge_slave_0: entered allmulticast mode [ 39.684562][ T6529] bridge_slave_0: entered promiscuous mode [ 39.690158][ T6527] hsr_slave_0: entered promiscuous mode [ 39.690755][ T6527] hsr_slave_1: entered promiscuous mode [ 39.706789][ T6528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.716952][ T6529] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.717616][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.717743][ T6529] bridge_slave_1: entered allmulticast mode [ 39.718592][ T6529] bridge_slave_1: entered promiscuous mode [ 39.725911][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.725985][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.726102][ T6526] bridge_slave_0: entered allmulticast mode [ 39.726934][ T6526] bridge_slave_0: entered promiscuous mode [ 39.732359][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.732418][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.732555][ T6526] bridge_slave_1: entered allmulticast mode [ 39.733346][ T6526] bridge_slave_1: entered promiscuous mode [ 39.744618][ T6536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.790099][ T6536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.791867][ T6528] team0: Port device team_slave_0 added [ 39.794385][ T6529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.806547][ T6526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.817454][ T6528] team0: Port device team_slave_1 added [ 39.819890][ T6529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.834118][ T6526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.871380][ T6529] team0: Port device team_slave_0 added [ 39.875094][ T6529] team0: Port device team_slave_1 added [ 39.884429][ T6536] team0: Port device team_slave_0 added [ 39.910850][ T6526] team0: Port device team_slave_0 added [ 39.913414][ T6536] team0: Port device team_slave_1 added [ 39.915690][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.915745][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.915791][ T6528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.916935][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.916960][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.917444][ T6528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.924671][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.924699][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.924734][ T6529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.925936][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.925961][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.925994][ T6529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.931921][ T6526] team0: Port device team_slave_1 added [ 39.993425][ T6536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.995480][ T6536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.997827][ T6536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.015273][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.015320][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.015360][ T6526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.016520][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.016546][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.016590][ T6526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.017621][ T6536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.017645][ T6536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.017677][ T6536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.044339][ T6528] hsr_slave_0: entered promiscuous mode [ 40.044868][ T6528] hsr_slave_1: entered promiscuous mode [ 40.045258][ T6528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.045337][ T6528] Cannot create hsr debugfs directory [ 40.129826][ T6529] hsr_slave_0: entered promiscuous mode [ 40.132222][ T6529] hsr_slave_1: entered promiscuous mode [ 40.132597][ T6529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.132627][ T6529] Cannot create hsr debugfs directory [ 40.135896][ T6536] hsr_slave_0: entered promiscuous mode [ 40.136435][ T6536] hsr_slave_1: entered promiscuous mode [ 40.136779][ T6536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.136807][ T6536] Cannot create hsr debugfs directory [ 40.154750][ T6526] hsr_slave_0: entered promiscuous mode [ 40.155335][ T6526] hsr_slave_1: entered promiscuous mode [ 40.155679][ T6526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.155708][ T6526] Cannot create hsr debugfs directory [ 40.316806][ T6527] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.336481][ T6527] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.360785][ T6527] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.382279][ T6527] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.448170][ T6528] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.461174][ T6528] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.466524][ T6528] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.470501][ T6528] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.511594][ T6536] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.534411][ T6536] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.538820][ T6536] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.552524][ T6536] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.588989][ T6526] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.612198][ T6526] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.617876][ T6526] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.636351][ T6526] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.648916][ T6527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.670951][ T6529] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 40.682198][ T6529] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 40.685773][ T6529] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 40.695971][ T6529] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 40.718745][ T6527] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.725125][ T6528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.726798][ T6536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.738539][ T6536] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.744478][ T722] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.744610][ T722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.760936][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.761024][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.771199][ T4405] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.771279][ T4405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.776223][ T6528] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.793633][ T722] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.793708][ T722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.826142][ T722] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.826234][ T722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.828015][ T722] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.828084][ T722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.854604][ T6529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.877775][ T6527] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.877833][ T6527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.883474][ T6536] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.894391][ T6529] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.897772][ T6531] Bluetooth: hci1: command tx timeout [ 40.940209][ T2097] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.940294][ T2097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.941155][ T2097] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.941197][ T2097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.955542][ T6526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.983654][ T6531] Bluetooth: hci3: command tx timeout [ 40.983835][ T6531] Bluetooth: hci2: command tx timeout [ 40.983931][ T6531] Bluetooth: hci4: command tx timeout [ 40.984021][ T6531] Bluetooth: hci0: command tx timeout [ 40.993385][ T6526] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.022997][ T6529] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.023081][ T6529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.038685][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.038777][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.039651][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.039695][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.056197][ T6536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.132193][ T6536] veth0_vlan: entered promiscuous mode [ 41.150772][ T6528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.181237][ T6526] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.184277][ T6526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.194804][ T6536] veth1_vlan: entered promiscuous mode [ 41.199461][ T6527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.255049][ T6536] veth0_macvtap: entered promiscuous mode [ 41.263136][ T6536] veth1_macvtap: entered promiscuous mode [ 41.288167][ T6528] veth0_vlan: entered promiscuous mode [ 41.292770][ T6529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.297755][ T6536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.302681][ T6536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.306779][ T6536] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.312819][ T6536] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.315614][ T6536] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.319070][ T6536] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.342367][ T6527] veth0_vlan: entered promiscuous mode [ 41.344615][ T6528] veth1_vlan: entered promiscuous mode [ 41.384814][ T6526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.390804][ T6528] veth0_macvtap: entered promiscuous mode [ 41.403264][ T6527] veth1_vlan: entered promiscuous mode [ 41.416088][ T6528] veth1_macvtap: entered promiscuous mode [ 41.446130][ T6528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.455704][ T6527] veth0_macvtap: entered promiscuous mode [ 41.480261][ T6528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.484268][ T6527] veth1_macvtap: entered promiscuous mode [ 41.491873][ T6528] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.493452][ T6528] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.493486][ T6528] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.493516][ T6528] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.501159][ T2097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.501214][ T2097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.511626][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.526578][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.543198][ T2097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.543249][ T2097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.551064][ T6527] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.553978][ T6527] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.556618][ T6527] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.560089][ T6527] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.570310][ T6526] veth0_vlan: entered promiscuous mode [ 41.600220][ T6526] veth1_vlan: entered promiscuous mode [ 41.609700][ T6529] veth0_vlan: entered promiscuous mode [ 41.628499][ T6529] veth1_vlan: entered promiscuous mode [ 41.670626][ T6526] veth0_macvtap: entered promiscuous mode [ 41.681584][ T6536] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.706833][ T2097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.706900][ T2097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.732216][ T6526] veth1_macvtap: entered promiscuous mode [ 41.740026][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.744369][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.748148][ T6526] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.750779][ T6526] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.753401][ T6526] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.755984][ T6526] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.786470][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.786530][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.842306][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.842365][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.870578][ T6529] veth0_macvtap: entered promiscuous mode [ 41.891680][ T2097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.891743][ T2097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.895031][ T6529] veth1_macvtap: entered promiscuous mode [ 41.932517][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.952959][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.959760][ T6529] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.962752][ T6529] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.965208][ T6529] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.968028][ T6529] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.996740][ T4405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.996807][ T4405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.059342][ T6645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 42.062181][ T6645] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 42.174439][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.174506][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.895457][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 43.050297][ T6534] Bluetooth: hci1: command tx timeout [ 43.057403][ T6534] Bluetooth: hci0: command tx timeout [ 43.057481][ T6534] Bluetooth: hci4: command tx timeout [ 43.057514][ T6531] Bluetooth: hci2: command tx timeout [ 43.057534][ T6534] Bluetooth: hci3: command tx timeout [ 43.122895][ T6652] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 43.591445][ T6652] veth0_vlan: left promiscuous mode [ 43.592913][ T6652] veth0_vlan: entered promiscuous mode [ 43.594509][ T6652] team0: Device veth0_vlan failed to register rx_handler [ 43.684044][ T4405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.684110][ T4405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.756497][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.756558][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.016709][ T6660] batman_adv: batadv0: Adding interface: dummy0 [ 44.016763][ T6660] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.016850][ T6660] batman_adv: batadv0: Interface activated: dummy0 [ 44.065803][ T6660] batadv0: mtu less than device minimum [ 44.071584][ T6660] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 44.074566][ T6660] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 44.077392][ T6660] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 44.080208][ T6660] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 44.082979][ T6660] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 44.085754][ T6660] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 44.088547][ T6660] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 44.091328][ T6660] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 44.921610][ T6663] trusted_key: encrypted_key: insufficient parameters specified [ 45.127986][ T52] Bluetooth: hci1: command tx timeout [ 45.139320][ T52] Bluetooth: hci2: command tx timeout [ 45.139393][ T52] Bluetooth: hci4: command tx timeout [ 45.150709][ T6531] Bluetooth: hci3: command tx timeout [ 45.150787][ T6531] Bluetooth: hci0: command tx timeout [ 46.730342][ T6677] 9pnet_virtio: no channels available for device syz [ 46.861321][ T6680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'. [ 46.950615][ T6683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10'. [ 47.137138][ T52] Bluetooth: hci1: command tx timeout [ 47.238819][ T52] Bluetooth: hci0: command tx timeout [ 47.242614][ T6531] Bluetooth: hci3: command tx timeout [ 47.244327][ T6534] Bluetooth: hci4: command tx timeout [ 47.244414][ T6534] Bluetooth: hci2: command tx timeout [ 47.974248][ T6697] trusted_key: encrypted_key: insufficient parameters specified [ 48.608902][ T6711] Zero length message leads to an empty skb [ 48.694225][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'. [ 48.694294][ T6719] net_ratelimit: 11 callbacks suppressed [ 48.694303][ T6719] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 49.121910][ T6729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.26'. [ 49.266634][ T6738] capability: warning: `syz.1.29' uses deprecated v2 capabilities in a way that may be insecure [ 50.329629][ T6754] tipc: Failed to remove unknown binding: 66,1,1/0:69190588/69190590 [ 50.334479][ T6754] tipc: Failed to remove unknown binding: 66,1,1/0:69190588/69190590 [ 50.886377][ T6774] bridge_slave_0: left allmulticast mode [ 50.886457][ T6774] bridge_slave_0: left promiscuous mode [ 50.887040][ T6774] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.893252][ T6774] bridge_slave_1: left allmulticast mode [ 50.893320][ T6774] bridge_slave_1: left promiscuous mode [ 50.893442][ T6774] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.954551][ T6774] bond0: (slave bond_slave_0): Releasing backup interface [ 51.009695][ T6774] bond0: (slave bond_slave_1): Releasing backup interface [ 51.061960][ T6774] team0: Port device team_slave_0 removed [ 51.074989][ T6774] team0: Port device team_slave_1 removed [ 51.078652][ T6774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.078750][ T6774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.088910][ T6774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.088994][ T6774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.271181][ T6812] bridge_slave_0: left allmulticast mode [ 52.271262][ T6812] bridge_slave_0: left promiscuous mode [ 52.271381][ T6812] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.284469][ T6812] bridge_slave_1: left allmulticast mode [ 52.284543][ T6812] bridge_slave_1: left promiscuous mode [ 52.284675][ T6812] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.294506][ T6812] bond0: (slave bond_slave_0): Releasing backup interface [ 52.304236][ T1820] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 52.334442][ T6812] bond0: (slave bond_slave_1): Releasing backup interface [ 52.354555][ T6816] usb usb8: usbfs: process 6816 (syz.2.54) did not claim interface 0 before use [ 52.368561][ T2305] IPVS: starting estimator thread 0... [ 52.391857][ T6812] team0: Port device team_slave_0 removed [ 52.396513][ T6812] team0: Port device team_slave_1 removed [ 52.417753][ T6812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.417842][ T6812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.487158][ T1820] usb 1-1: Using ep0 maxpacket: 8 [ 52.491498][ T1820] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.494562][ T1820] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 52.497335][ T1820] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 52.500506][ T1820] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 52.503711][ T1820] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 52.506349][ T1820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.554858][ T6812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.554934][ T6812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.567345][ T6817] IPVS: using max 33 ests per chain, 79200 per kthread [ 52.579457][ T1820] hub 1-1:1.0: bad descriptor, ignoring hub [ 52.585468][ T1820] hub 1-1:1.0: probe with driver hub failed with error -5 [ 52.588170][ T1820] cdc_wdm 1-1:1.0: skipping garbage [ 52.589683][ T1820] cdc_wdm 1-1:1.0: skipping garbage [ 52.593973][ T1820] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 52.595724][ T1820] cdc_wdm 1-1:1.0: Unknown control protocol [ 53.331505][ T6831] ieee802154 phy0 wpan0: encryption failed: -22 [ 53.418693][ T6838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.419098][ T6838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.420016][ T2305] usb 1-1: USB disconnect, device number 2 [ 53.570515][ T6846] syz.2.66 uses obsolete (PF_INET,SOCK_PACKET) [ 53.818775][ T6598] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 53.978906][ T6598] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.982874][ T6598] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 53.985819][ T6598] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 53.989400][ T6598] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 53.989458][ T6598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.006799][ T6799] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 54.010612][ T6598] hub 1-1:1.0: bad descriptor, ignoring hub [ 54.012400][ T6598] hub 1-1:1.0: probe with driver hub failed with error -5 [ 54.020140][ T6598] cdc_wdm 1-1:1.0: skipping garbage [ 54.021628][ T6598] cdc_wdm 1-1:1.0: skipping garbage [ 54.023916][ T6598] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 54.025674][ T6598] cdc_wdm 1-1:1.0: Unknown control protocol [ 54.344847][ T6864] ======================================================= [ 54.344847][ T6864] WARNING: The mand mount option has been deprecated and [ 54.344847][ T6864] and is ignored by this kernel. Remove the mand [ 54.344847][ T6864] option from the mount to silence this warning. [ 54.344847][ T6864] ======================================================= [ 54.983433][ T6868] batman_adv: batadv0: Interface deactivated: dummy0 [ 54.983515][ T6868] batman_adv: batadv0: Removing interface: dummy0 [ 54.989909][ T6868] bridge_slave_0: left allmulticast mode [ 54.989959][ T6868] bridge_slave_0: left promiscuous mode [ 54.990064][ T6868] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.995541][ T6868] bridge_slave_1: left allmulticast mode [ 54.995566][ T6868] bridge_slave_1: left promiscuous mode [ 54.995679][ T6868] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.027325][ T24] usb 1-1: USB disconnect, device number 3 [ 55.029462][ T6868] bond0: (slave bond_slave_0): Releasing backup interface [ 55.100361][ T6868] bond0: (slave bond_slave_1): Releasing backup interface [ 55.188707][ T6868] team0: Port device team_slave_0 removed [ 55.206852][ T6868] team0: Port device team_slave_1 removed [ 55.208683][ T6877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.208955][ T6877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.218840][ T6868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.218915][ T6868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.224125][ T6868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.224189][ T6868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.425634][ T6877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.425951][ T6877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.606355][ T6894] tipc: Started in network mode [ 55.606437][ T6894] tipc: Node identity 46a6051d2d84, cluster identity 4711 [ 55.606566][ T6894] tipc: Enabled bearer , priority 0 [ 55.609042][ T6894] syzkaller0: entered promiscuous mode [ 55.609079][ T6894] syzkaller0: entered allmulticast mode [ 55.743106][ T6894] tipc: Resetting bearer [ 55.773337][ T6891] tipc: Resetting bearer [ 55.901332][ T6891] tipc: Disabling bearer [ 55.981344][ T6918] bridge1: entered promiscuous mode [ 55.981417][ T6918] bridge1: entered allmulticast mode [ 55.985588][ T6918] team0: Port device bridge1 added [ 56.034734][ T6922] 9pnet_virtio: no channels available for device syz [ 56.154560][ T6933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.157767][ T6933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.375567][ T6933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.378488][ T6933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.777292][ T1820] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 56.931862][ T6968] PKCS7: Unknown OID: [5] 0.0.0.0 [ 56.931976][ T6968] PKCS7: Only support pkcs7_signedData type [ 56.940741][ T1820] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 56.943924][ T1820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.947179][ T1820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.949933][ T1820] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 56.955978][ T1820] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 56.959097][ T1820] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 56.961488][ T1820] usb 1-1: Manufacturer: syz [ 56.965098][ T1820] usb 1-1: config 0 descriptor?? [ 56.986181][ T52] Bluetooth: hci4: command tx timeout [ 57.382761][ T1820] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 57.391031][ T1820] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 59.023383][ T6997] could not allocate digest TFM handle sha1-ssse3 [ 59.059309][ T1820] usb 1-1: USB disconnect, device number 4 [ 59.070561][ T6996] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 59.702410][ T7031] misc userio: The device must be registered before sending interrupts [ 59.702832][ T7031] misc userio: The device must be registered before sending interrupts [ 60.378095][ T7064] input: syz1 as /devices/virtual/input/input8 [ 61.290548][ T7090] team0: Mode changed to "loadbalance" [ 62.269986][ T7108] misc userio: The device must be registered before sending interrupts [ 62.270372][ T7108] misc userio: The device must be registered before sending interrupts [ 62.565591][ T7118] netlink: 'syz.2.150': attribute type 1 has an invalid length. [ 62.581315][ T7118] bond1: entered promiscuous mode [ 62.581723][ T7118] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.662456][ T7118] bond1: (slave veth3): making interface the new active one [ 62.662523][ T7118] veth3: entered promiscuous mode [ 62.665026][ T7118] bond1: (slave veth3): Enslaving as an active interface with an up link [ 63.170010][ T7135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.228379][ T7135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.401129][ T7151] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.499348][ T2407] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.499442][ T2407] ieee802154 phy1 wpan1: encryption failed: -22 [ 67.928725][ T7191] misc userio: The device must be registered before sending interrupts [ 67.932355][ T7191] misc userio: The device must be registered before sending interrupts [ 69.293546][ T7227] warning: `syz.4.173' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 69.627492][ T26] cfg80211: failed to load regulatory.db [ 69.898575][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.184'. [ 69.901674][ T7261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.184'. [ 69.938192][ T7261] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.938342][ T7261] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.938399][ T7261] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.938436][ T7261] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.050270][ T52] Bluetooth: hci0: SCO packet too small [ 70.596266][ T7277] netlink: 'syz.4.190': attribute type 11 has an invalid length. [ 70.596333][ T7277] netlink: 20 bytes leftover after parsing attributes in process `syz.4.190'. [ 73.735829][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.205'. [ 73.803758][ T7313] netlink: 'syz.3.206': attribute type 2 has an invalid length. [ 73.804435][ T7313] netlink: 'syz.3.206': attribute type 2 has an invalid length. [ 74.010946][ T7306] loop1: detected capacity change from 0 to 32768 [ 74.022366][ T7304] loop4: detected capacity change from 0 to 32768 [ 74.027708][ T7306] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.202 (7306) [ 74.112050][ T7306] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 74.112247][ T7306] BTRFS info (device loop1): using sha256 (sha256-arm64) checksum algorithm [ 74.112292][ T7306] BTRFS info (device loop1): using free-space-tree [ 74.186098][ T7304] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,prjquota,nochanges,recovery_pass_last=delete_dead_inodes,nojournal_transaction_names,read_only,version_upgrade=incompatible [ 74.228146][ T7304] allowing incompatible features above 0.0: (unknown version) [ 74.228208][ T7304] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 74.228268][ T7304] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 74.228748][ T7304] bcachefs (loop4): invalid journal entry, version=1.7: mi_btree_bitmap type=clock in superblock: bad rw, fixing [ 74.229009][ T7304] bcachefs (loop4): invalid bkey in superblock btree=xattrs level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 0 crc: c_size 1 size 1 offset 0 nonce 0 csum none 12010b:10004000b compress none [ 74.229026][ T7304] has non ptr field, deleting [ 74.229131][ T7304] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 74.229241][ T7304] bcachefs (loop4): Version upgrade from 1.3: rebalance_work to 1.7: mi_btree_bitmap incomplete [ 74.229241][ T7304] Doing compatible version upgrade from 1.3: rebalance_work to 1.28: inode_has_case_insensitive [ 74.229241][ T7304] running recovery passes: check_allocations,check_extents_to_backpointers,check_subvols,check_inodes,check_dirents [ 74.229319][ T7304] bcachefs (loop4): Now allowing incompatible features up to 1.28: inode_has_case_insensitive, previously allowed up to 0.0: (unknown version) [ 74.229319][ T7304] [ 74.296406][ T7304] bcachefs (loop4): error reading btree root btree=inodes level=0: btree_node_read_error, fixing [ 74.341116][ T7304] bcachefs (loop4): check_topology... [ 74.341225][ T7304] bcachefs (loop4): btree root inodes unreadable, must recover from scan [ 74.341419][ T7304] bcachefs (loop4): running recovery pass scan_for_btree_nodes (1), currently at check_topology (2) - rewinding [ 74.341475][ T7304] bcachefs (loop4): bch2_check_root(): error restart_recovery [ 74.341499][ T7304] bcachefs (loop4): scan_for_btree_nodes... [ 74.384595][ T7335] bcachefs (loop4): invalid bkey in btree_node btree=inodes level=0: u64s 17 type inode_v3 0:4097:U32_MAX len 0 ver 0: (unpack error) [ 74.384675][ T7335] invalid variable length fields, deleting [ 74.425592][ T7304] bcachefs (loop4): btree node scan found 7 nodes after overwrites [ 74.425843][ T7304] done [ 74.425865][ T7304] bcachefs (loop4): check_topology... [ 74.425908][ T7304] bcachefs (loop4): btree root inodes unreadable, must recover from scan [ 74.426201][ T7304] bcachefs (loop4): bch2_get_scanned_nodes(): recovery btree=inodes level=0 POS_MIN - SPOS_MAX [ 74.426293][ T7304] bcachefs (loop4): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 74.429858][ T7304] bcachefs (loop4): empty interior btree node at btree=inodes level=1 [ 74.429877][ T7304] u64s 5 type btree_ptr SPOS_MAX len 0 ver 0, fixing [ 74.429927][ T7304] bcachefs (loop4): bch2_btree_repair_topology_recurse(): error ECHILD [ 74.429963][ T7304] bcachefs (loop4): empty btree root inodes [ 74.430369][ T7304] done [ 74.430396][ T7304] bcachefs (loop4): accounting_read... done [ 74.487774][ T7304] bcachefs (loop4): alloc_read... done [ 74.487982][ T7304] bcachefs (loop4): snapshots_read... done [ 74.488320][ T7304] bcachefs (loop4): check_allocations... [ 74.501472][ T7304] bcachefs (loop4): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 74.501542][ T7304] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 74.502818][ T7304] bcachefs (loop4): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 74.502836][ T7304] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 74.504271][ T7304] bcachefs (loop4): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 74.504288][ T7304] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 74.505365][ T7304] bcachefs (loop4): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 74.505450][ T7304] bcachefs (loop4): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 74.505961][ T7304] bcachefs (loop4): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 74.506033][ T7304] bcachefs (loop4): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 74.506264][ T7304] bcachefs (loop4): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 74.506328][ T7304] bcachefs (loop4): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 74.506450][ T7304] bcachefs (loop4): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 74.506852][ T7304] bcachefs (loop4): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 74.531033][ T7304] bcachefs (loop4): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 74.531138][ T7304] bcachefs (loop4): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 74.531430][ T7304] bcachefs (loop4): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 74.531555][ T7304] bcachefs (loop4): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 74.531671][ T7304] bcachefs (loop4): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 74.531732][ T7304] bcachefs (loop4): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 74.531834][ T7304] bcachefs (loop4): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 74.531894][ T7304] bcachefs (loop4): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 74.532077][ T7304] bcachefs (loop4): bucket 0:16 gen 0 has wrong data_type: got free, should be sb, fixing [ 74.532148][ T7304] bcachefs (loop4): bucket 0:16 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 74.532266][ T7304] bcachefs (loop4): bucket 0:17 gen 0 has wrong data_type: got free, should be sb, fixing [ 74.532331][ T7304] bcachefs (loop4): bucket 0:17 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 74.532452][ T7304] bcachefs (loop4): bucket 0:18 gen 0 has wrong data_type: got free, should be sb, fixing [ 74.532464][ T7304] Ratelimiting new instances of previous error [ 74.532544][ T7304] bcachefs (loop4): bucket 0:18 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 74.532556][ T7304] Ratelimiting new instances of previous error [ 74.536315][ T7304] done [ 74.584499][ T6528] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 74.586317][ T7304] bcachefs (loop4): going read-write [ 74.685768][ T7304] bcachefs (loop4): journal_replay... [ 74.686849][ T7304] ------------[ cut here ]------------ [ 74.686925][ T7304] kernel BUG at fs/bcachefs/btree_update.c:375! [ 74.686995][ T7304] Internal error: Oops - BUG: 00000000f2000800 [#1] SMP [ 74.693681][ T7304] Modules linked in: [ 74.694881][ T7304] CPU: 0 UID: 0 PID: 7304 Comm: syz.4.201 Not tainted 6.16.0-rc5-syzkaller-gec4801305969 #0 PREEMPT [ 74.698139][ T7304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.701199][ T7304] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 74.703518][ T7304] pc : bch2_trans_update_by_path+0x17bc/0x17f0 [ 74.705362][ T7304] lr : bch2_trans_update_by_path+0x17bc/0x17f0 [ 74.707107][ T7304] sp : ffff8000a55665c0 [ 74.708228][ T7304] x29: ffff8000a5566780 x28: 0000000000008541 x27: ffff0000f33f7d80 [ 74.710479][ T7304] x26: ffff0000f415c000 x25: ffff700014aacce0 x24: 1fffe0001e82b802 [ 74.712727][ T7304] x23: ffff0000f415c010 x22: ffff0000f415c2f0 x21: 1fffe0001e82b85e [ 74.715111][ T7304] x20: dfff800000000000 x19: ffff0000e1e00000 x18: 00000000ffffffff [ 74.717465][ T7304] x17: ffff800093364000 x16: ffff80008aefc458 x15: 0000000000000003 [ 74.719783][ T7304] x14: 0000000000000002 x13: 0000000000000003 x12: 0000000000ff0100 [ 74.722138][ T7304] x11: 0000000000080000 x10: 000000000007ffff x9 : ffff8000a773e000 [ 74.724430][ T7304] x8 : 0000000000080000 x7 : ffffffffffffffff x6 : ffffffffffffffff [ 74.726683][ T7304] x5 : ffff0000f415c2f0 x4 : ffff800082a4a6cc x3 : 0000000000180000 [ 74.729050][ T7304] x2 : ffff0000f33f7d80 x1 : 0000000000000000 x0 : 0000000000000000 [ 74.731304][ T7304] Call trace: [ 74.732331][ T7304] bch2_trans_update_by_path+0x17bc/0x17f0 (P) [ 74.734085][ T7304] bch2_trans_update_ip+0x7bc/0x17ec [ 74.735656][ T7304] bch2_trans_update+0x4c/0x60 [ 74.736980][ T7304] bch2_journal_replay_key+0x348/0x68c [ 74.738548][ T7304] bch2_journal_replay+0xfdc/0x1c44 [ 74.740079][ T7304] __bch2_run_recovery_passes+0x29c/0xd18 [ 74.741704][ T7304] bch2_run_recovery_passes+0x174/0x1f4 [ 74.743320][ T7304] bch2_fs_recovery+0x1c34/0x2fb4 [ 74.744801][ T7304] bch2_fs_start+0x940/0xbec [ 74.746077][ T7304] bch2_fs_get_tree+0x880/0x107c [ 74.747518][ T7304] vfs_get_tree+0x90/0x28c [ 74.748751][ T7304] do_new_mount+0x228/0x814 [ 74.750001][ T7304] path_mount+0x5b4/0xde0 [ 74.751230][ T7304] __arm64_sys_mount+0x3e8/0x468 [ 74.752680][ T7304] invoke_syscall+0x98/0x2b8 [ 74.753963][ T7304] el0_svc_common+0x130/0x23c [ 74.755303][ T7304] do_el0_svc+0x48/0x58 [ 74.756470][ T7304] el0_svc+0x58/0x180 [ 74.757624][ T7304] el0t_64_sync_handler+0x84/0x12c [ 74.759078][ T7304] el0t_64_sync+0x198/0x19c [ 74.760374][ T7304] Code: 17fffe3f 977aac3e d4210000 977aac3c (d4210000) [ 74.762331][ T7304] ---[ end trace 0000000000000000 ]--- [ 74.789066][ T7317] loop3: detected capacity change from 0 to 32768 [ 75.010562][ T7315] loop2: detected capacity change from 0 to 131072 [ 75.032844][ T7315] F2FS-fs (loop2): Invalid segment/section count (31, 589848 x 1) [ 75.032881][ T7315] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 75.032951][ T7315] F2FS-fs (loop2): Test dummy encryption mode enabled [ 75.033743][ T7315] F2FS-fs (loop2): invalid crc value [ 75.091329][ T7307] loop0: detected capacity change from 0 to 131072 [ 75.161838][ T7304] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 75.178237][ T7304] SMP: stopping secondary CPUs [ 75.179669][ T7304] Kernel Offset: disabled [ 75.180976][ T7304] CPU features: 0x10000,00040e00,040008a1,04017203 [ 75.182895][ T7304] Memory Limit: none [ 75.544920][ T7304] Rebooting in 86400 seconds..