last executing test programs: 4.743180952s ago: executing program 2 (id=32): clock_nanosleep(0x2, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x2, 0x3, 0x100000001) setsockopt(r0, 0xff, 0x1, &(0x7f0000000100)='O', 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x65, 0x0, 0x0, 0x1, 0x0, @private=0xa0100ff, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x6c, 0x0, @local, @private=0xa010100}}}}}}, 0x0) 4.433745599s ago: executing program 2 (id=34): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, 0x0, &(0x7f0000000080)) 4.190382545s ago: executing program 2 (id=36): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000000090400fd120206000005241ccc3c06000005240000000d240f010700f9ffffff0100800000"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.043286704s ago: executing program 1 (id=41): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0xfc, 0xfffffff7, @vifc_lcl_addr=@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 2.147716426s ago: executing program 0 (id=47): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) preadv(r2, &(0x7f0000000440)=[{&(0x7f0000002740)=""/4110, 0x100e}], 0x1, 0xa, 0x9) 2.114823557s ago: executing program 1 (id=48): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x6020400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0xffffffff, 0x80, 0x0, 0x3, 0x10007e, 0x20000006, 0x50, 0x6, 0x10000, 0x80005, 0x2, 0x8, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x10001, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0x9, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x1, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x101, 0x1, 0xeaf, 0xffff80f1, 0x1, 0x206, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x40000009, 0x5, 0x7fff, 0x0, 0x5, 0xc303, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x8001, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x8001, 0xd, 0x800003, 0x200, 0x400080, 0xffffffff, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x1000ac8, 0xc1, 0x2, 0x1000003, 0x7ff, 0x129, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0x40bb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x200, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffe, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0xff, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.951761401s ago: executing program 1 (id=49): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2368810, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) open_by_handle_at(r0, &(0x7f0000000140)=@OVL_FILEID_V0={0x36, 0xfb, {0x0, 0xfb, 0x15, 0x6, 0xf3, "3ef0f1002aca5463040755b7dea200"}}, 0x4aa903) 1.945415591s ago: executing program 3 (id=50): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2368810, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000fb"], 0x5997c0) 1.889414973s ago: executing program 0 (id=51): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000050, &(0x7f0000000180)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@noblock_validity}, {@nolazytime}, {@nodioread_nolock}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc4842, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000080)=ANY=[], 0x2c) preadv2(r0, &(0x7f0000000240)=[{&(0x7f0000000540)=""/201, 0xc9}], 0x1, 0x5, 0x5, 0xc) 1.809333135s ago: executing program 1 (id=52): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 1.695765527s ago: executing program 3 (id=53): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcffffff00000000800000af18010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.335779636s ago: executing program 3 (id=54): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000180)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000094000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) 1.316775327s ago: executing program 0 (id=55): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fff, 0x2000}) 1.224182549s ago: executing program 3 (id=56): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r0, 0x0, 0x1, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x6, 0x72b7, 0x8}) lseek(r0, 0x3ff, 0x3) 966.702146ms ago: executing program 1 (id=57): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xb, 0x2000000058831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 823.812119ms ago: executing program 2 (id=58): memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x59201, 0x11) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14d442, 0x4d) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 810.103969ms ago: executing program 0 (id=59): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x3}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1, 0x7}}, 0x10) 652.977423ms ago: executing program 3 (id=60): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x6, 0xfe, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x7fff, 0x2, 0x88e, 0x5, 0x2, 0x0, 0x6, 0x3, 0x7, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x5, 0x9, 0x9, 0x1, 0xfffff801, 0x7, 0xe261, 0x392, 0x4000b, 0x3, 0x7f7f, 0x4c74, 0x1, 0x200000c, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x7fff, 0x8f, 0xf, 0x6, 0x5, 0x623280, 0x4, 0x1, 0x20000000, 0x80082, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0x0, 0x3, 0x8000d, 0x2bf, 0xffffffff, 0x0, 0xfffffffc, 0x334000, 0x0, 0x7, 0x85, 0x2b, 0x5a04, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xbda4, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x2003, 0x4, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0xff0c, 0x1, 0x3, 0x4, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x7], [0x6, 0x6, 0x80000003, 0x0, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0x5, 0x3, 0x5, 0x348, 0x0, 0xa3d, 0xfffffffd, 0x2, 0x83, 0x1, 0x3, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x1fe, 0x80, 0x2, 0xcc52, 0x4, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0x3, 0xc0, 0x10003, 0x403, 0x7fd, 0x3, 0x0, 0xfffffffc, 0xffff, 0x5, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaf1, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x2, 0x0, 0xffffffff, 0x80ce7, 0x100001ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0xb, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000001, 0x3, 0xc, 0xc8, 0xee1, 0x0, 0xffff, 0x7, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x2, 0x10080, 0x6, 0xb, 0x30b1d693, 0x1, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x0, 0x5, 0x80b1c, 0x1, 0x20000200, 0xffff3441, 0xfff]}, 0x45c) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) read$FUSE(r0, 0x0, 0x11) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) 399.791219ms ago: executing program 2 (id=61): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) sendmmsg$unix(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8050}}], 0x1, 0x4000000) 217.382904ms ago: executing program 0 (id=62): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0xfffe, 0x41aa, 0xa, 0x4, 0x3, 0xc}, 0xc) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x40400c0) 191.215605ms ago: executing program 1 (id=63): r0 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|B\xe2ar\x04R%[k\x0f\xfdV\xacL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dI\xbd\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x86P\x8d\x12\\\xf9\x00T\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93vw\x85\r|\xf0\xa6\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b\"\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}9q\x92~}M\xceA\xe1)\a\xf0p\xa3\x8dkCvo\x85N(\xdd%DP\x88FW\xb5\x97\xe7\xb8}\xb6/\x95\xb0\xb9\xc9\xb1=\ac\x91\x1d,\xd2\xf5g\xfd\x97X\x1e[\x84\x7f\bO\x16\x84\xefa\xd1\xb3\xf7\\g`\x026\x1f\x89/\x01l\xc1%\xda\xa1:\x99\xf1,\x86f\xe1\xb6\x83\x06\xdd\x91{x\xa1P\xd7\x1d\xa9c\xde\x7f\x8fJ\xae\xf1\xc3\x81@\x1e\x93\xaed-X\xd2\xa7e\xa0\xb3\x16*\xa5\xb1\xd3\x8d\xa4\xf2\xe5\xa2\xe7A\x19\xf4\xa92ok\xf2\xd2\xc74\t*\xb67{#J\x1b\'\xbb\x9b\x99\xda^\x1e\xf6\x03\x9316\xb5T\xbb\xb2\x93\x1b\xfaj\x00\xe8i\x85\xd2\x05!\x87Q\xe5\xbdZ\xcc\x98\xcbY]0\xf7\fl!\x00<', 0x1) ftruncate(r0, 0x800799c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0xffffffff, @remote, 0x9}, 0x1c) sendfile(r1, r0, 0x0, 0xf000) 63.827648ms ago: executing program 3 (id=64): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000200)={0x3e}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x127]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 63.638398ms ago: executing program 2 (id=65): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x5c, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c9bfc897b6377ace"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="91e74a125c895cc0ca30dbebf961bec8"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="51be2fb1a4b58acc33a440bf2012fda5"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 0s ago: executing program 0 (id=66): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000200)='./file2\x00', 0x4008, &(0x7f00000006c0)=ANY=[], 0x1, 0x2ab, &(0x7f0000000a80)="$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") syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@abort}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") mount$nfs(&(0x7f0000000100)=';\x80.', 0x0, 0x0, 0x136808, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.117' (ED25519) to the list of known hosts. syzkaller login: [ 84.150993][ T5763] cgroup: Unknown subsys name 'net' [ 84.316846][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.093092][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.916111][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.938319][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.946073][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.967700][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.977397][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.986058][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.994621][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.003582][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.017838][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.067504][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.075599][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.083966][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.092226][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.101172][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.108768][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.118484][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.124120][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.127534][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.142277][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.150020][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.157868][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.165372][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.173080][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.183332][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.665036][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 88.823393][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 88.835236][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 88.956583][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 88.975400][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.983277][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.991052][ T5775] bridge_slave_0: entered allmulticast mode [ 88.998935][ T5775] bridge_slave_0: entered promiscuous mode [ 89.008666][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.016292][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.023811][ T5775] bridge_slave_1: entered allmulticast mode [ 89.031357][ T5775] bridge_slave_1: entered promiscuous mode [ 89.157121][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.164504][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.173129][ T5785] bridge_slave_0: entered allmulticast mode [ 89.180671][ T5785] bridge_slave_0: entered promiscuous mode [ 89.198658][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.208295][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.215587][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.227202][ T5779] bridge_slave_0: entered allmulticast mode [ 89.234318][ T5779] bridge_slave_0: entered promiscuous mode [ 89.242812][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.250917][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.260556][ T5785] bridge_slave_1: entered allmulticast mode [ 89.268607][ T5785] bridge_slave_1: entered promiscuous mode [ 89.287999][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.301028][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.308360][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.315593][ T5779] bridge_slave_1: entered allmulticast mode [ 89.323264][ T5779] bridge_slave_1: entered promiscuous mode [ 89.388320][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.395610][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.402941][ T5782] bridge_slave_0: entered allmulticast mode [ 89.410566][ T5782] bridge_slave_0: entered promiscuous mode [ 89.419300][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.426468][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.434126][ T5782] bridge_slave_1: entered allmulticast mode [ 89.441782][ T5782] bridge_slave_1: entered promiscuous mode [ 89.473443][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.501191][ T5775] team0: Port device team_slave_0 added [ 89.510858][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.523610][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.535246][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.588944][ T5775] team0: Port device team_slave_1 added [ 89.600522][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.613065][ T5785] team0: Port device team_slave_0 added [ 89.622751][ T5785] team0: Port device team_slave_1 added [ 89.645923][ T5779] team0: Port device team_slave_0 added [ 89.666990][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.709579][ T5779] team0: Port device team_slave_1 added [ 89.736747][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.743882][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.773192][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.812017][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.819158][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.845782][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.876246][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.884476][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.913976][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.928810][ T5782] team0: Port device team_slave_0 added [ 89.936034][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.943523][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.969750][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.988284][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.995295][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.022476][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.035836][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.042981][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.069496][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.093518][ T5782] team0: Port device team_slave_1 added [ 90.141447][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.149605][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.176275][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.221970][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.229325][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.256113][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.268173][ T5778] Bluetooth: hci2: command tx timeout [ 90.274013][ T5778] Bluetooth: hci1: command tx timeout [ 90.279975][ T5781] Bluetooth: hci3: command tx timeout [ 90.279997][ T5087] Bluetooth: hci0: command tx timeout [ 90.340311][ T5775] hsr_slave_0: entered promiscuous mode [ 90.347314][ T5775] hsr_slave_1: entered promiscuous mode [ 90.372441][ T5785] hsr_slave_0: entered promiscuous mode [ 90.379497][ T5785] hsr_slave_1: entered promiscuous mode [ 90.386080][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.394884][ T5785] Cannot create hsr debugfs directory [ 90.407758][ T5779] hsr_slave_0: entered promiscuous mode [ 90.414910][ T5779] hsr_slave_1: entered promiscuous mode [ 90.421644][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.430036][ T5779] Cannot create hsr debugfs directory [ 90.492603][ T5782] hsr_slave_0: entered promiscuous mode [ 90.502278][ T5782] hsr_slave_1: entered promiscuous mode [ 90.508837][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.516443][ T5782] Cannot create hsr debugfs directory [ 90.968209][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.983160][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.011471][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.023791][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.078256][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.105135][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.116493][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.143871][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.225795][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.238196][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.258126][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.268483][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.386627][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.399606][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.413170][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.439380][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.464808][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.523154][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.586812][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.602794][ T2952] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.610293][ T2952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.655681][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.663001][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.695267][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.720998][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.728321][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.776098][ T2952] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.783317][ T2952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.844294][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.860602][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.911504][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.952786][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.960070][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.000946][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.064381][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.071650][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.109113][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.142523][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.149788][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.164525][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.171749][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.274405][ T789] cfg80211: failed to load regulatory.db [ 92.338020][ T5781] Bluetooth: hci3: command tx timeout [ 92.343514][ T5781] Bluetooth: hci1: command tx timeout [ 92.351176][ T5778] Bluetooth: hci0: command tx timeout [ 92.357092][ T5778] Bluetooth: hci2: command tx timeout [ 92.394432][ T5782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.426019][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.561641][ T5775] veth0_vlan: entered promiscuous mode [ 92.604390][ T5775] veth1_vlan: entered promiscuous mode [ 92.705399][ T5775] veth0_macvtap: entered promiscuous mode [ 92.739246][ T5775] veth1_macvtap: entered promiscuous mode [ 92.805654][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.832315][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.875094][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.890020][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.899349][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.908363][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.917133][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.982473][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.026040][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.111589][ T3437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.123601][ T3437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.212526][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.228772][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.238530][ T5779] veth0_vlan: entered promiscuous mode [ 93.261273][ T5785] veth0_vlan: entered promiscuous mode [ 93.268651][ T5782] veth0_vlan: entered promiscuous mode [ 93.320002][ T5782] veth1_vlan: entered promiscuous mode [ 93.341470][ T5779] veth1_vlan: entered promiscuous mode [ 93.373387][ T5785] veth1_vlan: entered promiscuous mode [ 93.444806][ T5779] veth0_macvtap: entered promiscuous mode [ 93.499545][ T5779] veth1_macvtap: entered promiscuous mode [ 93.520360][ T5785] veth0_macvtap: entered promiscuous mode [ 93.542633][ T5844] syz.0.1[5844]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.548559][ T5782] veth0_macvtap: entered promiscuous mode [ 93.580436][ T5785] veth1_macvtap: entered promiscuous mode [ 93.592645][ T5782] veth1_macvtap: entered promiscuous mode [ 93.624751][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.640931][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.661001][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.689802][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.702251][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.716476][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.728006][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.739629][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.750587][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.762730][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.774947][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.798204][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.807898][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.816659][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.831171][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.846097][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.865460][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.879249][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.891312][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.904617][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.936996][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.948619][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.965781][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.975960][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.004553][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.047052][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.057243][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.069977][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.080740][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.091698][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.109785][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.179422][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.191259][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.201578][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.212998][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.224587][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.235653][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.249041][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.271113][ T5844] loop0: detected capacity change from 0 to 32768 [ 94.299497][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.311487][ T5844] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (5844) [ 94.346196][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.355907][ T5844] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 94.368157][ T5844] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 94.372427][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.378817][ T5844] BTRFS info (device loop0): using free space tree [ 94.397666][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.418684][ T5778] Bluetooth: hci1: command tx timeout [ 94.420223][ T5781] Bluetooth: hci0: command tx timeout [ 94.424623][ T5778] Bluetooth: hci3: command tx timeout [ 94.430283][ T5087] Bluetooth: hci2: command tx timeout [ 94.545813][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.566325][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.581614][ T5844] BTRFS info (device loop0): enabling ssd optimizations [ 94.613960][ T5844] BTRFS info (device loop0): auto enabling async discard [ 94.680132][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.720101][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.825621][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.858823][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.927714][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.935702][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.014506][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.029758][ T5775] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 95.045528][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.175090][ T2952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.199127][ T2952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.565996][ T5867] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.608471][ T5869] netlink: 762 bytes leftover after parsing attributes in process `syz.2.3'. [ 95.841478][ T3437] tipc: Subscription rejected, illegal request [ 96.038037][ T5879] loop2: detected capacity change from 0 to 164 [ 96.122040][ T5879] rock: directory entry would overflow storage [ 96.149404][ T5879] rock: sig=0x4543, size=28, remaining=18 [ 96.498037][ T5781] Bluetooth: hci3: command tx timeout [ 96.503541][ T5781] Bluetooth: hci0: command tx timeout [ 96.509888][ T5087] Bluetooth: hci2: command tx timeout [ 96.515350][ T5087] Bluetooth: hci1: command tx timeout [ 96.546832][ T5886] loop1: detected capacity change from 0 to 2048 [ 96.676692][ T5888] loop2: detected capacity change from 0 to 256 [ 96.706356][ T5886] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.750888][ T5884] loop0: detected capacity change from 0 to 32768 [ 96.773867][ T5884] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.10 (5884) [ 96.847891][ T5884] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 96.853412][ T5888] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 96.900122][ T5884] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 96.940033][ T5884] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 96.966347][ T5865] dvmrp0: entered allmulticast mode [ 96.974264][ T28] audit: type=1800 audit(1785352408.859:2): pid=5888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.12" name="file2" dev="loop2" ino=1048592 res=0 errno=0 [ 97.011941][ T5884] BTRFS info (device loop0): use zstd compression, level 3 [ 97.049039][ T5884] BTRFS info (device loop0): use no compression [ 97.055436][ T5884] BTRFS info (device loop0): using free space tree [ 97.310870][ T5884] BTRFS info (device loop0): enabling ssd optimizations [ 97.347057][ T5884] BTRFS info (device loop0): auto enabling async discard [ 97.858211][ T5913] loop2: detected capacity change from 0 to 32768 [ 97.865935][ T5913] ======================================================= [ 97.865935][ T5913] WARNING: The mand mount option has been deprecated and [ 97.865935][ T5913] and is ignored by this kernel. Remove the mand [ 97.865935][ T5913] option from the mount to silence this warning. [ 97.865935][ T5913] ======================================================= [ 98.021077][ T5913] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 98.171758][ T5775] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 98.339524][ T5913] XFS (loop2): Ending clean mount [ 98.353725][ T5913] XFS (loop2): Quotacheck needed: Please wait. [ 98.507408][ T5913] XFS (loop2): Quotacheck: Done. [ 98.585825][ T28] audit: type=1800 audit(1785352410.469:3): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.15" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 98.773629][ T5782] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 98.843875][ T2974] dvmrp0 (unregistering): left allmulticast mode [ 99.033748][ T5936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.30'. [ 99.662169][ T5946] loop0: detected capacity change from 0 to 512 [ 99.733931][ T5946] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.876222][ T5946] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 99.906558][ T5938] loop1: detected capacity change from 0 to 32768 [ 99.935327][ T5946] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.24: bg 0: block 248: padding at end of block bitmap is not set [ 99.936591][ T5938] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.22 (5938) [ 99.982056][ T5946] Quota error (device loop0): write_blk: dquota write failed [ 99.985003][ T5938] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 99.998612][ T5946] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 100.033755][ T5954] loop3: detected capacity change from 0 to 1024 [ 100.040879][ T5946] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.24: Failed to acquire dquot type 1 [ 100.057163][ T5938] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 100.065979][ T5938] BTRFS info (device loop1): using free space tree [ 100.097591][ T5954] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 100.122182][ T5946] EXT4-fs (loop0): 1 truncate cleaned up [ 100.134758][ T5946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 100.199543][ T5946] EXT4-fs (loop0): shut down requested (1) [ 100.210564][ T5954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.357041][ T5938] BTRFS info (device loop1): enabling ssd optimizations [ 100.364084][ T5938] BTRFS info (device loop1): auto enabling async discard [ 100.411337][ T5954] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 100.454782][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 100.484873][ T5954] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 100.511784][ T5954] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 100.529586][ T5954] EXT4-fs (loop3): This should not happen!! Data will be lost [ 100.529586][ T5954] [ 100.541764][ T5954] EXT4-fs (loop3): Total free blocks count 0 [ 100.554053][ T5954] EXT4-fs (loop3): Free/Dirty block details [ 100.562508][ T5954] EXT4-fs (loop3): free_blocks=20480 [ 100.568384][ T5954] EXT4-fs (loop3): dirty_blocks=16 [ 100.573763][ T5954] EXT4-fs (loop3): Block reservation details [ 100.581261][ T5954] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 100.739637][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.822332][ T5785] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 100.989086][ T5952] dvmrp0: entered allmulticast mode [ 100.997834][ T5979] loop3: detected capacity change from 0 to 128 [ 101.077461][ T5818] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.164356][ T5979] syz.3.28: attempt to access beyond end of device [ 101.164356][ T5979] loop3: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 101.250630][ T5791] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 10 /dev/loop1 scanned by udevd (5791) [ 101.297466][ T5818] usb 1-1: Using ep0 maxpacket: 32 [ 101.332889][ T5818] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 101.352235][ T5818] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 101.374138][ T5818] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 101.410512][ T5818] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 101.425560][ T173] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.475362][ T5818] usb 1-1: config 0 interface 0 has no altsetting 0 [ 101.522884][ T5818] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 101.537565][ T5818] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 101.560054][ T5818] usb 1-1: Product: syz [ 101.573714][ T5818] usb 1-1: Manufacturer: syz [ 101.583982][ T5818] usb 1-1: SerialNumber: syz [ 101.616472][ T5818] usb 1-1: config 0 descriptor?? [ 101.639182][ T173] usb 2-1: Using ep0 maxpacket: 8 [ 101.662928][ T5818] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 101.676984][ T173] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 101.695163][ T173] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.715221][ T173] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.748928][ T5818] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 101.762624][ T173] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.780154][ T173] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.826415][ T173] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 101.865143][ T173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.032854][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 102.039420][ T5818] usb 1-1: USB disconnect, device number 2 [ 102.077338][ T5976] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 102.120461][ T173] usb 2-1: usb_control_msg returned -32 [ 102.126196][ T173] usbtmc 2-1:16.0: can't read capabilities [ 102.133749][ T5818] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 102.154149][ T49] dvmrp0 (unregistering): left allmulticast mode [ 102.457200][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.493706][ T6002] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 102.520580][ T8] usb 2-1: USB disconnect, device number 2 [ 102.639015][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.649713][ T9] usb 3-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 102.663816][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 102.672184][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.682755][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 102.691148][ T9] usb 3-1: SerialNumber: syz [ 102.701250][ T9] cdc_ether 3-1:1.0: skipping garbage [ 102.708138][ T9] usb 3-1: bad CDC descriptors [ 102.848332][ T6006] sctp: [Deprecated]: syz.3.40 (pid 6006) Use of int in max_burst socket option. [ 102.848332][ T6006] Use struct sctp_assoc_value instead [ 102.882237][ T6008] loop0: detected capacity change from 0 to 1024 [ 102.899214][ T6008] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.953826][ T6008] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.020985][ T6008] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 103.037970][ T6008] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 103.050445][ T6008] EXT4-fs (loop0): This should not happen!! Data will be lost [ 103.050445][ T6008] [ 103.060265][ T6008] EXT4-fs (loop0): Total free blocks count 0 [ 103.066297][ T6008] EXT4-fs (loop0): Free/Dirty block details [ 103.072311][ T6008] EXT4-fs (loop0): free_blocks=20480 [ 103.078468][ T6008] EXT4-fs (loop0): dirty_blocks=16 [ 103.083825][ T6008] EXT4-fs (loop0): Block reservation details [ 103.090043][ T6008] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 103.189881][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.365414][ T6021] loop0: detected capacity change from 0 to 512 [ 103.406737][ T6021] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.43: corrupted in-inode xattr: invalid ea_ino [ 103.431123][ T6021] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.43: couldn't read orphan inode 15 (err -117) [ 103.496021][ T6021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.572081][ T6021] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #2: comm syz.0.43: directory missing '.' [ 103.628409][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.827874][ T6015] dvmrp0: entered allmulticast mode [ 103.913217][ T6028] erspan0: entered promiscuous mode [ 103.945279][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46'. [ 104.346355][ T6037] overlayfs: failed to decode file handle (len=0, type=251, flags=0, err=-22) [ 104.388324][ T6039] loop0: detected capacity change from 0 to 1024 [ 104.395865][ T6039] EXT4-fs: Ignoring removed bh option [ 104.502883][ T6039] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 104.514993][ T6041] loop1: detected capacity change from 0 to 1024 [ 104.527439][ T6039] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.539491][ T6041] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.591651][ T28] audit: type=1800 audit(1785352416.479:4): pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.51" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 104.624854][ T6039] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm syz.0.51: lblock 0 mapped to illegal pblock 0 (length 1) [ 104.687490][ T1084] dvmrp0 (unregistering): left allmulticast mode [ 104.703548][ T6041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.734831][ T6039] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 104.748993][ T6039] EXT4-fs (loop0): This should not happen!! Data will be lost [ 104.748993][ T6039] [ 104.790050][ T6041] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 104.819112][ T6041] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 104.882197][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 104.894325][ T6041] EXT4-fs (loop1): This should not happen!! Data will be lost [ 104.894325][ T6041] [ 104.926287][ T6041] EXT4-fs (loop1): Total free blocks count 0 [ 104.945058][ T6041] EXT4-fs (loop1): Free/Dirty block details [ 104.961647][ T6041] EXT4-fs (loop1): free_blocks=20480 [ 104.981931][ T6041] EXT4-fs (loop1): dirty_blocks=16 [ 105.010255][ T6041] EXT4-fs (loop1): Block reservation details [ 105.054830][ T6041] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 105.081040][ T6056] loop0: detected capacity change from 0 to 512 [ 105.119048][ T6056] FAT-fs (loop0): Directory bread(block 199916) failed [ 105.137156][ T6056] FAT-fs (loop0): Directory bread(block 199917) failed [ 105.143884][ T6054] loop3: detected capacity change from 0 to 4096 [ 105.158439][ T6056] FAT-fs (loop0): Directory bread(block 199918) failed [ 105.187875][ T6056] FAT-fs (loop0): Directory bread(block 199919) failed [ 105.209417][ T6054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.217168][ T6056] FAT-fs (loop0): Directory bread(block 199920) failed [ 105.229771][ T6056] FAT-fs (loop0): Directory bread(block 199921) failed [ 105.237323][ T6056] FAT-fs (loop0): Directory bread(block 199922) failed [ 105.240203][ T23] usb 3-1: USB disconnect, device number 2 [ 105.244264][ T6056] FAT-fs (loop0): Directory bread(block 199923) failed [ 105.262024][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.275442][ T6056] FAT-fs (loop0): Directory bread(block 199916) failed [ 105.283950][ T6056] FAT-fs (loop0): Directory bread(block 199917) failed [ 105.557898][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.590435][ T6061] EXT4-fs error (device sda1): __ext4_get_inode_loc:4497: comm syz.1.57: Invalid inode table block 0 in block_group 0 [ 105.606613][ T6062] EXT4-fs error (device sda1): __ext4_get_inode_loc:4497: comm syz.0.59: Invalid inode table block 0 in block_group 0 [ 105.623469][ T6061] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 105.634050][ T6061] EXT4-fs error (device sda1): ext4_dirty_inode:6144: inode #2030: comm syz.1.57: mark_inode_dirty error [ 105.664523][ T6062] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 105.744962][ T6062] EXT4-fs error (device sda1): ext4_dirty_inode:6144: inode #2028: comm syz.0.59: mark_inode_dirty error [ 105.774871][ T6064] EXT4-fs error (device sda1): __ext4_get_inode_loc:4497: comm syz.3.60: Invalid inode table block 0 in block_group 0 [ 105.776070][ T6061] EXT4-fs error (device sda1): __ext4_get_inode_loc:4497: comm syz.1.57: Invalid inode table block 0 in block_group 0 [ 105.822264][ T6062] EXT4-fs error (device sda1): __ext4_get_inode_loc:4497: comm syz.0.59: Invalid inode table block 0 in block_group 0 [ 105.827700][ T6064] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 106.113538][ T6074] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.176341][ T6076] input: syz1 as /devices/virtual/input/input5 [ 106.207369][ T3437] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1144 with error 117 SYZFAIL: SIGSEGV pc-offset:0xfffffffffffdb740 pc:0x7f0af0a77df0 addr:(nil) code=1 (errno 11: Resource temporarily unavailable) [ 106.254998][ T3437] EXT4-fs (sda1): This should not happen!! Data will be lost [ 106.254998][ T3437] [ 107.079991][ T5773] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 107.113947][ T5773] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 107.191389][ T5771] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 107.215151][ T5771] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 107.328084][ T1084] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.479329][ T1084] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.569400][ T1084] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.596440][ T6079] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 107.608709][ T6079] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 107.650432][ T1084] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.674739][ T6077] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 107.686450][ T6077] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 107.732999][ T6077] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 108.679305][ T1084] hsr_slave_0: left promiscuous mode [ 108.687696][ T1084] hsr_slave_1: left promiscuous mode [ 108.693864][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.704501][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.713569][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.722280][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.730870][ T1084] bridge_slave_1: left allmulticast mode [ 108.736546][ T1084] bridge_slave_1: left promiscuous mode [ 108.743210][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.760061][ T1084] bridge_slave_0: left allmulticast mode [ 108.765778][ T1084] bridge_slave_0: left promiscuous mode [ 108.772944][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.800987][ T1084] veth1_macvtap: left promiscuous mode [ 108.807046][ T1084] veth0_macvtap: left promiscuous mode [ 108.812764][ T1084] veth1_vlan: left promiscuous mode [ 108.821167][ T1084] veth0_vlan: left promiscuous mode [ 109.435071][ T1084] team0 (unregistering): Port device team_slave_1 removed [ 109.474670][ T1084] team0 (unregistering): Port device team_slave_0 removed [ 109.523052][ T1084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.572459][ T1084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.899196][ T1084] bond0 (unregistering): Released all slaves [ 110.407215][ T1084] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.491257][ T1084] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.541395][ T1084] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.583606][ T1084] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.761467][ T1084] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.783914][ T6112] EXT4-fs error: 87 callbacks suppressed [ 110.783928][ T6112] EXT4-fs error (device sda1): __ext4_get_inode_loc:4497: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 110.814593][ T6113] EXT4-fs error (device sda1): __ext4_get_inode_loc:4497: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 110.843270][ T1084] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.896484][ T6114] EXT4-fs error (device sda1): __ext4_get_inode_loc:4497: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 110.921661][ T1084] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.934158][ T6115] EXT4-fs error (device sda1): __ext4_get_inode_loc:4497: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 110.981544][ T6116] EXT4-fs error (device sda1): __ext4_get_inode_loc:4497: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 111.002813][ T6117] EXT4-fs error (device sda1): __ext4_get_inode_loc:4497: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 111.031673][ T1084] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.115312][ T6118] EXT4-fs error (device sda1): __ext4_get_inode_loc:4497: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 111.136683][ T6119] EXT4-fs error (device sda1): __ext4_get_inode_loc:4497: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 111.215459][ T6120] EXT4-fs error (device sda1): __ext4_get_inode_loc:4497: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 111.251795][ T1084] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.296254][ T6121] EXT4-fs error (device sda1): __ext4_get_inode_loc:4497: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 111.337140][ T1084] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.405999][ T1084] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.466086][ T1084] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.139183][ T1084] hsr_slave_0: left promiscuous mode [ 113.145443][ T1084] hsr_slave_1: left promiscuous mode [ 113.157474][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.165014][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.182309][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.191170][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.200814][ T1084] bridge_slave_1: left allmulticast mode [ 113.206495][ T1084] bridge_slave_1: left promiscuous mode [ 113.214304][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.224070][ T1084] bridge_slave_0: left allmulticast mode [ 113.230141][ T1084] bridge_slave_0: left promiscuous mode [ 113.235887][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.251212][ T1084] hsr_slave_0: left promiscuous mode [ 113.259085][ T1084] hsr_slave_1: left promiscuous mode [ 113.265054][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.272700][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.280769][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.290788][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.299421][ T1084] bridge_slave_1: left allmulticast mode [ 113.305142][ T1084] bridge_slave_1: left promiscuous mode [ 113.311364][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.322441][ T1084] bridge_slave_0: left allmulticast mode [ 113.328454][ T1084] bridge_slave_0: left promiscuous mode [ 113.334443][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.351138][ T1084] hsr_slave_0: left promiscuous mode [ 113.358568][ T1084] hsr_slave_1: left promiscuous mode [ 113.364633][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.372257][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.382864][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.390433][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.398250][ T1084] bridge_slave_1: left allmulticast mode [ 113.403914][ T1084] bridge_slave_1: left promiscuous mode [ 113.415214][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.425743][ T1084] bridge_slave_0: left allmulticast mode [ 113.434257][ T1084] bridge_slave_0: left promiscuous mode [ 113.441131][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.492045][ T1084] veth1_macvtap: left promiscuous mode [ 113.497795][ T1084] veth0_macvtap: left promiscuous mode [ 113.503430][ T1084] veth1_vlan: left promiscuous mode [ 113.510899][ T1084] veth0_vlan: left promiscuous mode [ 113.518015][ T1084] veth1_macvtap: left promiscuous mode [ 113.523556][ T1084] veth0_macvtap: left promiscuous mode [ 113.529676][ T1084] veth1_vlan: left promiscuous mode [ 113.535083][ T1084] veth0_vlan: left promiscuous mode [ 113.543973][ T1084] veth1_macvtap: left promiscuous mode [ 113.550034][ T1084] veth0_macvtap: left promiscuous mode [ 113.555696][ T1084] veth1_vlan: left promiscuous mode [ 113.562549][ T1084] veth0_vlan: left promiscuous mode [ 114.372932][ T1084] team0 (unregistering): Port device team_slave_1 removed [ 114.413777][ T1084] team0 (unregistering): Port device team_slave_0 removed [ 114.465692][ T1084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.509224][ T1084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.817206][ T1084] bond0 (unregistering): Released all slaves [ 115.335610][ T1084] team0 (unregistering): Port device team_slave_1 removed [ 115.389961][ T1084] team0 (unregistering): Port device team_slave_0 removed [ 115.433572][ T1084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.476277][ T1084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.777042][ T1084] bond0 (unregistering): Released all slaves