last executing test programs: 9.58866873s ago: executing program 1 (id=191): socketpair(0x25, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) 9.26236745s ago: executing program 1 (id=194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r4 = dup(r3) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) sched_setaffinity(0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0x2c, r8, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount$tmpfs(0x0, &(0x7f0000004f80)='.\x00', &(0x7f0000004fc0), 0x4481, 0x0) 8.006593001s ago: executing program 1 (id=198): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) recvfrom$phonet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) 7.621361703s ago: executing program 1 (id=202): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000300)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x1, 0x2, 0x0, 0x3, {0x1, 0x3}}, 0x13) 7.045564022s ago: executing program 1 (id=206): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 6.980343924s ago: executing program 2 (id=207): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@mcast1, @dev={0xfe, 0x80, '\x00', 0x12}, @rand_addr=' \x01\x00', 0x0, 0x9, 0x7, 0x500, 0xfffffffffffffff9, 0x10, r1}) 6.887109267s ago: executing program 3 (id=209): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f000000e8"], 0x20) 6.728144522s ago: executing program 2 (id=210): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 6.591406957s ago: executing program 2 (id=212): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r5, 0x0, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) sendmsg$NFC_CMD_DEV_UP(r6, 0x0, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x20048000) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x6}, {0xffff, 0xfff9}, {0xffff}}}, 0x24}}, 0x0) 6.443411241s ago: executing program 3 (id=213): socket$inet6(0xa, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 6.081862453s ago: executing program 3 (id=214): socket$netlink(0x10, 0x3, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000200)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@nouser_xattr}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@dax_always}]}, 0x41, 0xbc8, &(0x7f0000002380)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x90, "bf00f70b0000000000000000000000dd00"}) syz_open_pts(r0, 0x400000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff55) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184529, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 5.578924439s ago: executing program 0 (id=217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r7, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r6, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x8d, 0x6, 0xd07f, 0xfff, 0x7, 0x10000, 0x5, 0x8, 0x8, 0x7fffffff, 0x5, 0x0, 0x10001, 0xb85, 0xd, 0x6, 0xbac07f81, 0x9, 0x0, 0x4, 0x200, 0xffffffff, 0xffffffff, 0x7, 0x648, 0x80000001, 0x9, 0x81, 0x8000, 0x10000, 0x9, 0x9, 0x1, 0x3, 0x5, 0x6, 0x10000, 0x5, 0x101, 0xb67d, 0x8e, 0x8, 0x6, 0xfffff801, 0x5, 0xfff, 0x6, 0x1, 0x400, 0x7, 0x10001, 0x80, 0x4, 0x2, 0x0, 0x9, 0x40, 0x4, 0x8878, 0x0, 0x8ce, 0x7b, 0x6, 0x100, 0x0, 0x1, 0x400, 0x2, 0x8, 0x2b, 0x7f, 0x5, 0xfc7, 0x0, 0x6, 0x7, 0x1, 0x0, 0x2, 0x3ff, 0x1, 0x8, 0x5, 0x2, 0x1, 0x1, 0x2, 0x2, 0x4, 0x7, 0x10000000, 0x2, 0xc, 0x8, 0x64e, 0x1, 0x4, 0x3, 0x4, 0x7f, 0x3ff, 0x1, 0x4, 0x1, 0x400, 0x9, 0xc4c, 0x8000, 0x12d170f1, 0x8, 0x7f, 0x2, 0x1, 0xa27a, 0x764, 0x0, 0xc, 0x2, 0x2, 0x7, 0x5, 0x1000, 0x0, 0x0, 0x3, 0xcc4a, 0x4, 0x40, 0x6, 0x9, 0xc, 0x3, 0x3, 0x5, 0x5, 0x6, 0xbf, 0xf, 0x312, 0x4, 0x6, 0x800, 0x9, 0x8f7, 0x7, 0xfffffffe, 0x1ff, 0xfff, 0x9, 0x1, 0x4, 0xf, 0x6b5, 0x0, 0x40, 0x7, 0xb, 0x7, 0xc4, 0x3, 0x5, 0x3, 0x6, 0x5, 0x100, 0x1d6, 0x3, 0x7f, 0x6d5, 0xb9de, 0x0, 0x7fffffff, 0x7, 0x8, 0x9, 0xc54, 0x8001, 0x4, 0x7fffffff, 0x8, 0x81, 0x1, 0x8, 0x6, 0x8, 0x5, 0xf3, 0x9, 0x81, 0x5, 0x10000, 0xfff, 0x64, 0x5, 0xf1f8, 0x0, 0xe, 0xfffff001, 0x8, 0x8001, 0x2b0000, 0x7f, 0x5, 0x6, 0xffffffff, 0xc7, 0x7ff00000, 0x9, 0x200, 0xb9c, 0x2, 0x4, 0x800, 0x7, 0x7f, 0x8, 0x20000, 0x7, 0xac6, 0x9, 0x9, 0xfffffce9, 0x1, 0x2, 0x80, 0x38, 0x16e1d229, 0x8, 0x9, 0x4, 0x6, 0x80000000, 0x4, 0x5, 0x3, 0xb3e1, 0x0, 0x100, 0x4, 0x7, 0x1, 0x8, 0x7fffffff, 0x2, 0x7fffffff, 0xe3, 0x7, 0x5, 0x9, 0x3, 0x2, 0x7ff, 0x8, 0x3, 0x30000000]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4048841}, 0x4000) 4.94383893s ago: executing program 0 (id=218): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$addseals(r0, 0x409, 0x9) 4.822047704s ago: executing program 0 (id=219): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000121401"], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000054) 4.576031162s ago: executing program 0 (id=221): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8205, &(0x7f0000000000)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x15}}, {@stripe}, {@min_batch_time}, {@lazytime}, {@data_err_ignore}, {@noblock_validity}, {@minixdf}, {@errors_remount}]}, 0x1, 0x60a, &(0x7f00000004c0)="$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") r0 = io_uring_setup(0x5d09, &(0x7f0000000100)={0x0, 0x2881, 0x10, 0x0, 0x59}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x25, &(0x7f0000000000)="01", 0x1) 1.267823169s ago: executing program 3 (id=222): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.207538821s ago: executing program 0 (id=223): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2080, &(0x7f0000000140)={@align=0x5, {0x1, 0x4, 0x4, 0x6}}, 0x8000, 0x0, 0x0}) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000080)={0x2c, @rand_addr=0x64010100, 0x4e22, 0x2, 'rr\x00', 0x10, 0xe1, 0x56}, 0x2c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000007000)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa00000000"], 0x1c) r3 = openat$cgroup_freezer_state(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='FROZEN\x00', 0x7) 959.400029ms ago: executing program 3 (id=225): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000900)=""/249, 0xf9}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000340)=""/8, 0x8}, {&(0x7f00000000c0)=""/19, 0x13}, {&(0x7f0000000240)=""/249, 0xf9}, {&(0x7f00000014c0)=""/200, 0xc8}, {&(0x7f00000011c0)=""/172, 0xac}, {&(0x7f00000036c0)=""/4117, 0x1015}], 0x8}, 0x40012100) 836.672993ms ago: executing program 2 (id=226): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x199a, 0x4) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "771a16b92ea6656b"}, 0x10}, 0x1, 0x0, 0x0, 0x20048010}, 0xd209f6d814827b13) 836.044133ms ago: executing program 4 (id=227): socket(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0xffff, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280), 0x0) 779.404725ms ago: executing program 0 (id=228): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000240)={[{@grpid}, {@auto_da_alloc}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4da, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xfffffe57}], 0x1, 0x5405, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 779.205225ms ago: executing program 1 (id=229): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0, 0xffff}, 0x90) 711.915187ms ago: executing program 3 (id=230): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x80, @remote, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 698.210668ms ago: executing program 4 (id=231): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x2}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) 671.432549ms ago: executing program 2 (id=232): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@grpquota}]}, 0xfc, 0x579, &(0x7f0000000680)="$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") statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)=""/116) 435.303296ms ago: executing program 4 (id=233): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r2}) 281.590741ms ago: executing program 4 (id=234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={{0x48, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004040) 89.197177ms ago: executing program 4 (id=235): r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0xb, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000800)=[0x8, 0x3, 0x3ff, 0x9, 0x29f, 0x10, 0x6, 0xffff]) 41.343149ms ago: executing program 2 (id=236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f62, 0x1, 0xc4, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008041}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c071}, 0x810) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 0s ago: executing program 4 (id=237): syz_io_uring_setup(0x2790, &(0x7f0000000180)={0x0, 0xc386, 0x3010, 0x2, 0x200004}, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000185}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.141' (ED25519) to the list of known hosts. [ 45.726599][ T4169] cgroup: Unknown subsys name 'net' [ 45.862442][ T4169] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 47.166207][ T4169] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 48.555329][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 48.586047][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 48.666274][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 48.692501][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 48.770868][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.778191][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.786724][ T4186] device bridge_slave_0 entered promiscuous mode [ 48.807530][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 48.825733][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.835169][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.843439][ T4186] device bridge_slave_1 entered promiscuous mode [ 48.853349][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.860501][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.869487][ T4198] device bridge_slave_0 entered promiscuous mode [ 48.905536][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.912680][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.921185][ T4188] device bridge_slave_0 entered promiscuous mode [ 48.928844][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.935917][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.946004][ T4198] device bridge_slave_1 entered promiscuous mode [ 48.984088][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.991283][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.999883][ T4188] device bridge_slave_1 entered promiscuous mode [ 49.020080][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.031863][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.050324][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.057653][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.065505][ T4185] device bridge_slave_0 entered promiscuous mode [ 49.075178][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.086804][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.110815][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.126093][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.133898][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.141860][ T4185] device bridge_slave_1 entered promiscuous mode [ 49.163881][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.188535][ T4186] team0: Port device team_slave_0 added [ 49.204104][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.243119][ T4186] team0: Port device team_slave_1 added [ 49.250890][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.262337][ T4198] team0: Port device team_slave_0 added [ 49.269796][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.277281][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.285603][ T4184] device bridge_slave_0 entered promiscuous mode [ 49.295515][ T4188] team0: Port device team_slave_0 added [ 49.301822][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.310185][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.319202][ T4184] device bridge_slave_1 entered promiscuous mode [ 49.346811][ T4198] team0: Port device team_slave_1 added [ 49.358194][ T4188] team0: Port device team_slave_1 added [ 49.385145][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.392335][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.419974][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.434092][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.441520][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.470316][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.489039][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.496393][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.523376][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.544127][ T4185] team0: Port device team_slave_0 added [ 49.563066][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.570604][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.600914][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.614505][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.626550][ T4185] team0: Port device team_slave_1 added [ 49.658812][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.665897][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.693403][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.709889][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.726394][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.733761][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.763825][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.782555][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.790130][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.816999][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.839620][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.846697][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.873802][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.898116][ T4186] device hsr_slave_0 entered promiscuous mode [ 49.905803][ T4186] device hsr_slave_1 entered promiscuous mode [ 49.953844][ T4198] device hsr_slave_0 entered promiscuous mode [ 49.961391][ T4198] device hsr_slave_1 entered promiscuous mode [ 49.968742][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.976578][ T4198] Cannot create hsr debugfs directory [ 49.995347][ T4184] team0: Port device team_slave_0 added [ 50.003506][ T4184] team0: Port device team_slave_1 added [ 50.018962][ T4188] device hsr_slave_0 entered promiscuous mode [ 50.029720][ T4188] device hsr_slave_1 entered promiscuous mode [ 50.036372][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.045050][ T4188] Cannot create hsr debugfs directory [ 50.095910][ T4185] device hsr_slave_0 entered promiscuous mode [ 50.102872][ T4185] device hsr_slave_1 entered promiscuous mode [ 50.110114][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.117961][ T4185] Cannot create hsr debugfs directory [ 50.159662][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.166640][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.194305][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.215799][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.223134][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.250088][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.277867][ T1334] Bluetooth: hci2: command 0x0409 tx timeout [ 50.277867][ T4190] Bluetooth: hci4: command 0x0409 tx timeout [ 50.278407][ T4190] Bluetooth: hci1: command 0x0409 tx timeout [ 50.303039][ T4190] Bluetooth: hci3: command 0x0409 tx timeout [ 50.310373][ T4190] Bluetooth: hci0: command 0x0409 tx timeout [ 50.372450][ T4184] device hsr_slave_0 entered promiscuous mode [ 50.379504][ T4184] device hsr_slave_1 entered promiscuous mode [ 50.386381][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.394273][ T4184] Cannot create hsr debugfs directory [ 50.622075][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.634712][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.653695][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.663449][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.678472][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.689906][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.718050][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.746486][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.768602][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.779034][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.793371][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.803528][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.881385][ T4198] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 50.892104][ T4198] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 50.906421][ T4198] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 50.917556][ T4198] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 50.986077][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.994376][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.003706][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.025869][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.046113][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.059882][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.075815][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.088651][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.096527][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.105893][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.117297][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.124795][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.134857][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.163043][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.172699][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.182477][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.189734][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.198453][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.207583][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.247901][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.258727][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.267806][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.281215][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.301484][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.310909][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.322221][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.340078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.349332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.373955][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.389303][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.401866][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.412077][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.421151][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.430369][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.444688][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.454139][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.463499][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.479125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.489477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.498333][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.505420][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.517812][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.535166][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.548889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.557901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.569083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.579159][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.586716][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.595180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.604388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.613903][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.621433][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.629733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.637591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.646130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.659400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.711212][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.726792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.735812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.745427][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.752544][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.760672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.770946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.779963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.788761][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.795811][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.804535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.813906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.822666][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.830051][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.839014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.849949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.859452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.868351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.887146][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.896680][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.925479][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.933944][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.945551][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.959555][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.969858][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.978897][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.987516][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.996379][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.005070][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.014359][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.032560][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.052540][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.063755][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.075685][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.086688][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.095628][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.104775][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.114124][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.123195][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.133379][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.142093][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.150975][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.160236][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.168820][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.178665][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.187386][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.195872][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.205174][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.214088][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.223437][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.241986][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.253430][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.273343][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.283337][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.298233][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.305798][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.322913][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.339797][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.352284][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.361444][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.367522][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 52.368640][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.376215][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 52.384014][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.393467][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 52.399158][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.402381][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 52.411601][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.416240][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 52.423888][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.430699][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.467842][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.475823][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.491895][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.506263][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.520593][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.534629][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.547387][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.556488][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.572192][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.581605][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.631806][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.645385][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.663574][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.681055][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.693575][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.702769][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.719309][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.738531][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.749170][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.764221][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.772838][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.783692][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.795422][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.807706][ T4188] device veth0_vlan entered promiscuous mode [ 52.828403][ T4188] device veth1_vlan entered promiscuous mode [ 52.865363][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.890462][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.905697][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.914746][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.924224][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.946163][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.989195][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.999621][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.071992][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.081476][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.090948][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.100585][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.109976][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.119959][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.136357][ T4185] device veth0_vlan entered promiscuous mode [ 53.144912][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.154350][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.167482][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.175339][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.184466][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.193738][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.206484][ T4188] device veth0_macvtap entered promiscuous mode [ 53.221983][ T4186] device veth0_vlan entered promiscuous mode [ 53.235531][ T4185] device veth1_vlan entered promiscuous mode [ 53.245783][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.254772][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.264210][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.273705][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.284950][ T4188] device veth1_macvtap entered promiscuous mode [ 53.299323][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.312673][ T4186] device veth1_vlan entered promiscuous mode [ 53.363897][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.374059][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.382834][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.392312][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.400997][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.412463][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.421765][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.431724][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.443364][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.468734][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.478937][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.488237][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.497640][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.511098][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.522729][ T4185] device veth0_macvtap entered promiscuous mode [ 53.536729][ T4185] device veth1_macvtap entered promiscuous mode [ 53.545002][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.554374][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.564875][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.575487][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.584696][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.593069][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.601467][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.609843][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.624129][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.633593][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.643709][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.652539][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.665957][ T4198] device veth0_vlan entered promiscuous mode [ 53.693194][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.702914][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.714444][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.725929][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.735314][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.743541][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.759077][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.770297][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.781682][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.799140][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.808719][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.819140][ T4186] device veth0_macvtap entered promiscuous mode [ 53.828899][ T4184] device veth0_vlan entered promiscuous mode [ 53.839564][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.850545][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.862780][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.873768][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.892800][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.902028][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.911239][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.924652][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.934521][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.946263][ T4186] device veth1_macvtap entered promiscuous mode [ 53.963457][ T4198] device veth1_vlan entered promiscuous mode [ 54.001820][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.011312][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.030174][ T4184] device veth1_vlan entered promiscuous mode [ 54.056772][ T4198] device veth0_macvtap entered promiscuous mode [ 54.106853][ T4198] device veth1_macvtap entered promiscuous mode [ 54.121109][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.140619][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.151082][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.162041][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.174511][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.205108][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.218871][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.229097][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.240779][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.251956][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.262889][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.274559][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.282860][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.291903][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.300291][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.309936][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.318941][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.329228][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.362913][ T4184] device veth0_macvtap entered promiscuous mode [ 54.374568][ T4184] device veth1_macvtap entered promiscuous mode [ 54.382593][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.392085][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.401351][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.409853][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.436392][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.447754][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 54.453054][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.454122][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 54.464622][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.470797][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 54.486606][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.487505][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 54.503781][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.512893][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.524119][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 54.527757][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.540914][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.553753][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.565755][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.577444][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.588788][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.613024][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.618883][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.622691][ T4228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.629862][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.639964][ T4228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.662469][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.671624][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.681510][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.692408][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.700604][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.712099][ T4198] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.721748][ T4198] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.730958][ T4198] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.740105][ T4198] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.780856][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.791464][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.802234][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.812975][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.823332][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.834158][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.846469][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.859035][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.871570][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.881566][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.891391][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.900218][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.909299][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.937356][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.946166][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.948143][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.962804][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.970830][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.982972][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.993130][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.004342][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.015348][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.026442][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.037083][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.047719][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.060479][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.089349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.099936][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.109886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.143708][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.154222][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.164299][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.173609][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.203341][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.228324][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.256221][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.326377][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.371193][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.420467][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.478267][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.709430][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.818713][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.129041][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.138988][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.157285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.186535][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.217329][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.228509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.405358][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.416461][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.433007][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.442820][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.458094][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.508271][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.517595][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 56.524464][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 56.561129][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 56.593435][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 56.618703][ T4233] Bluetooth: hci4: command 0x0419 tx timeout [ 56.759311][ T4288] loop4: detected capacity change from 0 to 512 [ 56.793570][ T4290] loop3: detected capacity change from 0 to 128 [ 56.810791][ T4288] EXT4-fs (loop4): inline encryption not supported [ 56.865945][ T4288] EXT4-fs (loop4): 1 truncate cleaned up [ 56.871858][ T4288] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,inlinecrypt,jqfmt=vfsv1,noload,dioread_lock,usrjquota=,,errors=continue. Quota mode: none. [ 58.565011][ T4323] loop3: detected capacity change from 0 to 512 [ 58.577283][ T4322] loop0: detected capacity change from 0 to 512 [ 58.610962][ T4325] loop2: detected capacity change from 0 to 512 [ 58.705635][ T4322] EXT4-fs (loop0): 1 truncate cleaned up [ 58.719694][ T4322] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 58.752929][ T4325] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 58.809055][ T4325] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.820713][ T4323] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 58.942297][ T4323] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.965445][ T4341] loop4: detected capacity change from 0 to 1024 [ 59.164260][ T4341] ======================================================= [ 59.164260][ T4341] WARNING: The mand mount option has been deprecated and [ 59.164260][ T4341] and is ignored by this kernel. Remove the mand [ 59.164260][ T4341] option from the mount to silence this warning. [ 59.164260][ T4341] ======================================================= [ 59.283372][ T4341] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #3: block 5: comm syz.4.24: lblock 5 mapped to illegal pblock 5 (length 1) [ 59.315297][ T4341] Quota error (device loop4): write_blk: dquota write failed [ 59.337205][ T4341] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 59.346432][ T4341] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 59.369265][ T4346] loop2: detected capacity change from 0 to 128 [ 59.382703][ T4351] loop3: detected capacity change from 0 to 512 [ 59.409266][ T4341] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.24: Failed to acquire dquot type 0 [ 59.453223][ T4341] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 5: comm syz.4.24: lblock 5 mapped to illegal pblock 5 (length 1) [ 59.478540][ T4341] Quota error (device loop4): do_insert_tree: Can't read tree quota block 5 [ 59.497059][ T4341] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 59.507255][ T4351] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 59.540634][ T4341] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.24: Failed to acquire dquot type 0 [ 59.563686][ T4341] EXT4-fs error (device loop4): ext4_free_blocks:6232: comm syz.4.24: Freeing blocks not in datazone - block = 0, count = 4096 [ 59.586738][ T4351] EXT4-fs (loop3): 1 truncate cleaned up [ 59.614308][ T4351] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,bsdgroups,noload,abort,auto_da_alloc,,errors=continue. Quota mode: none. [ 59.659719][ T4341] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 5: comm syz.4.24: lblock 5 mapped to illegal pblock 5 (length 1) [ 59.678174][ T4341] Quota error (device loop4): do_insert_tree: Can't read tree quota block 5 [ 59.688249][ T4341] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 59.700587][ T4341] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.24: Failed to acquire dquot type 0 [ 59.738507][ T4341] EXT4-fs (loop4): 1 orphan inode deleted [ 59.744658][ T4341] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,grpid,,errors=continue. Quota mode: writeback. [ 59.850099][ T26] audit: type=1800 audit(1774881478.160:2): pid=4351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.27" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 59.883097][ T4357] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 59.997751][ T4360] EXT4-fs (loop3): shut down requested (2) [ 60.026408][ T4341] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 5: comm syz.4.24: lblock 5 mapped to illegal pblock 5 (length 1) [ 60.138897][ T4341] Quota error (device loop4): do_insert_tree: Can't read tree quota block 5 [ 60.168898][ T4341] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 60.231498][ T4341] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.24: Failed to acquire dquot type 0 [ 60.475546][ T4371] loop1: detected capacity change from 0 to 512 [ 61.315084][ T4376] loop4: detected capacity change from 0 to 512 [ 61.444315][ T4371] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 61.576394][ T4371] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.640098][ T4376] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 61.686697][ T4376] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.816597][ T4383] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 61.924165][ T4371] EXT4-fs (loop1): orphan cleanup on readonly fs [ 61.951795][ T4371] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.32: inode #15: comm syz.1.32: iget: illegal inode # [ 62.296362][ T4390] netlink: 24 bytes leftover after parsing attributes in process `syz.4.33'. [ 62.700357][ T1107] cfg80211: failed to load regulatory.db [ 62.728381][ T4383] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #18: comm syz.0.35: iget: bad extra_isize 58 (inode size 256) [ 62.790351][ T4392] set_capacity_and_notify: 1 callbacks suppressed [ 62.790367][ T4392] loop3: detected capacity change from 0 to 256 [ 62.800107][ T4371] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.32: couldn't read orphan inode 15 (err -117) [ 62.835991][ T4371] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,sysvgroups,,errors=continue. Quota mode: none. [ 62.859023][ T4383] EXT4-fs (loop0): Remounting filesystem read-only [ 62.865742][ T4383] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.35: error while reading EA inode 18 err=-117 [ 62.892953][ T4392] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.918003][ T4383] EXT4-fs (loop0): Remounting filesystem read-only [ 62.946749][ T4383] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 63.043350][ T4383] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.35: iget: bad extra_isize 58 (inode size 256) [ 63.057543][ T4371] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 63.089498][ T4397] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779264) [ 63.093679][ T4383] EXT4-fs (loop0): Remounting filesystem read-only [ 63.104253][ T4397] FAT-fs (loop3): Filesystem has been set read-only [ 63.116413][ T4371] EXT4-fs (loop1): re-mounted. Opts: jqfmt=vfsv1,sysvgroups,. Quota mode: none. [ 63.122476][ T4383] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.35: error while reading EA inode 11 err=-117 [ 63.140282][ T4397] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 63.149635][ T4397] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 63.158314][ T4383] EXT4-fs (loop0): Remounting filesystem read-only [ 63.165447][ T4383] EXT4-fs (loop0): 1 orphan inode deleted [ 63.178077][ T4383] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,debug_want_extra_isize=0x000000000000005a,errors=remount-ro,max_dir_size_kb=0x0000000000000004,debug_want_extra_isize=0x000000000000003a,min_batch_time=0x0000000000000003,. Quota mode: none. [ 63.254323][ T4397] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 63.363759][ T4397] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 63.425712][ T4397] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 63.476641][ T4397] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 63.505088][ T4397] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 63.522671][ T4397] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 63.532093][ T4397] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 63.577067][ T4397] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 63.589460][ T4397] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 63.624049][ T4397] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 63.700283][ T4397] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 63.711103][ T4397] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 63.721991][ T4397] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 63.730943][ T4397] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 63.739632][ T4397] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 63.749040][ T4397] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 63.752291][ T4408] loop1: detected capacity change from 0 to 4096 [ 63.758227][ T4397] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 63.772692][ T4397] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 63.800371][ T4413] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 63.974146][ T4408] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 64.101956][ T4427] netlink: 'syz.0.46': attribute type 4 has an invalid length. [ 65.327478][ T4442] loop0: detected capacity change from 0 to 512 [ 65.407002][ T4445] capability: warning: `syz.2.53' uses deprecated v2 capabilities in a way that may be insecure [ 65.526414][ T4449] loop1: detected capacity change from 0 to 2048 [ 65.665247][ T4449] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,noload,grpid,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 65.944007][ T4464] syz.0.58 uses obsolete (PF_INET,SOCK_PACKET) [ 66.679233][ T4494] loop2: detected capacity change from 0 to 128 [ 67.993340][ T4514] netlink: 'syz.2.74': attribute type 29 has an invalid length. [ 68.024022][ T4514] netlink: 'syz.2.74': attribute type 29 has an invalid length. [ 68.041963][ T4515] netlink: 'syz.2.74': attribute type 29 has an invalid length. [ 68.326881][ T4528] loop1: detected capacity change from 0 to 512 [ 68.372003][ T4532] loop2: detected capacity change from 0 to 512 [ 68.384936][ T4528] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.478060][ T4528] EXT4-fs (loop1): 1 truncate cleaned up [ 68.483755][ T4528] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.484702][ T4536] netlink: 'syz.3.84': attribute type 10 has an invalid length. [ 68.555033][ T4532] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 68.587102][ T4532] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.823818][ T4536] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 68.923689][ T4543] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 68.962290][ T4543] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 69.000646][ T4536] syz.3.84 (4536) used greatest stack depth: 19440 bytes left [ 69.468091][ T4549] netlink: 'syz.4.90': attribute type 29 has an invalid length. [ 69.573872][ T4549] netlink: 'syz.4.90': attribute type 29 has an invalid length. [ 69.612198][ T4552] netlink: 'syz.4.90': attribute type 29 has an invalid length. [ 70.173575][ T4576] loop2: detected capacity change from 0 to 128 [ 70.230610][ T4574] loop3: detected capacity change from 0 to 512 [ 70.563713][ T4587] capability: warning: `syz.0.99' uses 32-bit capabilities (legacy support in use) [ 70.577070][ T4574] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 70.638655][ T4582] device syzkaller0 entered promiscuous mode [ 70.737418][ T4574] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.765765][ T4593] loop4: detected capacity change from 0 to 512 [ 70.864734][ T4597] netlink: 'syz.0.104': attribute type 1 has an invalid length. [ 70.872117][ T4593] EXT4-fs (loop4): inline encryption not supported [ 71.284334][ T4599] netlink: 'syz.2.105': attribute type 29 has an invalid length. [ 71.429094][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.440083][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.777569][ T4593] EXT4-fs (loop4): 1 truncate cleaned up [ 71.783345][ T4593] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,inlinecrypt,jqfmt=vfsv1,noload,dioread_lock,usrjquota=,,errors=continue. Quota mode: none. [ 71.851923][ T4597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.952548][ T4604] bond1: (slave geneve2): making interface the new active one [ 72.013296][ T4604] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 72.070865][ T4599] netlink: 'syz.2.105': attribute type 29 has an invalid length. [ 72.092371][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 72.205148][ T4616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.109'. [ 73.368759][ T4642] loop1: detected capacity change from 0 to 512 [ 73.454397][ T4642] EXT4-fs (loop1): inline encryption not supported [ 73.490594][ T4642] EXT4-fs (loop1): 1 truncate cleaned up [ 73.496347][ T4642] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,inlinecrypt,jqfmt=vfsv1,noload,dioread_lock,usrjquota=,,errors=continue. Quota mode: none. [ 73.626809][ T4650] netlink: 'syz.2.120': attribute type 29 has an invalid length. [ 73.657384][ T4650] netlink: 'syz.2.120': attribute type 29 has an invalid length. [ 73.688507][ T4650] netlink: 'syz.2.120': attribute type 29 has an invalid length. [ 73.789538][ T4654] loop0: detected capacity change from 0 to 512 [ 73.980181][ T4654] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 74.086619][ T4654] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.773027][ T4675] loop1: detected capacity change from 0 to 512 [ 75.038139][ T4675] EXT4-fs (loop1): Ignoring removed nobh option [ 75.084325][ T4675] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 75.099439][ T4679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'. [ 75.124043][ T4675] EXT4-fs (loop1): 1 truncate cleaned up [ 75.185377][ T4675] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,nobh,journal_dev=0x0000000000000007,,errors=continue. Quota mode: none. [ 75.431452][ T4688] netlink: 'syz.2.136': attribute type 29 has an invalid length. [ 75.484744][ T4688] netlink: 'syz.2.136': attribute type 29 has an invalid length. [ 75.514238][ T4690] netlink: 'syz.2.136': attribute type 29 has an invalid length. [ 75.564770][ T4691] loop3: detected capacity change from 0 to 512 [ 75.667857][ T4693] loop0: detected capacity change from 0 to 512 [ 75.826544][ T4693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.132'. [ 76.317238][ T4691] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 76.335292][ T4698] loop1: detected capacity change from 0 to 1024 [ 76.371096][ T4701] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20002 [ 76.419657][ T4702] loop0: detected capacity change from 0 to 512 [ 76.431055][ T4698] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 76.480703][ T4702] EXT4-fs (loop0): inline encryption not supported [ 76.510336][ T4691] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.134: iget: bad extended attribute block 262144 [ 76.634012][ T4702] EXT4-fs (loop0): 1 truncate cleaned up [ 76.640448][ T4702] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,inlinecrypt,jqfmt=vfsv1,noload,dioread_lock,usrjquota=,,errors=continue. Quota mode: none. [ 76.810447][ T4698] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 76.918443][ T4691] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.134: couldn't read orphan inode 15 (err -117) [ 77.086971][ T4691] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,abort,jqfmt=vfsv0,inode_readahead_blks=0x0000000000000000,nomblk_io_submit,auto_da_alloc,nouid32,,errors=continue. Quota mode: none. [ 77.452410][ T4727] loop0: detected capacity change from 0 to 512 [ 77.581983][ T4728] loop2: detected capacity change from 0 to 512 [ 77.685092][ T4730] Zero length message leads to an empty skb [ 77.746591][ T4728] EXT4-fs (loop2): Ignoring removed nobh option [ 77.755976][ T4727] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 77.857068][ T4728] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 77.882112][ T4727] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.170260][ T4739] netlink: 'syz.3.148': attribute type 29 has an invalid length. [ 78.179021][ T4739] netlink: 'syz.3.148': attribute type 29 has an invalid length. [ 80.068680][ T4742] loop1: detected capacity change from 0 to 512 [ 80.150529][ T4743] netlink: 'syz.3.148': attribute type 29 has an invalid length. [ 80.199668][ T4728] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 80.253095][ T4728] System zones: 1-12 [ 80.318572][ T4740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.150'. [ 80.364637][ T4728] EXT4-fs (loop2): orphan cleanup on readonly fs [ 80.561756][ T4728] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.147: bg 0: block 273: padding at end of block bitmap is not set [ 80.647096][ T4728] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 80.754946][ T4728] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.147: attempt to clear invalid blocks 1024 len 1 [ 80.860794][ T4760] loop1: detected capacity change from 0 to 256 [ 80.883503][ T4728] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.147: invalid indirect mapped block 1811939328 (level 0) [ 80.916405][ T4761] loop4: detected capacity change from 0 to 512 [ 80.948168][ T4728] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.147: invalid indirect mapped block 2 (level 2) [ 81.049853][ T4728] EXT4-fs (loop2): 1 truncate cleaned up [ 81.100180][ T4760] FAT-fs (loop1): Directory bread(block 64) failed [ 81.137110][ T4728] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,nobh,block_validity,max_dir_size_kb=0x00000000000000ff,errors=continue. Quota mode: none. [ 81.157236][ T4760] FAT-fs (loop1): Directory bread(block 65) failed [ 81.164223][ T4760] FAT-fs (loop1): Directory bread(block 66) failed [ 81.195409][ T4760] FAT-fs (loop1): Directory bread(block 67) failed [ 81.227170][ T4760] FAT-fs (loop1): Directory bread(block 68) failed [ 81.254333][ T4760] FAT-fs (loop1): Directory bread(block 69) failed [ 81.307091][ T4760] FAT-fs (loop1): Directory bread(block 70) failed [ 81.314840][ T4760] FAT-fs (loop1): Directory bread(block 71) failed [ 81.330001][ T4761] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 81.383618][ T4760] FAT-fs (loop1): Directory bread(block 72) failed [ 81.432477][ T4760] FAT-fs (loop1): Directory bread(block 73) failed [ 81.473703][ T4765] device syzkaller0 entered promiscuous mode [ 81.672730][ T4761] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x000000000000000f,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 81.891204][ T4777] netlink: 'syz.3.164': attribute type 29 has an invalid length. [ 81.931453][ T4761] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.063509][ T4777] netlink: 'syz.3.164': attribute type 29 has an invalid length. [ 82.255738][ T4784] loop1: detected capacity change from 0 to 512 [ 82.517692][ T4784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.165'. [ 83.141742][ T4794] loop1: detected capacity change from 0 to 512 [ 83.249272][ T4794] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (47215!=33349) [ 83.329073][ T4794] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 83.388620][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 83.395682][ T4794] EXT4-fs (loop1): orphan cleanup on readonly fs [ 83.407502][ T4794] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.169: bad orphan inode 3 [ 83.408092][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.428885][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.454393][ T4794] EXT4-fs (loop1): Remounting filesystem read-only [ 83.455111][ T4798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.474000][ T4798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.486279][ T4798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.499979][ T4798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.517322][ T4794] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,max_batch_time=0x0000000000000009,errors=remount-ro,user_xattr. Quota mode: none. [ 83.524085][ T4802] loop0: detected capacity change from 0 to 1024 [ 83.587046][ T4798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.632429][ T4798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.649427][ T4794] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.169: dx entry: limit 0 != root limit 125 [ 83.680319][ T4794] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.169: Corrupt directory, running e2fsck is recommended [ 83.737424][ T4798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.766886][ T4805] loop4: detected capacity change from 0 to 1024 [ 83.816984][ T4798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.916442][ T4798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.932895][ T4802] EXT4-fs (loop0): inline encryption not supported [ 84.050137][ T4798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.108944][ T4802] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,inlinecrypt,,errors=continue. Quota mode: none. [ 84.135360][ T4805] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.183590][ T4798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.235332][ T4802] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.320514][ T4798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.397073][ T4798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.433492][ T4802] EXT4-fs (loop0): re-mounted. Opts: data_err=abort,jqfmt=vfsv0,stripe=0x0000000000000000,minixdf,sb=0x0000000000000af8,noinit_itable,. Quota mode: none. [ 84.513902][ T4798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.575152][ T4798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.671552][ T4798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.113858][ T4819] loop1: detected capacity change from 0 to 256 [ 85.208985][ T4824] device syzkaller0 left promiscuous mode [ 85.461284][ T4834] netlink: 'syz.3.183': attribute type 6 has an invalid length. [ 85.971395][ T4843] loop3: detected capacity change from 0 to 128 [ 87.256208][ T4865] netlink: 112 bytes leftover after parsing attributes in process `syz.2.195'. [ 87.337313][ T4865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.195'. [ 88.019326][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 88.019341][ T26] audit: type=1326 audit(1774881506.330:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2f6d5819 code=0x7ffc0000 [ 88.127867][ T26] audit: type=1326 audit(1774881506.410:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2f6d5819 code=0x7ffc0000 [ 88.267998][ T26] audit: type=1326 audit(1774881506.410:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2f6d5819 code=0x7ffc0000 [ 88.337074][ T26] audit: type=1326 audit(1774881506.450:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2f6d5819 code=0x7ffc0000 [ 88.415734][ T26] audit: type=1326 audit(1774881506.450:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8d2f6d5819 code=0x7ffc0000 [ 88.556991][ T26] audit: type=1326 audit(1774881506.450:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2f6d5819 code=0x7ffc0000 [ 88.633042][ T4883] device syzkaller0 entered promiscuous mode [ 88.647365][ T26] audit: type=1326 audit(1774881506.450:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2f6d5819 code=0x7ffc0000 [ 88.759329][ T26] audit: type=1326 audit(1774881506.450:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2f6d5819 code=0x7ffc0000 [ 88.892943][ T26] audit: type=1326 audit(1774881506.450:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f8d2f6d5819 code=0x7ffc0000 [ 89.097055][ T26] audit: type=1326 audit(1774881506.450:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2f6d5819 code=0x7ffc0000 [ 89.229503][ T4897] loop4: detected capacity change from 0 to 1024 [ 89.576086][ T4897] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 2: comm syz.4.204: lblock 2 mapped to illegal pblock 2 (length 1) [ 89.697373][ T4897] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 48: comm syz.4.204: lblock 0 mapped to illegal pblock 48 (length 1) [ 89.840269][ T4897] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.204: Failed to acquire dquot type 0 [ 89.930237][ T4902] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.958300][ T4897] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 90.072763][ T4897] EXT4-fs error (device loop4): ext4_evict_inode:282: inode #11: comm syz.4.204: mark_inode_dirty error [ 90.172011][ T4897] EXT4-fs warning (device loop4): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 90.275095][ T4902] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.297599][ T4897] EXT4-fs (loop4): 1 orphan inode deleted [ 90.304242][ T4897] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,delalloc,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 90.352094][ T4268] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 90.397754][ T4268] EXT4-fs error (device loop4): ext4_release_dquot:6270: comm kworker/u4:6: Failed to release dquot type 0 [ 90.612987][ T4902] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.615043][ T4925] loop3: detected capacity change from 0 to 4096 [ 90.744487][ T4198] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 90.855277][ T4925] EXT4-fs (loop3): inline encryption not supported [ 90.942071][ T4198] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 90.999192][ T4925] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 90.999192][ T4925] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 90.999192][ T4925] [ 91.004948][ T4902] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.056330][ T4198] EXT4-fs error (device loop4): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 91.070338][ T4931] device syzkaller0 entered promiscuous mode [ 91.177125][ T4925] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 91.247024][ T4925] EXT4-fs (loop3): DAX unsupported by block device. [ 91.556600][ T4940] netlink: 32 bytes leftover after parsing attributes in process `syz.0.219'. [ 91.648531][ T4942] loop4: detected capacity change from 0 to 128 [ 91.723442][ T4902] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.889035][ T4944] loop0: detected capacity change from 0 to 1024 [ 93.636931][ C0] sched: RT throttling activated [ 95.061308][ T4902] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.250046][ T4902] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.309268][ T4959] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20002 [ 95.383847][ T4902] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.579326][ T4971] loop0: detected capacity change from 0 to 512 [ 95.662783][ T4971] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 95.779285][ T4971] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.228: invalid indirect mapped block 256 (level 2) [ 95.858872][ T4979] loop2: detected capacity change from 0 to 1024 [ 95.905466][ T4971] EXT4-fs (loop0): 2 truncates cleaned up [ 95.955322][ T4971] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,auto_da_alloc,jqfmt=vfsold,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 96.016600][ T4979] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota,. Quota mode: writeback. [ 96.419260][ T4971] [ 96.421635][ T4971] ====================================================== [ 96.429023][ T4971] WARNING: possible circular locking dependency detected [ 96.436260][ T4971] syzkaller #0 Not tainted [ 96.440887][ T4971] ------------------------------------------------------ [ 96.448794][ T4971] syz.0.228/4971 is trying to acquire lock: [ 96.455213][ T4971] ffff8880607932a0 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x24/0xe0 [ 96.465599][ T4971] [ 96.465599][ T4971] but task is already holding lock: [ 96.473192][ T4971] ffff88807ac0abd8 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 96.483587][ T4971] [ 96.483587][ T4971] which lock already depends on the new lock. [ 96.483587][ T4971] [ 96.494092][ T4971] [ 96.494092][ T4971] the existing dependency chain (in reverse order) is: [ 96.503807][ T4971] [ 96.503807][ T4971] -> #1 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 96.512900][ T4971] percpu_down_read+0x46/0x1b0 [ 96.518217][ T4971] ext4_writepages+0x20f/0x2df0 [ 96.523795][ T4971] do_writepages+0x476/0x6e0 [ 96.528927][ T4971] __writeback_single_inode+0x153/0xda0 [ 96.535020][ T4971] writeback_single_inode+0x3cb/0x8e0 [ 96.540910][ T4971] write_inode_now+0x23b/0x2c0 [ 96.546192][ T4971] iput+0x5ab/0x8a0 [ 96.550516][ T4971] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 96.556419][ T4971] ext4_xattr_block_set+0x979/0x2d20 [ 96.562417][ T4971] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 96.568783][ T4971] __ext4_expand_extra_isize+0x301/0x3e0 [ 96.574942][ T4971] __ext4_mark_inode_dirty+0x469/0x700 [ 96.580915][ T4971] ext4_evict_inode+0xa8d/0x1090 [ 96.586463][ T4971] evict+0x4c9/0x8d0 [ 96.590979][ T4971] ext4_orphan_cleanup+0xad2/0x1320 [ 96.597426][ T4971] ext4_fill_super+0x8e25/0x95a0 [ 96.603018][ T4971] mount_bdev+0x287/0x3c0 [ 96.608143][ T4971] legacy_get_tree+0xe6/0x180 [ 96.613433][ T4971] vfs_get_tree+0x88/0x270 [ 96.618857][ T4971] do_new_mount+0x24a/0xa40 [ 96.624037][ T4971] __se_sys_mount+0x2e3/0x3d0 [ 96.629237][ T4971] do_syscall_64+0x4c/0xa0 [ 96.634187][ T4971] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.640589][ T4971] [ 96.640589][ T4971] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 96.648148][ T4971] __lock_acquire+0x2c42/0x7d10 [ 96.653518][ T4971] lock_acquire+0x19e/0x400 [ 96.658804][ T4971] down_write+0x38/0x60 [ 96.663472][ T4971] ext4_destroy_inline_data+0x24/0xe0 [ 96.669440][ T4971] ext4_writepages+0x670/0x2df0 [ 96.674809][ T4971] do_writepages+0x476/0x6e0 [ 96.679926][ T4971] filemap_fdatawrite_wbc+0x1eb/0x240 [ 96.685838][ T4971] file_write_and_wait_range+0x14d/0x220 [ 96.692346][ T4971] ext4_sync_file+0x1ff/0xae0 [ 96.697657][ T4971] ext4_buffered_write_iter+0x338/0x3b0 [ 96.703914][ T4971] ext4_file_write_iter+0x74d/0x1700 [ 96.709714][ T4971] do_iter_readv_writev+0x47e/0x5f0 [ 96.715620][ T4971] do_iter_write+0x205/0x7b0 [ 96.720765][ T4971] do_pwritev+0x240/0x3a0 [ 96.725606][ T4971] do_syscall_64+0x4c/0xa0 [ 96.730787][ T4971] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.737317][ T4971] [ 96.737317][ T4971] other info that might help us debug this: [ 96.737317][ T4971] [ 96.747920][ T4971] Possible unsafe locking scenario: [ 96.747920][ T4971] [ 96.755367][ T4971] CPU0 CPU1 [ 96.760722][ T4971] ---- ---- [ 96.766259][ T4971] lock(&sbi->s_writepages_rwsem); [ 96.771443][ T4971] lock(&ei->xattr_sem); [ 96.778365][ T4971] lock(&sbi->s_writepages_rwsem); [ 96.786363][ T4971] lock(&ei->xattr_sem); [ 96.790678][ T4971] [ 96.790678][ T4971] *** DEADLOCK *** [ 96.790678][ T4971] [ 96.798893][ T4971] 2 locks held by syz.0.228/4971: [ 96.803900][ T4971] #0: ffff88807ac0c460 (sb_writers#5){.+.+}-{0:0}, at: do_pwritev+0x229/0x3a0 [ 96.813268][ T4971] #1: ffff88807ac0abd8 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 96.823797][ T4971] [ 96.823797][ T4971] stack backtrace: [ 96.829782][ T4971] CPU: 1 PID: 4971 Comm: syz.0.228 Not tainted syzkaller #0 [ 96.837072][ T4971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 96.847250][ T4971] Call Trace: [ 96.850528][ T4971] [ 96.853443][ T4971] dump_stack_lvl+0x188/0x250 [ 96.858120][ T4971] ? load_image+0x400/0x400 [ 96.862789][ T4971] ? show_regs_print_info+0x20/0x20 [ 96.867983][ T4971] ? print_circular_bug+0x12b/0x1a0 [ 96.873174][ T4971] check_noncircular+0x296/0x330 [ 96.878098][ T4971] ? add_chain_block+0x940/0x940 [ 96.883062][ T4971] ? lockdep_lock+0xf1/0x1f0 [ 96.887649][ T4971] ? mark_lock+0x94/0x320 [ 96.891965][ T4971] ? _find_first_zero_bit+0xce/0xf0 [ 96.897337][ T4971] __lock_acquire+0x2c42/0x7d10 [ 96.902273][ T4971] ? verify_lock_unused+0x140/0x140 [ 96.907465][ T4971] ? verify_lock_unused+0x140/0x140 [ 96.912764][ T4971] lock_acquire+0x19e/0x400 [ 96.917399][ T4971] ? ext4_destroy_inline_data+0x24/0xe0 [ 96.922941][ T4971] ? read_lock_is_recursive+0x10/0x10 [ 96.928576][ T4971] ? rcu_read_lock_any_held+0xb0/0x130 [ 96.934213][ T4971] ? ext4_journal_check_start+0x180/0x250 [ 96.939924][ T4971] down_write+0x38/0x60 [ 96.946180][ T4971] ? ext4_destroy_inline_data+0x24/0xe0 [ 96.952964][ T4971] ext4_destroy_inline_data+0x24/0xe0 [ 96.958342][ T4971] ext4_writepages+0x670/0x2df0 [ 96.963188][ T4971] ? rcu_rdp_is_offloaded+0xba/0x190 [ 96.968463][ T4971] ? cpu_online+0x30/0x30 [ 96.972811][ T4971] ? verify_lock_unused+0x140/0x140 [ 96.978340][ T4971] ? mark_lock+0x94/0x320 [ 96.982771][ T4971] ? ext4_readpage+0x2e0/0x2e0 [ 96.987555][ T4971] ? __lock_acquire+0x7d10/0x7d10 [ 96.992589][ T4971] ? do_raw_spin_lock+0x128/0x2f0 [ 96.997783][ T4971] ? do_raw_spin_unlock+0x11d/0x230 [ 97.003011][ T4971] ? ext4_readpage+0x2e0/0x2e0 [ 97.007886][ T4971] do_writepages+0x476/0x6e0 [ 97.012577][ T4971] ? filemap_fdatawrite_wbc+0x1e0/0x240 [ 97.018146][ T4971] ? __writepage+0x130/0x130 [ 97.022852][ T4971] ? __lock_acquire+0x7d10/0x7d10 [ 97.027977][ T4971] ? __rwlock_init+0x140/0x140 [ 97.032746][ T4971] ? preempt_schedule+0xbc/0xd0 [ 97.037594][ T4971] ? do_raw_spin_unlock+0x11d/0x230 [ 97.042785][ T4971] filemap_fdatawrite_wbc+0x1eb/0x240 [ 97.048188][ T4971] file_write_and_wait_range+0x14d/0x220 [ 97.054080][ T4971] ? __filemap_set_wb_err+0x1b0/0x1b0 [ 97.060522][ T4971] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 97.066533][ T4971] ? wake_up_q+0x8c/0xc0 [ 97.070886][ T4971] ext4_sync_file+0x1ff/0xae0 [ 97.075565][ T4971] ext4_buffered_write_iter+0x338/0x3b0 [ 97.081118][ T4971] ext4_file_write_iter+0x74d/0x1700 [ 97.086396][ T4971] ? __lock_acquire+0x7d10/0x7d10 [ 97.091427][ T4971] ? ext4_file_read_iter+0x700/0x700 [ 97.096791][ T4971] ? aa_file_perm+0x38b/0xe80 [ 97.101461][ T4971] do_iter_readv_writev+0x47e/0x5f0 [ 97.106960][ T4971] ? aa_path_link+0x880/0x880 [ 97.112230][ T4971] ? generic_file_rw_checks+0x280/0x280 [ 97.117942][ T4971] ? common_file_perm+0x171/0x1c0 [ 97.123066][ T4971] ? fsnotify_perm+0x5d/0x560 [ 97.127754][ T4971] ? security_file_permission+0x75/0xa0 [ 97.133485][ T4971] do_iter_write+0x205/0x7b0 [ 97.138263][ T4971] do_pwritev+0x240/0x3a0 [ 97.142853][ T4971] ? do_preadv+0x390/0x390 [ 97.147456][ T4971] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 97.154552][ T4971] ? lock_chain_count+0x20/0x20 [ 97.159415][ T4971] ? vtime_user_exit+0x2c8/0x3e0 [ 97.164446][ T4971] ? lockdep_hardirqs_on+0x94/0x140 [ 97.169757][ T4971] ? __x64_sys_pwritev2+0xba/0x100 [ 97.175045][ T4971] do_syscall_64+0x4c/0xa0 [ 97.179502][ T4971] ? clear_bhb_loop+0x30/0x80 [ 97.184170][ T4971] ? clear_bhb_loop+0x30/0x80 [ 97.188842][ T4971] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.194835][ T4971] RIP: 0033:0x7f8d2f6d5819 [ 97.199243][ T4971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.219145][ T4971] RSP: 002b:00007f8d2d92f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 97.227660][ T4971] RAX: ffffffffffffffda RBX: 00007f8d2f94efa0 RCX: 00007f8d2f6d5819 [ 97.235669][ T4971] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 97.244414][ T4971] RBP: 00007f8d2f76bc91 R08: 0000000000000000 R09: 0000000000000000 [ 97.252391][ T4971] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 97.260813][ T4971] R13: 00007f8d2f94f038 R14: 00007f8d2f94efa0 R15: 00007ffe081c0748 [ 97.268883][ T4971] [ 97.309296][ T5002] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20002 [ 97.427479][ T4971] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.228: bg 0: block 5: invalid block bitmap [ 97.440498][ T4971] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 935 with error 28 [ 97.455493][ T4971] EXT4-fs (loop0): This should not happen!! Data will be lost [ 97.455493][ T4971] [ 97.465663][ T4971] EXT4-fs (loop0): Total free blocks count 0 [ 97.474925][ T4971] EXT4-fs (loop0): Free/Dirty block details [ 97.481250][ T4971] EXT4-fs (loop0): free_blocks=0 [ 97.486351][ T4971] EXT4-fs (loop0): dirty_blocks=936 [ 97.494698][ T4971] EXT4-fs (loop0): Block reservation details [ 97.500976][ T4971] EXT4-fs (loop0): i_reserved_data_blocks=936 [ 97.530818][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 97.545551][ T9] EXT4-fs (loop0): This should not happen!! Data will be lost [ 97.545551][ T9]